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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) [ 2469.788655] FAULT_INJECTION: forcing a failure. [ 2469.788655] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.791060] CPU: 1 PID: 17001 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2469.792450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2469.794132] Call Trace: [ 2469.794679] dump_stack+0x107/0x167 [ 2469.795422] should_fail.cold+0x5/0xa [ 2469.796197] ? shmem_alloc_inode+0x18/0x40 [ 2469.797063] should_failslab+0x5/0x20 [ 2469.797843] kmem_cache_alloc+0x5b/0x360 [ 2469.798689] ? shmem_destroy_inode+0x70/0x70 [ 2469.799599] shmem_alloc_inode+0x18/0x40 [ 2469.800439] ? shmem_destroy_inode+0x70/0x70 [ 2469.801365] alloc_inode+0x63/0x240 [ 2469.802120] new_inode+0x23/0x250 [ 2469.802837] shmem_get_inode+0x15e/0xbc0 [ 2469.803678] __shmem_file_setup+0xb8/0x320 [ 2469.804549] ? _copy_from_user+0xfb/0x1b0 [ 2469.804581] EXT4-fs (sda): re-mounted. Opts: (null) [ 2469.805396] __do_sys_memfd_create+0x275/0x450 [ 2469.805418] ? memfd_file_seals_ptr+0x170/0x170 [ 2469.805445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2469.805467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2469.805491] do_syscall_64+0x33/0x40 [ 2469.811187] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2469.812232] RIP: 0033:0x7f443c170b19 [ 2469.812999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2469.816745] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2469.818299] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2469.819753] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2469.821221] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2469.822672] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2469.824124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:14:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in=@remote, 0x4e21, 0x6, 0x4e20, 0x650, 0x2, 0x0, 0xa0, 0x2e, 0x0, 0xee00}, 0x6e6bb9, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "2ecc293ed1f7f7e0e8255f1899dc23fa71e82a8c1d8b0886a95f964cd5daf2cc7d987078f04b611da64e2e8c075e7acb9777ee1b4840913cb8762c8a84033a2348669f9ad84b73c40ac86db99353e27f0ee7a68c3b7700e9911ffac0004e1641ddea5659eec316534a293b2549a788dd699d523fdfa2d7bd820e9c84a94be2ce2288fbe34dda5d2d95fb0bb4b130c1ff0d85d292568aabc0f833ea9d8c5859a9b1130822f9001dd3e4ab199fd5de021d25791c43ca6ceb93342aaa35dad7183b0690088f07b74d1cf2fd5ac65d19e3b4be268042c92d0ffecdfa24c11fdd62be9d924ae9272e3cfed19db56f4ae7c071f33a75de4fe245bfa773a02daf55988d1e6300c4c2d789eb7cf35291214caa9bba24e6bddc43e5b73a5ad1f7fcaa19c75e6c2de45eedf1b7d8b14c5356418072177c78ce2e7b63f42f9c48731a882b79fae01c5de27146861062eda2a8804154d71c72046a59a3b04fdd11bca6d3ffadc1c9bee9d482ddd97a8e65a48d065234469c37013852fe9a6b46d4b0412fdda2e3e1901f83944dfaf5c562fcaec4a0247e47bb3fa67676c2281ffdd402824dfab87a2f841b524233c752f2542639b63141076d39d2c0d49eec2cd4f82a9f5513557eb11b25079007f80299df39eaec735f474bca7c121a2763b53c094271ee2ecb71e11e9e174616d828bb4f4955cbaa1aa0c638ee993a7aeabd9570e6b6ba5a4b75e19368362ea205c9d5dd2f485064f4b7bb8b39d4c827a72bae2cfe96f4be0b5d0ff902d849d6348722567903817c5efb390e85ddf7a30f875eda1a31c3249d90039d2fe6508ac92fb080573b894933e0840ba35cc57902dd46c6c3aaad7021005b43fc623a8bd6aff5aa99c9ce7095ec55dc74dd08873911da3b7e7fd2cfccb614274d9970a5e99ad3dc0ebbfa751ad1fcd95f15d00570214fe6ffe8e7e98a1ee2938a193a818a96d89128e4015be15f076bfb1b3bd452c113f2a23d7a931b98615cfde9131fc728511e9fb27dbfb1a8be90bdfcc412159587432a1cb90ffc5a2a98a4da40af226f6aed3a0371fcb39d0438a849d83f4ac2c547a7a2fe7dbe22c3c0390b6d1f26035c6b4ee9d4e0d468b9acff53c962ccb0ffb0b5478356f5fc47c24286f0bb2402f20c45e24ab2e58ba0d92711d617d159484233dcc21f0fa9e5613dc2dbc840c5f7a9c2daa2b65e126f528075a6f8fe6a5c60d6efc8a8ac33a446e32c48416c556f68136e46679408be3887e21975e5a7a7f254b3902cddc2d0b3c96695e0388565317dfef2ea4c458443a3b18e9f42310eed653935f555362fdf4aa69be0685ec4f766413dbe06fd234dec2dca8a5e9c527e642791c325a048dbedd9f5b663b866a0f9f571c12f53999aaefb847f659cd8934e7d5560a042c741250af7bad777913507cb403856b799d00e1a9d69cf20436c7087fd2976e3221f8aeb7d9f913c17eb815ed33f852b5c96800daa594bfafc870ba4fc2a5e8583deb38f5bc265668f399ba2bbe29e40c7c4d45dae5471600c347e34101523c6a93ff06d28af3f8ca89197ff86dcbfd5e2d4fb773cc686d635dd607d35ee2c40a5d789ae17acc1d4478ca82654bd6067bfdd1aab53f06d1b816dfe072c51c5a401c010d1b94efc08fd21f6d62fef2817d15691c10aa468975f7f6240238f7b50e3b429f43b57cef2b26529ef8368d5da41d23c0f1f9ebeaf2587a213b15ebf62411faf27b8a03a5446ec48329826af7a7cbdb9f6602ec83ef3e420ccc53e77447be7341fa16d1a3979e74f49f26f329d1b2757f51067db275e911eefb5cb56394a23ea499b28ffa7b26b5172e3de887d4e1e3bc6bfd061a52fb929fcf2efd7e6875980942c71829c199b398863add21c1640db78a27057eca9ba5554b1b73dc8d96b9f140dd1c3dc4e4637ef30c3b328ff5189c8ad737205d45034967d44ff82961be0699663c9e34284c7355d0957e5eca52b5211e45cc084fdd32c7d4ab9a72a02640b6677f25f27c75048b912dd667d28d2e7e98aa7444a31fdb8f53e980d780e186d894b695f41225a05f781a1eaa36329d0ec39c12b538854f2972f9c7a2024fe84518bf32d1738f6e87b46667d9ac802c99c9e47e2469b9fd95e75e8802e46234ed699b42d6f70e312b61183fc871e98c2bee39f2827df21843e48a5617c65cdf2d578c5a01ec5d25baebbc87a863751b4d3fac452261693e235087fd1593cf7307d2288c74528af9bbd2143718136550414920e5a3067188fe804f09a5e3b4ad23279e8e822b186958c086fd799e7863c7edcf10749bfce3419a7a6d5478a3c06683eb08af155ae08d603705c1917298ac3e15dc56a4d28c35fbc8edbc3a0348614764becf91f9f8f0f1b8b806cff5f1260d8d8fe94a6fb605eddd986a56e95fb97291750d6e2318495b5147ae27486543310219f3da29f90f423c247c22c11417cad0d09b7fcaea9aff7975b583bd05274bea7759b153f233a41eb673eaa9abb1899a645033d72cfc8878cb9d6bf072ef33f3114add1b106a2316267b1b113d41a8dd6528d50cea4ec1422e733b875ed919327ea28c1d984b96d1d0999365f09540e4e0b3e6e492b08e583fb8f1332585e45607bac66f474d93566be59b555f7722ecc88417fb00bfe1aa10bc2b5305a3a0ea0467940a13b61e341b9fb833022657d83a3739a31b213a125f5f38351fcd7c9e4df441a51a0f8aee9f8b599ab56fc457e7661a4d58c7132d9a51b9f18d6f76b63f5a74e7450474ce464ec0c146ce323b42744cb952c241205d8d82e36436e092eeba00a78afc99537aa96c2dd1cb7fdf3642304d7fc994b08afecee7e2326d86e92078b282cf4699fc25dbc4737ca671ecf3deb5ef83517a7688f10918345c0def07701f6670e619504c8ee2c91795d9f723608d7a888441c05cada81ff0ddcb829dae24266d3888e430c323dc67884c13e221eaa54ca20ebb7d29b00fba79cf095a7dd47a8a0f165b142b36209f11373d0ec9079ab865d31eeddf17714da1256f3676203ee53a37c1e7190a806d300aebf0c4c9b4ff7295dc8f14c38041c29cfaaba067c67ba92737f31ebb3ce1f5f912908f3b50fc23b1f6a2f0b9dc0e80a9faedd7a33be9062cc38e066714b50df5385a62de40059b6247d4c73499248d52afde613ffaed4cae84d6215359f811e931f414e124eb239f151c1bf4ca0fe15c35db14cc836b92827cc502174939a71c567b1a61a37477fe90cc2bccea70fa265b275394cbdd50e9d4cd7250c28ad5c10b4d2a9868b1c22db77794e4360a19bfddc14d598cccb4b8bde32dc1cfead1be66f26898bf15d6be3e67edc84b28520fa5d546241e495b68829626d5719954ee2f4d319ac102f2cab3c704ae15548232721a29d971bdce9c4e2a0f0c592a1b164e3433506f003758bb0d7e67d399afaead681e5d155bd1433f7ff50568d136b340d180432854c3e8e03926344121480db3e8ffd688e4428f9781f850210eeb592e12e8e8531d9326d8fed11c1ab59f126cdc6486945e49b701f017d95ae0fcc799e9718c51350fabfdcd0b3110c6965fed83993ee0afc9c31a6ea6d1548e57d8c240287d83a6892cd426c68f76bfefd666cb625f762842be4d618d629b2cac3caaa7e0a6670d0dbe7767b0e687a32db48b0be4b594f2054cd7139566bfb5e95ff20e1ebd23218d4fa78ccb0ff42d71badedfa4eb6805afd2e41a3c5134f19a3ef3749b25a76fb3c1e183af4f19cd9733e5af5c980ba71c431732b9ddb5ab3e7955d2a7946205ff8ef8fbd22efd36e59db3fc6859cda7992b897e215acf6be5b390df52b399b76a9cc0593004cfe2a0301dbeb60acd277b2efd0b7f56c35258850c8ce09a8efec7517d66a9799dc2245a8fa43327dd8d55551de1f961794ab08b0321a6297606f4163626c3982b2d7df7633a4148080a5c479f0c88482306cfa8f06cbeea2b0451c0760b2882dfe53852c6a9e3546699c35caada9ddb3474b52830c999a265018a8a9314961697287f5c1b1bd7eb93a3bb8294a8bb1adea99c6fa8affd1990b8812a58f3186f76a1121f3b16daa228c5a3fa14a99414499b39c825f931585fd004409f0fe716d23f17f566471956f30859989f63d461d9ef9ea2711037c549cdd4d3babc26efe7df5b0c4aa33c245126bebd7216bda209cee55c901c95277f9465c78377367c73116b9b98d703610cf52fed32e72ea19e14c0cf7d4f59870dbff22ef601a984ab5594ca9f265652485d8b158b8c630293a8e8728ec304a22804e600529c49dd0b18f96de3217ebb85574a23963b2c2c7951d0ced8f37d699cdbe33c70c540c9797b147391f04347de6d93f9527e5b4981cb3e6665af824661f9c0ac4b8bf6b890d387120495503e00beb89c7abafde0f793e019359ca83910a35fb95f9fd9dbe1650979e331deedc96a8bab98ffd46cfdde79d46f53846e58a1e27810db391ad42971a0838858b770929e41a21c6272437e7bc29d56fd7053f0c6c100504a6c14f79429be65c5dcb75f0abbf75022d6a5c13f5d1a69606f55de66663a4d26b1cf7b89c42c44f7fd2d1f6749e1cfd87b6e1d505f10240caad0c0c70160e236487f3558b67ed9d7553e1a031961afef6f3fe9ceeaad36bac86847ec74016dab603989469c6ee72cc259b1207f8e83f71938f0dc9a4d45e51872efe41a8cc63ffc0f1981fe8d8f0e4a9107fad037e02c042bc1f010f0728ad236a5cf11600be7f90bb615ce0aa8d75fc3c75eee8e44fd6003515e9a43aabec634f4d4feb33e43191e758b534386d4a0336ceafec5d7e80ce2a11e09e6a22c09e21b3af1a6b172b4522631408e42a7faf81c0e9d52beb67d9f8941a26a2d3abdc90b1d31664822f99ab2da86ee753291140f835b69bb6b1915b1673cc9bb8f6685387963bf0fbfa987b7d06a63e50b8924f9c88b1fde61605d0933bfbd6d9d57dd216ff649c8d6aaaa8602c6a6297b0fb32a695675454400281de7d9c6b69f212302edbdd5889fc74e8ae6199de96b1bef16f56e9acf0fa53f2ed5d6a8f40e9c56bf88b3e6c5006a2aa49c656140a6e21d92dd2701bb67de10cfe90f3dd7061c0a9336f0e1e174c769b09c8f3756d4d32fc1bb5a9dc30e8ba1f438a4810f5aff54b9d7b18ad81208890ccf41cbc266342d8f286b39ef6abc6aff345456c0f0717c16996bb406a15177f724affa39ea0a6786149d6001fb047f809ca6f0009919e4c8b84a294967475126ab4647ca5b3b7c719797ec54392a9d8acc102386ae433463c8e2fb43874c8e1f2b5a7e989948d100d40253836cbd78019c3fcdf843543b1761e96658e93589cea9c74806151dfa6b631212bc4b1a292658901da399df0089eb69a6bfb16907bc37a64f9c8346703dcee51df86f35887dd7f072fe48b0fa558d3fbbb180df20b8f3021ba0f13bbbce096a73cf306e878b03ac897dfb77a2d4a44e0937f3e713698657d9052c34360dbc9890c150a4b138ab49c5f21f3d1b1c45ccb839334814e880a79badc1a4a08529564571e15af965970c87a0eae9241199a52169db69d5fcedb1d3551b918976f6d15bd01acd1368081522850c20a036a7749957fb06ca855e974fc7605ce143b7469f26b97aa8afc0fef0f680902041705ad63f6d479018ee1f96f826d1a01f628ebad34069edac19120caa927b640c028ab3d637ced3b9421a8265e34b7049b4c4a81cc688cedb7113f472c3de1907acd95a35b5e5dcf3ad37154034bdde83d5551511d8c71a7ef8f151cf03088ee9917de4dd91f6fd68e84be58e876daac2d09"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:14:22 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) [ 2469.946595] EXT4-fs (sda): re-mounted. Opts: (null) 03:14:22 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x1, 0x2) r1 = syz_mount_image$msdos(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x3, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="cf4722f1f817f675a4cc1d193967e104e408562fd467cbde0862bce1b53ec73005f320d76fa144e813e3b8d1ddf44650c4b9376c404cb16afb68", 0x3a, 0x7}], 0x3010008, &(0x7f0000001840)={[{@nodots}, {@dots}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff64}}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, 'smackfsdef'}}, {@obj_type={'obj_type', 0x3d, 'appraise_type=imasig'}}, {@dont_appraise}, {@dont_appraise}, {@euid_gt={'euid>', 0xee01}}, {@audit}]}) pipe2(&(0x7f0000001940)={0xffffffffffffffff}, 0x800) renameat(r1, &(0x7f0000001900)='./file0\x00', r2, &(0x7f0000001980)='./file0\x00') io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000019c0)='./file0\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000001680)=0xe8) syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x3, 0x7, &(0x7f00000014c0)=[{&(0x7f0000000200)="995525a27d97420191f77502178d819623b45a817c2b7c3bb7b0f1d241bdafd5a6d0fedcab9fec3c13cb7c272dec4b", 0x2f, 0xff}, {&(0x7f0000000240)="b75385fe857b2439cae2779a8b171d77120897a4a877e63c382ce46bbbdb3bd05bb5e54dc2eb9093319830ea4f3eecc01c1bc1799b75c91d21b5d6f5925fc2a9a9ffb23c51ee8889947322ed51282b73f11b0d509cc82d7fdba162f8993b9b5c2c52bf065c5c1f53cf5bb414cf6244c0843cb531e135b667541004f74f50f520fe09deb1ae401a9b46755db08793ffc01ec290fe0d697b646f539a4bbdb287b96843ecd5b199bc6837e040c30eeed4c7d19d01c779298a3659d4c5db47d48bd954d7bfb0ddbff1", 0xc7, 0x3}, {&(0x7f0000000340)="02a73fcc17e27be0f214e2d4b24a406267e1c56c62", 0x15, 0x5}, {&(0x7f0000000440)="7ce8e5a6705c70d7c28c831395124be0414f209d4b85e70d63f47d0b57591ba2e84c4cfd33d0d87dfe1cefb9255772ca74c8f71ffec2903e551c39aa4bbaac8a88cae783f23f7b61f8438582fad3416b336d64bc62827c24b933023f480c1939473da6c5a870f713b33c5a5c7da5dd1247525eb01bbdc3c7536a543ab4d2688299fae678a59b2d25974a56ce78b68c3dbbceb818b2217dadb187b6c32aa4b31f5fd4148e88e56558e7b6f7068c4736eb86959e5a13ea82c4017328a96c91375e06d1bf5a3a6d0c3259b89e6f8a6c718777d641ead5414542121fbd3d0e8694ca98b2f13512ec9568fb1f099217d06d2410c24d467d2bb2e5643698d1e9f488fb10edf4027b0d92d17309b63ca542aec9cff3c0c03d42289b43d636765303c05a4baf44dfdd11a570c79912a6e7b75b10f0e3dfe5bdb019afb7b89dd0e8bfad976cf26039218fba05406daabb416f6f060c04f664beaaef6d3339013557a1a44047df0d51f8754ef84be61f4ef897f6c699f573fe8d60c37c1239b87e96478755add2697c282dc55a6bfbe13a76ecff4ced54d62248015112735936e762a94ebd280a0da4d9ce3c3e264cfc7fe04b598a15f233d63732e4189538a57f8f20bb59d9d8bdcace05058f159d3b5529473299569f0d5ab666bfcc39b614bec359c7269c473986aa597efb74f45473a4629699c2e803e65611f67319aa5f232d5d46cad597564c069bed43e4719f143658472346ce9f7cbce4517fa724a372a4dc22ef8cdde295880edf2a63bdffc1acacd785359283d0b932e96421a45904abbb134fff2ef8e18dfd7d309232988fe4cb935fe1ac55c71be7fc1ce53458680e1c7bebeef2aa66c12f81b2f9b74d9648a281e690677d59d6e082b1edc8f277a71439df12e5f2a7ce65ddc29901f2ded60811fc1da4f2683fb96c1b77a5a62df523778717d5d7c961c4624956f9db30baa415822b8cc76f2755f3f572298c458cfa85a1c7bbb8dc472e469755ef9522246d3302ab3888d98791cd59fa69d7ef2892cacb933d17b3f6e38c57168f858c754f9683f45460eba727072f822ab87e175882f66dd7778cccbc69de2a10b0eb6b6449cc6073f16a378960efb60c1b0ba56db74df50528daeac816aa3746942dde16639ac5cec7b7d6cd51f24921fa0e474177703827c896bc4e9ae4832a3770d419df23124c75760d3fe3e1672b0482836dc6a44dd6afd1d4aeb96f269b70fdaabce54bdfafb2e8a9eacbc588302da19908fccd95d4475b6a7b504a4bff6fd92e02252ac3f2cbb058e715947a36d1db9d839f7eef7ede14f7f9bfac892160e79c6529838b0d3a967351319682572f32d25fe45c6138ddbfe4754e3edc917785dc82c11e963bb9453c0bab58d00e6e2c69acc2e0d515b4b1074dec3854dba44edc28dfb7206a5f60b447f600b14c76e736c40cbe8d02f939bae3662d7c7eaa99ca71e297e8a0aeafbeb0d4fe17cf90400c26bd22a41d3dc06f3d19758cf2624453d8060ded0260de41aa954f614c045787a63cffe2fe54721155c8c6e79e949f70deda3a593c0e1fa7b3c2b48fe34e65cd1ae4b5bb68997c11fa83c75306403adbcb900d72ed536bb5252d6094ca0e15d9cdac7228c1453af689142e8288f1da4e708e325f18a4008d54df71efa4031a9442522459bcd458aed518a7c713c5b5a631e2812a4445fafcf416a4e1e1896f03185018753674fcc6f5032b4ed0ed77d5544574c4df91b39f66263b07ce091f9a1662d40489e287ab1acd445ac3ec45347ba9e085c87df46a736863defb089a7153aff68df733c12517904cf98d7d308b4b47384b5471208fadd9d85708c336934f12a953a07df5de04482aeeacf2b5ad4029695a2df6c4523c9613df64e28ad71da39a4a05b656c2cd01abdee6d979a61d29315442eafb9a18844af09f1dacf7f3d54711d0c8dadb1091edc43fcfbac916e74428add3d10572ea3ad36e12e5a7921985129ac73d34ccd065a629f8ec2b3d687141f0781b07487b5e4f7d96391bc5e1c65a28ae614f2739639c2615d83374666471ce32e19891b77fd3cc9649226dd52f57da161aa9b5643d4052df342ce9632fc7281e1de691ba8c5b7b71877fd221da480b3afc2ff0b0723b76a73721bf4025c7cf393b6fc0ae477a2b9f89c8d4f9985e64dd75ed291ff1853fe2a5ff9bd73b04c88ea61257ae13a429bf508f6fa8a97028145595deecb56acf8ea0b9556ea9e50ce6b900895d18385dd85c627020ff7e0fdffd113e75ebef84b3beb3b6d5c405aa656b9eb8ceb2f855ce103eb3dcb7334d7ca5df014600c99b38e81ed98abee8bf80878ab00fa8bc557fdbe186398c61666d420e1ee8772c35b365beaea00688737808e7c91c31b1ab807f93683d4b7095638971d00e62fde41d0718f5003a036847551511dbc846eb8be3f2182a21cd0a4a44dc1b590b8513067114b37a471caa45cb40d715f9074e67b902d85c8cf10c6215a6fbbf3c144d55bff80d0481f3ed0bc7510e629f173f913c7a74e499e19c27e7118768765b40e146baab5524dda45ed96903ce01d30faee6bd50b34c7278c4549b1582fce391a095a4d5e46c8802dcb4bcbc19f38473ee28b61b2a7233c89491d3cdcdb7dc24a20dd70c51a6c8fc0349717aa154e6f71e251262ac62bc386b8b822f05c83f7686595c85eb270ca46e0c53b9da9d098cd1cc373083dd5e65b45e8cd2dbfe55ae0b2d1c0bef93ba582bbf7fa531c7db0ec08a836249ea0b3eca3bd6e975fb178b24279dbd99918e5b91fda2f51bfe021a9114faed3c110bcb432366a6fea00816a654f9da5c52cea0db50b6c6552d7a97f9ae032d398de1e4e87a98103cbb22ff3b93f66b4a9d7c69286a5d225a0fbaab877085d9d45faaa14f5aef8a72ffc62c17c5b1e0d85567137ec079c8073b42f18904b390dbadfff3be078ece410e53b243dbcf21807b749196abe556a2de7855182067c6af2d78c2ff0ba46d2f556a2cab10e8f640f1426c030452821548e37bae6be2d1a5af0aa672f173906c2793c89d1dc0e99eb02b4ade7de23142a9f1ffc716c9042e5c5021fa04ea3f6f446c972d8a22a6da69ea451eb5e8e9eb135c2d0a6e9e3c0a6ea399563dfdf590204b8ecd734058264e9471a968f4a49b6e50e59b63db7975cdde0a0071fee8f5e49a3b02afee84ab24d18b53ced4764ebbf688f287db3366beb83ce3ea6e9e3d81622dfdb75da334c2005aedcf43b442ee67a37fcefb33b6ba33dff3993b6b8557f3d7b29f668513d8c7f1f7646cca52b9ea510f0adddb02a660b2585adbd3d48d4f49639eb72ed7f85845bffedfa4c7485dba6c46b32cad7187d7a63da7a592b72bce14102e6c48a21a838a501a070d4694fb692684cd8f228d6a54148bbaf97188c4c1691738f68253697fdcf441913f3642af5b6e73351029ef9f7a93642e263b91956cebad71b65f2dd5b7c10333f3b85abfe3a64c190d317fd6f283b6a0c838ff3be27aefe3d36aa6e3c7b79f4977186ab3dfd6edbbe28600fd2c97f96cdbe4d63ff7e8c7a182724c16532ad886ff716b073adf72620a8a86eadfa1af75a36a02b50e92cac62016e4fb6390a066199023b88019a78e4001ca95c3b9b9af5a798bcb1c8c95c44415c4dd958e566a877184ecad8da2971fa30b155e0b6a6b5acf90a609e4392ed1463c020e2131004e2448f867cbf1bbb9dd40bf570e1b60ea48984d62b1fec92adab041035f01b44d62b33f9ae902cbf2446ade79da8d06d373abc01b075d22f7360b2acedd93f63b6212c975f9f3e5f57611710eaa3650e5f27a1e7e7ceeeeaaa1bf9a84d03543a67b53b2fc329adae9795f397a24f0599d20646ba8d9e73d5b7a3583297598fe8443e66b1db41f9eed79dc97565823c7dd40b68874c8749ee62c657ddf5edaa35ddbacec09fc1624f2a36d510193991df2969ef62ae0badb4c50a93bd3c88dc2d2d17570534b9c396aba6d21f95821c1b2a85d97f9d93ff523b2aa338a675527ff4014efa6960162a34f1635db7d843a04c37433db3139c768abf7d9e9d55a2661e2c218813c4bf7e70d2a2771ad5fb3637b2200550a00b3bc13ca10030c5109c78dc867499667b8fc0ace497c6fe558a8251553a51ffdda93e43ccf4a442d46f12582b69df6090383a98e6605a1b1204585c5b081a3d1ec3e3a361050b2717ead9f5ec0d1ab2a60768148fc412a63ec6e759064e0697a3df56d03b054823237ed98898aef756809cac5cf4a0fe36e0a874805508356aaa2f256f8b88c98ea63fd20ef11f6e8fe85c7d6cbe011448c01dfef7018d7b76dcd841f79241205c68dd54d56819c76fac80dcb279bbe896955fbd10d57ea432e70a3119d34d898a298da1c5c3c6ee795227c23afd7cb84d4300cd6800cd76e3883d4f0666a60b40383ab70cbae134d944451ee96d67a994bfd906398d0aa4c036c0ecb088db7121479438634a31afc9941b487a98dc9bcbbab835358e4f3de5baccec1e763d8d2d96dca2d11c2e047b71d7e9ef99adab5af881682cb8c9ad725db4abfac9d8837a1ff458e7d2c7c725f8ac97efa8e1e6b125cc745edc172cf74543a26c34b5c43dfb04f21b42a4ee3346d81604b7c8ae18806aa9859a4914d986040d6f09e27a2daaa6d9a127a4a763c9f1904c80762c2e8cf56773e6e8de5d6a827877150b04787337c32a16d4b72925746e359f449025e63ae39b8fe5a83b35543424f50115788ee99e23d2b0c0ae11be980a9f48dfc5f80d890a5d005e2857c4fe2a18f35a527320cb8c28908ee922a27414167fdfad1f61a4966f58fce29e194fa2a699f075b1ecf05d3ec1b47856d267bec01e5d8d3c721a11e2d7c59f2bcf35fba34f51ee3bbeb9742ff7bf541fefbe5f7c3e15d0dde303e61ecf41a0f1fc87578e37034db106ad99a4dc9e6cf0ce874e71e4be7ea047b678fd2377c251b9e938ffd9a7075d9e990ad3758da88715e097040bb419b88d5647459494cbec851bd2f95c1b8287a2b2d4ff69b9b501b0ace3cf640d9c2202f334a931e1b637ada4f1418b9d441966fb5381019b7454d2a6f83b27a1434f6a80d9781d6c6af88c44a93ad767b3a4bfb37c4a874c38d7e1b138c5e34806210369e32c081b6acd472e239358d77605da1c7a19bb803684d521bc2b2d3c2a706227cd09a4176bb164aa066536cc387a74470cb026b899736acbb96e9f3095d57f0dd5dbe2f4ab7297fc4b0c59a8871aee47ede8c15127c6fe0a33785b8ca4ff0926ba3196db37816ef614f5777e5e1b84efbed753a885e610e5e4cf37cbc326b7403aa459acc52ddd8f1019e305f612e8bb00aa9cfd1bedaa3482158ba561bf82d4274a015b3865733456c491295ae66b6e72655a101693c664a58094b70403ffcf7bae9cec1769bdbb66cc42de1d907afad60c6057da62cf8d4dd3383cc3009dc5d77aae08e0c8073edbbdff559c583185c37e6640b3331e810c71e8efe81e4e454dc56f50c24cd540bb1b4000e2bcfaa49197c37bd56c6d83ae99cf87647b6d5df352f818fac8fd4c36b73f95bf52339c3ea1b0dd3cd02faa394af56ca2636e1fd6f26861edfda79fb0ca8417cf7f6392d0869c91166a0aa28b93ec1fa08493e894ee46f9a8ecb5181326d2be0fc5ba855f5ac0800dd9f5730c84c5149dbfb02b5f07d446469f35b39c8ebfbd8da027148efc58c1f3a7959c4f2e777042683cfa9de8703c28eb13a5d7c17779e1207906f42f09556b2823c2a094ea72074dea417d41a70b02132b2df2ec93e2681ab18974483d09dcd5e0f", 0x1000, 0x200}, {&(0x7f0000000380)="8098432b9944c088d278a3f9a61a998994cf8469006a89e42d762191e29ae78db6813222d384ee18a588d6b779ad12334b78f146282e9b9101f28ec32f5b", 0x3e, 0x2e58ad52}, {&(0x7f0000001440)="a3713a0cb66c0df04fe7c6dcd6fe5776e6872e519e30d145c1e2bc5c924c8d500a2b9016226da5a5e3e9139dfbee055a4028a38c2e956bee892076e5d882e35d46b52157a911e02407e8d7e7e1e61433062fd2", 0x53, 0x7fffffff}, {&(0x7f00000003c0)="2740be843510d9f1206ccdb85b06db9b16aff223bbf558", 0x17, 0x9}], 0x108080c, &(0x7f00000016c0)={[{'.'}, {'.'}, {'/\xe3]'}, {'\x00'}, {'\x00'}, {}, {'security.evm\x00'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@appraise_type}]}) 03:14:22 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_bt_hci(r0, 0x800448d6, &(0x7f00000000c0)="014d630eddbd7224bcb7e4e0f7157a6f0a07c4cdef21f60c9ef42797b05594692e9c6e45debee6a8b8d1e7b230916e53a62bfa1b3a49ad7f830c1685f53a53d5a3035be06a12423d3b8f5dd24d0c916bc85ad3a30270") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:14:22 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'vlan1\x00'}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = inotify_init1(0xc0000) sendfile(r0, r1, &(0x7f0000000140)=0x6, 0x4) [ 2470.025981] FAT-fs (loop4): Unrecognized mount option "smackfsdef=smackfsdef" or missing value [ 2470.103177] FAT-fs (loop4): Unrecognized mount option "smackfsdef=smackfsdef" or missing value [ 2484.822934] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:14:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x400, 0x0, 0x0, 0x10000, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='v7\x00', 0x80050, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:14:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x4e21, 0x6, 0x4e20, 0x650, 0x2, 0x0, 0xa0, 0x2e, 0x0, 0xee00}, 0x6e6bb9, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "2ecc293ed1f7f7e0e8255f1899dc23fa71e82a8c1d8b0886a95f964cd5daf2cc7d987078f04b611da64e2e8c075e7acb9777ee1b4840913cb8762c8a84033a2348669f9ad84b73c40ac86db99353e27f0ee7a68c3b7700e9911ffac0004e1641ddea5659eec316534a293b2549a788dd699d523fdfa2d7bd820e9c84a94be2ce2288fbe34dda5d2d95fb0bb4b130c1ff0d85d292568aabc0f833ea9d8c5859a9b1130822f9001dd3e4ab199fd5de021d25791c43ca6ceb93342aaa35dad7183b0690088f07b74d1cf2fd5ac65d19e3b4be268042c92d0ffecdfa24c11fdd62be9d924ae9272e3cfed19db56f4ae7c071f33a75de4fe245bfa773a02daf55988d1e6300c4c2d789eb7cf35291214caa9bba24e6bddc43e5b73a5ad1f7fcaa19c75e6c2de45eedf1b7d8b14c5356418072177c78ce2e7b63f42f9c48731a882b79fae01c5de27146861062eda2a8804154d71c72046a59a3b04fdd11bca6d3ffadc1c9bee9d482ddd97a8e65a48d065234469c37013852fe9a6b46d4b0412fdda2e3e1901f83944dfaf5c562fcaec4a0247e47bb3fa67676c2281ffdd402824dfab87a2f841b524233c752f2542639b63141076d39d2c0d49eec2cd4f82a9f5513557eb11b25079007f80299df39eaec735f474bca7c121a2763b53c094271ee2ecb71e11e9e174616d828bb4f4955cbaa1aa0c638ee993a7aeabd9570e6b6ba5a4b75e19368362ea205c9d5dd2f485064f4b7bb8b39d4c827a72bae2cfe96f4be0b5d0ff902d849d6348722567903817c5efb390e85ddf7a30f875eda1a31c3249d90039d2fe6508ac92fb080573b894933e0840ba35cc57902dd46c6c3aaad7021005b43fc623a8bd6aff5aa99c9ce7095ec55dc74dd08873911da3b7e7fd2cfccb614274d9970a5e99ad3dc0ebbfa751ad1fcd95f15d00570214fe6ffe8e7e98a1ee2938a193a818a96d89128e4015be15f076bfb1b3bd452c113f2a23d7a931b98615cfde9131fc728511e9fb27dbfb1a8be90bdfcc412159587432a1cb90ffc5a2a98a4da40af226f6aed3a0371fcb39d0438a849d83f4ac2c547a7a2fe7dbe22c3c0390b6d1f26035c6b4ee9d4e0d468b9acff53c962ccb0ffb0b5478356f5fc47c24286f0bb2402f20c45e24ab2e58ba0d92711d617d159484233dcc21f0fa9e5613dc2dbc840c5f7a9c2daa2b65e126f528075a6f8fe6a5c60d6efc8a8ac33a446e32c48416c556f68136e46679408be3887e21975e5a7a7f254b3902cddc2d0b3c96695e0388565317dfef2ea4c458443a3b18e9f42310eed653935f555362fdf4aa69be0685ec4f766413dbe06fd234dec2dca8a5e9c527e642791c325a048dbedd9f5b663b866a0f9f571c12f53999aaefb847f659cd8934e7d5560a042c741250af7bad777913507cb403856b799d00e1a9d69cf20436c7087fd2976e3221f8aeb7d9f913c17eb815ed33f852b5c96800daa594bfafc870ba4fc2a5e8583deb38f5bc265668f399ba2bbe29e40c7c4d45dae5471600c347e34101523c6a93ff06d28af3f8ca89197ff86dcbfd5e2d4fb773cc686d635dd607d35ee2c40a5d789ae17acc1d4478ca82654bd6067bfdd1aab53f06d1b816dfe072c51c5a401c010d1b94efc08fd21f6d62fef2817d15691c10aa468975f7f6240238f7b50e3b429f43b57cef2b26529ef8368d5da41d23c0f1f9ebeaf2587a213b15ebf62411faf27b8a03a5446ec48329826af7a7cbdb9f6602ec83ef3e420ccc53e77447be7341fa16d1a3979e74f49f26f329d1b2757f51067db275e911eefb5cb56394a23ea499b28ffa7b26b5172e3de887d4e1e3bc6bfd061a52fb929fcf2efd7e6875980942c71829c199b398863add21c1640db78a27057eca9ba5554b1b73dc8d96b9f140dd1c3dc4e4637ef30c3b328ff5189c8ad737205d45034967d44ff82961be0699663c9e34284c7355d0957e5eca52b5211e45cc084fdd32c7d4ab9a72a02640b6677f25f27c75048b912dd667d28d2e7e98aa7444a31fdb8f53e980d780e186d894b695f41225a05f781a1eaa36329d0ec39c12b538854f2972f9c7a2024fe84518bf32d1738f6e87b46667d9ac802c99c9e47e2469b9fd95e75e8802e46234ed699b42d6f70e312b61183fc871e98c2bee39f2827df21843e48a5617c65cdf2d578c5a01ec5d25baebbc87a863751b4d3fac452261693e235087fd1593cf7307d2288c74528af9bbd2143718136550414920e5a3067188fe804f09a5e3b4ad23279e8e822b186958c086fd799e7863c7edcf10749bfce3419a7a6d5478a3c06683eb08af155ae08d603705c1917298ac3e15dc56a4d28c35fbc8edbc3a0348614764becf91f9f8f0f1b8b806cff5f1260d8d8fe94a6fb605eddd986a56e95fb97291750d6e2318495b5147ae27486543310219f3da29f90f423c247c22c11417cad0d09b7fcaea9aff7975b583bd05274bea7759b153f233a41eb673eaa9abb1899a645033d72cfc8878cb9d6bf072ef33f3114add1b106a2316267b1b113d41a8dd6528d50cea4ec1422e733b875ed919327ea28c1d984b96d1d0999365f09540e4e0b3e6e492b08e583fb8f1332585e45607bac66f474d93566be59b555f7722ecc88417fb00bfe1aa10bc2b5305a3a0ea0467940a13b61e341b9fb833022657d83a3739a31b213a125f5f38351fcd7c9e4df441a51a0f8aee9f8b599ab56fc457e7661a4d58c7132d9a51b9f18d6f76b63f5a74e7450474ce464ec0c146ce323b42744cb952c241205d8d82e36436e092eeba00a78afc99537aa96c2dd1cb7fdf3642304d7fc994b08afecee7e2326d86e92078b282cf4699fc25dbc4737ca671ecf3deb5ef83517a7688f10918345c0def07701f6670e619504c8ee2c91795d9f723608d7a888441c05cada81ff0ddcb829dae24266d3888e430c323dc67884c13e221eaa54ca20ebb7d29b00fba79cf095a7dd47a8a0f165b142b36209f11373d0ec9079ab865d31eeddf17714da1256f3676203ee53a37c1e7190a806d300aebf0c4c9b4ff7295dc8f14c38041c29cfaaba067c67ba92737f31ebb3ce1f5f912908f3b50fc23b1f6a2f0b9dc0e80a9faedd7a33be9062cc38e066714b50df5385a62de40059b6247d4c73499248d52afde613ffaed4cae84d6215359f811e931f414e124eb239f151c1bf4ca0fe15c35db14cc836b92827cc502174939a71c567b1a61a37477fe90cc2bccea70fa265b275394cbdd50e9d4cd7250c28ad5c10b4d2a9868b1c22db77794e4360a19bfddc14d598cccb4b8bde32dc1cfead1be66f26898bf15d6be3e67edc84b28520fa5d546241e495b68829626d5719954ee2f4d319ac102f2cab3c704ae15548232721a29d971bdce9c4e2a0f0c592a1b164e3433506f003758bb0d7e67d399afaead681e5d155bd1433f7ff50568d136b340d180432854c3e8e03926344121480db3e8ffd688e4428f9781f850210eeb592e12e8e8531d9326d8fed11c1ab59f126cdc6486945e49b701f017d95ae0fcc799e9718c51350fabfdcd0b3110c6965fed83993ee0afc9c31a6ea6d1548e57d8c240287d83a6892cd426c68f76bfefd666cb625f762842be4d618d629b2cac3caaa7e0a6670d0dbe7767b0e687a32db48b0be4b594f2054cd7139566bfb5e95ff20e1ebd23218d4fa78ccb0ff42d71badedfa4eb6805afd2e41a3c5134f19a3ef3749b25a76fb3c1e183af4f19cd9733e5af5c980ba71c431732b9ddb5ab3e7955d2a7946205ff8ef8fbd22efd36e59db3fc6859cda7992b897e215acf6be5b390df52b399b76a9cc0593004cfe2a0301dbeb60acd277b2efd0b7f56c35258850c8ce09a8efec7517d66a9799dc2245a8fa43327dd8d55551de1f961794ab08b0321a6297606f4163626c3982b2d7df7633a4148080a5c479f0c88482306cfa8f06cbeea2b0451c0760b2882dfe53852c6a9e3546699c35caada9ddb3474b52830c999a265018a8a9314961697287f5c1b1bd7eb93a3bb8294a8bb1adea99c6fa8affd1990b8812a58f3186f76a1121f3b16daa228c5a3fa14a99414499b39c825f931585fd004409f0fe716d23f17f566471956f30859989f63d461d9ef9ea2711037c549cdd4d3babc26efe7df5b0c4aa33c245126bebd7216bda209cee55c901c95277f9465c78377367c73116b9b98d703610cf52fed32e72ea19e14c0cf7d4f59870dbff22ef601a984ab5594ca9f265652485d8b158b8c630293a8e8728ec304a22804e600529c49dd0b18f96de3217ebb85574a23963b2c2c7951d0ced8f37d699cdbe33c70c540c9797b147391f04347de6d93f9527e5b4981cb3e6665af824661f9c0ac4b8bf6b890d387120495503e00beb89c7abafde0f793e019359ca83910a35fb95f9fd9dbe1650979e331deedc96a8bab98ffd46cfdde79d46f53846e58a1e27810db391ad42971a0838858b770929e41a21c6272437e7bc29d56fd7053f0c6c100504a6c14f79429be65c5dcb75f0abbf75022d6a5c13f5d1a69606f55de66663a4d26b1cf7b89c42c44f7fd2d1f6749e1cfd87b6e1d505f10240caad0c0c70160e236487f3558b67ed9d7553e1a031961afef6f3fe9ceeaad36bac86847ec74016dab603989469c6ee72cc259b1207f8e83f71938f0dc9a4d45e51872efe41a8cc63ffc0f1981fe8d8f0e4a9107fad037e02c042bc1f010f0728ad236a5cf11600be7f90bb615ce0aa8d75fc3c75eee8e44fd6003515e9a43aabec634f4d4feb33e43191e758b534386d4a0336ceafec5d7e80ce2a11e09e6a22c09e21b3af1a6b172b4522631408e42a7faf81c0e9d52beb67d9f8941a26a2d3abdc90b1d31664822f99ab2da86ee753291140f835b69bb6b1915b1673cc9bb8f6685387963bf0fbfa987b7d06a63e50b8924f9c88b1fde61605d0933bfbd6d9d57dd216ff649c8d6aaaa8602c6a6297b0fb32a695675454400281de7d9c6b69f212302edbdd5889fc74e8ae6199de96b1bef16f56e9acf0fa53f2ed5d6a8f40e9c56bf88b3e6c5006a2aa49c656140a6e21d92dd2701bb67de10cfe90f3dd7061c0a9336f0e1e174c769b09c8f3756d4d32fc1bb5a9dc30e8ba1f438a4810f5aff54b9d7b18ad81208890ccf41cbc266342d8f286b39ef6abc6aff345456c0f0717c16996bb406a15177f724affa39ea0a6786149d6001fb047f809ca6f0009919e4c8b84a294967475126ab4647ca5b3b7c719797ec54392a9d8acc102386ae433463c8e2fb43874c8e1f2b5a7e989948d100d40253836cbd78019c3fcdf843543b1761e96658e93589cea9c74806151dfa6b631212bc4b1a292658901da399df0089eb69a6bfb16907bc37a64f9c8346703dcee51df86f35887dd7f072fe48b0fa558d3fbbb180df20b8f3021ba0f13bbbce096a73cf306e878b03ac897dfb77a2d4a44e0937f3e713698657d9052c34360dbc9890c150a4b138ab49c5f21f3d1b1c45ccb839334814e880a79badc1a4a08529564571e15af965970c87a0eae9241199a52169db69d5fcedb1d3551b918976f6d15bd01acd1368081522850c20a036a7749957fb06ca855e974fc7605ce143b7469f26b97aa8afc0fef0f680902041705ad63f6d479018ee1f96f826d1a01f628ebad34069edac19120caa927b640c028ab3d637ced3b9421a8265e34b7049b4c4a81cc688cedb7113f472c3de1907acd95a35b5e5dcf3ad37154034bdde83d5551511d8c71a7ef8f151cf03088ee9917de4dd91f6fd68e84be58e876daac2d09"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:14:46 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 5) 03:14:46 executing program 2: openat$rfkill(0xffffffffffffff9c, 0x0, 0x140, 0x0) 03:14:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4208, r0, 0x0, &(0x7f0000000180)) 03:14:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:14:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'vlan1\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) inotify_init1(0xc0000) 03:14:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = syz_io_uring_setup(0x7c2a, &(0x7f0000000080)={0x0, 0xd2b5, 0x0, 0x0, 0x40, 0x0, r4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r5, 0x5c33, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001000000180000004b48ec69746e8ee49d19acc895bf5f4f5ae4325c44ef77a2efda55791bf8847b1bffd6c40de344a346488510e9d84aac12729e5f49e2667d3617d6c4d995b4ea91084a1ed0fb0624665e9682ff059fa87b39a9919b6d99c94213678af516507779d1847e50851c950dbf133bfe00b368f94c3e2e0412e089cc0eda90e8d607585f5a3c933b97282d6ca4004469be8bc33e0e98eb6558241f08ce5fe201d893033151edd32cd25836a1c7bc1392eab6a08c3a929a84f2b687c4", @ANYRES32=r5, @ANYBLOB="00100000000000002e2f66696c653000"]) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r6, 0x5c33, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x80000001, 0x3, 0x8001, 0x1, 0x325}) socket$packet(0x11, 0x0, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r1) [ 2493.058377] FAULT_INJECTION: forcing a failure. [ 2493.058377] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.060888] CPU: 0 PID: 17145 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2493.062328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2493.064002] Call Trace: [ 2493.064556] dump_stack+0x107/0x167 [ 2493.065308] should_fail.cold+0x5/0xa [ 2493.066084] ? create_object.isra.0+0x3a/0xa20 [ 2493.067011] should_failslab+0x5/0x20 [ 2493.067788] kmem_cache_alloc+0x5b/0x360 [ 2493.068634] create_object.isra.0+0x3a/0xa20 [ 2493.069532] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2493.070572] kmem_cache_alloc+0x159/0x360 [ 2493.071421] ? shmem_destroy_inode+0x70/0x70 [ 2493.072310] shmem_alloc_inode+0x18/0x40 [ 2493.073179] ? shmem_destroy_inode+0x70/0x70 [ 2493.074081] alloc_inode+0x63/0x240 [ 2493.074829] new_inode+0x23/0x250 [ 2493.075551] shmem_get_inode+0x15e/0xbc0 [ 2493.076394] __shmem_file_setup+0xb8/0x320 [ 2493.077267] ? _copy_from_user+0xfb/0x1b0 [ 2493.078126] __do_sys_memfd_create+0x275/0x450 [ 2493.079057] ? memfd_file_seals_ptr+0x170/0x170 [ 2493.080016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2493.081098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2493.082168] do_syscall_64+0x33/0x40 [ 2493.082895] EXT4-fs (sda): re-mounted. Opts: (null) [ 2493.083915] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2493.083929] RIP: 0033:0x7f443c170b19 [ 2493.083949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2493.083959] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2493.083980] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2493.083992] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2493.084003] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2493.084014] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2493.084025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:14:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x6, 0x4e20, 0x650, 0x2, 0x0, 0xa0, 0x2e, 0x0, 0xee00}, 0x6e6bb9, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:14:46 executing program 2: openat$rfkill(0xffffffffffffff9c, 0x0, 0x140, 0x0) 03:14:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:14:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'vlan1\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) [ 2493.229218] EXT4-fs (sda): re-mounted. Opts: (null) 03:14:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x4e20, 0x650, 0x2, 0x0, 0xa0, 0x2e, 0x0, 0xee00}, 0x6e6bb9, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:14:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4209, r0, 0x0, &(0x7f0000000180)) 03:14:46 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 6) 03:14:46 executing program 2: openat$rfkill(0xffffffffffffff9c, 0x0, 0x140, 0x0) [ 2493.395709] Process accounting resumed [ 2493.403843] FAULT_INJECTION: forcing a failure. [ 2493.403843] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.406223] CPU: 1 PID: 17280 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2493.407645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2493.409361] Call Trace: [ 2493.409917] dump_stack+0x107/0x167 [ 2493.410686] should_fail.cold+0x5/0xa [ 2493.411482] ? security_inode_alloc+0x34/0x160 [ 2493.412433] should_failslab+0x5/0x20 [ 2493.413245] kmem_cache_alloc+0x5b/0x360 [ 2493.414093] security_inode_alloc+0x34/0x160 [ 2493.415014] inode_init_always+0xa4e/0xd10 [ 2493.415892] ? shmem_destroy_inode+0x70/0x70 [ 2493.416814] alloc_inode+0x84/0x240 [ 2493.417562] new_inode+0x23/0x250 [ 2493.418289] shmem_get_inode+0x15e/0xbc0 [ 2493.419142] __shmem_file_setup+0xb8/0x320 [ 2493.420018] ? _copy_from_user+0xfb/0x1b0 [ 2493.420895] __do_sys_memfd_create+0x275/0x450 [ 2493.421833] ? memfd_file_seals_ptr+0x170/0x170 [ 2493.422795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2493.423874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2493.424948] do_syscall_64+0x33/0x40 [ 2493.425714] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2493.426768] RIP: 0033:0x7f443c170b19 [ 2493.427533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2493.431327] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2493.432899] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2493.434361] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2493.435828] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2493.437305] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2493.438765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:14:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6432a82fc5807ccdbc48040000008765762f6d64300096b9ab66992b3313f69434812a9d864f9c6755624e6235c829d98845027bf79eba50dc694b34e4522a626407ce8b64a0adbb6af78ace6dad00ee8d7e91b1ec17a8c27f09249ee09ea777cf45f6c83ba4b96f5cea0e2e"], &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='ufs\x00', 0x0, &(0x7f0000000280)='*\x00') mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476faabc00b243b991b7b9a35d709ad81e2a14a5e9d8d4fe4791fbef6f59e7db2c820805bf843087a619dfe9df0ff0d93e856ca6555589c7a5af96c37526afcd3b3f5fb2b"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:14:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2493.560687] EXT4-fs (sda): re-mounted. Opts: (null) [ 2493.625966] EXT4-fs (sda): re-mounted. Opts: (null) [ 2507.234932] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:15:09 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) 03:15:09 executing program 4: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f00000005c0)='dns_resolver\x00') r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3, 0x2}, &(0x7f00000001c0)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d~\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0]\xe6\x0e2\xb5o4\xba\x98\x1e\xfb', r1) 03:15:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2f6400000000d4cb42b848c7"], &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='afs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d94c91a17d5eb7331dec8308e231bad517d3df39ddec198c92fd476258d8f4e1df6476fa00"/48], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:15:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:15:09 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 7) 03:15:09 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:15:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:15:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x650, 0x2, 0x0, 0xa0, 0x2e, 0x0, 0xee00}, 0x6e6bb9, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) [ 2516.375799] FAULT_INJECTION: forcing a failure. [ 2516.375799] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.378218] CPU: 0 PID: 17410 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2516.379618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2516.381317] Call Trace: [ 2516.381861] dump_stack+0x107/0x167 [ 2516.382605] should_fail.cold+0x5/0xa [ 2516.383382] ? create_object.isra.0+0x3a/0xa20 [ 2516.384310] should_failslab+0x5/0x20 [ 2516.385092] kmem_cache_alloc+0x5b/0x360 [ 2516.385926] create_object.isra.0+0x3a/0xa20 [ 2516.386819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2516.387854] kmem_cache_alloc+0x159/0x360 [ 2516.388707] security_inode_alloc+0x34/0x160 [ 2516.389615] inode_init_always+0xa4e/0xd10 [ 2516.390477] ? shmem_destroy_inode+0x70/0x70 [ 2516.391384] alloc_inode+0x84/0x240 [ 2516.392124] new_inode+0x23/0x250 [ 2516.392834] shmem_get_inode+0x15e/0xbc0 [ 2516.393686] __shmem_file_setup+0xb8/0x320 [ 2516.394563] ? _copy_from_user+0xfb/0x1b0 [ 2516.395414] __do_sys_memfd_create+0x275/0x450 [ 2516.396349] ? memfd_file_seals_ptr+0x170/0x170 [ 2516.397304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2516.398365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2516.399445] do_syscall_64+0x33/0x40 [ 2516.400212] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2516.401268] RIP: 0033:0x7f443c170b19 [ 2516.402030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.405771] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2516.407331] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2516.408782] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2516.410247] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2516.411698] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2516.413166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:15:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x2e, 0x0, 0xee00}, 0x6e6bb9, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:15:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:15:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2e, 0x0, 0xee00}, 0x6e6bb9, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:15:09 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 8) [ 2516.560632] FAULT_INJECTION: forcing a failure. [ 2516.560632] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.563019] CPU: 1 PID: 17455 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2516.564419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2516.566136] Call Trace: [ 2516.566693] dump_stack+0x107/0x167 [ 2516.567438] should_fail.cold+0x5/0xa [ 2516.568232] ? __d_alloc+0x2a/0x990 [ 2516.568984] should_failslab+0x5/0x20 [ 2516.569805] kmem_cache_alloc+0x5b/0x360 [ 2516.570639] ? trace_hardirqs_on+0x5b/0x180 [ 2516.571524] __d_alloc+0x2a/0x990 [ 2516.572240] d_alloc_pseudo+0x19/0x70 [ 2516.573019] alloc_file_pseudo+0xce/0x250 [ 2516.573876] ? alloc_file+0x5a0/0x5a0 [ 2516.574662] ? shmem_get_inode+0x55c/0xbc0 [ 2516.575538] __shmem_file_setup+0x144/0x320 [ 2516.576416] ? _copy_from_user+0xfb/0x1b0 [ 2516.577279] __do_sys_memfd_create+0x275/0x450 [ 2516.578208] ? memfd_file_seals_ptr+0x170/0x170 [ 2516.579165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2516.580205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2516.581283] do_syscall_64+0x33/0x40 [ 2516.582050] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2516.583093] RIP: 0033:0x7f443c170b19 [ 2516.583849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.587588] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2516.589145] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2516.590590] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2516.592040] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2516.593506] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2516.594952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:15:09 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="5eb10828000000f703a000281cbf827fdbdf250700c83ae27fd2364cf466696c65302e2f66696c1b0b0000"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r2, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000008, 0x100010, 0xffffffffffffffff, 0xa21e7000) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, 0x0) unshare(0x48020200) 03:15:09 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:15:09 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) 03:15:09 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 9) [ 2516.782897] FAULT_INJECTION: forcing a failure. [ 2516.782897] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.786055] CPU: 1 PID: 17543 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2516.787724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2516.789731] Call Trace: [ 2516.790376] dump_stack+0x107/0x167 [ 2516.791267] should_fail.cold+0x5/0xa [ 2516.792199] ? create_object.isra.0+0x3a/0xa20 [ 2516.793334] should_failslab+0x5/0x20 [ 2516.794232] kmem_cache_alloc+0x5b/0x360 [ 2516.795068] create_object.isra.0+0x3a/0xa20 [ 2516.795971] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2516.797022] kmem_cache_alloc+0x159/0x360 [ 2516.797887] __d_alloc+0x2a/0x990 [ 2516.798606] d_alloc_pseudo+0x19/0x70 [ 2516.799407] alloc_file_pseudo+0xce/0x250 [ 2516.800259] ? alloc_file+0x5a0/0x5a0 [ 2516.801077] ? shmem_get_inode+0x55c/0xbc0 [ 2516.801950] __shmem_file_setup+0x144/0x320 [ 2516.802833] ? _copy_from_user+0xfb/0x1b0 [ 2516.803696] __do_sys_memfd_create+0x275/0x450 [ 2516.804636] ? memfd_file_seals_ptr+0x170/0x170 [ 2516.805642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2516.806715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2516.807768] do_syscall_64+0x33/0x40 [ 2516.808527] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2516.809576] RIP: 0033:0x7f443c170b19 [ 2516.810346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.814116] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2516.815659] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2516.817114] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2516.818537] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2516.819942] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2516.821355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2531.320189] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2539.156087] FAULT_INJECTION: forcing a failure. [ 2539.156087] name failslab, interval 1, probability 0, space 0, times 0 [ 2539.158567] CPU: 1 PID: 17551 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2539.159992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2539.161700] Call Trace: [ 2539.162251] dump_stack+0x107/0x167 [ 2539.163010] should_fail.cold+0x5/0xa [ 2539.163801] ? __alloc_file+0x21/0x320 [ 2539.164602] should_failslab+0x5/0x20 [ 2539.165404] kmem_cache_alloc+0x5b/0x360 [ 2539.166245] __alloc_file+0x21/0x320 [ 2539.167012] alloc_empty_file+0x6d/0x170 [ 2539.167846] alloc_file+0x59/0x5a0 [ 2539.168585] alloc_file_pseudo+0x16a/0x250 [ 2539.169462] ? alloc_file+0x5a0/0x5a0 [ 2539.170249] ? shmem_get_inode+0x55c/0xbc0 [ 2539.171125] __shmem_file_setup+0x144/0x320 [ 2539.172009] ? _copy_from_user+0xfb/0x1b0 [ 2539.172859] __do_sys_memfd_create+0x275/0x450 [ 2539.173810] ? memfd_file_seals_ptr+0x170/0x170 [ 2539.174769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2539.176026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2539.177245] do_syscall_64+0x33/0x40 [ 2539.178017] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2539.179063] RIP: 0033:0x7f443c170b19 [ 2539.179824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2539.183577] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2539.185128] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2539.186599] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2539.188056] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2539.189514] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2539.190964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:15:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, 0x6e6bb9, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:15:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:15:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:15:32 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 10) 03:15:32 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) 03:15:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420b, r0, 0x0, &(0x7f0000000180)) 03:15:32 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:15:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e0623e13b9f4c91a131bad517d3df39ddec8e7092fd476258d8f4e1df6476fa000000000000"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:15:32 executing program 7: openat$rfkill(0xffffffffffffff9c, 0x0, 0x140, 0x0) 03:15:32 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:15:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, 0x6e6bb9, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:15:32 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 1) [ 2539.364417] FAULT_INJECTION: forcing a failure. [ 2539.364417] name failslab, interval 1, probability 0, space 0, times 0 [ 2539.366902] CPU: 0 PID: 17623 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2539.368323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2539.370046] Call Trace: [ 2539.370598] dump_stack+0x107/0x167 [ 2539.371350] should_fail.cold+0x5/0xa [ 2539.372137] ? getname_flags.part.0+0x50/0x4f0 [ 2539.373074] should_failslab+0x5/0x20 [ 2539.373861] kmem_cache_alloc+0x5b/0x360 [ 2539.374703] getname_flags.part.0+0x50/0x4f0 [ 2539.375610] getname+0x8e/0xd0 [ 2539.376273] do_sys_openat2+0xf9/0x420 [ 2539.377068] ? build_open_flags+0x690/0x690 [ 2539.377967] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2539.378958] ? wait_for_completion+0x270/0x270 [ 2539.379902] __x64_sys_openat+0x13f/0x1f0 [ 2539.380754] ? __ia32_sys_open+0x1c0/0x1c0 [ 2539.381635] ? ksys_write+0x1a9/0x260 [ 2539.382425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2539.383503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2539.384562] do_syscall_64+0x33/0x40 [ 2539.385330] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2539.386389] RIP: 0033:0x7f6eaa02cb19 [ 2539.387149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2539.390903] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2539.392453] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2539.393927] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2539.395384] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2539.396835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2539.398302] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:15:32 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 11) [ 2539.414460] FAULT_INJECTION: forcing a failure. [ 2539.414460] name failslab, interval 1, probability 0, space 0, times 0 [ 2539.416857] CPU: 1 PID: 17632 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2539.418283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2539.419973] Call Trace: [ 2539.420528] dump_stack+0x107/0x167 [ 2539.421281] should_fail.cold+0x5/0xa [ 2539.422074] ? create_object.isra.0+0x3a/0xa20 [ 2539.423015] should_failslab+0x5/0x20 [ 2539.423793] kmem_cache_alloc+0x5b/0x360 [ 2539.424626] create_object.isra.0+0x3a/0xa20 [ 2539.425531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2539.426569] kmem_cache_alloc+0x159/0x360 [ 2539.427423] __alloc_file+0x21/0x320 [ 2539.428189] alloc_empty_file+0x6d/0x170 [ 2539.429019] alloc_file+0x59/0x5a0 [ 2539.429762] alloc_file_pseudo+0x16a/0x250 [ 2539.430626] ? alloc_file+0x5a0/0x5a0 [ 2539.431410] ? shmem_get_inode+0x55c/0xbc0 [ 2539.432285] __shmem_file_setup+0x144/0x320 [ 2539.433162] ? _copy_from_user+0xfb/0x1b0 [ 2539.434029] __do_sys_memfd_create+0x275/0x450 [ 2539.434964] ? memfd_file_seals_ptr+0x170/0x170 [ 2539.435920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2539.436994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2539.438060] do_syscall_64+0x33/0x40 [ 2539.438824] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2539.439870] RIP: 0033:0x7f443c170b19 [ 2539.440631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2539.444389] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2539.445964] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2539.447419] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2539.448874] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2539.450340] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2539.451794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:15:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:15:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) [ 2543.936137] Bluetooth: hci1: command 0x0409 tx timeout [ 2545.984105] Bluetooth: hci1: command 0x041b tx timeout [ 2548.032103] Bluetooth: hci1: command 0x040f tx timeout [ 2549.400331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2549.402171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2549.405154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2549.474627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2549.476396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2549.479288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2549.641863] EXT4-fs (sda): re-mounted. Opts: (null) [ 2549.668482] EXT4-fs (sda): re-mounted. Opts: (null) [ 2550.080886] Bluetooth: hci1: command 0x0419 tx timeout [ 2563.917790] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2580.174906] FAULT_INJECTION: forcing a failure. [ 2580.174906] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.176804] CPU: 1 PID: 18161 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2580.177942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2580.179273] Call Trace: [ 2580.179711] dump_stack+0x107/0x167 [ 2580.180292] should_fail.cold+0x5/0xa [ 2580.180924] ? security_file_alloc+0x34/0x170 [ 2580.181635] should_failslab+0x5/0x20 03:16:13 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 2) 03:16:13 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:16:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:16:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:16:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1450, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}, @tmpl={0x104, 0x5, [{{@in6=@local, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3504, 0x2, 0x0, 0x0, 0xbbb, 0x9, 0x101}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d5, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x13e7, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x4, 0x1, 0x8, 0x10001, 0x8}, {{@in=@multicast1, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3504, 0x3, 0x0, 0x2, 0x1, 0x7a39, 0x401}]}]}, 0x1450}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:16:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420c, r0, 0x0, &(0x7f0000000180)) [ 2580.182278] kmem_cache_alloc+0x5b/0x360 03:16:13 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 12) 03:16:13 executing program 7: openat$rfkill(0xffffffffffffff9c, 0x0, 0x140, 0x0) [ 2580.183108] security_file_alloc+0x34/0x170 [ 2580.183872] __alloc_file+0xb6/0x320 [ 2580.184505] alloc_empty_file+0x6d/0x170 [ 2580.185172] alloc_file+0x59/0x5a0 [ 2580.185759] alloc_file_pseudo+0x16a/0x250 [ 2580.186445] ? alloc_file+0x5a0/0x5a0 [ 2580.187073] ? shmem_get_inode+0x55c/0xbc0 [ 2580.187765] __shmem_file_setup+0x144/0x320 [ 2580.188461] ? _copy_from_user+0xfb/0x1b0 [ 2580.189137] __do_sys_memfd_create+0x275/0x450 [ 2580.189899] ? memfd_file_seals_ptr+0x170/0x170 [ 2580.190659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2580.191507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2580.192348] do_syscall_64+0x33/0x40 [ 2580.192957] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2580.193757] RIP: 0033:0x7f443c170b19 [ 2580.194370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2580.196954] FAULT_INJECTION: forcing a failure. [ 2580.196954] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.197329] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2580.197347] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2580.197356] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2580.197374] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2580.204536] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2580.205685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2580.206869] CPU: 0 PID: 18165 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2580.208484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2580.210405] Call Trace: [ 2580.211023] dump_stack+0x107/0x167 [ 2580.211875] should_fail.cold+0x5/0xa [ 2580.212761] ? create_object.isra.0+0x3a/0xa20 [ 2580.213824] should_failslab+0x5/0x20 [ 2580.214715] kmem_cache_alloc+0x5b/0x360 [ 2580.215666] create_object.isra.0+0x3a/0xa20 [ 2580.216686] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2580.217889] kmem_cache_alloc+0x159/0x360 [ 2580.218857] getname_flags.part.0+0x50/0x4f0 [ 2580.219875] getname+0x8e/0xd0 [ 2580.220617] do_sys_openat2+0xf9/0x420 [ 2580.221514] ? build_open_flags+0x690/0x690 [ 2580.222507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2580.223615] ? wait_for_completion+0x270/0x270 [ 2580.224673] __x64_sys_openat+0x13f/0x1f0 [ 2580.225624] ? __ia32_sys_open+0x1c0/0x1c0 [ 2580.226596] ? ksys_write+0x1a9/0x260 [ 2580.227485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2580.228689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2580.229933] do_syscall_64+0x33/0x40 [ 2580.230808] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2580.231981] RIP: 0033:0x7f6eaa02cb19 [ 2580.232836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2580.237000] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2580.238752] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2580.240363] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2580.241989] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2580.243598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2580.245205] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:16:13 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 13) 03:16:13 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:16:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x134c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @policy_type={0xa}]}, 0x134c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) [ 2580.290621] EXT4-fs (sda): re-mounted. Opts: (null) [ 2580.310750] FAULT_INJECTION: forcing a failure. [ 2580.310750] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.313312] CPU: 0 PID: 18175 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2580.314816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2580.316602] Call Trace: [ 2580.317179] dump_stack+0x107/0x167 [ 2580.317990] should_fail.cold+0x5/0xa [ 2580.318809] ? create_object.isra.0+0x3a/0xa20 [ 2580.319792] should_failslab+0x5/0x20 [ 2580.320609] kmem_cache_alloc+0x5b/0x360 [ 2580.321481] ? percpu_ref_put_many.constprop.0+0x4e/0x100 [ 2580.322668] create_object.isra.0+0x3a/0xa20 [ 2580.323613] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2580.324705] kmem_cache_alloc+0x159/0x360 [ 2580.325605] security_file_alloc+0x34/0x170 [ 2580.326543] __alloc_file+0xb6/0x320 [ 2580.327346] alloc_empty_file+0x6d/0x170 [ 2580.328222] alloc_file+0x59/0x5a0 [ 2580.328994] alloc_file_pseudo+0x16a/0x250 [ 2580.329922] ? alloc_file+0x5a0/0x5a0 [ 2580.330739] ? shmem_get_inode+0x55c/0xbc0 [ 2580.331647] __shmem_file_setup+0x144/0x320 [ 2580.332562] ? _copy_from_user+0xfb/0x1b0 [ 2580.333459] __do_sys_memfd_create+0x275/0x450 [ 2580.334438] ? memfd_file_seals_ptr+0x170/0x170 [ 2580.335432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2580.336545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2580.337644] do_syscall_64+0x33/0x40 [ 2580.338455] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2580.339541] RIP: 0033:0x7f443c170b19 [ 2580.340331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2580.344215] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2580.345813] RAX: ffffffffffffffda RBX: 0000000020001400 RCX: 00007f443c170b19 [ 2580.347320] RDX: 00007f44396e6000 RSI: 0000000000000000 RDI: 00007f443c1ca0fb [ 2580.348814] RBP: 0000000000000000 R08: 00007f44396e5ff8 R09: ffffffffffffffff [ 2580.350323] R10: 00007f44396e5ffc R11: 0000000000000246 R12: 0000000000000000 [ 2580.351819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2580.412245] EXT4-fs (sda): re-mounted. Opts: (null) [ 2592.817378] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:16:34 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 14) 03:16:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x1340, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "2ecc293ed1f7f7e0e8255f1899dc23fa71e82a8c1d8b0886a95f964cd5daf2cc7d987078f04b611da64e2e8c075e7acb9777ee1b4840913cb8762c8a84033a2348669f9ad84b73c40ac86db99353e27f0ee7a68c3b7700e9911ffac0004e1641ddea5659eec316534a293b2549a788dd699d523fdfa2d7bd820e9c84a94be2ce2288fbe34dda5d2d95fb0bb4b130c1ff0d85d292568aabc0f833ea9d8c5859a9b1130822f9001dd3e4ab199fd5de021d25791c43ca6ceb93342aaa35dad7183b0690088f07b74d1cf2fd5ac65d19e3b4be268042c92d0ffecdfa24c11fdd62be9d924ae9272e3cfed19db56f4ae7c071f33a75de4fe245bfa773a02daf55988d1e6300c4c2d789eb7cf35291214caa9bba24e6bddc43e5b73a5ad1f7fcaa19c75e6c2de45eedf1b7d8b14c5356418072177c78ce2e7b63f42f9c48731a882b79fae01c5de27146861062eda2a8804154d71c72046a59a3b04fdd11bca6d3ffadc1c9bee9d482ddd97a8e65a48d065234469c37013852fe9a6b46d4b0412fdda2e3e1901f83944dfaf5c562fcaec4a0247e47bb3fa67676c2281ffdd402824dfab87a2f841b524233c752f2542639b63141076d39d2c0d49eec2cd4f82a9f5513557eb11b25079007f80299df39eaec735f474bca7c121a2763b53c094271ee2ecb71e11e9e174616d828bb4f4955cbaa1aa0c638ee993a7aeabd9570e6b6ba5a4b75e19368362ea205c9d5dd2f485064f4b7bb8b39d4c827a72bae2cfe96f4be0b5d0ff902d849d6348722567903817c5efb390e85ddf7a30f875eda1a31c3249d90039d2fe6508ac92fb080573b894933e0840ba35cc57902dd46c6c3aaad7021005b43fc623a8bd6aff5aa99c9ce7095ec55dc74dd08873911da3b7e7fd2cfccb614274d9970a5e99ad3dc0ebbfa751ad1fcd95f15d00570214fe6ffe8e7e98a1ee2938a193a818a96d89128e4015be15f076bfb1b3bd452c113f2a23d7a931b98615cfde9131fc728511e9fb27dbfb1a8be90bdfcc412159587432a1cb90ffc5a2a98a4da40af226f6aed3a0371fcb39d0438a849d83f4ac2c547a7a2fe7dbe22c3c0390b6d1f26035c6b4ee9d4e0d468b9acff53c962ccb0ffb0b5478356f5fc47c24286f0bb2402f20c45e24ab2e58ba0d92711d617d159484233dcc21f0fa9e5613dc2dbc840c5f7a9c2daa2b65e126f528075a6f8fe6a5c60d6efc8a8ac33a446e32c48416c556f68136e46679408be3887e21975e5a7a7f254b3902cddc2d0b3c96695e0388565317dfef2ea4c458443a3b18e9f42310eed653935f555362fdf4aa69be0685ec4f766413dbe06fd234dec2dca8a5e9c527e642791c325a048dbedd9f5b663b866a0f9f571c12f53999aaefb847f659cd8934e7d5560a042c741250af7bad777913507cb403856b799d00e1a9d69cf20436c7087fd2976e3221f8aeb7d9f913c17eb815ed33f852b5c96800daa594bfafc870ba4fc2a5e8583deb38f5bc265668f399ba2bbe29e40c7c4d45dae5471600c347e34101523c6a93ff06d28af3f8ca89197ff86dcbfd5e2d4fb773cc686d635dd607d35ee2c40a5d789ae17acc1d4478ca82654bd6067bfdd1aab53f06d1b816dfe072c51c5a401c010d1b94efc08fd21f6d62fef2817d15691c10aa468975f7f6240238f7b50e3b429f43b57cef2b26529ef8368d5da41d23c0f1f9ebeaf2587a213b15ebf62411faf27b8a03a5446ec48329826af7a7cbdb9f6602ec83ef3e420ccc53e77447be7341fa16d1a3979e74f49f26f329d1b2757f51067db275e911eefb5cb56394a23ea499b28ffa7b26b5172e3de887d4e1e3bc6bfd061a52fb929fcf2efd7e6875980942c71829c199b398863add21c1640db78a27057eca9ba5554b1b73dc8d96b9f140dd1c3dc4e4637ef30c3b328ff5189c8ad737205d45034967d44ff82961be0699663c9e34284c7355d0957e5eca52b5211e45cc084fdd32c7d4ab9a72a02640b6677f25f27c75048b912dd667d28d2e7e98aa7444a31fdb8f53e980d780e186d894b695f41225a05f781a1eaa36329d0ec39c12b538854f2972f9c7a2024fe84518bf32d1738f6e87b46667d9ac802c99c9e47e2469b9fd95e75e8802e46234ed699b42d6f70e312b61183fc871e98c2bee39f2827df21843e48a5617c65cdf2d578c5a01ec5d25baebbc87a863751b4d3fac452261693e235087fd1593cf7307d2288c74528af9bbd2143718136550414920e5a3067188fe804f09a5e3b4ad23279e8e822b186958c086fd799e7863c7edcf10749bfce3419a7a6d5478a3c06683eb08af155ae08d603705c1917298ac3e15dc56a4d28c35fbc8edbc3a0348614764becf91f9f8f0f1b8b806cff5f1260d8d8fe94a6fb605eddd986a56e95fb97291750d6e2318495b5147ae27486543310219f3da29f90f423c247c22c11417cad0d09b7fcaea9aff7975b583bd05274bea7759b153f233a41eb673eaa9abb1899a645033d72cfc8878cb9d6bf072ef33f3114add1b106a2316267b1b113d41a8dd6528d50cea4ec1422e733b875ed919327ea28c1d984b96d1d0999365f09540e4e0b3e6e492b08e583fb8f1332585e45607bac66f474d93566be59b555f7722ecc88417fb00bfe1aa10bc2b5305a3a0ea0467940a13b61e341b9fb833022657d83a3739a31b213a125f5f38351fcd7c9e4df441a51a0f8aee9f8b599ab56fc457e7661a4d58c7132d9a51b9f18d6f76b63f5a74e7450474ce464ec0c146ce323b42744cb952c241205d8d82e36436e092eeba00a78afc99537aa96c2dd1cb7fdf3642304d7fc994b08afecee7e2326d86e92078b282cf4699fc25dbc4737ca671ecf3deb5ef83517a7688f10918345c0def07701f6670e619504c8ee2c91795d9f723608d7a888441c05cada81ff0ddcb829dae24266d3888e430c323dc67884c13e221eaa54ca20ebb7d29b00fba79cf095a7dd47a8a0f165b142b36209f11373d0ec9079ab865d31eeddf17714da1256f3676203ee53a37c1e7190a806d300aebf0c4c9b4ff7295dc8f14c38041c29cfaaba067c67ba92737f31ebb3ce1f5f912908f3b50fc23b1f6a2f0b9dc0e80a9faedd7a33be9062cc38e066714b50df5385a62de40059b6247d4c73499248d52afde613ffaed4cae84d6215359f811e931f414e124eb239f151c1bf4ca0fe15c35db14cc836b92827cc502174939a71c567b1a61a37477fe90cc2bccea70fa265b275394cbdd50e9d4cd7250c28ad5c10b4d2a9868b1c22db77794e4360a19bfddc14d598cccb4b8bde32dc1cfead1be66f26898bf15d6be3e67edc84b28520fa5d546241e495b68829626d5719954ee2f4d319ac102f2cab3c704ae15548232721a29d971bdce9c4e2a0f0c592a1b164e3433506f003758bb0d7e67d399afaead681e5d155bd1433f7ff50568d136b340d180432854c3e8e03926344121480db3e8ffd688e4428f9781f850210eeb592e12e8e8531d9326d8fed11c1ab59f126cdc6486945e49b701f017d95ae0fcc799e9718c51350fabfdcd0b3110c6965fed83993ee0afc9c31a6ea6d1548e57d8c240287d83a6892cd426c68f76bfefd666cb625f762842be4d618d629b2cac3caaa7e0a6670d0dbe7767b0e687a32db48b0be4b594f2054cd7139566bfb5e95ff20e1ebd23218d4fa78ccb0ff42d71badedfa4eb6805afd2e41a3c5134f19a3ef3749b25a76fb3c1e183af4f19cd9733e5af5c980ba71c431732b9ddb5ab3e7955d2a7946205ff8ef8fbd22efd36e59db3fc6859cda7992b897e215acf6be5b390df52b399b76a9cc0593004cfe2a0301dbeb60acd277b2efd0b7f56c35258850c8ce09a8efec7517d66a9799dc2245a8fa43327dd8d55551de1f961794ab08b0321a6297606f4163626c3982b2d7df7633a4148080a5c479f0c88482306cfa8f06cbeea2b0451c0760b2882dfe53852c6a9e3546699c35caada9ddb3474b52830c999a265018a8a9314961697287f5c1b1bd7eb93a3bb8294a8bb1adea99c6fa8affd1990b8812a58f3186f76a1121f3b16daa228c5a3fa14a99414499b39c825f931585fd004409f0fe716d23f17f566471956f30859989f63d461d9ef9ea2711037c549cdd4d3babc26efe7df5b0c4aa33c245126bebd7216bda209cee55c901c95277f9465c78377367c73116b9b98d703610cf52fed32e72ea19e14c0cf7d4f59870dbff22ef601a984ab5594ca9f265652485d8b158b8c630293a8e8728ec304a22804e600529c49dd0b18f96de3217ebb85574a23963b2c2c7951d0ced8f37d699cdbe33c70c540c9797b147391f04347de6d93f9527e5b4981cb3e6665af824661f9c0ac4b8bf6b890d387120495503e00beb89c7abafde0f793e019359ca83910a35fb95f9fd9dbe1650979e331deedc96a8bab98ffd46cfdde79d46f53846e58a1e27810db391ad42971a0838858b770929e41a21c6272437e7bc29d56fd7053f0c6c100504a6c14f79429be65c5dcb75f0abbf75022d6a5c13f5d1a69606f55de66663a4d26b1cf7b89c42c44f7fd2d1f6749e1cfd87b6e1d505f10240caad0c0c70160e236487f3558b67ed9d7553e1a031961afef6f3fe9ceeaad36bac86847ec74016dab603989469c6ee72cc259b1207f8e83f71938f0dc9a4d45e51872efe41a8cc63ffc0f1981fe8d8f0e4a9107fad037e02c042bc1f010f0728ad236a5cf11600be7f90bb615ce0aa8d75fc3c75eee8e44fd6003515e9a43aabec634f4d4feb33e43191e758b534386d4a0336ceafec5d7e80ce2a11e09e6a22c09e21b3af1a6b172b4522631408e42a7faf81c0e9d52beb67d9f8941a26a2d3abdc90b1d31664822f99ab2da86ee753291140f835b69bb6b1915b1673cc9bb8f6685387963bf0fbfa987b7d06a63e50b8924f9c88b1fde61605d0933bfbd6d9d57dd216ff649c8d6aaaa8602c6a6297b0fb32a695675454400281de7d9c6b69f212302edbdd5889fc74e8ae6199de96b1bef16f56e9acf0fa53f2ed5d6a8f40e9c56bf88b3e6c5006a2aa49c656140a6e21d92dd2701bb67de10cfe90f3dd7061c0a9336f0e1e174c769b09c8f3756d4d32fc1bb5a9dc30e8ba1f438a4810f5aff54b9d7b18ad81208890ccf41cbc266342d8f286b39ef6abc6aff345456c0f0717c16996bb406a15177f724affa39ea0a6786149d6001fb047f809ca6f0009919e4c8b84a294967475126ab4647ca5b3b7c719797ec54392a9d8acc102386ae433463c8e2fb43874c8e1f2b5a7e989948d100d40253836cbd78019c3fcdf843543b1761e96658e93589cea9c74806151dfa6b631212bc4b1a292658901da399df0089eb69a6bfb16907bc37a64f9c8346703dcee51df86f35887dd7f072fe48b0fa558d3fbbb180df20b8f3021ba0f13bbbce096a73cf306e878b03ac897dfb77a2d4a44e0937f3e713698657d9052c34360dbc9890c150a4b138ab49c5f21f3d1b1c45ccb839334814e880a79badc1a4a08529564571e15af965970c87a0eae9241199a52169db69d5fcedb1d3551b918976f6d15bd01acd1368081522850c20a036a7749957fb06ca855e974fc7605ce143b7469f26b97aa8afc0fef0f680902041705ad63f6d479018ee1f96f826d1a01f628ebad34069edac19120caa927b640c028ab3d637ced3b9421a8265e34b7049b4c4a81cc688cedb7113f472c3de1907acd95a35b5e5dcf3ad37154034bdde83d5551511d8c71a7ef8f151cf03088ee9917de4dd91f6fd68e84be58e876daac2d09"}}]}, 0x1340}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:16:34 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 3) 03:16:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:16:34 executing program 7: openat$rfkill(0xffffffffffffff9c, 0x0, 0x140, 0x0) 03:16:34 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:16:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x4, 0xff, 0x0, 0x5, 0x0, 0x9, 0xc0041, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0x10, 0x9, 0x2, 0x4, 0xffff, 0x4, 0xc0, 0x0, 0x80000001, 0x0, 0x5}, r0, 0x9, r1, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) r3 = syz_io_uring_complete(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/breakpoint', 0x105300, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000400)={0x0, 0x3, r4, 0x1}) r5 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r5, 0x5c33, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r3, 0x0, r5) 03:16:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420d, r0, 0x0, &(0x7f0000000180)) [ 2601.851217] FAULT_INJECTION: forcing a failure. [ 2601.851217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2601.853632] CPU: 0 PID: 18287 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2601.855032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2601.856705] Call Trace: [ 2601.857247] dump_stack+0x107/0x167 [ 2601.857988] should_fail.cold+0x5/0xa [ 2601.858785] strncpy_from_user+0x34/0x470 [ 2601.859634] getname_flags.part.0+0x95/0x4f0 [ 2601.860530] getname+0x8e/0xd0 [ 2601.861183] do_sys_openat2+0xf9/0x420 [ 2601.861985] ? build_open_flags+0x690/0x690 [ 2601.862867] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2601.863844] ? wait_for_completion+0x270/0x270 [ 2601.864777] __x64_sys_openat+0x13f/0x1f0 [ 2601.865618] ? __ia32_sys_open+0x1c0/0x1c0 [ 2601.866477] ? ksys_write+0x1a9/0x260 [ 2601.867257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2601.868316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2601.869359] do_syscall_64+0x33/0x40 [ 2601.870112] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2601.871173] RIP: 0033:0x7f6eaa02cb19 [ 2601.871927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2601.875645] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2601.877179] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2601.878627] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2601.880066] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2601.881504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2601.882902] FAULT_INJECTION: forcing a failure. [ 2601.882902] name failslab, interval 1, probability 0, space 0, times 0 [ 2601.882961] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2601.886778] CPU: 1 PID: 18296 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2601.888175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2601.889850] Call Trace: [ 2601.890396] dump_stack+0x107/0x167 [ 2601.891140] should_fail.cold+0x5/0xa [ 2601.891918] ? getname_flags.part.0+0x50/0x4f0 [ 2601.892847] should_failslab+0x5/0x20 [ 2601.893620] kmem_cache_alloc+0x5b/0x360 [ 2601.894473] getname_flags.part.0+0x50/0x4f0 [ 2601.895371] getname+0x8e/0xd0 [ 2601.896025] do_sys_openat2+0xf9/0x420 [ 2601.896816] ? build_open_flags+0x690/0x690 [ 2601.897687] ? find_held_lock+0x2c/0x110 [ 2601.898523] ? do_syscall_64+0x33/0x40 [ 2601.899319] __x64_sys_openat+0x13f/0x1f0 [ 2601.900157] ? __ia32_sys_open+0x1c0/0x1c0 [ 2601.901023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2601.902084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2601.903144] do_syscall_64+0x33/0x40 [ 2601.903900] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2601.904934] RIP: 0033:0x7f443c123a04 [ 2601.905688] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2601.909401] RSP: 002b:00007f44396e5ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2601.910947] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c123a04 [ 2601.912384] RDX: 0000000000000002 RSI: 00007f44396e6000 RDI: 00000000ffffff9c [ 2601.913831] RBP: 00007f44396e6000 R08: 0000000000000000 R09: ffffffffffffffff [ 2601.915282] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2601.916718] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 03:16:34 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:16:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x2f8, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}, @sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0x3, 0xc3, "289c64fb8a02c94dd11c38b96caab188fbb8880659bf6a89ac5dd797565931b0c6d480184728de8bc97711385837fee13c241c65ce6f340410145b2440bac2ed0a63da47c33faf7b14d54a17b3bb9d5b4e1807da5ac12b8836ee475c0233ed04720b3debecf8ba776cd299da82a61d89e74c5c4621623c0198facc6699578a7411f19ebbafbbd96c75a8146fa2eb1244fb06f07d4cc8858207d662979dcde1a07f0ab257afad8ec6db81a32a79872561b8d426d4ff1438e321001db9e6a3ef45795432"}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) [ 2601.970527] EXT4-fs (sda): re-mounted. Opts: (null) 03:16:35 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:16:35 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 4) 03:16:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) [ 2602.069407] EXT4-fs (sda): re-mounted. Opts: (null) 03:16:35 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:16:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x228, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x3, 0x4e23, 0x6a, 0xa, 0xa0, 0x20, 0x2e}, {0x1000, 0x1, 0xffff, 0x7f, 0x6, 0x4, 0x1, 0x2}, {0x9, 0x5, 0x5000000, 0x3}, 0x5, 0x6e6bbc, 0x0, 0x1, 0x0, 0x2}}]}, 0x228}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) [ 2602.158585] FAULT_INJECTION: forcing a failure. [ 2602.158585] name failslab, interval 1, probability 0, space 0, times 0 [ 2602.160982] CPU: 1 PID: 18392 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2602.162373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2602.164020] Call Trace: [ 2602.164551] dump_stack+0x107/0x167 [ 2602.165299] should_fail.cold+0x5/0xa [ 2602.166067] ? __alloc_file+0x21/0x320 [ 2602.166863] should_failslab+0x5/0x20 [ 2602.167639] kmem_cache_alloc+0x5b/0x360 [ 2602.168486] __alloc_file+0x21/0x320 [ 2602.169261] alloc_empty_file+0x6d/0x170 [ 2602.170098] path_openat+0xde/0x26d0 [ 2602.170892] ? path_lookupat+0x860/0x860 [ 2602.171731] ? perf_trace_lock+0xac/0x490 [ 2602.172580] ? SOFTIRQ_verbose+0x10/0x10 [ 2602.173402] ? lock_acquire+0x197/0x490 [ 2602.174226] ? __lockdep_reset_lock+0x180/0x180 [ 2602.175181] do_filp_open+0x17e/0x3d0 [ 2602.175953] ? may_open_dev+0xf0/0xf0 [ 2602.176733] ? __alloc_fd+0x2a5/0x620 [ 2602.177507] ? lock_downgrade+0x6d0/0x6d0 [ 2602.178368] ? rwlock_bug.part.0+0x90/0x90 [ 2602.179245] ? _raw_spin_unlock+0x1a/0x30 [ 2602.180087] ? __alloc_fd+0x2a5/0x620 [ 2602.180883] do_sys_openat2+0x171/0x420 [ 2602.181696] ? build_open_flags+0x690/0x690 [ 2602.182597] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2602.183589] ? wait_for_completion+0x270/0x270 [ 2602.184528] __x64_sys_openat+0x13f/0x1f0 [ 2602.185385] ? __ia32_sys_open+0x1c0/0x1c0 [ 2602.186247] ? ksys_write+0x1a9/0x260 [ 2602.187029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2602.188093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2602.189144] do_syscall_64+0x33/0x40 [ 2602.189902] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2602.190966] RIP: 0033:0x7f6eaa02cb19 03:16:35 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 15) [ 2602.191750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2602.195673] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2602.197231] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2602.198687] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2602.200133] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 03:16:35 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2602.201583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2602.203154] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:16:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000003c0)=@v2={0x3, 0x0, 0x7, 0xff, 0x1000, "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"}, 0x1009, 0x2) getpeername$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f0000000280)=0x6e) [ 2602.280726] FAULT_INJECTION: forcing a failure. [ 2602.280726] name failslab, interval 1, probability 0, space 0, times 0 [ 2602.283342] CPU: 0 PID: 18434 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2602.284799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2602.286587] Call Trace: [ 2602.287157] dump_stack+0x107/0x167 [ 2602.287935] should_fail.cold+0x5/0xa [ 2602.288736] ? create_object.isra.0+0x3a/0xa20 [ 2602.289699] should_failslab+0x5/0x20 [ 2602.290537] kmem_cache_alloc+0x5b/0x360 [ 2602.291394] create_object.isra.0+0x3a/0xa20 [ 2602.292339] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2602.293398] kmem_cache_alloc+0x159/0x360 [ 2602.294320] getname_flags.part.0+0x50/0x4f0 [ 2602.295265] getname+0x8e/0xd0 [ 2602.295956] do_sys_openat2+0xf9/0x420 [ 2602.296765] ? build_open_flags+0x690/0x690 [ 2602.297656] ? find_held_lock+0x2c/0x110 [ 2602.298559] ? do_syscall_64+0x33/0x40 [ 2602.299390] __x64_sys_openat+0x13f/0x1f0 [ 2602.300265] ? __ia32_sys_open+0x1c0/0x1c0 [ 2602.301176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2602.302313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2602.303390] do_syscall_64+0x33/0x40 [ 2602.304173] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2602.305254] RIP: 0033:0x7f443c123a04 [ 2602.306061] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2602.309918] RSP: 002b:00007f44396e5ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2602.309959] EXT4-fs (sda): re-mounted. Opts: (null) [ 2602.311581] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c123a04 [ 2602.311595] RDX: 0000000000000002 RSI: 00007f44396e6000 RDI: 00000000ffffff9c [ 2602.311606] RBP: 00007f44396e6000 R08: 0000000000000000 R09: ffffffffffffffff [ 2602.311617] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2602.311628] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 03:16:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:16:35 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 03:16:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x17c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x35075d, 0x800}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:16:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:16:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420e, r0, 0x0, &(0x7f0000000180)) 03:16:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:16:35 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 5) [ 2602.496737] EXT4-fs (sda): re-mounted. Opts: (null) 03:16:35 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000180)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001680)=0x2) r2 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000340)='./file0/../file0\x00', 0x9, 0x3, &(0x7f0000001480)=[{&(0x7f0000000380)="134f306313b2834f33f5e49cb2d5f16c1f2284d3bfd3af7c3e9eb8c1fb5fd363f30c740daf39dc7c751676a98d6057889b0b34a27ac9fa83edaf0f050a1a94ad96eb05556c7746b946563291af2644bc65616a996ecd6d9a246bfb70869c00e5a580cf1d363429e9ced7d623b60cf47a75d1dc8e052a60b6cf0abf56aba397289a72d0d567241e94d607b89b8dbe082558fa8b0c3e62e0f5dfa3d56c7b22d6e652ae694f2ea06056d8425a2b8c98cf86b486499b6964930b7d663c01834bd3c220fdcd4e316f0e0efdaf9269c46042ef9917676e26e4ff2083b95b99e38f7dd3b65a5db54117f27b4470e6075bd122e82152f8500d4e5d15080a80ac744bd3abe3164412de173638a56b357a4d248726d179544892e0d19fa5386e82ce39f6090c6bbbf86f0536a7c3516d190beea20c7cfbcf50087fb2b35505df3b85c59e98397c6e6d55c261a2bc76a38ab44208fb5c8559480552b2c3f4186c98f22f4731d71814b6fbdef5100f752cb2a1996a57633f79818d69dadd1a3a979dd3222ce3403c095edd2069e5a68a6520e37e1c1c43ce98c5da017c92f563a5852d6ad3f019a529b31b04673f4006dda24a8fccf42552e597791c1a523af36a4f367fe11e1e19fb831d5e10323c5b8418b007af602ab3d005e7f5f0b3f7c1a4b4d8d8cc327657bd9a8c199294c09d4dc592e950719c5586df8e22c7cc3912701f2097eb3cadd4d963b9fc495becceacfee971fd72668c22308d91ad09529ca1a44b551d21e0b8ce517a4bee72310175656cb53b98c07fe3068c196ec34e473042f865faa256f22ece2b10db8d3622e8379ab7f8a6956b1e007f2d83791d6b434140fa231c4b8de86dfb88a2e6b8d8b51f6de49b66545cebd38aab5b34afc836271274fc5e63d74d29bb6ae650f390e424fe2baac7ef75de8427d7a45695b5906f3a782bb3084923053c21bbc3e927f454ab72273952843e9780899f8bab3c77643f4b747175f56f1ccba305e82a1116205c2af956f0faa800ad7d14df3cfbb12fbb482f49d2fa89372a0589c6bbb05d3273e0fe252d0264fbfc6c0e72379609c8e768cfa22005a4b47fee78a00f943efdb8ef1d9fc3f76f42c74c07c6c128cf304abc331e6f34db539f9ca0aab9e40665058e45b6384727f4367a6c722b8d9a59f4e989f1f31e34241d7f94b334344e8c141a4e1cf44f423c1d8826e498b6ce5c836d63dcbcda7dfd18b56528e552e69165c821f4959fd67b4ecd27471e275a835864eda8d10f545ad9c0531f861ce14115b4817959332856a86e1d3b55d3cc6aea9cc3e4445ee33447897a61cc394044b24374873861922957efe4afdb56c0e784f2a3ff51663a3a76759aaf01d7ee19feaaa2d7b1ef77fc85a6811f23c1afea42880e3a92f95986211663ba6aa11c95aed76473186abf6438a6987f2961358a9d46d118ca56b57f0063ac4f7915395458b35df5f4069d1ed09a41b29379e4747c990d3bb9be7a8da0d87e442246408037f91c5dd13f3ac2489050976c5d99de3ed2c0bc0ef5e1b30dc90e2d0f79532d42455b254779fdc347e54ccec5a5546f23ff57fcf1ceb2fc3966e412b244b5b8cd80e0ca68df0b0b8ec5bfb7c586f731e783e901ac63f150c73c405948948cc63893fcae28b515e1744884a266b65fd9a71057d86c8801536684fb545e3d0b6721e343594f625f6262ca0398cc107a803fd55fbf1521cf8db1f9d69d8790752dcb2059f75b3c3ac4e5d2a9497738ff018dfa0805afff1832666cf774b008e6ad16ed50feb0717e805dc66df970fa10570ed98b6cbc3b6ffb85f36982a61eb5e0fcc480239c09ee3608a0ef578bf17a799fcc25d3ea642269c2d5836bc4aa99419f76f0fe3662bf280bb5b8bb40d376fcc96743ef575b7764c7d2570b48c98f0cbf3cf7eebf72f1dd201c3b46c418423a9511e87b2beb2d7db1bf855b6204a20d5e419f1af360107a48412da63a8274ff74009e50fe4332aaa72f70789ccbebfcbf2d3a2148d45727ca34ae6ce7e3ed81afc185f0cc5cda336008fbb8d7b44274f4f52c4c27afc51edc8c68930b2c9a8ed585bf0034cd5f7718c7f3e8eab3a2e04860c9f45feb9c1d5bd940f5c5e113ce91b9c82b07b097148539f12f66597914b60f746239d755c1a083a74c487d72d04adad1945c93a6c60ad8283a32b03ec39a8261c3ce4e65c7eb6aa245d866053ad3a0c3d18ad74364aca34ff12f790a782341a4d6c26260a81043f5a62d7395dcc9aeb183f78fe8e03f6f6f225c5c6924d42ddb5b5a16bfaf0b6051816c7e532c539055c24475f2f141cd6bb55cfd6c9aeef306dd81c80afe17f37219d447791fa66c7c59d86eeeb052c7864fec7b02acf8915d708f38057b3bf7c6dcd535aa2ace80ea4917298865f0d961bde53a102fc60ae7cc69c91f2118acd6c15d2b2366744cf21d1ad9abff85c09f1bd8c0e4680eb54f28e03fd8ee3dd77eb86fe2e4896332617657503b645a9b32898951a84c628e67f0e01c910b5d09db57e6c63321240de7e0eb3a2bbc469cd8058a53e494b38d3421f7bbf508900d70f54bad317e98f94276e59ddc16c1c10729d64d94d15a2c971f0ec59b293656edc7292e7a98732b4754d5db94c71407b8a5af1320acca1aac61f5761045a7ac68df1c6db477fe5f9a9797ca1145a375e2f89f225e50f1d3b4f1cc33abfb913125f6a6d6760c6714c6f141a332ccd49a5e36c46e881995976ab3bb9896f9650a82c6236278cb143c81b4cc079dcd4e92030fa565426966c66ea9bb0807a9812c1f25d62774a641ae8512b89746d1e19e0739c6003982a71466e57e2a54f341b267da9d4dbf5969ad054d6c13ea7f1dad4f1b845bdea4b69d54aa4aaf78069809071a6d76d2570ee77e334dbb50f21359c2b20c283b2717515a0e8fb1590849af30e33225e1b919738e68ee56320dd083f65ba8ed8d7ade61eea16282bb37ef02b7cc0be91b268a22579fd0a5da216227855320a24331a7e88e802c2b9c354abc54002221e46a869bae08f49b3c1a1ecfe79b905b304efa5f2369e6fc91fdaf45baba5fa55c32f0b4a53fc90f97579ee122546fb14f994d0cea8953a14c420fc9418ca95a4b52c7471a6242a379d568d52ddf238c874cf9ef97dbcb8cb6a92da0136f8df99296fabb89b31eaefa4976ece17c2343c2639a488c07dbc2955ec553b7dc813f1fdfef246d3f536cdba6bbc70153559ff9b8ebc71e9586718e2577e48a25512e85ad25a0e66bd4d31469e0fac7ed547ea69962f5b4e7fc6ddc689eea1a20de308faf74096e74e83bb1dec8e8ca09a3178df06e689b6ea8c6456fe54f3c653d8d77f0ac40d845f29de616d3228c401eb3367db4f11338bb61b1372a3e7f6c1a53c4683e8ec979bb57e7e3d123c2df5306b597f8bbbda5c4eaa4cd288ec43248c1d9c8483cd60907c31352bfb76f9108f476b75e88d3b3046539cead8ba94b83ea4ac3c59460c064e869614ac86ef09fca06156c74a80fd953e92082d0b5494cd70385ac94872fa5ddd1591e1099b392ec498369afad55e6c9a98c7a9be28852994f2a77603acdab0d8f6af9248a7c4b0a58b57759d729d7e96541b13d8e24b6cd6b0ef46c7bea9c243fddb77af3308b9398ec73934aa274dc7c9596ff1f9d15c925e847e8076c7f433fbd07a624e12017b236c4daeeed9f3c2ef29130c267566371f69e74b607819346621d356ac0c01b312e8e00eb23f56aa47f1fda3cf9b7f10b4465322461f30c54c590ecf18b95557bdbb9989d592a156030920206f50435bfcf0a8624abfcf7f874501ee96d1fd53bb82a36de388bc3fa025576847b7a241a00dab627a359de869cf633dfc9eec71cf1ab53158ceb011db41d9ec8911284348db11a7d9dab156e07f0696c45a57c26fee5cffe6e2b37da819fd9cbf858ee1e39380fee76647e21486e9df0523aa2339d3662ea8e6ff74f9f333ab033d6975c1ffc91bc1acd51bfce17df1cb1b13d1a64fe8c47477653cd6d7ecbea81291d2992a8fc4769506f25f381777b43e1d72cbf31d4efe22f15a10411be83a52040f7a25a321a42597be3eaba92841807501c5cbdbc093d7910b8be46a85abbee45c957cf746cbff60ad48479e6c791785e8a6d391a1a21ced074f3afab0dd0bb2405efe4280d8694dbf429185c0baa0d92262e37a6f5cc724267ddc38d8326fa97c6e7f9027cd0d672d9cd25e1b6a32fb1a1cef1edefe3050a15b0da759ffa1db22f5a8075ccd0e4d2e4efd7df7d1c97c71b2c486fc0418750e29696b59bb4077f456e3abbd805313e8a99390f6ad3eccea67dc10bc2f3db9e4cced317e9743d8465f83196224f76d8589967a22b50feddadc894a5a1956db771419fcc296989b4c2c6f986bbed2448acec7d177e7c6d73a1934255512d32fafba08e6400cedc3001a4206ba19af0be7f9a289b3bcfaf78f56ffc315bf22cbfbd952748b73ae6725e11c839a6a661b9ee70383ad8e54e86313cea1917e09b739f6a849884dd5a9d46d256418799640d8e7b99d48c2de86e5acacad215adc3c3ce8559dbc3610e7e89c4a2eeae775fb9a484122e4d44422cc554e8e426713b7bf1f8a862da6d943af50701164ee2ef5acfa69dcc01344f998de9f31ecef7e6440376f1ddd48251579726b36c1abd387fc433b48022bb89423770a519f464c82c41df0fbe8ae5f706ce8034e9af1bd1623a4201b3e1d83b5976114c47230e50938c76382f343dd4326a5ee311434dabdbbe62aa0b11cee6afb3a796f7f4e724feca4cc64910d66b8cacd9a230ccb6ab5442693d7fb63a7110cd38060afa10923f5db3d5d8cf12660b98f201b84c2943eb8dd47444f9687800d75d9e10811df92f266c3c22bb01037819d9383282684fc16621e200dc65b4875c78a64524b6af05129f3a1d79ac6ee010b5fce4146f28a7ad8817ddf4cbb12bdb4780ab2b27881877eb2c6de93c890b8394c954a31c7b0f006ade70f353cc1ea82f211c371db3644d7f51aa9cbd585589721201a563d3da6d1cd3fc88e1147785cfcda9398dff9f5d88c038a71c524f2a307321eacbd7a2f967c0c661b99799d5c06e23ccb526e71315b8a1adfe8b6bb3f787181808e135836355b64bcb05f05fb3cea452ca9d8e72551746bf194e2b1eee636efd2525af97035b301cfda511096ee46523a855f822168027f3f3bfd709ffce295970e9ebd9c5550028cdef13d42c98a24eb9e0b52d2da09eae821d3bc7d0e35afda566a61ba484ba9f2974a40c5b2f8a5fb5624b61f585e2cfb895b62b7ce347e014752ea03a3b76ec2925634f0de758d6402fe63dd5d0ce18da3d103ca38127528de07689b026045338c3bb486eade0353f901b7a8403624d4df013f0fe71a8b69c2b41dfe754ddd8842bb31f534428ae6826a25fc7f7965e96609e3b27bd7b209846a42470b60e7ce94817a3131599932546c99aa2c99b34f5f48da1d6d7bc06bb0ff68db0e1bad6fd981955a7155610fe4de4ac74412a389c239c16131fe8628a4a61c127d53902495b859bc30758d3c551678ea7c2e616130474913e579481f50a8f3b24c962ff2f4c35e95546f238aa04766112f4893efd005a72b83ddbeff9959f17d838b26c9432d0e35dc8d74122a330f2e1ed94910ab5217dae8cfc410b09a4b49e743b1d40c963ee3287dd587254d3e175130a885235bd5650c533811a2cbcbab21aca3690db156ddbb402454bbc07e2c5d3e10656b1dd9581a030488400f63c5c85dfc802d44d8b9644955f65a23de11a04ce8a46653c691c385997d7", 0x1000, 0x9}, {&(0x7f0000001380)="10c23be5bcd3e9a3a8b1be8f50de9f4b06f5ccac6d67b8b60f3547347912bcee00149cbdc2f20edab91f5c76df5b7e772f52218b67a8bbb9e3d8bb007f71ca0c4d14a86be4bc58766129a8ea825f7c56559886b60ee5f123ab684bce4f6d23a0ad", 0x61, 0x1}, {&(0x7f0000001400)="a7dd1da4f4c676618a9b002c706d5ffb19e087d9b6c83f5543ed600d405c8fa58c8708f42f1ef8cbbac050be47ccc5fd67d13b344e120a91361bbf906213b0a496042cbb35c6682fdc", 0x49, 0x6}], 0x800815, &(0x7f0000001500)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x33]}}, {@size={'size', 0x3d, [0x72, 0x6c, 0x54, 0x38, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x30, 0x2c, 0x0]}}}}, {@size={'size', 0x3d, [0x78, 0x72]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x34, 0x78, 0x33]}}, {@size={'size', 0x3d, [0x6d, 0x21, 0x78]}}, {}, {@huge_within_size}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee01}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x2c}}, {@dont_measure}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_eq}, {@fsname={'fsname', 0x3d, 'reiserfs\x00'}}]}) move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', r2, &(0x7f0000001640)='./file0/../file0\x00', 0x44) [ 2602.592787] FAULT_INJECTION: forcing a failure. [ 2602.592787] name failslab, interval 1, probability 0, space 0, times 0 [ 2602.595281] CPU: 0 PID: 18546 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2602.596713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2602.598455] Call Trace: [ 2602.599009] dump_stack+0x107/0x167 [ 2602.599760] should_fail.cold+0x5/0xa [ 2602.600559] ? create_object.isra.0+0x3a/0xa20 [ 2602.601512] should_failslab+0x5/0x20 [ 2602.602309] kmem_cache_alloc+0x5b/0x360 [ 2602.603157] create_object.isra.0+0x3a/0xa20 [ 2602.604071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2602.605124] kmem_cache_alloc+0x159/0x360 [ 2602.605991] __alloc_file+0x21/0x320 [ 2602.606784] alloc_empty_file+0x6d/0x170 [ 2602.607629] path_openat+0xde/0x26d0 [ 2602.608415] ? path_lookupat+0x860/0x860 [ 2602.609254] ? perf_trace_lock+0xac/0x490 [ 2602.610110] ? SOFTIRQ_verbose+0x10/0x10 [ 2602.611261] ? lock_acquire+0x197/0x490 [ 2602.612246] ? __lockdep_reset_lock+0x180/0x180 [ 2602.613374] do_filp_open+0x17e/0x3d0 [ 2602.614343] ? may_open_dev+0xf0/0xf0 [ 2602.615269] ? __alloc_fd+0x2a5/0x620 [ 2602.616193] ? lock_downgrade+0x6d0/0x6d0 [ 2602.617200] ? rwlock_bug.part.0+0x90/0x90 [ 2602.618250] ? _raw_spin_unlock+0x1a/0x30 [ 2602.619245] ? __alloc_fd+0x2a5/0x620 [ 2602.620185] do_sys_openat2+0x171/0x420 [ 2602.621153] ? build_open_flags+0x690/0x690 [ 2602.622204] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2602.623372] ? wait_for_completion+0x270/0x270 [ 2602.624494] __x64_sys_openat+0x13f/0x1f0 [ 2602.625495] ? __ia32_sys_open+0x1c0/0x1c0 [ 2602.626541] ? ksys_write+0x1a9/0x260 [ 2602.627424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2602.628562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2602.629683] do_syscall_64+0x33/0x40 [ 2602.630501] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2602.631619] RIP: 0033:0x7f6eaa02cb19 [ 2602.632432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2602.636418] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2602.638069] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2602.639633] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2602.641180] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2602.642736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2602.644285] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:16:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x170, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) [ 2602.707556] EXT4-fs (sda): re-mounted. Opts: (null) [ 2602.784576] tmpfs: Bad value for 'size' [ 2602.802819] EXT4-fs (sda): re-mounted. Opts: (null) [ 2602.829500] tmpfs: Bad value for 'size' [ 2617.339405] kmemleak: 11 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:16:57 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 16) 03:16:57 executing program 6: write(0xffffffffffffffff, &(0x7f0000000240)="8497c5977c120127a9b0948c53b8bf3f8dc1b439d8d3d8c127c9e20d8200e631220dbd5d7f24afffae2876d34bdce4b99afb117dc09d786bc4c04d0bf050850060fe5c9562c0a832514d3697fea975b88b", 0x51) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x7, 0x6}) 03:16:57 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 6) [ 2624.975217] FAULT_INJECTION: forcing a failure. [ 2624.975217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2624.977663] CPU: 1 PID: 18578 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2624.979065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2624.980741] Call Trace: [ 2624.981291] dump_stack+0x107/0x167 [ 2624.982035] should_fail.cold+0x5/0xa [ 2624.982820] strncpy_from_user+0x34/0x470 [ 2624.983685] getname_flags.part.0+0x95/0x4f0 [ 2624.984592] getname+0x8e/0xd0 03:16:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x2000, &(0x7f0000000180)) 03:16:57 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 1) 03:16:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:16:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x170, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:16:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2624.985257] do_sys_openat2+0xf9/0x420 [ 2624.986209] ? build_open_flags+0x690/0x690 [ 2624.987109] ? find_held_lock+0x2c/0x110 [ 2624.987948] ? do_syscall_64+0x33/0x40 [ 2624.988756] __x64_sys_openat+0x13f/0x1f0 [ 2624.989598] ? __ia32_sys_open+0x1c0/0x1c0 [ 2624.990480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2624.991546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2624.992604] do_syscall_64+0x33/0x40 [ 2624.993366] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2624.993743] FAULT_INJECTION: forcing a failure. [ 2624.993743] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.994405] RIP: 0033:0x7f443c123a04 [ 2624.994424] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2624.994435] RSP: 002b:00007f44396e5ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2625.002679] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c123a04 [ 2625.004133] RDX: 0000000000000002 RSI: 00007f44396e6000 RDI: 00000000ffffff9c [ 2625.005580] RBP: 00007f44396e6000 R08: 0000000000000000 R09: ffffffffffffffff [ 2625.007046] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2625.008492] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 [ 2625.009980] CPU: 0 PID: 18585 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2625.011420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.013118] Call Trace: [ 2625.013660] dump_stack+0x107/0x167 [ 2625.014410] should_fail.cold+0x5/0xa [ 2625.015213] ? security_file_alloc+0x34/0x170 [ 2625.016138] should_failslab+0x5/0x20 [ 2625.016919] kmem_cache_alloc+0x5b/0x360 [ 2625.017768] security_file_alloc+0x34/0x170 [ 2625.018686] __alloc_file+0xb6/0x320 [ 2625.019446] alloc_empty_file+0x6d/0x170 [ 2625.020280] path_openat+0xde/0x26d0 [ 2625.021055] ? path_lookupat+0x860/0x860 [ 2625.021877] ? perf_trace_lock+0xac/0x490 [ 2625.022727] ? SOFTIRQ_verbose+0x10/0x10 [ 2625.023549] ? lock_acquire+0x197/0x490 [ 2625.024359] ? __lockdep_reset_lock+0x180/0x180 [ 2625.025311] do_filp_open+0x17e/0x3d0 [ 2625.026083] ? may_open_dev+0xf0/0xf0 [ 2625.026789] EXT4-fs (sda): re-mounted. Opts: (null) [ 2625.026906] ? __alloc_fd+0x2a5/0x620 [ 2625.028684] ? lock_downgrade+0x6d0/0x6d0 [ 2625.029545] ? rwlock_bug.part.0+0x90/0x90 [ 2625.030422] ? _raw_spin_unlock+0x1a/0x30 [ 2625.031292] ? __alloc_fd+0x2a5/0x620 [ 2625.032082] do_sys_openat2+0x171/0x420 [ 2625.032896] ? build_open_flags+0x690/0x690 [ 2625.033785] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2625.034787] ? wait_for_completion+0x270/0x270 [ 2625.035714] __x64_sys_openat+0x13f/0x1f0 [ 2625.036547] ? __ia32_sys_open+0x1c0/0x1c0 [ 2625.037398] ? ksys_write+0x1a9/0x260 [ 2625.038173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.039246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.040295] do_syscall_64+0x33/0x40 [ 2625.041045] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2625.042069] RIP: 0033:0x7f6eaa02cb19 [ 2625.042837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.046577] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2625.048123] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2625.049577] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2625.051043] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.052481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2625.053922] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2625.058646] FAULT_INJECTION: forcing a failure. [ 2625.058646] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.061113] CPU: 0 PID: 18584 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2625.062532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.064216] Call Trace: [ 2625.064756] dump_stack+0x107/0x167 [ 2625.065505] should_fail.cold+0x5/0xa [ 2625.066284] ? getname_flags.part.0+0x50/0x4f0 [ 2625.067243] should_failslab+0x5/0x20 [ 2625.068016] kmem_cache_alloc+0x5b/0x360 [ 2625.068856] getname_flags.part.0+0x50/0x4f0 [ 2625.069757] getname+0x8e/0xd0 [ 2625.070417] do_sys_openat2+0xf9/0x420 [ 2625.071224] ? build_open_flags+0x690/0x690 [ 2625.072095] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2625.073072] ? wait_for_completion+0x270/0x270 [ 2625.074009] __x64_sys_openat+0x13f/0x1f0 [ 2625.074852] ? __ia32_sys_open+0x1c0/0x1c0 [ 2625.075711] ? ksys_write+0x1a9/0x260 [ 2625.076490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.077564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.078642] do_syscall_64+0x33/0x40 [ 2625.079409] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2625.080458] RIP: 0033:0x7f2947304b19 [ 2625.081220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.084962] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2625.086520] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2625.087975] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2625.089423] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.090898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2625.092354] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:16:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x170, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:16:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) [ 2625.164803] EXT4-fs (sda): re-mounted. Opts: (null) 03:16:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:16:58 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 17) 03:16:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x17c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x0, 0x800}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:16:58 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 2) 03:16:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d240a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8397c24757bfd4667239ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:16:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2625.339130] FAULT_INJECTION: forcing a failure. [ 2625.339130] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.341557] CPU: 1 PID: 18709 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2625.343005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.344780] Call Trace: [ 2625.345348] dump_stack+0x107/0x167 [ 2625.346124] should_fail.cold+0x5/0xa [ 2625.346929] ? __alloc_file+0x21/0x320 [ 2625.347773] should_failslab+0x5/0x20 [ 2625.348570] kmem_cache_alloc+0x5b/0x360 [ 2625.349416] __alloc_file+0x21/0x320 [ 2625.350186] alloc_empty_file+0x6d/0x170 [ 2625.351039] path_openat+0xde/0x26d0 [ 2625.351823] ? path_lookupat+0x860/0x860 [ 2625.352653] ? perf_trace_lock+0xac/0x490 [ 2625.353494] ? SOFTIRQ_verbose+0x10/0x10 [ 2625.354318] ? lock_acquire+0x197/0x490 [ 2625.355158] ? __lockdep_reset_lock+0x180/0x180 [ 2625.355805] FAULT_INJECTION: forcing a failure. [ 2625.355805] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.356110] do_filp_open+0x17e/0x3d0 [ 2625.356135] ? may_open_dev+0xf0/0xf0 [ 2625.360074] ? __alloc_fd+0x2a5/0x620 [ 2625.360848] ? lock_downgrade+0x6d0/0x6d0 [ 2625.361751] ? rwlock_bug.part.0+0x90/0x90 [ 2625.362636] ? _raw_spin_unlock+0x1a/0x30 [ 2625.363489] ? __alloc_fd+0x2a5/0x620 [ 2625.364282] do_sys_openat2+0x171/0x420 [ 2625.365105] ? build_open_flags+0x690/0x690 [ 2625.365978] ? find_held_lock+0x2c/0x110 [ 2625.366829] ? do_syscall_64+0x33/0x40 [ 2625.367631] __x64_sys_openat+0x13f/0x1f0 [ 2625.368486] ? __ia32_sys_open+0x1c0/0x1c0 [ 2625.369357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.370435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.371519] do_syscall_64+0x33/0x40 [ 2625.372281] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2625.373323] RIP: 0033:0x7f443c123a04 [ 2625.374090] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2625.377845] RSP: 002b:00007f44396e5ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2625.379409] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c123a04 [ 2625.380864] RDX: 0000000000000002 RSI: 00007f44396e6000 RDI: 00000000ffffff9c [ 2625.382322] RBP: 00007f44396e6000 R08: 0000000000000000 R09: ffffffffffffffff [ 2625.383789] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2625.385336] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 [ 2625.386851] CPU: 0 PID: 18710 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2625.388379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.390082] Call Trace: [ 2625.390682] dump_stack+0x107/0x167 [ 2625.391430] should_fail.cold+0x5/0xa [ 2625.392213] ? create_object.isra.0+0x3a/0xa20 [ 2625.393154] should_failslab+0x5/0x20 [ 2625.393930] kmem_cache_alloc+0x5b/0x360 [ 2625.394783] create_object.isra.0+0x3a/0xa20 [ 2625.395684] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2625.396730] kmem_cache_alloc+0x159/0x360 [ 2625.397593] getname_flags.part.0+0x50/0x4f0 [ 2625.398523] getname+0x8e/0xd0 [ 2625.399189] do_sys_openat2+0xf9/0x420 [ 2625.399983] ? build_open_flags+0x690/0x690 [ 2625.400864] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2625.401852] ? wait_for_completion+0x270/0x270 [ 2625.402882] __x64_sys_openat+0x13f/0x1f0 [ 2625.403730] ? __ia32_sys_open+0x1c0/0x1c0 [ 2625.404591] ? ksys_write+0x1a9/0x260 [ 2625.405385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.406482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.407546] do_syscall_64+0x33/0x40 [ 2625.408311] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2625.409358] RIP: 0033:0x7f2947304b19 [ 2625.410119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.413869] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2625.415445] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2625.416889] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2625.418347] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.419813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2625.421263] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:16:58 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 7) 03:16:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x17c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) [ 2625.481916] EXT4-fs (sda): re-mounted. Opts: (null) 03:16:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2625.536802] FAULT_INJECTION: forcing a failure. [ 2625.536802] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.539202] CPU: 0 PID: 18719 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2625.540628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.542315] Call Trace: [ 2625.542872] dump_stack+0x107/0x167 [ 2625.543623] should_fail.cold+0x5/0xa [ 2625.544410] ? security_file_alloc+0x34/0x170 [ 2625.545327] should_failslab+0x5/0x20 [ 2625.546114] kmem_cache_alloc+0x5b/0x360 [ 2625.546974] security_file_alloc+0x34/0x170 [ 2625.547857] __alloc_file+0xb6/0x320 [ 2625.548620] alloc_empty_file+0x6d/0x170 [ 2625.549464] path_openat+0xde/0x26d0 [ 2625.550245] ? path_lookupat+0x860/0x860 [ 2625.551082] ? perf_trace_lock+0xac/0x490 [ 2625.551924] ? SOFTIRQ_verbose+0x10/0x10 [ 2625.552748] ? lock_acquire+0x197/0x490 [ 2625.553559] ? __lockdep_reset_lock+0x180/0x180 [ 2625.554532] do_filp_open+0x17e/0x3d0 [ 2625.555305] ? may_open_dev+0xf0/0xf0 [ 2625.556095] ? __alloc_fd+0x2a5/0x620 [ 2625.556869] ? lock_downgrade+0x6d0/0x6d0 [ 2625.557736] ? rwlock_bug.part.0+0x90/0x90 [ 2625.558627] ? _raw_spin_unlock+0x1a/0x30 [ 2625.559474] ? __alloc_fd+0x2a5/0x620 [ 2625.560272] do_sys_openat2+0x171/0x420 [ 2625.561131] ? build_open_flags+0x690/0x690 [ 2625.562005] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2625.562999] ? wait_for_completion+0x270/0x270 [ 2625.563947] __x64_sys_openat+0x13f/0x1f0 [ 2625.564789] ? __ia32_sys_open+0x1c0/0x1c0 [ 2625.565655] ? ksys_write+0x1a9/0x260 [ 2625.566437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2625.567532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2625.568595] do_syscall_64+0x33/0x40 [ 2625.569364] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2625.570403] RIP: 0033:0x7f6eaa02cb19 [ 2625.571170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.574928] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2625.576470] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2625.577916] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2625.579382] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.580828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2625.582274] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2625.609611] EXT4-fs (sda): re-mounted. Opts: (null) [ 2640.153917] kmemleak: 9 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:17:20 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 8) 03:17:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x4000, &(0x7f0000000180)) 03:17:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:17:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:17:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x174, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd27, 0x70bd28, 0x70bd25, 0x12422000, [0x100]}}, @mark={0xc}]}, 0x174}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) [ 2647.902801] FAULT_INJECTION: forcing a failure. [ 2647.902801] name failslab, interval 1, probability 0, space 0, times 0 [ 2647.905541] CPU: 0 PID: 18734 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2647.906921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2647.908551] Call Trace: [ 2647.909085] dump_stack+0x107/0x167 [ 2647.909827] should_fail.cold+0x5/0xa [ 2647.910591] ? rfkill_fop_open+0x52/0x680 [ 2647.910978] FAULT_INJECTION: forcing a failure. [ 2647.910978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2647.911433] should_failslab+0x5/0x20 [ 2647.911481] kmem_cache_alloc_trace+0x55/0x360 [ 2647.915374] ? rfkill_init_sw_state+0x150/0x150 [ 2647.916319] rfkill_fop_open+0x52/0x680 [ 2647.917115] ? kobject_get_unless_zero+0x15a/0x1e0 [ 2647.918114] ? rfkill_init_sw_state+0x150/0x150 [ 2647.919055] misc_open+0x375/0x4a0 [ 2647.919775] ? misc_devnode+0x130/0x130 [ 2647.920563] chrdev_open+0x268/0x6e0 [ 2647.921326] ? cdev_device_add+0x220/0x220 [ 2647.922179] ? security_file_open+0x20b/0x500 [ 2647.923112] do_dentry_open+0x4b7/0x1090 [ 2647.923938] ? cdev_device_add+0x220/0x220 [ 2647.924804] ? may_open+0x1e4/0x400 [ 2647.925556] path_openat+0x193d/0x26d0 [ 2647.926365] ? path_lookupat+0x860/0x860 [ 2647.927203] ? perf_trace_lock+0xac/0x490 [ 2647.928038] ? SOFTIRQ_verbose+0x10/0x10 [ 2647.928861] ? lock_acquire+0x197/0x490 [ 2647.929671] ? __lockdep_reset_lock+0x180/0x180 [ 2647.930628] do_filp_open+0x17e/0x3d0 [ 2647.931417] ? may_open_dev+0xf0/0xf0 [ 2647.932215] ? rwlock_bug.part.0+0x90/0x90 [ 2647.933089] ? _raw_spin_unlock+0x1a/0x30 [ 2647.933929] ? __alloc_fd+0x2a5/0x620 [ 2647.934727] do_sys_openat2+0x171/0x420 [ 2647.935546] ? build_open_flags+0x690/0x690 [ 2647.936413] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2647.937408] ? wait_for_completion+0x270/0x270 [ 2647.938339] __x64_sys_openat+0x13f/0x1f0 [ 2647.939198] ? __ia32_sys_open+0x1c0/0x1c0 [ 2647.940049] ? ksys_write+0x1a9/0x260 [ 2647.940845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2647.941901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2647.942967] do_syscall_64+0x33/0x40 [ 2647.943721] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2647.944757] RIP: 0033:0x7f6eaa02cb19 [ 2647.945532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2647.949280] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2647.950836] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2647.952281] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2647.953720] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2647.955163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2647.956601] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2647.958071] CPU: 1 PID: 18738 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2647.959489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2647.961160] Call Trace: [ 2647.961693] dump_stack+0x107/0x167 [ 2647.962439] should_fail.cold+0x5/0xa [ 2647.963093] FAULT_INJECTION: forcing a failure. [ 2647.963093] name failslab, interval 1, probability 0, space 0, times 0 [ 2647.963230] strncpy_from_user+0x34/0x470 [ 2647.966277] getname_flags.part.0+0x95/0x4f0 [ 2647.967180] getname+0x8e/0xd0 [ 2647.967835] do_sys_openat2+0xf9/0x420 [ 2647.968609] ? build_open_flags+0x690/0x690 [ 2647.969479] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2647.970446] ? wait_for_completion+0x270/0x270 [ 2647.971396] __x64_sys_openat+0x13f/0x1f0 [ 2647.972221] ? __ia32_sys_open+0x1c0/0x1c0 [ 2647.973089] ? ksys_write+0x1a9/0x260 [ 2647.973855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2647.974927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2647.975954] do_syscall_64+0x33/0x40 [ 2647.976713] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2647.977731] RIP: 0033:0x7f2947304b19 [ 2647.978479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2647.982119] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2647.983638] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2647.985071] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2647.986499] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2647.987932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2647.989354] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2647.990811] CPU: 0 PID: 18739 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2647.992213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2647.993872] Call Trace: [ 2647.994402] dump_stack+0x107/0x167 [ 2647.995165] should_fail.cold+0x5/0xa [ 2647.995952] ? create_object.isra.0+0x3a/0xa20 [ 2647.996895] should_failslab+0x5/0x20 [ 2647.997672] kmem_cache_alloc+0x5b/0x360 [ 2647.998527] create_object.isra.0+0x3a/0xa20 [ 2647.999454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2648.000503] kmem_cache_alloc+0x159/0x360 [ 2648.001380] __alloc_file+0x21/0x320 [ 2648.002135] alloc_empty_file+0x6d/0x170 [ 2648.002991] path_openat+0xde/0x26d0 [ 2648.003800] ? path_lookupat+0x860/0x860 [ 2648.004652] ? perf_trace_lock+0xac/0x490 [ 2648.005527] ? SOFTIRQ_verbose+0x10/0x10 [ 2648.006370] ? lock_acquire+0x197/0x490 [ 2648.007216] ? __lockdep_reset_lock+0x180/0x180 [ 2648.008210] do_filp_open+0x17e/0x3d0 [ 2648.009001] ? may_open_dev+0xf0/0xf0 [ 2648.009799] ? __alloc_fd+0x2a5/0x620 [ 2648.010573] ? lock_downgrade+0x6d0/0x6d0 [ 2648.011430] ? rwlock_bug.part.0+0x90/0x90 [ 2648.012336] ? _raw_spin_unlock+0x1a/0x30 [ 2648.013198] ? __alloc_fd+0x2a5/0x620 [ 2648.014015] do_sys_openat2+0x171/0x420 [ 2648.014858] ? build_open_flags+0x690/0x690 [ 2648.015749] ? find_held_lock+0x2c/0x110 [ 2648.016572] ? do_syscall_64+0x33/0x40 [ 2648.017406] __x64_sys_openat+0x13f/0x1f0 [ 2648.018241] ? __ia32_sys_open+0x1c0/0x1c0 [ 2648.019178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.020300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.021408] do_syscall_64+0x33/0x40 [ 2648.022212] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2648.023335] RIP: 0033:0x7f443c123a04 [ 2648.024137] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2648.028040] RSP: 002b:00007f44396e5ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2648.029684] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c123a04 [ 2648.031224] RDX: 0000000000000002 RSI: 00007f44396e6000 RDI: 00000000ffffff9c [ 2648.032745] RBP: 00007f44396e6000 R08: 0000000000000000 R09: ffffffffffffffff [ 2648.034183] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2648.035638] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 03:17:20 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 18) 03:17:20 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 3) 03:17:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r6}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000047340)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x52, "716c5fee927457"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000052180)={{0x0, 0x9, 0x0, 0x35, 0x0, 0x7ff, 0x5, 0xd00c, 0x5, 0x7, 0x8e, 0x401, 0x10000, 0x1ff, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000053180)={{0x0, 0x4, 0x0, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1, 0x7, 0x3ff, 0x6, 0x7, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054180)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xc7, "99c52e73e7f205"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055180)={0xfd21, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "5b9066163ed1ec"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000056180)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r9}, {}, {}, {r10, r11}, {0x0, r12}], 0x3, "7a6788540f3b6a"}) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e91a17d5eb7331dec8308e231bad517d3df39ddeca37092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e) execveat(r0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000480)=[&(0x7f0000000180)='reiserfs\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f0000000340)='reiserfs\x00', &(0x7f0000000380)='3\\#\x00', &(0x7f00000003c0)='reiserfs\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00'], &(0x7f0000000540)=[&(0x7f00000004c0)='@^//T./\x00', &(0x7f0000000500)='\x00'], 0x1000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:17:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x154, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x32}, {@in=@remote, 0x4d3, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0xffffffffffffffff, 0x4, 0x3f, 0x86bd, 0x2, 0xd9, 0xff}, {0x7, 0xffffffff, 0xe6f, 0x9}, {0x6, 0x750, 0x6}, 0x70bd2a, 0x3402, 0x2, 0x4, 0x1, 0x30}}, @mark={0xc}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:17:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:17:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:17:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x70, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @mark={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) [ 2648.207500] EXT4-fs (sda): re-mounted. Opts: (null) 03:17:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8004) 03:17:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:17:21 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 4) 03:17:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:17:21 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 9) [ 2648.301405] EXT4-fs (sda): re-mounted. Opts: (null) [ 2648.363516] FAULT_INJECTION: forcing a failure. [ 2648.363516] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.365950] CPU: 1 PID: 18868 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2648.367380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.369085] Call Trace: [ 2648.369649] dump_stack+0x107/0x167 [ 2648.370417] should_fail.cold+0x5/0xa [ 2648.371230] ? __alloc_file+0x21/0x320 [ 2648.372017] should_failslab+0x5/0x20 [ 2648.372777] kmem_cache_alloc+0x5b/0x360 [ 2648.373620] __alloc_file+0x21/0x320 [ 2648.374390] alloc_empty_file+0x6d/0x170 [ 2648.375230] path_openat+0xde/0x26d0 [ 2648.376011] ? path_lookupat+0x860/0x860 [ 2648.376830] ? perf_trace_lock+0xac/0x490 [ 2648.377686] ? SOFTIRQ_verbose+0x10/0x10 [ 2648.378500] ? lock_acquire+0x197/0x490 [ 2648.379334] ? __lockdep_reset_lock+0x180/0x180 [ 2648.380286] do_filp_open+0x17e/0x3d0 [ 2648.381051] ? may_open_dev+0xf0/0xf0 [ 2648.381826] ? __alloc_fd+0x2a5/0x620 [ 2648.382601] ? lock_downgrade+0x6d0/0x6d0 [ 2648.383456] ? rwlock_bug.part.0+0x90/0x90 [ 2648.384358] ? _raw_spin_unlock+0x1a/0x30 [ 2648.385216] ? __alloc_fd+0x2a5/0x620 [ 2648.386013] do_sys_openat2+0x171/0x420 [ 2648.386847] ? build_open_flags+0x690/0x690 [ 2648.387722] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2648.388716] ? wait_for_completion+0x270/0x270 [ 2648.389671] __x64_sys_openat+0x13f/0x1f0 [ 2648.390515] ? __ia32_sys_open+0x1c0/0x1c0 [ 2648.391383] ? ksys_write+0x1a9/0x260 [ 2648.392165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.393243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.394305] do_syscall_64+0x33/0x40 [ 2648.395078] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2648.396130] RIP: 0033:0x7f2947304b19 [ 2648.396894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.400643] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2648.402170] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2648.403607] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2648.405034] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.406467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2648.407910] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2648.442223] FAULT_INJECTION: forcing a failure. [ 2648.442223] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.444654] CPU: 1 PID: 18872 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2648.446053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.447726] Call Trace: [ 2648.448263] dump_stack+0x107/0x167 [ 2648.449004] should_fail.cold+0x5/0xa [ 2648.449772] ? create_object.isra.0+0x3a/0xa20 [ 2648.450696] should_failslab+0x5/0x20 [ 2648.451482] kmem_cache_alloc+0x5b/0x360 [ 2648.452309] create_object.isra.0+0x3a/0xa20 [ 2648.453193] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2648.454219] kmem_cache_alloc_trace+0x151/0x360 [ 2648.455171] ? rfkill_init_sw_state+0x150/0x150 [ 2648.456113] rfkill_fop_open+0x52/0x680 [ 2648.456942] ? kobject_get_unless_zero+0x15a/0x1e0 [ 2648.457933] ? rfkill_init_sw_state+0x150/0x150 [ 2648.458916] misc_open+0x375/0x4a0 [ 2648.459632] ? misc_devnode+0x130/0x130 [ 2648.460460] chrdev_open+0x268/0x6e0 [ 2648.461211] ? cdev_device_add+0x220/0x220 [ 2648.462093] ? security_file_open+0x20b/0x500 [ 2648.463021] do_dentry_open+0x4b7/0x1090 [ 2648.463843] ? cdev_device_add+0x220/0x220 [ 2648.464696] ? may_open+0x1e4/0x400 [ 2648.465435] path_openat+0x193d/0x26d0 [ 2648.466236] ? path_lookupat+0x860/0x860 [ 2648.467066] ? perf_trace_lock+0xac/0x490 [ 2648.467898] ? SOFTIRQ_verbose+0x10/0x10 [ 2648.468713] ? lock_acquire+0x197/0x490 [ 2648.469515] ? __lockdep_reset_lock+0x180/0x180 [ 2648.470456] do_filp_open+0x17e/0x3d0 [ 2648.471234] ? may_open_dev+0xf0/0xf0 [ 2648.472020] ? rwlock_bug.part.0+0x90/0x90 [ 2648.472881] ? _raw_spin_unlock+0x1a/0x30 [ 2648.473711] ? __alloc_fd+0x2a5/0x620 [ 2648.474497] do_sys_openat2+0x171/0x420 [ 2648.475306] ? build_open_flags+0x690/0x690 [ 2648.476171] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2648.477141] ? wait_for_completion+0x270/0x270 [ 2648.478068] __x64_sys_openat+0x13f/0x1f0 [ 2648.478917] ? __ia32_sys_open+0x1c0/0x1c0 [ 2648.479763] ? ksys_write+0x1a9/0x260 [ 2648.480538] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2648.481589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2648.482627] do_syscall_64+0x33/0x40 [ 2648.483387] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2648.484413] RIP: 0033:0x7f6eaa02cb19 [ 2648.485165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.488842] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2648.490366] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2648.491810] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2648.493235] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.494665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2648.496105] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2662.462963] kmemleak: 7 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2665.792298] Bluetooth: hci1: command 0x0406 tx timeout 03:17:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2c) ptrace$getsig(0x420a, 0x0, 0x0, &(0x7f0000000180)) 03:17:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x200000, &(0x7f0000000180)) 03:17:44 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 10) 03:17:44 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 19) 03:17:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x8004) 03:17:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x6, 0x6, 0x2, 0x2, 0x0, 0x101, 0x80, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x3}, 0x80, 0x8000, 0x7, 0x0, 0x3, 0xfffff000, 0x1c00, 0x0, 0xffffffff, 0x0, 0x7}, r0, 0xe, r1, 0xb) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) r2 = creat(0x0, 0x0) r3 = socket(0x1d, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'ipvlan0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="33000000910000002e2f66696c6530000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d3345f6a6453d00"/136]}) fallocate(r2, 0x0, 0x0, 0x8800000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat(r2, &(0x7f0000000040)='./file0\x00', 0x511480, 0x2) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:17:44 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 5) 03:17:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2671.001754] FAULT_INJECTION: forcing a failure. [ 2671.001754] name failslab, interval 1, probability 0, space 0, times 0 [ 2671.004228] CPU: 1 PID: 18881 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2671.005656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2671.007372] Call Trace: [ 2671.007930] dump_stack+0x107/0x167 [ 2671.008683] should_fail.cold+0x5/0xa [ 2671.009471] ? create_object.isra.0+0x3a/0xa20 [ 2671.010417] should_failslab+0x5/0x20 [ 2671.011220] kmem_cache_alloc+0x5b/0x360 [ 2671.012067] create_object.isra.0+0x3a/0xa20 [ 2671.012967] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2671.014004] kmem_cache_alloc+0x159/0x360 [ 2671.014869] __alloc_file+0x21/0x320 [ 2671.015649] alloc_empty_file+0x6d/0x170 [ 2671.016495] path_openat+0xde/0x26d0 [ 2671.017287] ? path_lookupat+0x860/0x860 [ 2671.018121] ? perf_trace_lock+0xac/0x490 [ 2671.018977] ? SOFTIRQ_verbose+0x10/0x10 [ 2671.019816] ? lock_acquire+0x197/0x490 [ 2671.020628] ? __lockdep_reset_lock+0x180/0x180 [ 2671.021596] do_filp_open+0x17e/0x3d0 [ 2671.022377] ? may_open_dev+0xf0/0xf0 [ 2671.023183] ? __alloc_fd+0x2a5/0x620 [ 2671.023964] ? lock_downgrade+0x6d0/0x6d0 [ 2671.024818] ? rwlock_bug.part.0+0x90/0x90 [ 2671.025696] ? _raw_spin_unlock+0x1a/0x30 [ 2671.026545] ? __alloc_fd+0x2a5/0x620 [ 2671.027347] do_sys_openat2+0x171/0x420 [ 2671.028162] ? build_open_flags+0x690/0x690 [ 2671.029040] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2671.029519] FAULT_INJECTION: forcing a failure. [ 2671.029519] name failslab, interval 1, probability 0, space 0, times 0 [ 2671.030030] ? wait_for_completion+0x270/0x270 [ 2671.030062] __x64_sys_openat+0x13f/0x1f0 [ 2671.030082] ? __ia32_sys_open+0x1c0/0x1c0 [ 2671.030099] ? ksys_write+0x1a9/0x260 [ 2671.030128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2671.030150] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2671.038088] do_syscall_64+0x33/0x40 [ 2671.038851] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2671.039911] RIP: 0033:0x7f2947304b19 [ 2671.040672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2671.044422] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2671.045973] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2671.047436] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2671.048887] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2671.050345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2671.051813] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2671.053311] CPU: 0 PID: 18889 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2671.054750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2671.056470] Call Trace: [ 2671.057023] dump_stack+0x107/0x167 [ 2671.057780] should_fail.cold+0x5/0xa [ 2671.058571] ? rfkill_fop_open+0x367/0x680 [ 2671.059469] should_failslab+0x5/0x20 [ 2671.060263] kmem_cache_alloc_trace+0x55/0x360 [ 2671.061215] rfkill_fop_open+0x367/0x680 [ 2671.062063] ? rfkill_init_sw_state+0x150/0x150 [ 2671.063021] misc_open+0x375/0x4a0 [ 2671.063775] ? misc_devnode+0x130/0x130 [ 2671.064592] chrdev_open+0x268/0x6e0 [ 2671.065363] ? cdev_device_add+0x220/0x220 [ 2671.066245] ? security_file_open+0x20b/0x500 [ 2671.067181] do_dentry_open+0x4b7/0x1090 [ 2671.068024] ? cdev_device_add+0x220/0x220 [ 2671.068907] ? may_open+0x1e4/0x400 [ 2671.069664] path_openat+0x193d/0x26d0 [ 2671.070489] ? path_lookupat+0x860/0x860 [ 2671.071335] ? perf_trace_lock+0xac/0x490 [ 2671.072204] ? SOFTIRQ_verbose+0x10/0x10 [ 2671.073043] ? lock_acquire+0x197/0x490 [ 2671.073865] ? __lockdep_reset_lock+0x180/0x180 [ 2671.074835] do_filp_open+0x17e/0x3d0 [ 2671.075647] ? may_open_dev+0xf0/0xf0 [ 2671.076458] ? rwlock_bug.part.0+0x90/0x90 [ 2671.077348] ? _raw_spin_unlock+0x1a/0x30 [ 2671.078202] ? __alloc_fd+0x2a5/0x620 [ 2671.079005] do_sys_openat2+0x171/0x420 [ 2671.079833] ? build_open_flags+0x690/0x690 [ 2671.080726] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2671.081730] ? wait_for_completion+0x270/0x270 [ 2671.082686] __x64_sys_openat+0x13f/0x1f0 [ 2671.083560] ? __ia32_sys_open+0x1c0/0x1c0 [ 2671.084442] ? ksys_write+0x1a9/0x260 [ 2671.085249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2671.086344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2671.087421] do_syscall_64+0x33/0x40 [ 2671.088190] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2671.089356] RIP: 0033:0x7f6eaa02cb19 [ 2671.089375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2671.089385] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2671.089407] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2671.089419] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2671.089430] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2671.089450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2671.101392] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2671.106762] FAULT_INJECTION: forcing a failure. [ 2671.106762] name failslab, interval 1, probability 0, space 0, times 0 [ 2671.109088] CPU: 1 PID: 18888 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2671.110497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2671.112205] Call Trace: [ 2671.112752] dump_stack+0x107/0x167 [ 2671.113502] should_fail.cold+0x5/0xa [ 2671.114293] ? security_file_alloc+0x34/0x170 [ 2671.115222] should_failslab+0x5/0x20 [ 2671.116001] kmem_cache_alloc+0x5b/0x360 [ 2671.116840] security_file_alloc+0x34/0x170 [ 2671.117732] __alloc_file+0xb6/0x320 [ 2671.118500] alloc_empty_file+0x6d/0x170 [ 2671.119342] path_openat+0xde/0x26d0 [ 2671.120122] ? path_lookupat+0x860/0x860 [ 2671.120952] ? perf_trace_lock+0xac/0x490 [ 2671.121799] ? SOFTIRQ_verbose+0x10/0x10 [ 2671.122624] ? lock_acquire+0x197/0x490 [ 2671.123461] ? __lockdep_reset_lock+0x180/0x180 [ 2671.124423] do_filp_open+0x17e/0x3d0 [ 2671.125200] ? may_open_dev+0xf0/0xf0 [ 2671.125982] ? __alloc_fd+0x2a5/0x620 [ 2671.126759] ? lock_downgrade+0x6d0/0x6d0 [ 2671.127623] ? rwlock_bug.part.0+0x90/0x90 [ 2671.128504] ? _raw_spin_unlock+0x1a/0x30 [ 2671.129350] ? __alloc_fd+0x2a5/0x620 [ 2671.130144] do_sys_openat2+0x171/0x420 [ 2671.130958] ? build_open_flags+0x690/0x690 [ 2671.131840] ? find_held_lock+0x2c/0x110 [ 2671.132678] ? do_syscall_64+0x33/0x40 [ 2671.133492] __x64_sys_openat+0x13f/0x1f0 [ 2671.134336] ? __ia32_sys_open+0x1c0/0x1c0 [ 2671.135227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2671.136295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2671.137346] do_syscall_64+0x33/0x40 [ 2671.138107] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2671.139156] RIP: 0033:0x7f443c123a04 [ 2671.139913] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2671.143658] RSP: 002b:00007f44396e5ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2671.145206] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c123a04 [ 2671.146661] RDX: 0000000000000002 RSI: 00007f44396e6000 RDI: 00000000ffffff9c [ 2671.148120] RBP: 00007f44396e6000 R08: 0000000000000000 R09: ffffffffffffffff [ 2671.149566] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2671.151015] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 03:17:44 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 11) [ 2671.176746] EXT4-fs (sda): re-mounted. Opts: (null) 03:17:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 2671.236956] FAULT_INJECTION: forcing a failure. [ 2671.236956] name failslab, interval 1, probability 0, space 0, times 0 [ 2671.240012] CPU: 0 PID: 18910 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2671.241460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2671.243194] Call Trace: [ 2671.243751] dump_stack+0x107/0x167 [ 2671.244526] should_fail.cold+0x5/0xa [ 2671.245325] ? create_object.isra.0+0x3a/0xa20 [ 2671.246295] should_failslab+0x5/0x20 [ 2671.247129] kmem_cache_alloc+0x5b/0x360 [ 2671.247964] ? mark_held_locks+0x9e/0xe0 [ 2671.248807] create_object.isra.0+0x3a/0xa20 [ 2671.249706] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2671.250749] kmem_cache_alloc_trace+0x151/0x360 [ 2671.251719] rfkill_fop_open+0x367/0x680 [ 2671.252562] ? rfkill_init_sw_state+0x150/0x150 [ 2671.253527] misc_open+0x375/0x4a0 [ 2671.254257] ? misc_devnode+0x130/0x130 [ 2671.255072] chrdev_open+0x268/0x6e0 [ 2671.255836] ? cdev_device_add+0x220/0x220 [ 2671.256710] ? security_file_open+0x20b/0x500 [ 2671.257633] do_dentry_open+0x4b7/0x1090 [ 2671.258466] ? cdev_device_add+0x220/0x220 [ 2671.259351] ? may_open+0x1e4/0x400 [ 2671.260115] path_openat+0x193d/0x26d0 [ 2671.260932] ? path_lookupat+0x860/0x860 [ 2671.261762] ? perf_trace_lock+0xac/0x490 [ 2671.262607] ? SOFTIRQ_verbose+0x10/0x10 [ 2671.263439] ? lock_acquire+0x197/0x490 [ 2671.264258] ? __lockdep_reset_lock+0x180/0x180 [ 2671.265216] do_filp_open+0x17e/0x3d0 [ 2671.265992] ? may_open_dev+0xf0/0xf0 [ 2671.266794] ? rwlock_bug.part.0+0x90/0x90 [ 2671.267688] ? _raw_spin_unlock+0x1a/0x30 [ 2671.268537] ? __alloc_fd+0x2a5/0x620 [ 2671.269335] do_sys_openat2+0x171/0x420 [ 2671.270150] ? build_open_flags+0x690/0x690 [ 2671.271045] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2671.272037] ? wait_for_completion+0x270/0x270 [ 2671.272984] __x64_sys_openat+0x13f/0x1f0 [ 2671.273834] ? __ia32_sys_open+0x1c0/0x1c0 [ 2671.274696] ? ksys_write+0x1a9/0x260 [ 2671.275494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2671.276568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2671.277627] do_syscall_64+0x33/0x40 [ 2671.278390] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2671.279456] RIP: 0033:0x7f6eaa02cb19 [ 2671.280218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2671.283977] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2671.285534] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2671.286992] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2671.288474] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2671.289933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2671.291391] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2671.325791] EXT4-fs (sda): re-mounted. Opts: (null) [ 2684.523071] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:18:06 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 20) 03:18:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x40000000, &(0x7f0000000180)) 03:18:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)={'0000000000000000000000000000000', 0x31}, 0x20, 0x2) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d96664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa0000000000000000"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x0, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:18:06 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 6) 03:18:06 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 12) 03:18:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 1) 03:18:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, 0x0) [ 2693.527523] FAULT_INJECTION: forcing a failure. [ 2693.527523] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.529905] CPU: 1 PID: 19011 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2693.531305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.532992] Call Trace: [ 2693.533541] dump_stack+0x107/0x167 [ 2693.534286] should_fail.cold+0x5/0xa [ 2693.535063] ? rfkill_fop_open+0x367/0x680 [ 2693.535953] ? rfkill_fop_open+0x367/0x680 [ 2693.536817] should_failslab+0x5/0x20 [ 2693.537596] kmem_cache_alloc_trace+0x55/0x360 [ 2693.538527] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2693.539576] rfkill_fop_open+0x367/0x680 [ 2693.540420] ? rfkill_init_sw_state+0x150/0x150 [ 2693.541374] misc_open+0x375/0x4a0 [ 2693.542098] ? misc_devnode+0x130/0x130 [ 2693.542909] chrdev_open+0x268/0x6e0 [ 2693.543679] ? cdev_device_add+0x220/0x220 [ 2693.544557] ? security_file_open+0x20b/0x500 [ 2693.545467] do_dentry_open+0x4b7/0x1090 [ 2693.546299] ? cdev_device_add+0x220/0x220 [ 2693.547165] ? may_open+0x1e4/0x400 [ 2693.547933] path_openat+0x193d/0x26d0 [ 2693.548748] ? path_lookupat+0x860/0x860 [ 2693.549578] ? perf_trace_lock+0xac/0x490 [ 2693.550424] ? SOFTIRQ_verbose+0x10/0x10 [ 2693.551252] ? lock_acquire+0x197/0x490 [ 2693.552072] ? __lockdep_reset_lock+0x180/0x180 [ 2693.553031] do_filp_open+0x17e/0x3d0 [ 2693.553805] ? may_open_dev+0xf0/0xf0 [ 2693.554603] ? rwlock_bug.part.0+0x90/0x90 [ 2693.555497] ? _raw_spin_unlock+0x1a/0x30 [ 2693.556351] ? __alloc_fd+0x2a5/0x620 [ 2693.557148] do_sys_openat2+0x171/0x420 [ 2693.557969] ? __switch_to+0x572/0xff0 [ 2693.558766] ? __switch_to_asm+0x3a/0x60 [ 2693.559596] ? build_open_flags+0x690/0x690 [ 2693.560472] ? __schedule+0x850/0x1e90 [ 2693.561280] __x64_sys_openat+0x13f/0x1f0 [ 2693.562122] ? __ia32_sys_open+0x1c0/0x1c0 [ 2693.562990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.564074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.565135] do_syscall_64+0x33/0x40 [ 2693.565895] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2693.566939] RIP: 0033:0x7f6eaa02cb19 [ 2693.567721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.571470] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2693.573023] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2693.574480] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2693.575282] FAULT_INJECTION: forcing a failure. [ 2693.575282] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.575929] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2693.575947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2693.581045] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2693.582532] CPU: 0 PID: 19022 Comm: syz-executor.3 Not tainted 5.10.161 #1 03:18:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2c) ptrace$getsig(0x420a, 0x0, 0x0, &(0x7f0000000180)) [ 2693.583955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.584847] FAULT_INJECTION: forcing a failure. [ 2693.584847] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.585709] Call Trace: [ 2693.585733] dump_stack+0x107/0x167 [ 2693.585756] should_fail.cold+0x5/0xa [ 2693.585777] ? create_object.isra.0+0x3a/0xa20 [ 2693.590910] should_failslab+0x5/0x20 [ 2693.591693] kmem_cache_alloc+0x5b/0x360 [ 2693.592521] ? percpu_ref_put_many.constprop.0+0x4e/0x100 [ 2693.593637] create_object.isra.0+0x3a/0xa20 [ 2693.594529] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2693.595572] kmem_cache_alloc+0x159/0x360 [ 2693.596427] security_file_alloc+0x34/0x170 [ 2693.597303] __alloc_file+0xb6/0x320 [ 2693.598070] alloc_empty_file+0x6d/0x170 [ 2693.598906] path_openat+0xde/0x26d0 [ 2693.599701] ? path_lookupat+0x860/0x860 [ 2693.600525] ? perf_trace_lock+0xac/0x490 [ 2693.601366] ? SOFTIRQ_verbose+0x10/0x10 [ 2693.602189] ? lock_acquire+0x197/0x490 [ 2693.603000] ? __lockdep_reset_lock+0x180/0x180 [ 2693.603966] do_filp_open+0x17e/0x3d0 [ 2693.604735] ? may_open_dev+0xf0/0xf0 [ 2693.605517] ? __alloc_fd+0x2a5/0x620 [ 2693.606288] ? lock_downgrade+0x6d0/0x6d0 [ 2693.607131] ? rwlock_bug.part.0+0x90/0x90 [ 2693.608013] ? _raw_spin_unlock+0x1a/0x30 [ 2693.608846] ? __alloc_fd+0x2a5/0x620 [ 2693.609629] do_sys_openat2+0x171/0x420 [ 2693.610433] ? build_open_flags+0x690/0x690 [ 2693.611300] ? find_held_lock+0x2c/0x110 [ 2693.612132] ? do_syscall_64+0x33/0x40 [ 2693.612926] __x64_sys_openat+0x13f/0x1f0 [ 2693.613764] ? __ia32_sys_open+0x1c0/0x1c0 [ 2693.614627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.615701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.616746] do_syscall_64+0x33/0x40 [ 2693.617498] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2693.618534] RIP: 0033:0x7f443c123a04 [ 2693.619283] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2693.623001] RSP: 002b:00007f44396e5ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2693.624546] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c123a04 [ 2693.625980] RDX: 0000000000000002 RSI: 00007f44396e6000 RDI: 00000000ffffff9c [ 2693.627439] RBP: 00007f44396e6000 R08: 0000000000000000 R09: ffffffffffffffff [ 2693.628877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2693.630314] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 [ 2693.631793] CPU: 1 PID: 19012 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2693.633204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.635013] Call Trace: [ 2693.635567] dump_stack+0x107/0x167 [ 2693.636332] should_fail.cold+0x5/0xa [ 2693.637106] ? security_file_alloc+0x34/0x170 [ 2693.638015] should_failslab+0x5/0x20 [ 2693.638790] kmem_cache_alloc+0x5b/0x360 [ 2693.639673] security_file_alloc+0x34/0x170 [ 2693.640562] __alloc_file+0xb6/0x320 [ 2693.641319] alloc_empty_file+0x6d/0x170 [ 2693.642151] path_openat+0xde/0x26d0 [ 2693.642950] ? path_lookupat+0x860/0x860 [ 2693.643785] ? perf_trace_lock+0xac/0x490 [ 2693.644651] ? SOFTIRQ_verbose+0x10/0x10 [ 2693.645471] ? lock_acquire+0x197/0x490 [ 2693.646274] ? __lockdep_reset_lock+0x180/0x180 [ 2693.647219] do_filp_open+0x17e/0x3d0 [ 2693.647999] ? may_open_dev+0xf0/0xf0 [ 2693.648770] ? __alloc_fd+0x2a5/0x620 [ 2693.649541] ? lock_downgrade+0x6d0/0x6d0 [ 2693.650384] ? rwlock_bug.part.0+0x90/0x90 [ 2693.651247] ? _raw_spin_unlock+0x1a/0x30 [ 2693.652112] ? __alloc_fd+0x2a5/0x620 [ 2693.652900] do_sys_openat2+0x171/0x420 [ 2693.653700] ? build_open_flags+0x690/0x690 [ 2693.654568] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2693.655560] ? wait_for_completion+0x270/0x270 [ 2693.656493] __x64_sys_openat+0x13f/0x1f0 [ 2693.657330] ? __ia32_sys_open+0x1c0/0x1c0 [ 2693.658181] ? ksys_write+0x1a9/0x260 [ 2693.658959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.659755] EXT4-fs (sda): re-mounted. Opts: (null) [ 2693.660024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.660049] do_syscall_64+0x33/0x40 [ 2693.660069] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2693.660081] RIP: 0033:0x7f2947304b19 [ 2693.660104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.668305] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2693.669858] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2693.671309] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2693.672754] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2693.674193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2693.675639] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:18:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2c) ptrace$getsig(0x420a, 0x0, 0x0, &(0x7f0000000180)) [ 2693.694325] FAULT_INJECTION: forcing a failure. [ 2693.694325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2693.696710] CPU: 1 PID: 19026 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2693.698117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.699816] Call Trace: [ 2693.700353] dump_stack+0x107/0x167 [ 2693.701091] should_fail.cold+0x5/0xa [ 2693.701869] _copy_from_user+0x2e/0x1b0 [ 2693.702683] __copy_msghdr_from_user+0x91/0x4b0 [ 2693.703630] ? __ia32_sys_shutdown+0x80/0x80 [ 2693.704513] ? perf_trace_lock+0xac/0x490 [ 2693.705356] ? __lock_acquire+0xbb1/0x5b00 [ 2693.706231] sendmsg_copy_msghdr+0xa1/0x160 [ 2693.707115] ? do_recvmmsg+0x6d0/0x6d0 [ 2693.707906] ? perf_trace_lock+0xac/0x490 [ 2693.708751] ? SOFTIRQ_verbose+0x10/0x10 [ 2693.709578] ? __lockdep_reset_lock+0x180/0x180 [ 2693.710516] ? perf_trace_lock+0xac/0x490 [ 2693.711368] ? SOFTIRQ_verbose+0x10/0x10 [ 2693.712199] ___sys_sendmsg+0xc6/0x170 [ 2693.712988] ? sendmsg_copy_msghdr+0x160/0x160 [ 2693.713914] ? __fget_files+0x26d/0x480 [ 2693.714718] ? lock_downgrade+0x6d0/0x6d0 [ 2693.715571] ? find_held_lock+0x2c/0x110 [ 2693.716409] ? __fget_files+0x296/0x480 [ 2693.717230] ? __fget_light+0xea/0x290 [ 2693.718028] __sys_sendmsg+0xe5/0x1b0 [ 2693.718805] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2693.719692] ? rcu_read_lock_any_held+0x75/0xa0 [ 2693.720647] ? fput_many+0x2f/0x1a0 [ 2693.721386] ? ksys_write+0x1a9/0x260 [ 2693.722169] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.723227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.724280] ? trace_hardirqs_on+0x5b/0x180 [ 2693.725153] do_syscall_64+0x33/0x40 [ 2693.725907] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2693.726943] RIP: 0033:0x7f8d57ad3b19 [ 2693.727713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.731431] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2693.732971] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2693.734409] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2693.735849] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2693.737286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2693.738724] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2693.758567] EXT4-fs (sda): re-mounted. Opts: (null) 03:18:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, 0x0) 03:18:06 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:18:06 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x4, r0, 0x0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000040)=0x7, 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:18:06 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 13) [ 2693.935422] FAULT_INJECTION: forcing a failure. [ 2693.935422] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.937771] CPU: 0 PID: 19139 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2693.939160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.940841] Call Trace: [ 2693.941385] dump_stack+0x107/0x167 [ 2693.942127] should_fail.cold+0x5/0xa [ 2693.942903] ? create_object.isra.0+0x3a/0xa20 [ 2693.943847] should_failslab+0x5/0x20 [ 2693.944636] kmem_cache_alloc+0x5b/0x360 [ 2693.945472] create_object.isra.0+0x3a/0xa20 [ 2693.946372] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2693.947438] kmem_cache_alloc_trace+0x151/0x360 [ 2693.948388] rfkill_fop_open+0x367/0x680 [ 2693.949238] ? rfkill_init_sw_state+0x150/0x150 [ 2693.950189] misc_open+0x375/0x4a0 [ 2693.950913] ? misc_devnode+0x130/0x130 [ 2693.951734] chrdev_open+0x268/0x6e0 [ 2693.952492] ? cdev_device_add+0x220/0x220 [ 2693.953365] ? security_file_open+0x20b/0x500 [ 2693.954283] do_dentry_open+0x4b7/0x1090 [ 2693.955112] ? cdev_device_add+0x220/0x220 [ 2693.955987] ? may_open+0x1e4/0x400 [ 2693.956741] path_openat+0x193d/0x26d0 [ 2693.957551] ? path_lookupat+0x860/0x860 [ 2693.958373] ? perf_trace_lock+0xac/0x490 [ 2693.959214] ? SOFTIRQ_verbose+0x10/0x10 [ 2693.960047] ? lock_acquire+0x197/0x490 [ 2693.960860] ? __lockdep_reset_lock+0x180/0x180 [ 2693.961816] do_filp_open+0x17e/0x3d0 [ 2693.962588] ? may_open_dev+0xf0/0xf0 [ 2693.963389] ? rwlock_bug.part.0+0x90/0x90 [ 2693.964274] ? _raw_spin_unlock+0x1a/0x30 [ 2693.965117] ? __alloc_fd+0x2a5/0x620 [ 2693.965911] do_sys_openat2+0x171/0x420 [ 2693.966725] ? build_open_flags+0x690/0x690 [ 2693.967618] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2693.968596] ? wait_for_completion+0x270/0x270 [ 2693.969538] __x64_sys_openat+0x13f/0x1f0 [ 2693.970379] ? __ia32_sys_open+0x1c0/0x1c0 [ 2693.971245] ? ksys_write+0x1a9/0x260 [ 2693.972034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.973114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.974173] do_syscall_64+0x33/0x40 [ 2693.974932] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2693.975978] RIP: 0033:0x7f6eaa02cb19 [ 2693.976732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.980435] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2693.981971] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2693.983433] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2693.984883] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2693.986323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2693.987789] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2694.018803] EXT4-fs (sda): re-mounted. Opts: (null) [ 2694.085515] EXT4-fs (sda): re-mounted. Opts: (null) [ 2710.261930] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:18:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 2) 03:18:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, 0x0) 03:18:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1f, 0x800, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1000, 0x22000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r1, 0x8, 0x8000, 0x6, 0x200}) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:18:33 executing program 4: r0 = fork() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:18:33 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 21) [ 2720.132113] FAULT_INJECTION: forcing a failure. [ 2720.132113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2720.134555] CPU: 1 PID: 19153 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2720.135985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.137757] Call Trace: [ 2720.138326] dump_stack+0x107/0x167 [ 2720.139114] should_fail.cold+0x5/0xa [ 2720.139921] _copy_from_user+0x2e/0x1b0 [ 2720.140775] iovec_from_user+0x141/0x400 [ 2720.141637] __import_iovec+0x67/0x590 [ 2720.142451] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2720.143553] import_iovec+0x83/0xb0 [ 2720.144315] sendmsg_copy_msghdr+0x131/0x160 [ 2720.145209] ? do_recvmmsg+0x6d0/0x6d0 [ 2720.146000] ? perf_trace_lock+0xac/0x490 [ 2720.146844] ? __lockdep_reset_lock+0x180/0x180 [ 2720.147813] ? perf_trace_lock+0xac/0x490 [ 2720.147831] ? SOFTIRQ_verbose+0x10/0x10 [ 2720.147854] ___sys_sendmsg+0xc6/0x170 [ 2720.147875] ? sendmsg_copy_msghdr+0x160/0x160 [ 2720.147898] ? __fget_files+0x26d/0x480 [ 2720.147917] ? lock_downgrade+0x6d0/0x6d0 [ 2720.147940] ? find_held_lock+0x2c/0x110 [ 2720.147970] ? __fget_files+0x296/0x480 [ 2720.148002] ? __fget_light+0xea/0x290 [ 2720.148030] __sys_sendmsg+0xe5/0x1b0 [ 2720.148047] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2720.148065] ? rcu_read_lock_any_held+0x75/0xa0 [ 2720.148090] ? fput_many+0x2f/0x1a0 [ 2720.148110] ? ksys_write+0x1a9/0x260 [ 2720.148138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2720.148159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2720.148179] ? trace_hardirqs_on+0x5b/0x180 [ 2720.148202] do_syscall_64+0x33/0x40 03:18:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x20000000000000, &(0x7f0000000180)) 03:18:33 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 14) 03:18:33 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 7) [ 2720.148221] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.148234] RIP: 0033:0x7f8d57ad3b19 [ 2720.148253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.148263] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2720.148284] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2720.148295] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2720.148306] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.148317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2720.148328] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2720.159760] FAULT_INJECTION: forcing a failure. [ 2720.159760] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.159887] CPU: 0 PID: 19158 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2720.159897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.159903] Call Trace: [ 2720.159924] dump_stack+0x107/0x167 [ 2720.159948] should_fail.cold+0x5/0xa [ 2720.159972] ? __kthread_create_on_node+0xd1/0x400 [ 2720.159999] should_failslab+0x5/0x20 [ 2720.160018] kmem_cache_alloc_trace+0x55/0x360 [ 2720.160047] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2720.160067] __kthread_create_on_node+0xd1/0x400 [ 2720.160090] ? __kthread_parkme+0x1d0/0x1d0 [ 2720.160124] ? __mutex_lock+0x425/0x1260 [ 2720.160144] ? loop_configure+0xcb5/0x1480 [ 2720.160172] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2720.160194] kthread_create_on_node+0xbb/0x100 [ 2720.160216] ? __kthread_create_on_node+0x400/0x400 [ 2720.160240] ? lockdep_init_map_type+0x2c7/0x780 [ 2720.160263] ? lockdep_init_map_type+0x2c7/0x780 [ 2720.160296] loop_configure+0x3e3/0x1480 [ 2720.160331] lo_ioctl+0xa72/0x1760 [ 2720.160352] ? avc_has_extended_perms+0x7f1/0xec0 [ 2720.160375] ? loop_set_status_old+0x250/0x250 [ 2720.160398] ? avc_ss_reset+0x180/0x180 [ 2720.160422] ? find_held_lock+0x2c/0x110 [ 2720.160455] ? __lock_acquire+0xbb1/0x5b00 [ 2720.160539] ? selinux_inode_getsecctx+0x90/0x90 [ 2720.160559] ? generic_block_fiemap+0x60/0x60 [ 2720.160580] ? find_held_lock+0x2c/0x110 [ 2720.160604] ? loop_set_status_old+0x250/0x250 [ 2720.160622] blkdev_ioctl+0x291/0x710 [ 2720.160645] ? blkdev_common_ioctl+0x1870/0x1870 [ 2720.160672] ? selinux_file_ioctl+0xb1/0x260 [ 2720.160697] block_ioctl+0xf9/0x140 [ 2720.160713] ? blkdev_read_iter+0x1c0/0x1c0 [ 2720.160734] __x64_sys_ioctl+0x19a/0x210 [ 2720.160758] do_syscall_64+0x33/0x40 [ 2720.160778] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.160790] RIP: 0033:0x7f443c1708d7 [ 2720.160808] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.160819] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2720.160839] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c1708d7 [ 2720.160850] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2720.160861] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 2720.160872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2720.160883] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 [ 2720.220383] FAULT_INJECTION: forcing a failure. [ 2720.220383] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.220406] CPU: 0 PID: 19164 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2720.220416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.220423] Call Trace: [ 2720.220447] dump_stack+0x107/0x167 [ 2720.220472] should_fail.cold+0x5/0xa [ 2720.220496] ? rfkill_fop_open+0x367/0x680 [ 2720.220519] should_failslab+0x5/0x20 [ 2720.220537] kmem_cache_alloc_trace+0x55/0x360 [ 2720.220558] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2720.220586] rfkill_fop_open+0x367/0x680 [ 2720.220615] ? rfkill_init_sw_state+0x150/0x150 [ 2720.220638] misc_open+0x375/0x4a0 [ 2720.220658] ? misc_devnode+0x130/0x130 [ 2720.220675] chrdev_open+0x268/0x6e0 [ 2720.220694] ? cdev_device_add+0x220/0x220 [ 2720.220723] ? security_file_open+0x20b/0x500 [ 2720.220749] do_dentry_open+0x4b7/0x1090 [ 2720.220770] ? cdev_device_add+0x220/0x220 [ 2720.220792] ? may_open+0x1e4/0x400 [ 2720.220818] path_openat+0x193d/0x26d0 [ 2720.220858] ? path_lookupat+0x860/0x860 [ 2720.220877] ? perf_trace_lock+0xac/0x490 [ 2720.220895] ? SOFTIRQ_verbose+0x10/0x10 [ 2720.220912] ? lock_acquire+0x197/0x490 [ 2720.220936] ? __lockdep_reset_lock+0x180/0x180 [ 2720.220966] do_filp_open+0x17e/0x3d0 [ 2720.220983] ? may_open_dev+0xf0/0xf0 [ 2720.221031] ? rwlock_bug.part.0+0x90/0x90 [ 2720.221064] ? _raw_spin_unlock+0x1a/0x30 [ 2720.221081] ? __alloc_fd+0x2a5/0x620 [ 2720.221118] do_sys_openat2+0x171/0x420 [ 2720.221140] ? build_open_flags+0x690/0x690 [ 2720.221157] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2720.221181] ? wait_for_completion+0x270/0x270 [ 2720.221213] __x64_sys_openat+0x13f/0x1f0 [ 2720.221232] ? __ia32_sys_open+0x1c0/0x1c0 [ 2720.221249] ? ksys_write+0x1a9/0x260 [ 2720.221279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2720.221300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2720.221326] do_syscall_64+0x33/0x40 [ 2720.221346] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.221359] RIP: 0033:0x7f6eaa02cb19 [ 2720.221378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.221389] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2720.221410] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2720.221422] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2720.221433] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.221444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2720.221456] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2720.232237] EXT4-fs (sda): re-mounted. Opts: (null) [ 2720.236976] FAULT_INJECTION: forcing a failure. [ 2720.236976] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.237002] CPU: 1 PID: 19166 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2720.237012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.237018] Call Trace: [ 2720.237042] dump_stack+0x107/0x167 [ 2720.237065] should_fail.cold+0x5/0xa [ 2720.237084] ? create_object.isra.0+0x3a/0xa20 [ 2720.237104] should_failslab+0x5/0x20 [ 2720.237121] kmem_cache_alloc+0x5b/0x360 [ 2720.237140] ? percpu_ref_put_many.constprop.0+0x4e/0x100 [ 2720.237163] create_object.isra.0+0x3a/0xa20 [ 2720.237182] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2720.237207] kmem_cache_alloc+0x159/0x360 [ 2720.237235] security_file_alloc+0x34/0x170 [ 2720.237258] __alloc_file+0xb6/0x320 [ 2720.237280] alloc_empty_file+0x6d/0x170 [ 2720.237303] path_openat+0xde/0x26d0 [ 2720.237339] ? path_lookupat+0x860/0x860 [ 2720.237358] ? perf_trace_lock+0xac/0x490 [ 2720.237375] ? SOFTIRQ_verbose+0x10/0x10 [ 2720.237391] ? lock_acquire+0x197/0x490 [ 2720.237413] ? __lockdep_reset_lock+0x180/0x180 [ 2720.237440] do_filp_open+0x17e/0x3d0 [ 2720.237462] ? may_open_dev+0xf0/0xf0 [ 2720.374565] ? __alloc_fd+0x2a5/0x620 [ 2720.375362] ? lock_downgrade+0x6d0/0x6d0 [ 2720.376235] ? rwlock_bug.part.0+0x90/0x90 [ 2720.377123] ? _raw_spin_unlock+0x1a/0x30 [ 2720.377970] ? __alloc_fd+0x2a5/0x620 [ 2720.378772] do_sys_openat2+0x171/0x420 [ 2720.379588] ? build_open_flags+0x690/0x690 [ 2720.380475] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2720.381475] ? wait_for_completion+0x270/0x270 [ 2720.382426] __x64_sys_openat+0x13f/0x1f0 [ 2720.383273] ? __ia32_sys_open+0x1c0/0x1c0 [ 2720.384155] ? ksys_write+0x1a9/0x260 [ 2720.384944] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2720.386025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2720.387084] do_syscall_64+0x33/0x40 [ 2720.387861] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.388914] RIP: 0033:0x7f2947304b19 [ 2720.389680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.393457] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2720.395023] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2720.396508] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2720.397977] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.399438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2720.400922] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:18:33 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 22) 03:18:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 3) 03:18:33 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 15) 03:18:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x4000000000000000, &(0x7f0000000180)) 03:18:33 executing program 4: r0 = fork() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:18:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) (fail_nth: 1) [ 2720.444875] FAULT_INJECTION: forcing a failure. [ 2720.444875] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.447213] CPU: 1 PID: 19276 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2720.448609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.450265] Call Trace: [ 2720.450804] dump_stack+0x107/0x167 [ 2720.451548] should_fail.cold+0x5/0xa [ 2720.452647] ? create_object.isra.0+0x3a/0xa20 [ 2720.453774] should_failslab+0x5/0x20 [ 2720.454715] kmem_cache_alloc+0x5b/0x360 [ 2720.455747] create_object.isra.0+0x3a/0xa20 [ 2720.456826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2720.458071] kmem_cache_alloc_trace+0x151/0x360 [ 2720.459223] rfkill_fop_open+0x367/0x680 [ 2720.460236] ? rfkill_init_sw_state+0x150/0x150 [ 2720.461372] misc_open+0x375/0x4a0 [ 2720.462242] ? misc_devnode+0x130/0x130 [ 2720.463208] chrdev_open+0x268/0x6e0 [ 2720.463225] FAULT_INJECTION: forcing a failure. [ 2720.463225] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.466737] ? cdev_device_add+0x220/0x220 [ 2720.467798] ? security_file_open+0x20b/0x500 [ 2720.468607] do_dentry_open+0x4b7/0x1090 [ 2720.469297] ? cdev_device_add+0x220/0x220 [ 2720.469963] ? may_open+0x1e4/0x400 [ 2720.470583] path_openat+0x193d/0x26d0 [ 2720.471221] ? path_lookupat+0x860/0x860 [ 2720.471935] ? perf_trace_lock+0xac/0x490 [ 2720.472643] ? SOFTIRQ_verbose+0x10/0x10 [ 2720.473337] ? lock_acquire+0x197/0x490 [ 2720.474023] ? __lockdep_reset_lock+0x180/0x180 [ 2720.474813] do_filp_open+0x17e/0x3d0 [ 2720.475458] ? may_open_dev+0xf0/0xf0 [ 2720.476132] ? rwlock_bug.part.0+0x90/0x90 [ 2720.476864] ? _raw_spin_unlock+0x1a/0x30 [ 2720.477585] ? __alloc_fd+0x2a5/0x620 [ 2720.478238] do_sys_openat2+0x171/0x420 [ 2720.478921] ? build_open_flags+0x690/0x690 [ 2720.479656] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2720.480505] ? wait_for_completion+0x270/0x270 [ 2720.481291] __x64_sys_openat+0x13f/0x1f0 [ 2720.482000] ? __ia32_sys_open+0x1c0/0x1c0 [ 2720.482722] ? ksys_write+0x1a9/0x260 [ 2720.483382] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2720.484292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2720.485117] do_syscall_64+0x33/0x40 [ 2720.485751] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.486567] RIP: 0033:0x7f6eaa02cb19 [ 2720.487200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.490205] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2720.491445] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2720.492666] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2720.493894] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.495122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2720.496369] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2720.497639] CPU: 0 PID: 19277 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2720.499092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.500774] Call Trace: [ 2720.501320] dump_stack+0x107/0x167 [ 2720.502070] should_fail.cold+0x5/0xa [ 2720.502843] FAULT_INJECTION: forcing a failure. [ 2720.502843] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.505118] ? __alloc_skb+0x6d/0x620 [ 2720.505905] should_failslab+0x5/0x20 [ 2720.506678] kmem_cache_alloc_node+0x55/0x370 [ 2720.507578] __alloc_skb+0x6d/0x620 [ 2720.508347] netlink_sendmsg+0x98e/0xdf0 [ 2720.509173] ? netlink_unicast+0x7f0/0x7f0 [ 2720.510055] ? netlink_unicast+0x7f0/0x7f0 [ 2720.510904] sock_sendmsg+0x154/0x190 [ 2720.511695] ____sys_sendmsg+0x70d/0x870 [ 2720.512520] ? kernel_sendmsg+0x50/0x50 [ 2720.513325] ? do_recvmmsg+0x6d0/0x6d0 [ 2720.514121] ? perf_trace_lock+0xac/0x490 [ 2720.514962] ? __lockdep_reset_lock+0x180/0x180 [ 2720.515898] ? perf_trace_lock+0xac/0x490 [ 2720.516745] ? SOFTIRQ_verbose+0x10/0x10 [ 2720.517566] ___sys_sendmsg+0xf3/0x170 [ 2720.518364] ? sendmsg_copy_msghdr+0x160/0x160 [ 2720.519287] ? lock_downgrade+0x6d0/0x6d0 [ 2720.520155] ? find_held_lock+0x2c/0x110 [ 2720.520979] ? __fget_files+0x296/0x480 [ 2720.521803] ? __fget_light+0xea/0x290 [ 2720.522610] __sys_sendmsg+0xe5/0x1b0 [ 2720.523379] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2720.524268] ? rcu_read_lock_any_held+0x75/0xa0 [ 2720.525220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2720.526322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2720.527367] ? trace_hardirqs_on+0x5b/0x180 [ 2720.528256] do_syscall_64+0x33/0x40 [ 2720.529004] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.530048] RIP: 0033:0x7f8d57ad3b19 [ 2720.530806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.534480] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2720.536019] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2720.537506] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2720.538926] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.540406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2720.541832] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2720.543295] CPU: 1 PID: 19279 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2720.544863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.546233] Call Trace: [ 2720.546678] dump_stack+0x107/0x167 [ 2720.547284] should_fail.cold+0x5/0xa [ 2720.547915] ? create_object.isra.0+0x3a/0xa20 [ 2720.548707] should_failslab+0x5/0x20 [ 2720.549375] kmem_cache_alloc+0x5b/0x360 [ 2720.550080] create_object.isra.0+0x3a/0xa20 [ 2720.550845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2720.551750] kmem_cache_alloc_trace+0x151/0x360 [ 2720.552561] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2720.553384] __kthread_create_on_node+0xd1/0x400 [ 2720.554204] ? __kthread_parkme+0x1d0/0x1d0 [ 2720.554975] ? __mutex_lock+0x425/0x1260 [ 2720.555697] ? loop_configure+0xcb5/0x1480 [ 2720.556431] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2720.557260] kthread_create_on_node+0xbb/0x100 [ 2720.558053] ? __kthread_create_on_node+0x400/0x400 [ 2720.558923] ? lockdep_init_map_type+0x2c7/0x780 [ 2720.559754] ? lockdep_init_map_type+0x2c7/0x780 [ 2720.560612] loop_configure+0x3e3/0x1480 [ 2720.561362] lo_ioctl+0xa72/0x1760 [ 2720.561990] ? avc_has_extended_perms+0x7f1/0xec0 [ 2720.562852] ? loop_set_status_old+0x250/0x250 [ 2720.563697] ? avc_ss_reset+0x180/0x180 [ 2720.564399] ? find_held_lock+0x2c/0x110 [ 2720.565141] ? __lock_acquire+0xbb1/0x5b00 [ 2720.565926] ? selinux_inode_getsecctx+0x90/0x90 [ 2720.566752] ? generic_block_fiemap+0x60/0x60 [ 2720.567530] ? find_held_lock+0x2c/0x110 [ 2720.568212] ? loop_set_status_old+0x250/0x250 [ 2720.569016] blkdev_ioctl+0x291/0x710 [ 2720.569689] ? blkdev_common_ioctl+0x1870/0x1870 [ 2720.570489] ? selinux_file_ioctl+0xb1/0x260 [ 2720.571270] block_ioctl+0xf9/0x140 [ 2720.571888] ? blkdev_read_iter+0x1c0/0x1c0 [ 2720.572654] __x64_sys_ioctl+0x19a/0x210 [ 2720.573368] do_syscall_64+0x33/0x40 [ 2720.574016] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.574906] RIP: 0033:0x7f443c1708d7 [ 2720.575571] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.578848] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2720.580200] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c1708d7 [ 2720.581448] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2720.582699] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 2720.583953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2720.585185] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 [ 2720.625270] EXT4-fs (sda): re-mounted. Opts: (null) 03:18:33 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 23) [ 2720.631452] FAULT_INJECTION: forcing a failure. [ 2720.631452] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.634604] CPU: 0 PID: 19283 Comm: syz-executor.1 Not tainted 5.10.161 #1 [ 2720.636039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.637767] Call Trace: [ 2720.638313] dump_stack+0x107/0x167 [ 2720.639076] should_fail.cold+0x5/0xa [ 2720.639876] ? __alloc_skb+0x6d/0x620 [ 2720.640697] should_failslab+0x5/0x20 [ 2720.641482] kmem_cache_alloc_node+0x55/0x370 [ 2720.642421] __alloc_skb+0x6d/0x620 [ 2720.643174] ? lock_downgrade+0x6d0/0x6d0 [ 2720.644035] create_monitor_ctrl_open+0x170/0x680 [ 2720.645026] ? create_monitor_ctrl_close+0x460/0x460 [ 2720.646074] ? sysret32_from_system_call+0x2c/0x9a [ 2720.647080] ? security_capable+0x95/0xc0 [ 2720.647961] hci_sock_ioctl+0x39c/0x910 [ 2720.648779] ? create_monitor_event+0x850/0x850 [ 2720.649727] ? perf_trace_lock+0xac/0x490 [ 2720.650581] ? SOFTIRQ_verbose+0x10/0x10 [ 2720.651426] sock_do_ioctl+0xd3/0x300 [ 2720.652212] ? compat_ifr_data_ioctl+0x180/0x180 [ 2720.653196] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2720.654373] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2720.655431] ? do_vfs_ioctl+0x283/0x10d0 [ 2720.656283] ? selinux_inode_getsecctx+0x90/0x90 [ 2720.657260] ? generic_block_fiemap+0x60/0x60 [ 2720.658198] sock_ioctl+0x3ea/0x700 [ 2720.658948] ? dlci_ioctl_set+0x30/0x30 [ 2720.659779] ? selinux_file_ioctl+0xb1/0x260 [ 2720.660695] ? dlci_ioctl_set+0x30/0x30 [ 2720.661522] __x64_sys_ioctl+0x19a/0x210 [ 2720.662359] do_syscall_64+0x33/0x40 [ 2720.663121] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.664174] RIP: 0033:0x7f572aee3b19 [ 2720.664946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.668670] RSP: 002b:00007f5728459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2720.670216] RAX: ffffffffffffffda RBX: 00007f572aff6f60 RCX: 00007f572aee3b19 [ 2720.671677] RDX: 0000000020000000 RSI: 00000000400448dd RDI: 0000000000000005 [ 2720.673126] RBP: 00007f57284591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.674584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2720.676053] R13: 00007ffc3bfb44bf R14: 00007f5728459300 R15: 0000000000022000 03:18:33 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 16) 03:18:33 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 8) [ 2720.745281] FAULT_INJECTION: forcing a failure. [ 2720.745281] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.747477] CPU: 1 PID: 19291 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 2720.748783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.750348] Call Trace: [ 2720.750859] dump_stack+0x107/0x167 [ 2720.751546] should_fail.cold+0x5/0xa [ 2720.752268] ? __kernfs_new_node+0xd4/0x850 [ 2720.753084] should_failslab+0x5/0x20 [ 2720.753794] kmem_cache_alloc+0x5b/0x360 [ 2720.754569] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2720.755518] __kernfs_new_node+0xd4/0x850 [ 2720.756279] ? perf_trace_lock+0xac/0x490 [ 2720.757025] ? perf_trace_lock+0xac/0x490 [ 2720.757782] ? lock_chain_count+0x20/0x20 [ 2720.758529] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2720.759388] ? __lockdep_reset_lock+0x180/0x180 [ 2720.760249] ? __lockdep_reset_lock+0x180/0x180 [ 2720.761104] ? find_held_lock+0x2c/0x110 [ 2720.761862] ? set_user_nice.part.0+0x2fd/0x760 [ 2720.762731] kernfs_create_dir_ns+0x9c/0x230 [ 2720.763542] internal_create_group+0x793/0xb30 [ 2720.764399] ? set_user_nice.part.0+0x2fd/0x760 [ 2720.765295] ? sysfs_remove_group+0x170/0x170 [ 2720.766115] ? lockdep_init_map_type+0x2c7/0x780 [ 2720.767014] ? blk_queue_flag_set+0x22/0x30 [ 2720.767814] ? __loop_update_dio+0x2d2/0x690 [ 2720.768620] loop_configure+0x954/0x1480 [ 2720.769376] lo_ioctl+0xa72/0x1760 [ 2720.770018] ? avc_has_extended_perms+0x7f1/0xec0 [ 2720.770894] ? loop_set_status_old+0x250/0x250 [ 2720.771738] ? avc_ss_reset+0x180/0x180 [ 2720.772453] ? find_held_lock+0x2c/0x110 [ 2720.773206] ? __lock_acquire+0xbb1/0x5b00 [ 2720.774039] ? selinux_inode_getsecctx+0x90/0x90 [ 2720.774901] ? generic_block_fiemap+0x60/0x60 [ 2720.775725] ? find_held_lock+0x2c/0x110 [ 2720.776470] ? loop_set_status_old+0x250/0x250 [ 2720.777305] blkdev_ioctl+0x291/0x710 [ 2720.778009] ? blkdev_common_ioctl+0x1870/0x1870 [ 2720.778871] ? selinux_file_ioctl+0xb1/0x260 [ 2720.779692] block_ioctl+0xf9/0x140 [ 2720.780366] ? blkdev_read_iter+0x1c0/0x1c0 [ 2720.781162] __x64_sys_ioctl+0x19a/0x210 [ 2720.781916] do_syscall_64+0x33/0x40 [ 2720.782596] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.783529] RIP: 0033:0x7f443c1708d7 [ 2720.784230] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.787576] RSP: 002b:00007f44396e5f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2720.788998] RAX: ffffffffffffffda RBX: 00007f443c1ba970 RCX: 00007f443c1708d7 [ 2720.790291] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2720.791588] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 2720.792890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2720.794187] R13: 0000000000000004 R14: 0000000020001400 R15: 0000000000000000 03:18:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) [ 2720.845130] FAULT_INJECTION: forcing a failure. [ 2720.845130] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.847492] CPU: 0 PID: 19355 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2720.848919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.850625] Call Trace: [ 2720.851184] dump_stack+0x107/0x167 [ 2720.851957] should_fail.cold+0x5/0xa [ 2720.852703] EXT4-fs (sda): re-mounted. Opts: (null) [ 2720.852750] ? rfkill_fop_open+0x52/0x680 [ 2720.854551] should_failslab+0x5/0x20 [ 2720.855336] kmem_cache_alloc_trace+0x55/0x360 [ 2720.856306] ? rfkill_init_sw_state+0x150/0x150 [ 2720.857266] rfkill_fop_open+0x52/0x680 [ 2720.858083] ? kobject_get_unless_zero+0x15a/0x1e0 [ 2720.859083] ? rfkill_init_sw_state+0x150/0x150 [ 2720.860039] misc_open+0x375/0x4a0 [ 2720.860759] ? misc_devnode+0x130/0x130 [ 2720.861565] chrdev_open+0x268/0x6e0 [ 2720.862326] ? cdev_device_add+0x220/0x220 [ 2720.863193] ? security_file_open+0x20b/0x500 [ 2720.864131] do_dentry_open+0x4b7/0x1090 [ 2720.864956] ? cdev_device_add+0x220/0x220 [ 2720.865816] ? may_open+0x1e4/0x400 [ 2720.866561] path_openat+0x193d/0x26d0 [ 2720.867370] ? path_lookupat+0x860/0x860 [ 2720.868208] ? perf_trace_lock+0xac/0x490 [ 2720.869043] ? SOFTIRQ_verbose+0x10/0x10 [ 2720.869864] ? lock_acquire+0x197/0x490 [ 2720.870670] ? __lockdep_reset_lock+0x180/0x180 [ 2720.871628] do_filp_open+0x17e/0x3d0 [ 2720.872419] ? may_open_dev+0xf0/0xf0 [ 2720.873211] ? rwlock_bug.part.0+0x90/0x90 [ 2720.874077] ? _raw_spin_unlock+0x1a/0x30 [ 2720.874918] ? __alloc_fd+0x2a5/0x620 [ 2720.875713] do_sys_openat2+0x171/0x420 [ 2720.876535] ? build_open_flags+0x690/0x690 [ 2720.877400] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2720.878380] ? wait_for_completion+0x270/0x270 03:18:33 executing program 4: r0 = fork() ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) [ 2720.879319] __x64_sys_openat+0x13f/0x1f0 [ 2720.880368] ? __ia32_sys_open+0x1c0/0x1c0 [ 2720.881392] ? ksys_write+0x1a9/0x260 [ 2720.882327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2720.883579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2720.884846] do_syscall_64+0x33/0x40 03:18:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) (fail_nth: 2) [ 2720.885737] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.886992] RIP: 0033:0x7f2947304b19 [ 2720.887759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.891425] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2720.892955] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2720.894388] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2720.895832] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.897263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2720.898690] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2720.912496] FAULT_INJECTION: forcing a failure. 03:18:33 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) (fail_nth: 24) [ 2720.912496] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.915092] CPU: 0 PID: 19359 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2720.916503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.918172] Call Trace: [ 2720.918710] dump_stack+0x107/0x167 [ 2720.919453] should_fail.cold+0x5/0xa [ 2720.920238] ? rfkill_fop_open+0x367/0x680 [ 2720.921098] should_failslab+0x5/0x20 [ 2720.921869] kmem_cache_alloc_trace+0x55/0x360 [ 2720.922789] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2720.923840] rfkill_fop_open+0x367/0x680 [ 2720.924673] ? rfkill_init_sw_state+0x150/0x150 [ 2720.925613] misc_open+0x375/0x4a0 [ 2720.926337] ? misc_devnode+0x130/0x130 [ 2720.927140] chrdev_open+0x268/0x6e0 [ 2720.927903] ? cdev_device_add+0x220/0x220 [ 2720.928769] ? security_file_open+0x20b/0x500 [ 2720.929679] do_dentry_open+0x4b7/0x1090 [ 2720.930500] ? cdev_device_add+0x220/0x220 [ 2720.931354] ? may_open+0x1e4/0x400 [ 2720.932119] path_openat+0x193d/0x26d0 [ 2720.932931] ? path_lookupat+0x860/0x860 [ 2720.933753] ? perf_trace_lock+0xac/0x490 [ 2720.934592] ? SOFTIRQ_verbose+0x10/0x10 [ 2720.935410] ? lock_acquire+0x197/0x490 [ 2720.936226] ? __lockdep_reset_lock+0x180/0x180 [ 2720.937182] do_filp_open+0x17e/0x3d0 [ 2720.937952] ? may_open_dev+0xf0/0xf0 [ 2720.938746] ? rwlock_bug.part.0+0x90/0x90 [ 2720.939614] ? _raw_spin_unlock+0x1a/0x30 [ 2720.940459] ? __alloc_fd+0x2a5/0x620 [ 2720.941250] do_sys_openat2+0x171/0x420 [ 2720.942061] ? build_open_flags+0x690/0x690 [ 2720.942928] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2720.943926] ? wait_for_completion+0x270/0x270 [ 2720.944862] __x64_sys_openat+0x13f/0x1f0 [ 2720.945698] ? __ia32_sys_open+0x1c0/0x1c0 [ 2720.946554] ? ksys_write+0x1a9/0x260 [ 2720.947334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2720.948404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2720.949452] do_syscall_64+0x33/0x40 [ 2720.950204] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2720.951237] RIP: 0033:0x7f6eaa02cb19 [ 2720.951998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.955692] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2720.957223] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2720.958661] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2720.960108] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.961541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2720.962974] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:18:34 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 2720.993580] FAULT_INJECTION: forcing a failure. [ 2720.993580] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.995697] CPU: 1 PID: 19378 Comm: syz-executor.1 Not tainted 5.10.161 #1 [ 2720.996961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.998467] Call Trace: [ 2720.998960] dump_stack+0x107/0x167 [ 2720.999646] should_fail.cold+0x5/0xa [ 2721.000365] ? ida_alloc_range+0x3a8/0x820 [ 2721.001142] ? create_object.isra.0+0x3a/0xa20 [ 2721.001980] should_failslab+0x5/0x20 [ 2721.002680] kmem_cache_alloc+0x5b/0x360 [ 2721.003409] create_object.isra.0+0x3a/0xa20 [ 2721.004204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2721.005100] kmem_cache_alloc_node+0x169/0x370 [ 2721.005912] __alloc_skb+0x6d/0x620 [ 2721.006556] ? lock_downgrade+0x6d0/0x6d0 [ 2721.007288] create_monitor_ctrl_open+0x170/0x680 [ 2721.008152] ? create_monitor_ctrl_close+0x460/0x460 [ 2721.009049] ? sysret32_from_system_call+0x2c/0x9a [ 2721.009912] ? security_capable+0x95/0xc0 [ 2721.010646] hci_sock_ioctl+0x39c/0x910 [ 2721.011352] ? create_monitor_event+0x850/0x850 [ 2721.012201] ? perf_trace_lock+0xac/0x490 [ 2721.012937] ? SOFTIRQ_verbose+0x10/0x10 [ 2721.013685] sock_do_ioctl+0xd3/0x300 [ 2721.014362] ? compat_ifr_data_ioctl+0x180/0x180 [ 2721.015244] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2721.016265] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2721.017221] ? do_vfs_ioctl+0x283/0x10d0 [ 2721.017933] ? selinux_inode_getsecctx+0x90/0x90 [ 2721.018794] ? generic_block_fiemap+0x60/0x60 [ 2721.019595] sock_ioctl+0x3ea/0x700 [ 2721.020257] ? dlci_ioctl_set+0x30/0x30 [ 2721.020961] ? selinux_file_ioctl+0xb1/0x260 [ 2721.021740] ? dlci_ioctl_set+0x30/0x30 [ 2721.022428] __x64_sys_ioctl+0x19a/0x210 [ 2721.023149] do_syscall_64+0x33/0x40 [ 2721.023814] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2721.024711] RIP: 0033:0x7f572aee3b19 [ 2721.025357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2721.028581] RSP: 002b:00007f5728459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2721.029967] RAX: ffffffffffffffda RBX: 00007f572aff6f60 RCX: 00007f572aee3b19 [ 2721.031270] RDX: 0000000020000000 RSI: 00000000400448dd RDI: 0000000000000005 [ 2721.032568] RBP: 00007f57284591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2721.033818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2721.035069] R13: 00007ffc3bfb44bf R14: 00007f5728459300 R15: 0000000000022000 [ 2721.051554] EXT4-fs (sda): re-mounted. Opts: (null) [ 2733.811953] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:18:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) (fail_nth: 3) 03:18:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0xffffffff00000000, &(0x7f0000000180)) 03:18:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0/../file0\x00'}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:18:54 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 9) 03:18:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 4) 03:18:54 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 17) 03:18:54 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x2, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:18:54 executing program 4: r0 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) [ 2741.876170] FAULT_INJECTION: forcing a failure. [ 2741.876170] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.878561] CPU: 1 PID: 19423 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2741.880033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.881779] Call Trace: [ 2741.882325] dump_stack+0x107/0x167 [ 2741.883112] should_fail.cold+0x5/0xa [ 2741.883879] ? create_object.isra.0+0x3a/0xa20 [ 2741.884836] should_failslab+0x5/0x20 [ 2741.885621] kmem_cache_alloc+0x5b/0x360 [ 2741.886463] create_object.isra.0+0x3a/0xa20 [ 2741.887368] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2741.888439] kmem_cache_alloc_trace+0x151/0x360 [ 2741.889400] ? rfkill_init_sw_state+0x150/0x150 [ 2741.890359] rfkill_fop_open+0x52/0x680 [ 2741.891182] ? kobject_get_unless_zero+0x15a/0x1e0 [ 2741.891732] FAULT_INJECTION: forcing a failure. [ 2741.891732] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.892216] ? rfkill_init_sw_state+0x150/0x150 [ 2741.892239] misc_open+0x375/0x4a0 [ 2741.892262] ? misc_devnode+0x130/0x130 [ 2741.896999] chrdev_open+0x268/0x6e0 [ 2741.897766] ? cdev_device_add+0x220/0x220 [ 2741.898645] ? security_file_open+0x20b/0x500 [ 2741.899572] do_dentry_open+0x4b7/0x1090 [ 2741.900414] ? cdev_device_add+0x220/0x220 [ 2741.901282] ? may_open+0x1e4/0x400 [ 2741.902037] path_openat+0x193d/0x26d0 [ 2741.902854] ? path_lookupat+0x860/0x860 [ 2741.903686] ? perf_trace_lock+0xac/0x490 [ 2741.904543] ? SOFTIRQ_verbose+0x10/0x10 [ 2741.905372] ? lock_acquire+0x197/0x490 [ 2741.906190] ? __lockdep_reset_lock+0x180/0x180 [ 2741.907151] do_filp_open+0x17e/0x3d0 [ 2741.907928] ? may_open_dev+0xf0/0xf0 [ 2741.908744] ? rwlock_bug.part.0+0x90/0x90 [ 2741.909625] ? _raw_spin_unlock+0x1a/0x30 [ 2741.910477] ? __alloc_fd+0x2a5/0x620 [ 2741.911322] do_sys_openat2+0x171/0x420 [ 2741.912172] ? build_open_flags+0x690/0x690 [ 2741.913053] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2741.914044] ? wait_for_completion+0x270/0x270 [ 2741.914990] __x64_sys_openat+0x13f/0x1f0 [ 2741.915840] ? __ia32_sys_open+0x1c0/0x1c0 [ 2741.916720] ? ksys_write+0x1a9/0x260 [ 2741.917511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2741.918586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.919642] do_syscall_64+0x33/0x40 [ 2741.920413] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2741.921458] RIP: 0033:0x7f2947304b19 [ 2741.922220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.925976] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2741.927588] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2741.929085] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2741.930559] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.932043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2741.933513] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2741.935032] CPU: 0 PID: 19429 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2741.936476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.938183] Call Trace: [ 2741.938733] dump_stack+0x107/0x167 [ 2741.939483] should_fail.cold+0x5/0xa [ 2741.940288] ? create_object.isra.0+0x3a/0xa20 [ 2741.941245] should_failslab+0x5/0x20 [ 2741.942035] kmem_cache_alloc+0x5b/0x360 [ 2741.942899] create_object.isra.0+0x3a/0xa20 [ 2741.943811] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2741.944866] kmem_cache_alloc_node+0x169/0x370 [ 2741.945816] __alloc_skb+0x6d/0x620 [ 2741.946570] netlink_sendmsg+0x98e/0xdf0 [ 2741.947418] ? netlink_unicast+0x7f0/0x7f0 [ 2741.948297] ? netlink_unicast+0x7f0/0x7f0 [ 2741.949172] sock_sendmsg+0x154/0x190 [ 2741.949950] ____sys_sendmsg+0x70d/0x870 [ 2741.950792] ? kernel_sendmsg+0x50/0x50 [ 2741.951595] ? do_recvmmsg+0x6d0/0x6d0 [ 2741.952417] ? perf_trace_lock+0xac/0x490 [ 2741.953299] ? __lockdep_reset_lock+0x180/0x180 [ 2741.954248] ? perf_trace_lock+0xac/0x490 [ 2741.955095] ? SOFTIRQ_verbose+0x10/0x10 [ 2741.955931] ___sys_sendmsg+0xf3/0x170 [ 2741.956746] ? sendmsg_copy_msghdr+0x160/0x160 [ 2741.957690] ? lock_downgrade+0x6d0/0x6d0 [ 2741.958609] ? find_held_lock+0x2c/0x110 [ 2741.959498] ? __fget_files+0x296/0x480 [ 2741.960392] ? __fget_light+0xea/0x290 [ 2741.961245] __sys_sendmsg+0xe5/0x1b0 [ 2741.962060] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2741.962988] ? rcu_read_lock_any_held+0x75/0xa0 [ 2741.964028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2741.965151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.966262] ? trace_hardirqs_on+0x5b/0x180 [ 2741.967191] do_syscall_64+0x33/0x40 [ 2741.968013] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2741.969146] RIP: 0033:0x7f8d57ad3b19 [ 2741.969956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.974014] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2741.975687] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2741.977288] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2741.978909] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.980545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2741.982126] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2741.990145] FAULT_INJECTION: forcing a failure. [ 2741.990145] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.992456] CPU: 1 PID: 19428 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2741.993892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.995556] Call Trace: [ 2741.996130] dump_stack+0x107/0x167 [ 2741.996873] should_fail.cold+0x5/0xa [ 2741.997672] ? create_object.isra.0+0x3a/0xa20 [ 2741.998601] should_failslab+0x5/0x20 [ 2741.999380] kmem_cache_alloc+0x5b/0x360 [ 2742.000225] create_object.isra.0+0x3a/0xa20 [ 2742.001127] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2742.002169] kmem_cache_alloc_trace+0x151/0x360 [ 2742.003141] rfkill_fop_open+0x367/0x680 [ 2742.003994] ? rfkill_init_sw_state+0x150/0x150 [ 2742.005003] misc_open+0x375/0x4a0 [ 2742.005740] ? misc_devnode+0x130/0x130 [ 2742.006558] chrdev_open+0x268/0x6e0 [ 2742.007326] ? cdev_device_add+0x220/0x220 [ 2742.008218] ? security_file_open+0x20b/0x500 [ 2742.009147] do_dentry_open+0x4b7/0x1090 [ 2742.009985] ? cdev_device_add+0x220/0x220 [ 2742.010858] ? may_open+0x1e4/0x400 [ 2742.011617] path_openat+0x193d/0x26d0 [ 2742.012456] ? path_lookupat+0x860/0x860 [ 2742.013291] ? perf_trace_lock+0xac/0x490 [ 2742.014145] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.014977] ? lock_acquire+0x197/0x490 [ 2742.015801] ? __lockdep_reset_lock+0x180/0x180 [ 2742.016771] do_filp_open+0x17e/0x3d0 [ 2742.017547] ? may_open_dev+0xf0/0xf0 [ 2742.018348] ? rwlock_bug.part.0+0x90/0x90 [ 2742.019216] ? _raw_spin_unlock+0x1a/0x30 [ 2742.020068] ? __alloc_fd+0x2a5/0x620 [ 2742.020918] do_sys_openat2+0x171/0x420 [ 2742.021747] ? build_open_flags+0x690/0x690 [ 2742.022631] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2742.023629] ? wait_for_completion+0x270/0x270 [ 2742.024595] __x64_sys_openat+0x13f/0x1f0 [ 2742.025444] ? __ia32_sys_open+0x1c0/0x1c0 [ 2742.026273] ? ksys_write+0x1a9/0x260 [ 2742.027078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.028182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.029279] do_syscall_64+0x33/0x40 [ 2742.030055] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2742.031138] RIP: 0033:0x7f6eaa02cb19 [ 2742.031920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.035694] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2742.037329] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2742.038808] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2742.040286] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.041764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2742.043240] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2742.050848] EXT4-fs (sda): re-mounted. Opts: (null) [ 2742.066259] FAULT_INJECTION: forcing a failure. [ 2742.066259] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.068671] CPU: 1 PID: 19434 Comm: syz-executor.1 Not tainted 5.10.161 #1 [ 2742.070085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.071794] Call Trace: [ 2742.072365] dump_stack+0x107/0x167 [ 2742.073126] should_fail.cold+0x5/0xa [ 2742.073919] should_failslab+0x5/0x20 [ 2742.074698] __kmalloc_node_track_caller+0x74/0x3f0 [ 2742.075727] ? create_monitor_ctrl_open+0x170/0x680 [ 2742.076772] __alloc_skb+0xb1/0x620 [ 2742.077530] create_monitor_ctrl_open+0x170/0x680 [ 2742.078529] ? create_monitor_ctrl_close+0x460/0x460 [ 2742.079580] ? sysret32_from_system_call+0x2c/0x9a [ 2742.080606] ? security_capable+0x95/0xc0 [ 2742.081479] hci_sock_ioctl+0x39c/0x910 [ 2742.082303] ? create_monitor_event+0x850/0x850 [ 2742.083311] ? perf_trace_lock+0xac/0x490 [ 2742.084186] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.085041] sock_do_ioctl+0xd3/0x300 [ 2742.085832] ? compat_ifr_data_ioctl+0x180/0x180 [ 2742.086802] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2742.087986] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2742.089029] ? do_vfs_ioctl+0x283/0x10d0 [ 2742.089867] ? selinux_inode_getsecctx+0x90/0x90 [ 2742.090839] ? generic_block_fiemap+0x60/0x60 [ 2742.091782] sock_ioctl+0x3ea/0x700 [ 2742.092551] ? dlci_ioctl_set+0x30/0x30 [ 2742.093388] ? selinux_file_ioctl+0xb1/0x260 [ 2742.094296] ? dlci_ioctl_set+0x30/0x30 [ 2742.095120] __x64_sys_ioctl+0x19a/0x210 [ 2742.095982] do_syscall_64+0x33/0x40 [ 2742.096756] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2742.097809] RIP: 0033:0x7f572aee3b19 [ 2742.098613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.102397] RSP: 002b:00007f5728459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2742.103987] RAX: ffffffffffffffda RBX: 00007f572aff6f60 RCX: 00007f572aee3b19 [ 2742.105458] RDX: 0000000020000000 RSI: 00000000400448dd RDI: 0000000000000005 [ 2742.106923] RBP: 00007f57284591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.108397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2742.109860] R13: 00007ffc3bfb44bf R14: 00007f5728459300 R15: 0000000000022000 03:18:55 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 10) 03:18:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 5) 03:18:55 executing program 4: r0 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) [ 2742.156914] FAULT_INJECTION: forcing a failure. [ 2742.156914] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.159317] CPU: 1 PID: 19544 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2742.160753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.162500] Call Trace: [ 2742.163053] dump_stack+0x107/0x167 [ 2742.163801] should_fail.cold+0x5/0xa [ 2742.164602] should_failslab+0x5/0x20 [ 2742.165379] __kmalloc_node_track_caller+0x74/0x3f0 [ 2742.166402] ? netlink_sendmsg+0x98e/0xdf0 [ 2742.167281] __alloc_skb+0xb1/0x620 [ 2742.168045] netlink_sendmsg+0x98e/0xdf0 [ 2742.168884] ? netlink_unicast+0x7f0/0x7f0 [ 2742.169783] ? netlink_unicast+0x7f0/0x7f0 [ 2742.170664] sock_sendmsg+0x154/0x190 [ 2742.171451] ____sys_sendmsg+0x70d/0x870 [ 2742.172316] ? kernel_sendmsg+0x50/0x50 [ 2742.173124] ? do_recvmmsg+0x6d0/0x6d0 [ 2742.173921] ? perf_trace_lock+0xac/0x490 [ 2742.174775] ? __lockdep_reset_lock+0x180/0x180 [ 2742.175723] ? perf_trace_lock+0xac/0x490 [ 2742.176598] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.177463] ___sys_sendmsg+0xf3/0x170 [ 2742.178263] ? sendmsg_copy_msghdr+0x160/0x160 [ 2742.179208] ? lock_downgrade+0x6d0/0x6d0 [ 2742.180075] ? find_held_lock+0x2c/0x110 [ 2742.180919] ? __fget_files+0x296/0x480 [ 2742.181754] ? __fget_light+0xea/0x290 [ 2742.182559] __sys_sendmsg+0xe5/0x1b0 [ 2742.183334] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2742.184243] ? rcu_read_lock_any_held+0x75/0xa0 [ 2742.185234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.186325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.187379] ? trace_hardirqs_on+0x5b/0x180 [ 2742.188279] do_syscall_64+0x33/0x40 [ 2742.189039] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2742.190086] RIP: 0033:0x7f8d57ad3b19 [ 2742.190855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.194640] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2742.196220] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2742.197683] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2742.199139] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.200603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2742.202059] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 03:18:55 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 18) 03:18:55 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x3, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 2742.259630] EXT4-fs (sda): re-mounted. Opts: (null) 03:18:55 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) close_range(0xffffffffffffffff, r0, 0x2) r2 = getpgid(r1) perf_event_open(&(0x7f00000007c0)={0x4, 0x80, 0x4f, 0x8b, 0x3, 0xa9, 0x0, 0x400, 0x2e012, 0xb, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x3052, 0x1, 0x324b51e2, 0x7, 0x7fffffff, 0x1000, 0x2, 0x0, 0x8, 0x0, 0x3}, r2, 0x9, r0, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='net/snmp6\x00') r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(0x0, 0x0) tkill(r4, 0x2c) r5 = creat(0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmmsg$inet6(r5, &(0x7f0000000700)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x5, @remote, 0x100}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="1d99ed0a01c88d17ab4fa0ce5afa6c1ba1332df5cd685914d5328d24ab1c56b77d88b078a0bee1e8", 0x28}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="24000000000000002900000032000000fc020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000d2ed40b2616151ded94cc31437418dd299488380943ba81443e81b0347639c8e10429f710bf1c15eadb41a482d321fb35d8532a11216faa82b7b2752eccc9a927262713e687742a1ff2920e6e5f1ed75d897ec6d0f70be2a3b17faaa6d480978d63864a6f7cb2b718a37d6eb0ce347a6f68171c0f1000a891d3d1ba237681c9154e462b14c52c05906c83fe20d216eef3c8058906a011a81bc583a282eca1dbea43561ac63d55c2694a3d8d687eb233f5dc3f8f1"], 0x28}}, {{&(0x7f0000000240)={0xa, 0x80e, 0x2885, @mcast1, 0x273}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000280)="c1d2633d59d9bf1ec9a3107bae6152438e31f25795164211212e7451d16da24a70adc0cde2d6121aa025d5b278718b6a050f573970887842911ccf05183a9bf6848868a37400009d1224150be698cdbb3535c042bc6195581e3d0ba237c44cd7b88aa16e6be15db3216dbf999e3ceb97d6b3185aafc3030a2abf5bf351c48f02531ffc880c794803fadb42b55c34e8e803e53ae0c8d3d661e55ac274a2d639dfb37cb4a378", 0xa5}, {&(0x7f0000000340)}, {&(0x7f0000000380)="7374e8d44995a9dba4ddd34e10ec07849e6312706bc0b0971f3edee26760b63f04f016195808a6a721584ba378a632f5eba39f10b0e54cfd946ce0d9ca324902ff13182e777a911b30b613", 0x4b}, {&(0x7f0000000400)="0ae43c27f5cb23b3b06edc2adf1e60b5d6b33daa7dfb273d5d7cd635ed7c7b832bea7d366392c7a9941b5793ca2072531cb8268547b30f65d866e60baced79d9258da4dd8d436e06ae151bfb2276809f8487d41f54bffa32e70beb1d0d2e6b2d0ee9282b386a4a5c838424cd1babd406258e8f0d", 0x74}, {&(0x7f0000000480)="a4704c5889d7f146aedaa1f8d47aed259aba28951dd77e5559130b458d417a8f04a06e7bbd5e70ea8c2fc8b4b8eb2b85e5a93909a046b2c2a421e9108c20b37b92c603c31fe595948268638f1eb2d6b1c8953784bd5fcd513c1a2db3f0dcb2133add9ce58572af4534c2460a2120dff9cc", 0x71}], 0x5, &(0x7f0000000580)=[@hoplimit={{0x14, 0x29, 0x34, 0x3fa}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x30}}, {{&(0x7f00000005c0)={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000600)="18c8f10012ac8561f209f52806aca0dd1c5ebe20d411931e7699b6a176222252b40a59ba3b89637104b8369a44bc50c9cfa4f0cd1e8d597b517fadcebcf828de89277d471b56f62ab2aefa49fa80cd962465c4dc2bf80f3e8a988a7e7bf97b4edb193b0f2dcc037b7760fdaf41151f643d2e2f9bf2926b848c1a6a60e5f234f1", 0x80}, {&(0x7f0000000680)="96190f71281823802837fe176d43e37bbdfc820fa13aae4d86a660bba5", 0x1d}], 0x2}}], 0x3, 0x800) ptrace$getsig(0x4202, r4, 0x0, &(0x7f0000000180)) tkill(r4, 0x1b) [ 2742.417688] FAULT_INJECTION: forcing a failure. [ 2742.417688] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.420162] CPU: 0 PID: 19567 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2742.421558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.423258] Call Trace: [ 2742.423821] dump_stack+0x107/0x167 [ 2742.424592] should_fail.cold+0x5/0xa [ 2742.425389] ? rfkill_fop_open+0x367/0x680 [ 2742.426263] should_failslab+0x5/0x20 [ 2742.427097] kmem_cache_alloc_trace+0x55/0x360 [ 2742.428114] rfkill_fop_open+0x367/0x680 [ 2742.429021] ? rfkill_init_sw_state+0x150/0x150 [ 2742.430042] misc_open+0x375/0x4a0 [ 2742.430826] ? misc_devnode+0x130/0x130 [ 2742.431702] chrdev_open+0x268/0x6e0 [ 2742.432533] ? cdev_device_add+0x220/0x220 [ 2742.433472] ? security_file_open+0x20b/0x500 [ 2742.434465] do_dentry_open+0x4b7/0x1090 [ 2742.435353] ? cdev_device_add+0x220/0x220 [ 2742.436313] ? may_open+0x1e4/0x400 [ 2742.437130] path_openat+0x193d/0x26d0 [ 2742.438010] ? path_lookupat+0x860/0x860 [ 2742.438915] ? perf_trace_lock+0xac/0x490 [ 2742.439826] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.440738] ? lock_acquire+0x197/0x490 [ 2742.441623] ? __lockdep_reset_lock+0x180/0x180 [ 2742.442669] do_filp_open+0x17e/0x3d0 [ 2742.443511] ? may_open_dev+0xf0/0xf0 [ 2742.444382] ? rwlock_bug.part.0+0x90/0x90 [ 2742.445331] ? _raw_spin_unlock+0x1a/0x30 [ 2742.446244] ? __alloc_fd+0x2a5/0x620 [ 2742.447095] do_sys_openat2+0x171/0x420 [ 2742.447993] ? build_open_flags+0x690/0x690 [ 2742.448963] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2742.450023] ? wait_for_completion+0x270/0x270 [ 2742.451044] __x64_sys_openat+0x13f/0x1f0 [ 2742.451923] ? __ia32_sys_open+0x1c0/0x1c0 [ 2742.452853] ? ksys_write+0x1a9/0x260 [ 2742.453675] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.454809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.455915] do_syscall_64+0x33/0x40 [ 2742.456731] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2742.457850] RIP: 0033:0x7f2947304b19 [ 2742.458652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.462412] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2742.463990] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2742.465450] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2742.466934] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.468481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2742.469928] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2742.471694] FAULT_INJECTION: forcing a failure. [ 2742.471694] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.474154] CPU: 1 PID: 19588 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2742.475563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.477263] Call Trace: [ 2742.477795] dump_stack+0x107/0x167 [ 2742.478546] should_fail.cold+0x5/0xa [ 2742.479337] ? rfkill_fop_open+0x367/0x680 [ 2742.480240] should_failslab+0x5/0x20 [ 2742.481019] kmem_cache_alloc_trace+0x55/0x360 [ 2742.481946] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2742.482996] rfkill_fop_open+0x367/0x680 [ 2742.483835] ? rfkill_init_sw_state+0x150/0x150 [ 2742.484792] misc_open+0x375/0x4a0 [ 2742.485522] ? misc_devnode+0x130/0x130 [ 2742.486327] chrdev_open+0x268/0x6e0 [ 2742.487088] ? cdev_device_add+0x220/0x220 [ 2742.487978] ? security_file_open+0x20b/0x500 [ 2742.488908] do_dentry_open+0x4b7/0x1090 [ 2742.489782] ? cdev_device_add+0x220/0x220 [ 2742.490652] ? may_open+0x1e4/0x400 [ 2742.491390] path_openat+0x193d/0x26d0 [ 2742.492208] ? path_lookupat+0x860/0x860 [ 2742.493024] ? perf_trace_lock+0xac/0x490 [ 2742.493864] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.494693] ? lock_acquire+0x197/0x490 [ 2742.495511] ? __lockdep_reset_lock+0x180/0x180 [ 2742.496486] do_filp_open+0x17e/0x3d0 [ 2742.497253] ? may_open_dev+0xf0/0xf0 [ 2742.498074] ? rwlock_bug.part.0+0x90/0x90 [ 2742.498957] ? _raw_spin_unlock+0x1a/0x30 [ 2742.499803] ? __alloc_fd+0x2a5/0x620 [ 2742.500608] do_sys_openat2+0x171/0x420 [ 2742.501425] ? build_open_flags+0x690/0x690 [ 2742.502287] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2742.503273] ? wait_for_completion+0x270/0x270 [ 2742.504227] __x64_sys_openat+0x13f/0x1f0 [ 2742.505119] ? __ia32_sys_open+0x1c0/0x1c0 [ 2742.505981] ? ksys_write+0x1a9/0x260 [ 2742.506769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.507849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.508919] do_syscall_64+0x33/0x40 [ 2742.509679] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2742.510730] RIP: 0033:0x7f6eaa02cb19 [ 2742.511492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.515243] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2742.516795] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2742.518236] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2742.519681] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.521183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2742.522628] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2755.517233] kmemleak: 7 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:19:18 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 19) 03:19:18 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9706}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaa, 0x1}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x40, 0x2, 0x80, 0x4, 0x0, 0x3, 0x400, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000180)}, 0x40040, 0x401, 0x7ff, 0x7, 0x2, 0x9, 0x7f}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xb) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x5) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3cd99f115c0fdc4657132f11965ce0151cd2e1db4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91b7331dbad50300c96ecee0d201c2a8ca7efe3940e4c3249d778b67f76186d5d03255e9edf4c9ce6901246cfd06213c0000001404213e6d13aa15e3aaa65b7367beeda3c901092ede3efc6a635b3b35857f3aa6f3becfb532a3132a02e5ba30214129c74bf162e4d97ba5a369b35d51b75d00"/171], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) unlinkat(r1, &(0x7f0000000440)='./file0/file0\x00', 0x200) 03:19:18 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 11) 03:19:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 6) 03:19:18 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x4, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:19:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) (fail_nth: 4) 03:19:18 executing program 4: r0 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:19:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) migrate_pages(r1, 0x6, &(0x7f0000000000)=0x80000001, &(0x7f00000000c0)=0x1ff) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) [ 2765.404567] FAULT_INJECTION: forcing a failure. [ 2765.404567] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.407485] CPU: 1 PID: 19670 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2765.409286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.411382] Call Trace: [ 2765.412084] dump_stack+0x107/0x167 [ 2765.413045] should_fail.cold+0x5/0xa [ 2765.414049] ? create_object.isra.0+0x3a/0xa20 [ 2765.415223] should_failslab+0x5/0x20 [ 2765.416218] kmem_cache_alloc+0x5b/0x360 [ 2765.417320] create_object.isra.0+0x3a/0xa20 [ 2765.418462] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2765.419792] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 2765.421124] ? netlink_sendmsg+0x98e/0xdf0 [ 2765.422240] __alloc_skb+0xb1/0x620 [ 2765.423212] netlink_sendmsg+0x98e/0xdf0 [ 2765.424304] ? netlink_unicast+0x7f0/0x7f0 [ 2765.425441] ? netlink_unicast+0x7f0/0x7f0 [ 2765.426538] sock_sendmsg+0x154/0x190 [ 2765.427558] ____sys_sendmsg+0x70d/0x870 [ 2765.428574] ? kernel_sendmsg+0x50/0x50 [ 2765.429386] ? do_recvmmsg+0x6d0/0x6d0 [ 2765.430192] ? perf_trace_lock+0xac/0x490 [ 2765.431043] ? __lockdep_reset_lock+0x180/0x180 [ 2765.431990] ? perf_trace_lock+0xac/0x490 [ 2765.432853] ? SOFTIRQ_verbose+0x10/0x10 [ 2765.433681] ___sys_sendmsg+0xf3/0x170 [ 2765.434487] ? sendmsg_copy_msghdr+0x160/0x160 [ 2765.435435] ? lock_downgrade+0x6d0/0x6d0 [ 2765.436421] ? find_held_lock+0x2c/0x110 [ 2765.437417] ? __fget_files+0x296/0x480 [ 2765.438391] ? __fget_light+0xea/0x290 [ 2765.439332] __sys_sendmsg+0xe5/0x1b0 [ 2765.440291] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2765.441334] ? rcu_read_lock_any_held+0x75/0xa0 [ 2765.442491] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.443759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.445011] ? trace_hardirqs_on+0x5b/0x180 [ 2765.446056] do_syscall_64+0x33/0x40 [ 2765.446955] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2765.448189] RIP: 0033:0x7f8d57ad3b19 [ 2765.449094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.453446] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2765.455020] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2765.456492] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2765.457952] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.459409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2765.460877] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2765.467749] FAULT_INJECTION: forcing a failure. [ 2765.467749] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.470082] CPU: 1 PID: 19678 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2765.471501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.473216] Call Trace: [ 2765.473765] dump_stack+0x107/0x167 [ 2765.474523] should_fail.cold+0x5/0xa [ 2765.475311] ? create_object.isra.0+0x3a/0xa20 [ 2765.476273] should_failslab+0x5/0x20 [ 2765.477059] kmem_cache_alloc+0x5b/0x360 [ 2765.477896] ? mark_held_locks+0x9e/0xe0 [ 2765.478741] create_object.isra.0+0x3a/0xa20 [ 2765.479656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2765.480718] kmem_cache_alloc_trace+0x151/0x360 [ 2765.481685] rfkill_fop_open+0x367/0x680 [ 2765.482556] ? rfkill_init_sw_state+0x150/0x150 [ 2765.483523] misc_open+0x375/0x4a0 [ 2765.484286] ? misc_devnode+0x130/0x130 [ 2765.485107] chrdev_open+0x268/0x6e0 [ 2765.485873] ? cdev_device_add+0x220/0x220 [ 2765.486744] ? security_file_open+0x20b/0x500 [ 2765.487713] do_dentry_open+0x4b7/0x1090 [ 2765.488559] ? cdev_device_add+0x220/0x220 [ 2765.489434] ? may_open+0x1e4/0x400 [ 2765.490184] path_openat+0x193d/0x26d0 [ 2765.491007] ? path_lookupat+0x860/0x860 [ 2765.491834] ? perf_trace_lock+0xac/0x490 [ 2765.492689] ? SOFTIRQ_verbose+0x10/0x10 [ 2765.493516] ? lock_acquire+0x197/0x490 [ 2765.494340] ? __lockdep_reset_lock+0x180/0x180 [ 2765.495298] do_filp_open+0x17e/0x3d0 [ 2765.496082] ? may_open_dev+0xf0/0xf0 [ 2765.496902] ? rwlock_bug.part.0+0x90/0x90 [ 2765.497807] ? _raw_spin_unlock+0x1a/0x30 [ 2765.498658] ? __alloc_fd+0x2a5/0x620 [ 2765.499455] do_sys_openat2+0x171/0x420 [ 2765.500278] ? build_open_flags+0x690/0x690 [ 2765.501155] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2765.502139] ? wait_for_completion+0x270/0x270 [ 2765.503082] __x64_sys_openat+0x13f/0x1f0 [ 2765.503926] ? __ia32_sys_open+0x1c0/0x1c0 [ 2765.504802] ? ksys_write+0x1a9/0x260 [ 2765.505590] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.506684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.507734] do_syscall_64+0x33/0x40 [ 2765.508503] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2765.509579] RIP: 0033:0x7f2947304b19 [ 2765.510344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.514074] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2765.515654] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2765.517106] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2765.518569] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.520029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2765.521502] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2765.561659] EXT4-fs (sda): re-mounted. Opts: (null) [ 2765.565940] FAULT_INJECTION: forcing a failure. [ 2765.565940] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.568427] CPU: 0 PID: 19689 Comm: syz-executor.1 Not tainted 5.10.161 #1 [ 2765.569835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.571507] Call Trace: [ 2765.572046] dump_stack+0x107/0x167 [ 2765.572792] should_fail.cold+0x5/0xa [ 2765.573570] ? create_object.isra.0+0x3a/0xa20 [ 2765.574500] should_failslab+0x5/0x20 [ 2765.575272] kmem_cache_alloc+0x5b/0x360 [ 2765.576101] create_object.isra.0+0x3a/0xa20 [ 2765.577001] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2765.578036] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 2765.579062] ? create_monitor_ctrl_open+0x170/0x680 [ 2765.580079] __alloc_skb+0xb1/0x620 [ 2765.580842] create_monitor_ctrl_open+0x170/0x680 [ 2765.581822] ? create_monitor_ctrl_close+0x460/0x460 [ 2765.582853] ? sysret32_from_system_call+0x2c/0x9a [ 2765.583859] ? security_capable+0x95/0xc0 [ 2765.584716] hci_sock_ioctl+0x39c/0x910 [ 2765.585536] ? create_monitor_event+0x850/0x850 [ 2765.586476] ? perf_trace_lock+0xac/0x490 [ 2765.587319] ? SOFTIRQ_verbose+0x10/0x10 [ 2765.588155] sock_do_ioctl+0xd3/0x300 [ 2765.588942] ? compat_ifr_data_ioctl+0x180/0x180 [ 2765.589905] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2765.591076] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2765.592119] ? do_vfs_ioctl+0x283/0x10d0 [ 2765.592959] ? selinux_inode_getsecctx+0x90/0x90 [ 2765.593918] ? generic_block_fiemap+0x60/0x60 [ 2765.594836] sock_ioctl+0x3ea/0x700 [ 2765.595582] ? dlci_ioctl_set+0x30/0x30 [ 2765.596412] ? selinux_file_ioctl+0xb1/0x260 [ 2765.597309] ? dlci_ioctl_set+0x30/0x30 [ 2765.598126] __x64_sys_ioctl+0x19a/0x210 [ 2765.598953] do_syscall_64+0x33/0x40 [ 2765.599717] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2765.600767] RIP: 0033:0x7f572aee3b19 [ 2765.601524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.605231] RSP: 002b:00007f5728459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2765.606784] RAX: ffffffffffffffda RBX: 00007f572aff6f60 RCX: 00007f572aee3b19 [ 2765.606803] FAULT_INJECTION: forcing a failure. [ 2765.606803] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.610436] RDX: 0000000020000000 RSI: 00000000400448dd RDI: 0000000000000005 [ 2765.611891] RBP: 00007f57284591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.613389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2765.614838] R13: 00007ffc3bfb44bf R14: 00007f5728459300 R15: 0000000000022000 [ 2765.616330] CPU: 1 PID: 19684 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2765.617757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.619437] Call Trace: [ 2765.619979] dump_stack+0x107/0x167 [ 2765.620739] should_fail.cold+0x5/0xa [ 2765.621520] ? create_object.isra.0+0x3a/0xa20 [ 2765.622451] should_failslab+0x5/0x20 [ 2765.623226] kmem_cache_alloc+0x5b/0x360 [ 2765.624070] create_object.isra.0+0x3a/0xa20 [ 2765.624973] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2765.626013] kmem_cache_alloc_trace+0x151/0x360 [ 2765.626971] rfkill_fop_open+0x367/0x680 [ 2765.627806] ? rfkill_init_sw_state+0x150/0x150 [ 2765.628784] misc_open+0x375/0x4a0 [ 2765.629507] ? misc_devnode+0x130/0x130 [ 2765.630334] chrdev_open+0x268/0x6e0 [ 2765.631090] ? cdev_device_add+0x220/0x220 [ 2765.631967] ? security_file_open+0x20b/0x500 [ 2765.632897] do_dentry_open+0x4b7/0x1090 [ 2765.633726] ? cdev_device_add+0x220/0x220 [ 2765.634612] ? may_open+0x1e4/0x400 [ 2765.635360] path_openat+0x193d/0x26d0 [ 2765.636176] ? path_lookupat+0x860/0x860 [ 2765.637026] ? perf_trace_lock+0xac/0x490 [ 2765.637865] ? SOFTIRQ_verbose+0x10/0x10 [ 2765.638686] ? lock_acquire+0x197/0x490 [ 2765.639498] ? __lockdep_reset_lock+0x180/0x180 [ 2765.640460] do_filp_open+0x17e/0x3d0 [ 2765.641248] ? may_open_dev+0xf0/0xf0 [ 2765.642041] ? rwlock_bug.part.0+0x90/0x90 [ 2765.642917] ? _raw_spin_unlock+0x1a/0x30 [ 2765.643755] ? __alloc_fd+0x2a5/0x620 [ 2765.644558] do_sys_openat2+0x171/0x420 [ 2765.645368] ? build_open_flags+0x690/0x690 [ 2765.646241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2765.647222] ? wait_for_completion+0x270/0x270 [ 2765.648164] __x64_sys_openat+0x13f/0x1f0 [ 2765.649023] ? __ia32_sys_open+0x1c0/0x1c0 [ 2765.649874] ? ksys_write+0x1a9/0x260 [ 2765.650657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.651724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.652799] do_syscall_64+0x33/0x40 [ 2765.653560] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2765.654600] RIP: 0033:0x7f6eaa02cb19 [ 2765.655353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.659089] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2765.660646] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2765.662091] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2765.663537] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.664996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2765.666446] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:19:18 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:19:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 7) [ 2765.780486] FAULT_INJECTION: forcing a failure. [ 2765.780486] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.782862] CPU: 1 PID: 19794 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2765.784281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.785955] Call Trace: [ 2765.786514] dump_stack+0x107/0x167 [ 2765.787258] should_fail.cold+0x5/0xa [ 2765.788033] ? __skb_ext_alloc+0x19/0x90 [ 2765.788881] should_failslab+0x5/0x20 [ 2765.789658] kmem_cache_alloc+0x5b/0x360 [ 2765.790494] __skb_ext_alloc+0x19/0x90 [ 2765.791278] skb_ext_add+0x508/0x670 [ 2765.792035] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 2765.793116] __alloc_skb+0x3c1/0x620 [ 2765.793880] netlink_sendmsg+0x98e/0xdf0 [ 2765.794718] ? netlink_unicast+0x7f0/0x7f0 [ 2765.795593] ? netlink_unicast+0x7f0/0x7f0 [ 2765.796474] sock_sendmsg+0x154/0x190 [ 2765.797257] ____sys_sendmsg+0x70d/0x870 [ 2765.798087] ? kernel_sendmsg+0x50/0x50 [ 2765.798888] ? do_recvmmsg+0x6d0/0x6d0 [ 2765.799676] ? perf_trace_lock+0xac/0x490 [ 2765.800536] ? __lockdep_reset_lock+0x180/0x180 [ 2765.801471] ? perf_trace_lock+0xac/0x490 [ 2765.802306] ? SOFTIRQ_verbose+0x10/0x10 [ 2765.803131] ___sys_sendmsg+0xf3/0x170 [ 2765.803920] ? sendmsg_copy_msghdr+0x160/0x160 [ 2765.804857] ? lock_downgrade+0x6d0/0x6d0 [ 2765.805698] ? find_held_lock+0x2c/0x110 [ 2765.806527] ? __fget_files+0x296/0x480 [ 2765.807344] ? __fget_light+0xea/0x290 [ 2765.808141] __sys_sendmsg+0xe5/0x1b0 [ 2765.808938] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2765.809811] ? rcu_read_lock_any_held+0x75/0xa0 [ 2765.810781] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.811845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.812902] ? trace_hardirqs_on+0x5b/0x180 [ 2765.813777] do_syscall_64+0x33/0x40 [ 2765.814535] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2765.815568] RIP: 0033:0x7f8d57ad3b19 [ 2765.816339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.820060] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2765.821618] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2765.823062] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2765.824519] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.825962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2765.827406] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2765.870690] EXT4-fs (sda): re-mounted. Opts: (null) [ 2780.766073] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:19:42 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 20) 03:19:42 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x5, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:19:42 executing program 0: perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_targets\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) getpgrp(r0) tkill(0x0, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) pidfd_open(r1, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x4, &(0x7f0000000180)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000300)=""/235, 0xeb}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c010000000000980c00000000001f94444318fd8d0000a454e10dde860a0c581c428ef099d39a3ea454f49c52bbd9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000006320000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xb0}, 0xc3) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x3) 03:19:42 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 12) 03:19:42 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:19:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 8) 03:19:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x7, r0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003480)={'erspan0\x00', &(0x7f0000003380)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x100000, 0xfffffc01, {{0x2a, 0x4, 0x1, 0x28, 0xa8, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x8, [{@rand_addr=0x64010100, 0x6}]}, @lsrr={0x83, 0xb, 0x83, [@private=0xa010100, @multicast2]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0x12, "e591cc832a86b26eb507a4767d5fc9f4"}]}, @ssrr={0x89, 0x1b, 0x6c, [@private=0xa010102, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}, @timestamp_prespec={0x44, 0x3c, 0xe9, 0x3, 0x8, [{@remote, 0x4}, {@private=0xa010101, 0x7964}, {@private=0xa010100, 0x9}, {@multicast2, 0xd280}, {@remote}, {@multicast2, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @end, @ssrr={0x89, 0xb, 0xd6, [@loopback, @multicast2]}]}}}}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="6ff61478e3ee28e2035eb1754ae5e8312b0b9b36d5eb0c2b1ecd088adb491fc07e943a513aedbbde5095890814bfed33a5c72f14d84ce6c5ce1137e808a28918168326845271b1ab6b979bf3b6acdde36129fad5532ca5757c72cef17556ce3884b22bba09fac9", 0x67}, {&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000000040)="d2ba98d465f107deb911a8ff255e76424187996fcaaf54a5e59bc574bd1c3baeacd79b29498b5f7e8f8ccb499925c71993e37e326645", 0x36}, {&(0x7f0000000180)="8e8206d99aca311c9dde140bdd87cdc5525e60c8ada272990d73e70fd3", 0x1d}, {&(0x7f0000000440)="319275bfed584eb7d4b78366711a4c3c1bfe34c60fcdcceaf3d01f5fc63923719890ef638685edd37c745a525143273c4873c8a440a9225519ef19b492aa0f88c5ff17210cdd3688fc111a2a7c72d60287a08cc4d667f2b627f3cd7b0a854d100e591a9c62fa98a705bc7df1a1c272e552619fb0b7151827fe4b4a7822d85ff7f43b57842b31f1e1a72e6be8a4b12b6549dc5f293920de92daf2377c034f6a4003cf9e0646d94d06bcc49dae8e779b5fc1bfd9a495c5", 0xb6}, {&(0x7f0000000500)="d95953fa2c5819a6cd8650bbe87e570175cd1591df697d31818a42cf", 0x1c}], 0x6, &(0x7f00000005c0)=[@dstopts={{0xf0, 0x29, 0x37, {0x32, 0x1a, '\x00', [@generic={0x80, 0xcf, "40c162948f409c194933f7824b69bba6726c1699bd0842d7bf1c7773c7097f584e961f79a46f26740499cab699b9cb9f85fe1483d9497091481d18ff9f752c4846627fa9ec5b97e00b3af887da414fdd0763d40de8bd325e1749724c5eea511978f18fe7288db86eca1e10a9b04c923a6677c39e732de72750ffcbbc9e1c2efcb439e527f892b7232fe0822ccba3058c854438ad1a32c876235fc2176f48e330cf09d9dc294bb637289fedbb07bbcadaf6b2e9f3440b27c39b9e00b82bb3f49f4657509c276701811e5289a04f6f70"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x60a3}}], 0x108}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="0b43e76a984db46fe7afbe203d8c82d136cf7331746ca9a39821c10027e3b98b0ef2875c6dee3329c78a8b03269f8cec97973bc2433ef919164fc7cffbb401823b763f47d208a09cc25480bf42d6e9094b06f1be", 0x54}, {0xffffffffffffffff}, {&(0x7f0000000780)="c13a7956e7f24865a23aaf47a0e358d9fd5c91b73ec7b80910c778c8c571b2792562111492520b5dedbc1c6fb194b68384bc78111fefd0845f8c5f0063020d43e90140defe01ff0367f1eadd35b9c069032585c5", 0x54}, {&(0x7f0000000800)="0722ccd399ac611b034fb31f4309b1b9768101df9789f0416f11e9ec0402c0929dfd20e9bd6c8639d47b363fc0fa993d43c6eb11dd65651b0daf642762d6201e6a1b9313d35a2175780fda39eeeb9be8177623fc5f8c68801909ec3e83478c4b7c098e32e2bb251467dbeb", 0x6b}, {&(0x7f0000000880)="bd73b2ddfede1a181dd508e2fd212a6103971de9e5bfd9703d9e6aca5a29096d79d9f2535bd871d1b59478d70fa073917909955750989acc35f9b669210610febe68604d7bbed3f2ae38c88543c5bb263b16ffb403edef1352c629da3bd445e8ff828849d1290d57", 0x68}, {&(0x7f0000000900)="c3595a945ffb0db2d059d3b62cbad78e43a133ebd9296e29d2f6acd9a5d229824882ccf777b7cd9e8965056db67e2a51b1213e846551b6b34d844c7d8608f8fb0f8aaca71d4b00967ee5d5ed8047229f875a5c3962ed12ab16eeafd1e6fa3fa89e9a47e870472b77aa3daeb051924d425eaf30e301f34f1a1e54783acbedd898a8ef5d65ba8fa1749cba5baa79be31f63d69ae55f28f707b4c13680f0c06db4b8f7bd9d0ac23884ea990e7d25e234598a381fdd95614f7376441355b01d73f1f881ce4ca59ddea4072c246", 0xcb}, {&(0x7f0000000a00)="6c2016aa9f", 0x5}, {&(0x7f0000000a40)="844c7cc1e8e54f3c1ca974895e9392d0f437d47eef2a7d95475989866ba875b14a08871171dc233d1951b5de6173d2d59719c30c146707701c5c9392550e95e13784f1182bdb56c97d2b0e03e40ad5e275751a90567ba8ef26ebbcc2d9b3e9bf1d6fd838aca5510f5827ae43d87c4b1d5ac67bc64d12ee38811e5e219e3ff928a9ed539a54878136caa75cff6c7c283371723875ef12d4f43e28a9df7845ea704b9269941be46911fb5168e3750b6d6cfa71e6f1ee249ce6f1284cc7336716730522757c52e49bbb2e42e02a6db116852d6d9b35d1d49545da5782cf3bd369e9664e39bb6d4d", 0xe6}], 0x8, &(0x7f0000000bc0)=[@tclass={{0x14, 0x29, 0x43, 0xe7e}}, @tclass={{0x14, 0x29, 0x43, 0x2400000}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x16, 0x4, 0x0, 0x8, 0x0, [@remote, @private2]}}}], 0x68}}, {{&(0x7f0000000c40)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="ebe21ac1a7e4abdee7cfecabc8eb749b7de61d9ce9f46c3405e6889f768ed48ab3f711507fe64c1413e3c93d43c2f0d964482ae1b8ac2f817dffef00bfd273c628bff817383262", 0x47}, {&(0x7f0000000d00)="7ccda5a497a5d4a418fb044478b8b5fe3a07db7a472650804159c40e4990eb45a6975c4368e54f95e4fd7686ab75d7f0fcb70ed4f76f02d2629462ad72a768da5d232048f6336e742c94e200b3f86f50b2170a83074b69d22cbd5bb59d3c63d09e2830435c4a06b7ced5ed79f2c9b8ac1b9461118ce86bbedf85bc8fa42daee4c8498e9c6743b2e07e560ff83e5826c55f07b6911bbf199b9119f55bdfbbaa2076156bafa142beb0aae7af33726d59daebd9542c621d85f72c8deb42ab548406e0", 0xc1}, {&(0x7f0000000e00)="7524a3ecba59e12f0090a940acd7eb3aadba1afceb89bcff9e0b4dabcd0cebf34fbc7002342df9f370aba8a5b3bd741841e003", 0x33}, {&(0x7f0000000e40)="3a41329a2af3b1390947e3e5a34bfd1269ed10c4f55b9613e668b0ac0cdb15355898d7cdc74be0728bcc927302a74abe84d2112e9ac1281b0c77d4bf60f7850be932488429c1b01927e70ca41553e1bbbb10f04a23b3f8b7ea9b0e43455cadaeb34021523768795b055d1e5cd2eb09f665b7", 0x72}], 0x4, &(0x7f0000000f00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1fcb}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0x0, 0x14, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private2}, @generic={0x0, 0x8d, "56684ec66f7e5bc072bf3d38642a2b0d6ea4b457bf5bd5854d6cc0a5a38307e4721754f5843e3103ae41c2c452288de8d06abd705d83e80d8f297e7a5eb710ab8ab420620aa8dcf10b601082a1374faace8d01fb0affc954ccf1f29b309ac6a3f4607b66d8258d7c9f73f9ab368faacbdae84c347c9c91ece367d600806ef78fcec7bd0da4f615ccf894e2065f"}]}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x2b, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x40}, @enc_lim={0x4, 0x1, 0xcd}, @generic={0xe8, 0x39, "078bd83db719b4c68418c170eb9bae34630d6b1aed1e93790ba0819e5b8140e2e85d57b1f32bf9d750727054d54c836edd1344cd04af48a14f"}, @enc_lim]}}}], 0x138}}, {{&(0x7f0000001040)={0xa, 0x4e20, 0x5, @mcast1, 0xd3}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000001080)="953f710bb1a8fcca95e3a96f31532fc2715542e832767740d072b275f912e91d0be9d6e7e051eb2ae629e3fd30fbbb5b5c572563b475548f4a432ded2815bb73f1c709fb1e535d6a32767202e63418d1bf173832520ec36a1f1af066df85ffec680807df3c0961a40a63150c98fbd57a5ed2ff63f2c750d115da20be47e670e9477b45b3e31c32bb8116efd4f7a5763941baf29aac161f2a7fb334fec7cf1988815bd64b501cc7489f41f1bc157c90c9c52173841fdd541be6fd137feab3deba3552cab7cf80517f611fd407fee389d4a2b468070c2e4dbefe92b049caf9c02330e4fb2168bf851627d2c9a016dee362777b30d828", 0xf5}], 0x1, &(0x7f00000011c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xfd91}}, @hopopts={{0xf8, 0x29, 0x36, {0x3b, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xa795, [0x5, 0x4, 0x3, 0x3]}}, @enc_lim, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @generic={0x0, 0x60, "424ed7c4b4827e8974bcac31a2f5cdc259f3550924416440c1b278c1df76c6eb2cf1c0920c8c0ec4af20b59a8ea2470f473c983eb0fa8d4bc3320e42725d08ccd610ef64a632555e6ed0531e8bbecbc5020686bbe2f141447aa3202589b3fd53"}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x0, 0xa, 0x1, 0x5, 0x0, [@mcast2, @empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @rthdrdstopts={{0xb8, 0x29, 0x37, {0x32, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @enc_lim, @generic={0x3f, 0x88, "3aef4660e3592d2861ca3bd9a404db09a3b24eb27b111bc17a275c6676d743d6f39f90118ca9ab4dfddd4bb02936c3e268d4fd0890a2a623756b5ca718cb88b2cb512b9a826e888fa90ef19ff986d08686f616b7a3fd9e2ab0d7719292af631e3c38e31736c03426853f5190da122721f21b65aa4c0c74dab70182eb73546fd8d549fca968f36c60"}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x3522}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}], 0x278}}, {{&(0x7f0000001440)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001480)="15ef9282538029142c9133a54fe887a6c483ff7b0f2e4d5c745ea3e5a1cadb7b7022e18cdcb762300169a4de7959c9247cd90d904a2fb826cd9c5f", 0x3b}, {&(0x7f00000014c0)}, {&(0x7f0000001e00)="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", 0x1000}], 0x3, &(0x7f0000001540)=[@tclass={{0x14, 0x29, 0x43, 0x4ce}}, @hoplimit={{0x14, 0x29, 0x34, 0xff}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x2b, 0x5, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @hopopts_2292={{0x108, 0x29, 0x36, {0x8, 0x1d, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0x8, 0xb9, "bfa186fc28572581b97d340d00f62c92015205fa130bcb031c2e159e3f34290a72dd7644fe0c506ca78fcd8abaab9b4345b90efe83cba0d11a255fa6ba437047f464379e32abcef1f3253cdeca6847364843696bdab2562ce48dea25dcfcab70bae99d1da0ebc1b25dbd4af951b29eab98f051b11ddd58f2386f20b4078c2deaf99c05f8119419048aae7b1e78643e72aa3ddb1358b54feee2656354a5301cc864478cd2b0af7bc747a3128806cb4ff898168dc2595d18d2f3"}, @pad1, @ra={0x5, 0x2, 0x40e4}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5f, 0x4, [0xffffffffffffffc1]}}, @pad1]}}}, @hopopts_2292={{0x1a0, 0x29, 0x36, {0x2, 0x31, '\x00', [@ra={0x5, 0x2, 0x9}, @generic={0x2, 0xa8, "1a8050422c8b851a991eb25c40ab357afc8379c6ecb6dab2b82fa3641210112321b640e97a9d98567573d95fc995a69bea46de84ad2e00ea5241317709ba92767c5f9fe8ceedab10397751657b1c2b49bf70b2efd2e4b3da890150682d914ed0c3403ffeaf2e484d730839f010d976ec8b1c469bb601e6bc9ca231fad04a652e2a833827b5402b7d5409068a839d10d5919e9e42968afdab18d8de2c2849c76a9785e91a9e17b3b6"}, @enc_lim={0x4, 0x1, 0x40}, @pad1, @generic={0x0, 0xce, "d9a50a6a109d52283309a63b43a31d51b2ac4a8e696ae039f928124d85f5bbcd936af515553151b13001cd30d128f4dda3cd1264f3dab122a3a85a8deea07b925a3f4662c7ebd691cf6fa7b0381bd79558c423c4647a2815be6060f5c9ebf007a3c6b957327f01c271c580cb3ffcbfb4a7ebd72f5714e05fd9249fbe558b657e036d86455b168c5c62956f50beb824bc716b51ff5af7a58fd524f25ff2fba81f9254a01793a624f0950697d0c9d208c80cb05219182ced9df68982e2c6fad7856dcf2d866dfe10cfa37f8d6e4b96"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0x6}, @pad1]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x8, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x7f, 0x1, [0x5, 0x9, 0x5]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x3e0}}, {{&(0x7f0000001940)={0xa, 0x4e20, 0x180000, @loopback, 0x5}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001980)="a264360939dede1afa6a35c93a89f6a858c1df115215611652986902f931e24822abc51b9006ae98d3ef3d0bcb8610200bc6d6ed80f465b7f976828b454e1f76b9fadad26e080cfd91a3a8845f578416c81272445a672b4e0387837cef151c7e1ccc6ee595fccd77e776345bfbe6b7793c198171214ea95675358b7e81c3b9b007fc573fdc9e", 0x86}, {&(0x7f0000001a40)="5ebc7fadba803c53b62c293e11bfacca6b5c63922dfbe1a98c4f02a4acb9e95d111c7a96b45ef3f130da012b86fbedd7852f9c17c485f33b6115f04088081ccbc62a91f5f3df9fcc9b2bcf20b35078f2899a4e001f368be21b8cf0c81c01becd4d82d5482597c63784689f9aa87a56dbec45198cc15e1c6b958b767391247543", 0x80}, {&(0x7f0000001ac0)="34bdb1fe64ce8d7fd1a375640314084d7df1c04d83cb25ed6ba37ee9804927b1d0d2d7ecb332491844", 0x29}, {&(0x7f0000001b00)="d317935b5c7e335bae7531b7267a1d78047f6b3d59d9b9148b0e2c2c849e0ad92e62cc9d620325977bbbec2367fe1085dcf228ff0e495563e1e3b84477656b752820920cf154abda3da193aa87e0ae094c3e217c85", 0x55}, {&(0x7f0000001b80)="08397c59014e646de4bf5b7b3454a6576baacb0d8917355e6b1ff7c2e2969b812604a2dc5e0742293a1cca41360820b0f34b277f9001aaee4dca81d7bbaa19250bcf0839e1d68fa0ec9499325902a431b8e5c7186d163dd25bb88471d36eef63114f199dbf6b9b8f2d19e34ce2fae54f977d1c", 0x73}, {&(0x7f0000001c00)="e117b78a58fa6509ab5ab63faac9bf1fabfbcdf044b37ed23ae4fca2a0710c0956014e23cdd910ff99", 0x29}, {&(0x7f0000001c40)="1e55630d2b30b554ac90acf4d861830768c3671767d5e5ac77d6646fe33e6388d7ed4bfd1edd7ba3b67ed67e605b79c218650a63b90544642c062658ab7d585bcc3f39c815631e46f52130f192770fa7fe484b26fe3f64652b5e930275b7a1148e149fec97a87fcfca67cba49b436ee30ceb620d4bf5118d44bbd3b86b6e69ddef2574b46639e6ee9ce7d7ff15b74e95ea38d82c7f29a06f78c627", 0x9b}, {&(0x7f0000001d00)="ca74bc49cd3a582023d848029a755a2122630ee4d8ceef0ffea91446ecda3ef7e7e50f06292cc2073eb81b169fce4f98ef6152be4a7955f9a149937a0040edd680717f48fe1a17b89ce62670beebfde7bccb30eb51c73b76c1f8813a", 0x5c}], 0x8, &(0x7f0000002f40)=[@hoplimit={{0x14, 0x29, 0x34, 0x40}}, @hoplimit_2292={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts={{0x58, 0x29, 0x37, {0x3a, 0x7, '\x00', [@pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x73, 0x7, [0x3, 0xffffffff00000001, 0x7, 0x26, 0x6, 0x232]}}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x16, 0xc, 0x1, 0x4, 0x0, [@mcast1, @mcast2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x41, 0xc, 0x1, 0x9, 0x0, [@empty, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @empty]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x1d0}}, {{&(0x7f0000002e80)={0xa, 0x4e24, 0x9, @remote, 0x8001}, 0x1c, &(0x7f0000003240)=[{&(0x7f0000003140)="9a9231aaa2b3f2981d5f8a2e27367afead3b50769d923db1c58ca390156b8bca8221f1e122a8f11049a90964831ebee21ad81108b6c40412c2e168280a5b2ada3c4b8f2aed4740df", 0x48}, {&(0x7f0000002ec0)="dd000f5a453ce8aa9ccb20f44b520cf4f91260840bef9b93528d0264c62c4cf925cd19252b0d431d428f7db8be6a2a", 0x2f}, {&(0x7f00000031c0)="25c84bbd766c7a67cb784df3608116dfe727c3a991d36fcb67d3ab450fe867ea59d6a4bacc69614d121c275a7431617ecece25f7bf05c0ac04c017b2ac99e03fde69e3a2a1e032e96a0019f443712bdf85", 0x51}], 0x3, &(0x7f0000003280)=[@rthdr={{0x58, 0x29, 0x39, {0x33, 0x8, 0x1, 0x40, 0x0, [@remote, @private0, @empty, @dev={0xfe, 0x80, '\x00', 0x34}]}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000003300)="c37329ab2073c3675746678a1e1c7e324e611415f80105019b8891d8674c8499701dc31e52", 0x25}], 0x1, &(0x7f00000034c0)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x6, 0x8, 0x0, 0xff, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x0, 0xf, '\x00', [@ra={0x5, 0x2, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x2, 0x12, 0x1, 0x1ff, [0x4, 0x7ff, 0x1, 0x5, 0x3, 0x796190ab, 0x6, 0x1, 0x7]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @enc_lim, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r0}}}, @dstopts={{0x38, 0x29, 0x37, {0x32, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3f}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x3b, 0xe, 0x2, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x29}, @remote, @local, @private2, @private1, @empty, @dev={0xfe, 0x80, '\x00', 0x40}]}}}, @hopopts={{0x128, 0x29, 0x36, {0x62, 0x21, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x400}, @hao={0xc9, 0x10, @remote}, @generic={0x3f, 0xf4, "ceb88d168fbb5e00c29da4403e2525c98020577e432dc51734eb977175a5d99a2b423d179228e4e58efd05a1bf385f13e5536f1c33a55e57ccfbc1e32a3d8ea98a0c4b2a323d7a6731b24d48f409c1a1f8a7c9ebc64c7ce5297bac7fd857a056c94fca68fccc5c3aaf88e401e94efb46d803e7334eac38f4280f3e23be6f0eb617883af611d998a5f7db5f8e602d1e4f2d622de3b4b13450e2fa524ba63cf3513fffeae8b1d7f8c768f700b1780cf029213b13a8a723b6903051deb703c4e96aff077972c6b45dc001bde95923aea417ef34d3627270f07a2516818b6165858583155390c0084df98e38279379b0b6cf92c59e36"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}}}], 0x350}}, {{&(0x7f0000003840)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000004c80)=[{&(0x7f0000003880)="59245579bdfd910a0767f92b476c8a6e3968c8976e5c5730e9542b5fbbcffb62e4a3f938760683e97f981bfff352", 0x2e}, {&(0x7f00000038c0)="06bd40661ab813f8c69262a37f8312d5d403535e12ed197a12c08ec7d4089a4d66aa589e0edf3689b1b0e587639b60f9fd3677cfa67777a99c1d464b8f41e42bfee62b4705d78776a9b74cd9ea53d1a32993e54bcc46eec4eaf2b07db79fe5ea91afa4710d82a55add31c96765ae22c8d67b521ff5ca832be99fe91df1d43dc0b776e91eb491b0d1f262aeb47e94a2d9e0e86836e2751c57387ace", 0x9b}, {&(0x7f0000003980)="b0b056c40d73308b1f4da66e54e0214780412cc46706f6d313879f75cd1cea573737be5da53b482e38219f91e41e345efd6eb35f7f8411ba29c983828e0bee0d03c7a5478e035b90d3d0308bbffda84735847a348dbcb4b76119ed1929fde5b40692cc9659a83e68730d20e4942bc4309801cb93b50e59d2bfdb2addff1333", 0x7f}, {&(0x7f0000003a00)="411a8c3aa299589ab652376f8ae489284d75f4dd8a0365a95c55f0268b477bbc8d34fed6935c8f7251112c3cc11313b6d5f38a3e816272d79b35a3a707db99d7f2e6e6990533725ae2969213b9ad3993814d924619eda949f53a63264df77aa6f25d2ec1d5fd6ef9a84868de8537a9a73f7ea36a05d470185364503529e70eadd92acb5f2960880b2081e2c28fb0e95016a413210ad451c8dc17c2296a44252035bd5a036ad28f4f43d9b3f0245a2db3ce916cfaf8c9e19ae46a5da1c846d6eed737c9e8b03fd16784bd96ea040e3476f6617455393e373bab9fe7522029723c012607b22c2367", 0xe7}, {&(0x7f0000003b00)="911144a24d4db67c7d225bd984ef9ead58eada3a55bf59bc2bbf8254c47ccbffd2eef66108d43cbbd88accada1bf93e29aa4f9f81ef1f1e5e35134baecbad4bc11c021ee2c1eb6c5aa045a7ddb278e50057e5ffdaf19741659a4f7955b3869fdd8222a1ab16eda4645f8861fae851b715d661b54fa9f3edaeca02550765af9dbc1c6c1aef077dc6a2dd4394ca60b17ef93f71f6a62a88d6bc5a8428c4a19cfa03e3a88fb8b3841", 0xa7}, {&(0x7f0000003bc0)="a5172472fed1ff9a61749b7bffbb1520a3b02e2ffaa57f28d78c0dfc9c88dd4fceeefd78ee2df7a4c5621ae42ab8b0218ca89bd3fd931edb366b1fb6d73f6dac5ecd9609e2539f516ab4bf8b3a04d5a5e0588bddaa007f0999a06a9f00682cfe863fab0718e1c37b687cd90bab5cb7c65194fa248082cb8d48d8a9091fd8413c7aac1d48ff5a0ac1fcf929ad1ccbbe331ba07dd24a52e042", 0x98}, {&(0x7f0000003c80)="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", 0x1000}], 0x7, &(0x7f0000004d00)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x32, 0x6, 0x0, 0x4, 0x0, [@mcast2, @local, @remote]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0xffff}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0xd0}}, {{&(0x7f0000004e00)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}, 0x1c, &(0x7f0000004fc0)=[{&(0x7f0000004e40)="ffe044387e27fb24501d8e3bf96870939010475db5349f19bed309b58e25ab9d48012d460af510d7db2215f5544cd1037011c45a1558a4ba153caf0702684469131a59b0bee210f6005612ac20958ea08ec96467dc3d927d33909696dc3c78b62ab9a2da2429d77788fa2f2a97f6582c7acea240f7add0f0e86458e4aab2c36948715b320c68742b2ae2aa5d609b961aa5f8c57cb8652e51d3483c8c2c21e2e404bd0b73b5cfeb7a39c75bd0f491b986d3ae026d8c7576ce03936330a6f60bd5c691633c8431", 0xc6}, {&(0x7f0000004f40)="75c3b8a9fd0c7a51ad2d9edcc47b02b541c3d8550e21fc28a401740b67c6cfbc58fb812b4209e46fae9ba4153452a63975651ee03393087874171b432306d5058bebd5468daab008e445c7504e5905b38f1fb936c17c", 0x56}], 0x2, &(0x7f0000005000)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts={{0xe8, 0x29, 0x36, {0x11, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x48}, @ra={0x5, 0x2, 0x7f}, @generic={0x1, 0x7d, "4cc3060a3b7615dbd2694996de6504024377c68d4abaca7d0d8e5520d94c37479d9d1c54a254cb125307094cc7a4b3f9b19b56bc9a73415bd7f8ce8d080065b15b608c5d1914075284545bcd047a48ce6098e40a465e23bbada2a05ee997def2e4c6b55936e7d9670f898eb51851a1ee0016586216a933bbffec5d80c5"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x20}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x7, [0x0, 0x5]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x66, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x40}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x687a62f577ef7570, 0x2, 0x4, 0x3f, 0x0, [@mcast2]}}}], 0x160}}], 0xa, 0x4000) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:19:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) (fail_nth: 5) [ 2789.285287] FAULT_INJECTION: forcing a failure. [ 2789.285287] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.287707] CPU: 0 PID: 19803 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2789.289132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.290820] Call Trace: [ 2789.291370] dump_stack+0x107/0x167 [ 2789.292121] should_fail.cold+0x5/0xa [ 2789.292938] ? create_object.isra.0+0x3a/0xa20 [ 2789.293925] should_failslab+0x5/0x20 [ 2789.294717] kmem_cache_alloc+0x5b/0x360 [ 2789.295554] create_object.isra.0+0x3a/0xa20 [ 2789.296461] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.297538] kmem_cache_alloc+0x159/0x360 [ 2789.298397] __skb_ext_alloc+0x19/0x90 [ 2789.299196] skb_ext_add+0x508/0x670 [ 2789.299957] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 2789.301036] __alloc_skb+0x3c1/0x620 [ 2789.301810] netlink_sendmsg+0x98e/0xdf0 [ 2789.302655] ? netlink_unicast+0x7f0/0x7f0 [ 2789.303534] ? netlink_unicast+0x7f0/0x7f0 [ 2789.304397] sock_sendmsg+0x154/0x190 [ 2789.304587] EXT4-fs (sda): re-mounted. Opts: (null) [ 2789.305197] ____sys_sendmsg+0x70d/0x870 [ 2789.305224] ? kernel_sendmsg+0x50/0x50 [ 2789.305238] ? do_recvmmsg+0x6d0/0x6d0 [ 2789.305259] ? perf_trace_lock+0xac/0x490 [ 2789.305285] ? __lockdep_reset_lock+0x180/0x180 [ 2789.305302] ? perf_trace_lock+0xac/0x490 [ 2789.305319] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.305342] ___sys_sendmsg+0xf3/0x170 [ 2789.305363] ? sendmsg_copy_msghdr+0x160/0x160 [ 2789.305390] ? lock_downgrade+0x6d0/0x6d0 [ 2789.305413] ? find_held_lock+0x2c/0x110 [ 2789.305444] ? __fget_files+0x296/0x480 [ 2789.305477] ? __fget_light+0xea/0x290 [ 2789.305505] __sys_sendmsg+0xe5/0x1b0 [ 2789.305523] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2789.305541] ? rcu_read_lock_any_held+0x75/0xa0 [ 2789.305583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.305605] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.305624] ? trace_hardirqs_on+0x5b/0x180 [ 2789.305647] do_syscall_64+0x33/0x40 [ 2789.305668] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2789.305681] RIP: 0033:0x7f8d57ad3b19 [ 2789.305701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.305712] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2789.305734] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2789.305745] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2789.305757] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.305768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2789.305780] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2789.325681] FAULT_INJECTION: forcing a failure. [ 2789.325681] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.343572] CPU: 0 PID: 19815 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2789.345008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.346686] Call Trace: [ 2789.347227] dump_stack+0x107/0x167 [ 2789.347976] should_fail.cold+0x5/0xa [ 2789.348765] ? rfkill_fop_open+0x367/0x680 [ 2789.349628] should_failslab+0x5/0x20 [ 2789.350400] kmem_cache_alloc_trace+0x55/0x360 [ 2789.351337] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2789.352376] rfkill_fop_open+0x367/0x680 [ 2789.353230] ? rfkill_init_sw_state+0x150/0x150 [ 2789.354193] misc_open+0x375/0x4a0 [ 2789.354937] ? misc_devnode+0x130/0x130 [ 2789.355746] chrdev_open+0x268/0x6e0 [ 2789.356510] ? cdev_device_add+0x220/0x220 [ 2789.357393] ? security_file_open+0x20b/0x500 [ 2789.358320] do_dentry_open+0x4b7/0x1090 [ 2789.359145] ? cdev_device_add+0x220/0x220 [ 2789.360009] ? may_open+0x1e4/0x400 [ 2789.360771] path_openat+0x193d/0x26d0 [ 2789.361589] ? path_lookupat+0x860/0x860 [ 2789.362414] ? perf_trace_lock+0xac/0x490 [ 2789.363260] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.364084] ? lock_acquire+0x197/0x490 [ 2789.364930] ? __lockdep_reset_lock+0x180/0x180 [ 2789.365882] do_filp_open+0x17e/0x3d0 [ 2789.366657] ? may_open_dev+0xf0/0xf0 [ 2789.367457] ? rwlock_bug.part.0+0x90/0x90 [ 2789.368332] ? _raw_spin_unlock+0x1a/0x30 [ 2789.369188] ? __alloc_fd+0x2a5/0x620 [ 2789.369989] do_sys_openat2+0x171/0x420 [ 2789.370802] ? build_open_flags+0x690/0x690 [ 2789.371673] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2789.372662] ? wait_for_completion+0x270/0x270 [ 2789.373613] __x64_sys_openat+0x13f/0x1f0 [ 2789.374460] ? __ia32_sys_open+0x1c0/0x1c0 [ 2789.375317] ? ksys_write+0x1a9/0x260 [ 2789.376099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.377179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.377876] FAULT_INJECTION: forcing a failure. [ 2789.377876] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.378227] do_syscall_64+0x33/0x40 [ 2789.378249] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2789.378268] RIP: 0033:0x7f2947304b19 [ 2789.382992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.386728] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2789.388287] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2789.389762] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2789.391221] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.392682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.394131] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2789.395618] CPU: 1 PID: 19814 Comm: syz-executor.1 Not tainted 5.10.161 #1 [ 2789.397043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.398725] Call Trace: [ 2789.399268] dump_stack+0x107/0x167 [ 2789.400022] should_fail.cold+0x5/0xa [ 2789.400807] ? __skb_ext_alloc+0x19/0x90 [ 2789.401642] should_failslab+0x5/0x20 [ 2789.402418] kmem_cache_alloc+0x5b/0x360 [ 2789.403255] __skb_ext_alloc+0x19/0x90 [ 2789.404043] skb_ext_add+0x508/0x670 [ 2789.404832] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 2789.405916] __alloc_skb+0x3c1/0x620 [ 2789.406690] create_monitor_ctrl_open+0x170/0x680 [ 2789.407677] ? create_monitor_ctrl_close+0x460/0x460 [ 2789.408727] ? sysret32_from_system_call+0x2c/0x9a [ 2789.409729] ? security_capable+0x95/0xc0 [ 2789.410578] hci_sock_ioctl+0x39c/0x910 [ 2789.411396] ? create_monitor_event+0x850/0x850 [ 2789.412344] ? perf_trace_lock+0xac/0x490 [ 2789.413205] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.414052] sock_do_ioctl+0xd3/0x300 [ 2789.414831] ? compat_ifr_data_ioctl+0x180/0x180 [ 2789.415808] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2789.416994] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2789.418049] ? do_vfs_ioctl+0x283/0x10d0 [ 2789.418876] ? selinux_inode_getsecctx+0x90/0x90 [ 2789.419852] ? generic_block_fiemap+0x60/0x60 [ 2789.420783] sock_ioctl+0x3ea/0x700 [ 2789.421523] ? dlci_ioctl_set+0x30/0x30 [ 2789.422339] ? selinux_file_ioctl+0xb1/0x260 [ 2789.423249] ? dlci_ioctl_set+0x30/0x30 [ 2789.424064] __x64_sys_ioctl+0x19a/0x210 [ 2789.424923] do_syscall_64+0x33/0x40 [ 2789.425689] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2789.426728] RIP: 0033:0x7f572aee3b19 [ 2789.427483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.431239] RSP: 002b:00007f5728459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2789.432793] RAX: ffffffffffffffda RBX: 00007f572aff6f60 RCX: 00007f572aee3b19 [ 2789.434239] RDX: 0000000020000000 RSI: 00000000400448dd RDI: 0000000000000005 [ 2789.435701] RBP: 00007f57284591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.437175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2789.438633] R13: 00007ffc3bfb44bf R14: 00007f5728459300 R15: 0000000000022000 [ 2789.442968] FAULT_INJECTION: forcing a failure. [ 2789.442968] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.445265] CPU: 1 PID: 19812 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2789.446659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.448344] Call Trace: [ 2789.448893] dump_stack+0x107/0x167 [ 2789.449647] should_fail.cold+0x5/0xa [ 2789.450425] ? create_object.isra.0+0x3a/0xa20 [ 2789.451360] should_failslab+0x5/0x20 [ 2789.452138] kmem_cache_alloc+0x5b/0x360 [ 2789.452985] create_object.isra.0+0x3a/0xa20 [ 2789.453880] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.454928] kmem_cache_alloc_trace+0x151/0x360 [ 2789.455900] rfkill_fop_open+0x367/0x680 [ 2789.456758] ? rfkill_init_sw_state+0x150/0x150 [ 2789.457712] misc_open+0x375/0x4a0 [ 2789.458436] ? misc_devnode+0x130/0x130 [ 2789.459240] chrdev_open+0x268/0x6e0 [ 2789.460000] ? cdev_device_add+0x220/0x220 [ 2789.460882] ? security_file_open+0x20b/0x500 [ 2789.461797] do_dentry_open+0x4b7/0x1090 [ 2789.462624] ? cdev_device_add+0x220/0x220 [ 2789.463483] ? may_open+0x1e4/0x400 [ 2789.464228] path_openat+0x193d/0x26d0 [ 2789.465050] ? path_lookupat+0x860/0x860 [ 2789.465871] ? perf_trace_lock+0xac/0x490 [ 2789.466721] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.467541] ? lock_acquire+0x197/0x490 [ 2789.468351] ? __lockdep_reset_lock+0x180/0x180 [ 2789.469326] do_filp_open+0x17e/0x3d0 [ 2789.470100] ? may_open_dev+0xf0/0xf0 [ 2789.470893] ? rwlock_bug.part.0+0x90/0x90 [ 2789.471762] ? _raw_spin_unlock+0x1a/0x30 [ 2789.472606] ? __alloc_fd+0x2a5/0x620 [ 2789.473396] do_sys_openat2+0x171/0x420 [ 2789.474203] ? build_open_flags+0x690/0x690 [ 2789.475072] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2789.476048] ? wait_for_completion+0x270/0x270 [ 2789.477009] __x64_sys_openat+0x13f/0x1f0 [ 2789.477855] ? __ia32_sys_open+0x1c0/0x1c0 [ 2789.478709] ? ksys_write+0x1a9/0x260 [ 2789.479494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.480565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.481615] do_syscall_64+0x33/0x40 [ 2789.482373] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2789.483407] RIP: 0033:0x7f6eaa02cb19 [ 2789.484163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.487905] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2789.489473] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2789.490915] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2789.492376] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.493855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.495314] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2789.508352] EXT4-fs (sda): re-mounted. Opts: (null) 03:19:42 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) 03:19:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 9) 03:19:42 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x6, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:19:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) (fail_nth: 6) 03:19:42 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 13) [ 2789.630295] FAULT_INJECTION: forcing a failure. [ 2789.630295] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.632745] CPU: 1 PID: 19843 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2789.634148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.635856] Call Trace: [ 2789.636400] dump_stack+0x107/0x167 [ 2789.637132] should_fail.cold+0x5/0xa [ 2789.637939] ? create_object.isra.0+0x3a/0xa20 [ 2789.638874] should_failslab+0x5/0x20 [ 2789.639675] kmem_cache_alloc+0x5b/0x360 [ 2789.640512] create_object.isra.0+0x3a/0xa20 [ 2789.641430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.642491] kmem_cache_alloc_trace+0x151/0x360 [ 2789.643454] rfkill_fop_open+0x367/0x680 [ 2789.644317] ? rfkill_init_sw_state+0x150/0x150 [ 2789.645302] misc_open+0x375/0x4a0 [ 2789.646028] ? misc_devnode+0x130/0x130 [ 2789.646859] chrdev_open+0x268/0x6e0 [ 2789.647623] ? cdev_device_add+0x220/0x220 [ 2789.648522] ? security_file_open+0x20b/0x500 [ 2789.649468] do_dentry_open+0x4b7/0x1090 [ 2789.650305] ? cdev_device_add+0x220/0x220 [ 2789.651171] ? may_open+0x1e4/0x400 [ 2789.651922] path_openat+0x193d/0x26d0 [ 2789.652746] ? path_lookupat+0x860/0x860 [ 2789.653573] ? perf_trace_lock+0xac/0x490 [ 2789.654431] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.655256] ? lock_acquire+0x197/0x490 [ 2789.656073] ? __lockdep_reset_lock+0x180/0x180 [ 2789.657047] do_filp_open+0x17e/0x3d0 [ 2789.657823] ? may_open_dev+0xf0/0xf0 [ 2789.658623] ? rwlock_bug.part.0+0x90/0x90 [ 2789.659502] ? _raw_spin_unlock+0x1a/0x30 [ 2789.660346] ? __alloc_fd+0x2a5/0x620 [ 2789.661149] do_sys_openat2+0x171/0x420 [ 2789.661963] ? build_open_flags+0x690/0x690 [ 2789.662840] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2789.663826] ? wait_for_completion+0x270/0x270 [ 2789.664797] __x64_sys_openat+0x13f/0x1f0 [ 2789.665640] ? __ia32_sys_open+0x1c0/0x1c0 [ 2789.666499] ? ksys_write+0x1a9/0x260 [ 2789.667286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.668376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.669449] do_syscall_64+0x33/0x40 [ 2789.670222] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2789.671267] RIP: 0033:0x7f2947304b19 [ 2789.672044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.675770] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2789.677334] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2789.677687] FAULT_INJECTION: forcing a failure. [ 2789.677687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2789.678775] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2789.678787] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.678799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:19:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="d940a3fdc40a3bf4b6176e93d03476869e06d12d8eda132ca0a7edfe262930a2dbdab3aeff9fc31723e13b9f4c9105005eec8edf6476fa00"/70], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) dup2(r0, r1) [ 2789.678811] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2789.687660] CPU: 0 PID: 19867 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2789.689091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.690768] Call Trace: [ 2789.691308] dump_stack+0x107/0x167 [ 2789.692049] should_fail.cold+0x5/0xa [ 2789.692837] _copy_from_iter_full+0x1ff/0x940 [ 2789.693742] ? __check_object_size+0x319/0x440 [ 2789.694678] netlink_sendmsg+0x86f/0xdf0 [ 2789.695512] ? netlink_unicast+0x7f0/0x7f0 [ 2789.696390] ? netlink_unicast+0x7f0/0x7f0 [ 2789.697263] sock_sendmsg+0x154/0x190 [ 2789.698054] ____sys_sendmsg+0x70d/0x870 [ 2789.698883] ? kernel_sendmsg+0x50/0x50 [ 2789.699690] ? do_recvmmsg+0x6d0/0x6d0 [ 2789.700478] ? perf_trace_lock+0xac/0x490 [ 2789.701364] ? __lockdep_reset_lock+0x180/0x180 [ 2789.702308] ? perf_trace_lock+0xac/0x490 [ 2789.703144] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.703973] ___sys_sendmsg+0xf3/0x170 [ 2789.704771] ? sendmsg_copy_msghdr+0x160/0x160 [ 2789.705705] ? lock_downgrade+0x6d0/0x6d0 [ 2789.706548] ? find_held_lock+0x2c/0x110 [ 2789.707384] ? __fget_files+0x296/0x480 [ 2789.708206] ? __fget_light+0xea/0x290 [ 2789.709016] __sys_sendmsg+0xe5/0x1b0 [ 2789.709785] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2789.710661] ? rcu_read_lock_any_held+0x75/0xa0 [ 2789.711627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.712705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.713750] ? trace_hardirqs_on+0x5b/0x180 [ 2789.714626] do_syscall_64+0x33/0x40 [ 2789.715391] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2789.716428] RIP: 0033:0x7f8d57ad3b19 [ 2789.717195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.720923] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2789.722459] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2789.723896] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2789.725348] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.726790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2789.728232] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2789.749968] FAULT_INJECTION: forcing a failure. [ 2789.749968] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.752327] CPU: 0 PID: 19866 Comm: syz-executor.1 Not tainted 5.10.161 #1 [ 2789.753740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.755424] Call Trace: [ 2789.755969] dump_stack+0x107/0x167 [ 2789.756745] should_fail.cold+0x5/0xa 03:19:42 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 21) [ 2789.757526] ? create_object.isra.0+0x3a/0xa20 [ 2789.758596] should_failslab+0x5/0x20 [ 2789.759374] kmem_cache_alloc+0x5b/0x360 [ 2789.760208] create_object.isra.0+0x3a/0xa20 [ 2789.761112] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.762149] kmem_cache_alloc+0x159/0x360 [ 2789.762997] __skb_ext_alloc+0x19/0x90 [ 2789.763785] skb_ext_add+0x508/0x670 [ 2789.764543] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 2789.765630] __alloc_skb+0x3c1/0x620 [ 2789.766395] create_monitor_ctrl_open+0x170/0x680 [ 2789.767387] ? create_monitor_ctrl_close+0x460/0x460 [ 2789.768419] ? sysret32_from_system_call+0x2c/0x9a [ 2789.769440] ? security_capable+0x95/0xc0 [ 2789.770294] hci_sock_ioctl+0x39c/0x910 [ 2789.771111] ? create_monitor_event+0x850/0x850 [ 2789.772051] ? perf_trace_lock+0xac/0x490 [ 2789.772914] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.773756] sock_do_ioctl+0xd3/0x300 [ 2789.774534] ? compat_ifr_data_ioctl+0x180/0x180 [ 2789.775504] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2789.776700] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2789.777748] ? do_vfs_ioctl+0x283/0x10d0 [ 2789.778577] ? selinux_inode_getsecctx+0x90/0x90 [ 2789.779547] ? generic_block_fiemap+0x60/0x60 [ 2789.780472] sock_ioctl+0x3ea/0x700 [ 2789.781226] ? dlci_ioctl_set+0x30/0x30 [ 2789.782049] ? selinux_file_ioctl+0xb1/0x260 [ 2789.782975] ? dlci_ioctl_set+0x30/0x30 [ 2789.783788] __x64_sys_ioctl+0x19a/0x210 [ 2789.784629] do_syscall_64+0x33/0x40 [ 2789.785389] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2789.786441] RIP: 0033:0x7f572aee3b19 [ 2789.787198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.790929] RSP: 002b:00007f5728459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2789.792476] RAX: ffffffffffffffda RBX: 00007f572aff6f60 RCX: 00007f572aee3b19 [ 2789.793930] RDX: 0000000020000000 RSI: 00000000400448dd RDI: 0000000000000005 [ 2789.795380] RBP: 00007f57284591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.796862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2789.798326] R13: 00007ffc3bfb44bf R14: 00007f5728459300 R15: 0000000000022000 03:19:42 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 14) [ 2789.857948] FAULT_INJECTION: forcing a failure. [ 2789.857948] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.860346] CPU: 1 PID: 19947 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2789.861787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.863493] Call Trace: [ 2789.864046] dump_stack+0x107/0x167 [ 2789.864812] should_fail.cold+0x5/0xa [ 2789.865586] ? create_object.isra.0+0x3a/0xa20 [ 2789.866608] should_failslab+0x5/0x20 [ 2789.867526] kmem_cache_alloc+0x5b/0x360 [ 2789.868511] create_object.isra.0+0x3a/0xa20 [ 2789.869593] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.870818] kmem_cache_alloc_trace+0x151/0x360 [ 2789.871956] rfkill_fop_open+0x367/0x680 [ 2789.872960] ? rfkill_init_sw_state+0x150/0x150 [ 2789.874082] misc_open+0x375/0x4a0 [ 2789.874938] ? misc_devnode+0x130/0x130 [ 2789.875891] chrdev_open+0x268/0x6e0 [ 2789.876795] ? cdev_device_add+0x220/0x220 [ 2789.877827] ? security_file_open+0x20b/0x500 [ 2789.878926] do_dentry_open+0x4b7/0x1090 [ 2789.879906] ? cdev_device_add+0x220/0x220 [ 2789.880949] ? may_open+0x1e4/0x400 [ 2789.881835] path_openat+0x193d/0x26d0 [ 2789.882808] ? path_lookupat+0x860/0x860 [ 2789.883790] ? perf_trace_lock+0xac/0x490 [ 2789.884794] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.885765] ? lock_acquire+0x197/0x490 [ 2789.886729] ? __lockdep_reset_lock+0x180/0x180 [ 2789.887853] do_filp_open+0x17e/0x3d0 [ 2789.888786] ? may_open_dev+0xf0/0xf0 [ 2789.889723] ? rwlock_bug.part.0+0x90/0x90 [ 2789.890755] ? _raw_spin_unlock+0x1a/0x30 [ 2789.891740] ? __alloc_fd+0x2a5/0x620 [ 2789.892683] do_sys_openat2+0x171/0x420 [ 2789.893638] ? build_open_flags+0x690/0x690 [ 2789.894666] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2789.895816] ? wait_for_completion+0x270/0x270 [ 2789.896938] __x64_sys_openat+0x13f/0x1f0 [ 2789.897931] ? __ia32_sys_open+0x1c0/0x1c0 [ 2789.898959] ? ksys_write+0x1a9/0x260 [ 2789.899884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.901156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.902413] do_syscall_64+0x33/0x40 [ 2789.903314] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2789.904533] RIP: 0033:0x7f6eaa02cb19 [ 2789.905430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.909798] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2789.911623] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2789.913314] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2789.915000] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.916687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.918376] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2789.937620] EXT4-fs (sda): re-mounted. Opts: (null) 03:19:42 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) [ 2789.957346] FAULT_INJECTION: forcing a failure. [ 2789.957346] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.960200] CPU: 1 PID: 19948 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2789.961859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.963803] Call Trace: [ 2789.964436] dump_stack+0x107/0x167 [ 2789.965314] should_fail.cold+0x5/0xa [ 2789.966219] ? rfkill_fop_open+0x367/0x680 [ 2789.967226] should_failslab+0x5/0x20 [ 2789.968126] kmem_cache_alloc_trace+0x55/0x360 [ 2789.969216] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2789.970425] rfkill_fop_open+0x367/0x680 [ 2789.971397] ? rfkill_init_sw_state+0x150/0x150 [ 2789.972501] misc_open+0x375/0x4a0 [ 2789.973364] ? misc_devnode+0x130/0x130 [ 2789.974305] chrdev_open+0x268/0x6e0 [ 2789.975191] ? cdev_device_add+0x220/0x220 [ 2789.976198] ? security_file_open+0x20b/0x500 [ 2789.977261] do_dentry_open+0x4b7/0x1090 [ 2789.978221] ? cdev_device_add+0x220/0x220 [ 2789.979211] ? may_open+0x1e4/0x400 [ 2789.980075] path_openat+0x193d/0x26d0 [ 2789.981026] ? path_lookupat+0x860/0x860 [ 2789.981976] ? perf_trace_lock+0xac/0x490 [ 2789.982944] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.983888] ? lock_acquire+0x197/0x490 [ 2789.984834] ? __lockdep_reset_lock+0x180/0x180 [ 2789.985940] do_filp_open+0x17e/0x3d0 [ 2789.986829] ? may_open_dev+0xf0/0xf0 [ 2789.987751] ? rwlock_bug.part.0+0x90/0x90 [ 2789.988774] ? _raw_spin_unlock+0x1a/0x30 [ 2789.989748] ? __alloc_fd+0x2a5/0x620 [ 2789.990658] do_sys_openat2+0x171/0x420 [ 2789.991587] ? build_open_flags+0x690/0x690 [ 2789.992604] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2789.993742] ? wait_for_completion+0x270/0x270 [ 2789.994815] __x64_sys_openat+0x13f/0x1f0 [ 2789.995785] ? __ia32_sys_open+0x1c0/0x1c0 [ 2789.996768] ? ksys_write+0x1a9/0x260 [ 2789.997686] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.998901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2790.000116] do_syscall_64+0x33/0x40 [ 2790.000998] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2790.002180] RIP: 0033:0x7f2947304b19 [ 2790.003049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2790.007245] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2790.009014] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2790.010642] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2790.012268] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2790.013909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2790.015533] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2790.030491] EXT4-fs (sda): re-mounted. Opts: (null) [ 2802.790154] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:20:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) (fail_nth: 7) 03:20:04 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 22) [ 2811.579901] FAULT_INJECTION: forcing a failure. [ 2811.579901] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.581930] CPU: 0 PID: 19960 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2811.583162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.584623] Call Trace: [ 2811.585100] dump_stack+0x107/0x167 [ 2811.585716] should_fail.cold+0x5/0xa [ 2811.586354] ? __alloc_skb+0x6d/0x620 [ 2811.587026] should_failslab+0x5/0x20 [ 2811.587663] kmem_cache_alloc_node+0x55/0x370 [ 2811.588407] __alloc_skb+0x6d/0x620 [ 2811.589036] netlink_ack+0x1ed/0xab0 [ 2811.589683] ? netlink_sendmsg+0xdf0/0xdf0 [ 2811.590417] ? __mutex_lock+0x425/0x1260 [ 2811.591117] ? __lockdep_reset_lock+0x180/0x180 [ 2811.591897] netlink_rcv_skb+0x348/0x430 [ 2811.592576] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2811.593448] ? netlink_ack+0xab0/0xab0 [ 2811.594143] ? netlink_deliver_tap+0x1c4/0xc40 [ 2811.594941] xfrm_netlink_rcv+0x6b/0x90 [ 2811.595603] netlink_unicast+0x549/0x7f0 [ 2811.596295] ? netlink_attachskb+0x810/0x810 [ 2811.597062] netlink_sendmsg+0x905/0xdf0 [ 2811.597719] ? netlink_unicast+0x7f0/0x7f0 [ 2811.598434] ? netlink_unicast+0x7f0/0x7f0 [ 2811.599115] sock_sendmsg+0x154/0x190 [ 2811.599726] ____sys_sendmsg+0x70d/0x870 [ 2811.600378] ? kernel_sendmsg+0x50/0x50 [ 2811.601040] ? do_recvmmsg+0x6d0/0x6d0 [ 2811.601666] ? perf_trace_lock+0xac/0x490 [ 2811.602353] ? __lockdep_reset_lock+0x180/0x180 [ 2811.603099] ? perf_trace_lock+0xac/0x490 [ 2811.603777] ? SOFTIRQ_verbose+0x10/0x10 [ 2811.604431] ___sys_sendmsg+0xf3/0x170 [ 2811.605099] ? sendmsg_copy_msghdr+0x160/0x160 [ 2811.605864] ? lock_downgrade+0x6d0/0x6d0 [ 2811.606557] ? find_held_lock+0x2c/0x110 [ 2811.607241] ? __fget_files+0x296/0x480 [ 2811.607914] ? __fget_light+0xea/0x290 [ 2811.608568] __sys_sendmsg+0xe5/0x1b0 [ 2811.609209] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2811.609925] ? rcu_read_lock_any_held+0x75/0xa0 03:20:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664a4a1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:20:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) r1 = gettid() perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x3, 0xa0, 0xe8, 0x1, 0x0, 0xfffffffffffffff9, 0xdd1f4fa2e109acbb, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x9, 0x8000}, 0x814, 0x6, 0x6, 0x8, 0x6, 0x2, 0x4, 0x0, 0x8, 0x0, 0x8000}, r1, 0x7, 0xffffffffffffffff, 0x8) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) tkill(r2, 0x2c) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000180)) ptrace$getsig(0x4202, r2, 0x800000000000, &(0x7f00000000c0)) 03:20:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 10) 03:20:04 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x7, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:20:04 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 15) 03:20:04 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) [ 2811.610715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.611789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.612617] ? trace_hardirqs_on+0x5b/0x180 [ 2811.613339] do_syscall_64+0x33/0x40 [ 2811.613952] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2811.613998] FAULT_INJECTION: forcing a failure. [ 2811.613998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2811.614807] RIP: 0033:0x7f8d57ad3b19 [ 2811.618172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.621207] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2811.622425] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2811.623594] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2811.624754] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.625917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.627060] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2811.628481] CPU: 1 PID: 19957 Comm: syz-executor.1 Not tainted 5.10.161 #1 [ 2811.630157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.632140] Call Trace: [ 2811.632771] dump_stack+0x107/0x167 [ 2811.633659] should_fail.cold+0x5/0xa [ 2811.634572] _copy_from_user+0x2e/0x1b0 [ 2811.635525] hci_dev_cmd+0x7a/0x9a0 [ 2811.636433] ? hci_dev_reset_stat+0x200/0x200 [ 2811.637312] FAULT_INJECTION: forcing a failure. [ 2811.637312] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.637505] ? security_capable+0x95/0xc0 [ 2811.640218] hci_sock_ioctl+0x416/0x910 [ 2811.641171] ? create_monitor_event+0x850/0x850 [ 2811.642270] ? perf_trace_lock+0xac/0x490 [ 2811.643249] ? SOFTIRQ_verbose+0x10/0x10 [ 2811.644227] sock_do_ioctl+0xd3/0x300 [ 2811.645151] ? compat_ifr_data_ioctl+0x180/0x180 [ 2811.646283] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2811.647647] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2811.648873] ? do_vfs_ioctl+0x283/0x10d0 [ 2811.649843] ? selinux_inode_getsecctx+0x90/0x90 [ 2811.650964] ? generic_block_fiemap+0x60/0x60 [ 2811.652043] sock_ioctl+0x3ea/0x700 [ 2811.652925] ? dlci_ioctl_set+0x30/0x30 [ 2811.653885] ? selinux_file_ioctl+0xb1/0x260 [ 2811.654934] ? dlci_ioctl_set+0x30/0x30 [ 2811.655883] __x64_sys_ioctl+0x19a/0x210 [ 2811.656857] do_syscall_64+0x33/0x40 [ 2811.657744] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2811.658953] RIP: 0033:0x7f572aee3b19 [ 2811.659836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.664208] RSP: 002b:00007f5728459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2811.666025] RAX: ffffffffffffffda RBX: 00007f572aff6f60 RCX: 00007f572aee3b19 [ 2811.667720] RDX: 0000000020000000 RSI: 00000000400448dd RDI: 0000000000000005 [ 2811.669428] RBP: 00007f57284591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.671119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2811.672811] R13: 00007ffc3bfb44bf R14: 00007f5728459300 R15: 0000000000022000 [ 2811.674549] CPU: 0 PID: 19966 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2811.675646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.676965] Call Trace: [ 2811.677383] dump_stack+0x107/0x167 [ 2811.677953] should_fail.cold+0x5/0xa [ 2811.678572] ? create_object.isra.0+0x3a/0xa20 [ 2811.679290] should_failslab+0x5/0x20 [ 2811.679908] kmem_cache_alloc+0x5b/0x360 [ 2811.680552] create_object.isra.0+0x3a/0xa20 [ 2811.681279] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.682081] kmem_cache_alloc_trace+0x151/0x360 [ 2811.682848] rfkill_fop_open+0x367/0x680 [ 2811.683500] ? rfkill_init_sw_state+0x150/0x150 [ 2811.684256] misc_open+0x375/0x4a0 [ 2811.684815] ? misc_devnode+0x130/0x130 [ 2811.685471] chrdev_open+0x268/0x6e0 [ 2811.686081] ? cdev_device_add+0x220/0x220 [ 2811.686796] ? security_file_open+0x20b/0x500 [ 2811.687526] do_dentry_open+0x4b7/0x1090 [ 2811.688189] ? cdev_device_add+0x220/0x220 [ 2811.688929] ? may_open+0x1e4/0x400 [ 2811.689576] path_openat+0x193d/0x26d0 [ 2811.690256] ? path_lookupat+0x860/0x860 [ 2811.690927] ? perf_trace_lock+0xac/0x490 [ 2811.691595] ? SOFTIRQ_verbose+0x10/0x10 [ 2811.692287] ? lock_acquire+0x197/0x490 [ 2811.692655] EXT4-fs (sda): re-mounted. Opts: (null) [ 2811.692982] ? __lockdep_reset_lock+0x180/0x180 [ 2811.694945] do_filp_open+0x17e/0x3d0 [ 2811.695605] ? may_open_dev+0xf0/0xf0 [ 2811.696276] ? rwlock_bug.part.0+0x90/0x90 [ 2811.697025] ? _raw_spin_unlock+0x1a/0x30 [ 2811.697721] ? __alloc_fd+0x2a5/0x620 [ 2811.698397] do_sys_openat2+0x171/0x420 [ 2811.699050] ? build_open_flags+0x690/0x690 [ 2811.699787] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2811.700600] ? wait_for_completion+0x270/0x270 [ 2811.701416] __x64_sys_openat+0x13f/0x1f0 [ 2811.702141] ? __ia32_sys_open+0x1c0/0x1c0 [ 2811.702848] ? ksys_write+0x1a9/0x260 [ 2811.703499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.704391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.705264] do_syscall_64+0x33/0x40 [ 2811.705898] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2811.706738] RIP: 0033:0x7f2947304b19 [ 2811.707359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.710516] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2811.711842] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2811.713105] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2811.714244] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.715377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.716529] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2811.803572] FAULT_INJECTION: forcing a failure. [ 2811.803572] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.806250] CPU: 1 PID: 19972 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2811.807798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.809708] Call Trace: [ 2811.810324] dump_stack+0x107/0x167 [ 2811.811168] should_fail.cold+0x5/0xa [ 2811.812047] ? rfkill_fop_open+0x367/0x680 [ 2811.813030] should_failslab+0x5/0x20 [ 2811.813896] kmem_cache_alloc_trace+0x55/0x360 [ 2811.814933] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2811.816091] rfkill_fop_open+0x367/0x680 [ 2811.817041] ? rfkill_init_sw_state+0x150/0x150 [ 2811.818098] misc_open+0x375/0x4a0 [ 2811.818905] ? misc_devnode+0x130/0x130 [ 2811.819802] chrdev_open+0x268/0x6e0 [ 2811.820647] ? cdev_device_add+0x220/0x220 [ 2811.821623] ? security_file_open+0x20b/0x500 [ 2811.822645] do_dentry_open+0x4b7/0x1090 [ 2811.823568] ? cdev_device_add+0x220/0x220 [ 2811.824528] ? may_open+0x1e4/0x400 [ 2811.825365] path_openat+0x193d/0x26d0 [ 2811.826261] ? path_lookupat+0x860/0x860 [ 2811.827172] ? perf_trace_lock+0xac/0x490 [ 2811.828101] ? SOFTIRQ_verbose+0x10/0x10 [ 2811.829028] ? lock_acquire+0x197/0x490 [ 2811.829926] ? __lockdep_reset_lock+0x180/0x180 [ 2811.830979] do_filp_open+0x17e/0x3d0 [ 2811.831830] ? may_open_dev+0xf0/0xf0 [ 2811.832710] ? rwlock_bug.part.0+0x90/0x90 [ 2811.833681] ? _raw_spin_unlock+0x1a/0x30 [ 2811.834608] ? __alloc_fd+0x2a5/0x620 03:20:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 11) [ 2811.835486] do_sys_openat2+0x171/0x420 [ 2811.836559] ? build_open_flags+0x690/0x690 [ 2811.837539] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2811.838623] ? wait_for_completion+0x270/0x270 [ 2811.838994] EXT4-fs (sda): re-mounted. Opts: (null) [ 2811.839658] __x64_sys_openat+0x13f/0x1f0 [ 2811.839681] ? __ia32_sys_open+0x1c0/0x1c0 [ 2811.839704] ? ksys_write+0x1a9/0x260 [ 2811.843143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.844318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.845490] do_syscall_64+0x33/0x40 [ 2811.846325] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2811.847470] RIP: 0033:0x7f6eaa02cb19 [ 2811.848297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.852371] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2811.854063] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2811.855642] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2811.857233] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.858808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.860379] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2811.880439] FAULT_INJECTION: forcing a failure. [ 2811.880439] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.883060] CPU: 1 PID: 20084 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2811.884643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.886564] Call Trace: [ 2811.887182] dump_stack+0x107/0x167 [ 2811.888034] should_fail.cold+0x5/0xa [ 2811.888922] ? create_object.isra.0+0x3a/0xa20 [ 2811.889949] should_failslab+0x5/0x20 [ 2811.890796] kmem_cache_alloc+0x5b/0x360 [ 2811.891706] create_object.isra.0+0x3a/0xa20 [ 2811.892680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.893815] kmem_cache_alloc_node+0x169/0x370 [ 2811.894827] __alloc_skb+0x6d/0x620 [ 2811.895638] netlink_ack+0x1ed/0xab0 [ 2811.896467] ? netlink_sendmsg+0xdf0/0xdf0 [ 2811.897405] ? __mutex_lock+0x425/0x1260 [ 2811.898301] ? __lockdep_reset_lock+0x180/0x180 [ 2811.899333] netlink_rcv_skb+0x348/0x430 [ 2811.900232] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2811.901346] ? netlink_ack+0xab0/0xab0 [ 2811.902227] ? netlink_deliver_tap+0x1c4/0xc40 [ 2811.903255] xfrm_netlink_rcv+0x6b/0x90 [ 2811.904130] netlink_unicast+0x549/0x7f0 [ 2811.905049] ? netlink_attachskb+0x810/0x810 [ 2811.906039] netlink_sendmsg+0x905/0xdf0 [ 2811.906946] ? netlink_unicast+0x7f0/0x7f0 [ 2811.907909] ? netlink_unicast+0x7f0/0x7f0 [ 2811.908866] sock_sendmsg+0x154/0x190 [ 2811.909716] ____sys_sendmsg+0x70d/0x870 [ 2811.910622] ? kernel_sendmsg+0x50/0x50 [ 2811.911496] ? do_recvmmsg+0x6d0/0x6d0 [ 2811.912360] ? perf_trace_lock+0xac/0x490 [ 2811.913293] ? __lockdep_reset_lock+0x180/0x180 [ 2811.914329] ? perf_trace_lock+0xac/0x490 [ 2811.915247] ? SOFTIRQ_verbose+0x10/0x10 [ 2811.916149] ___sys_sendmsg+0xf3/0x170 [ 2811.917018] ? sendmsg_copy_msghdr+0x160/0x160 [ 2811.918031] ? lock_downgrade+0x6d0/0x6d0 [ 2811.918949] ? find_held_lock+0x2c/0x110 [ 2811.919857] ? __fget_files+0x296/0x480 [ 2811.920748] ? __fget_light+0xea/0x290 [ 2811.921629] __sys_sendmsg+0xe5/0x1b0 [ 2811.922467] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2811.923417] ? rcu_read_lock_any_held+0x75/0xa0 [ 2811.924465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.925615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.926736] ? trace_hardirqs_on+0x5b/0x180 [ 2811.927681] do_syscall_64+0x33/0x40 [ 2811.928494] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2811.929615] RIP: 0033:0x7f8d57ad3b19 [ 2811.930430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.934415] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2811.936064] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2811.937607] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2811.939133] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.940659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.942200] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 03:20:05 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x8, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:20:05 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 16) 03:20:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="e8bd29a260d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:20:05 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$getsig(0x420a, r0, 0x0, &(0x7f0000000180)) [ 2812.031933] FAULT_INJECTION: forcing a failure. [ 2812.031933] name failslab, interval 1, probability 0, space 0, times 0 [ 2812.033886] CPU: 0 PID: 20089 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2812.034855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2812.036222] Call Trace: [ 2812.036607] dump_stack+0x107/0x167 [ 2812.037234] should_fail.cold+0x5/0xa [ 2812.037870] ? create_object.isra.0+0x3a/0xa20 [ 2812.038633] should_failslab+0x5/0x20 [ 2812.039268] kmem_cache_alloc+0x5b/0x360 [ 2812.039945] create_object.isra.0+0x3a/0xa20 [ 2812.040668] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2812.041395] kmem_cache_alloc_trace+0x151/0x360 [ 2812.042059] rfkill_fop_open+0x367/0x680 [ 2812.042645] ? rfkill_init_sw_state+0x150/0x150 [ 2812.043298] misc_open+0x375/0x4a0 [ 2812.043795] ? misc_devnode+0x130/0x130 [ 2812.044352] chrdev_open+0x268/0x6e0 [ 2812.044883] ? cdev_device_add+0x220/0x220 [ 2812.045492] ? security_file_open+0x20b/0x500 [ 2812.046123] do_dentry_open+0x4b7/0x1090 [ 2812.046695] ? cdev_device_add+0x220/0x220 [ 2812.047242] ? may_open+0x1e4/0x400 [ 2812.047755] path_openat+0x193d/0x26d0 [ 2812.048306] ? path_lookupat+0x860/0x860 [ 2812.048872] ? perf_trace_lock+0xac/0x490 [ 2812.049452] ? SOFTIRQ_verbose+0x10/0x10 [ 2812.050011] ? lock_acquire+0x197/0x490 [ 2812.050565] ? __lockdep_reset_lock+0x180/0x180 [ 2812.051240] do_filp_open+0x17e/0x3d0 [ 2812.051787] ? may_open_dev+0xf0/0xf0 [ 2812.052349] ? rwlock_bug.part.0+0x90/0x90 [ 2812.052986] ? _raw_spin_unlock+0x1a/0x30 [ 2812.053592] ? __alloc_fd+0x2a5/0x620 [ 2812.054149] do_sys_openat2+0x171/0x420 [ 2812.054720] ? build_open_flags+0x690/0x690 [ 2812.055333] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2812.056021] ? wait_for_completion+0x270/0x270 [ 2812.056685] __x64_sys_openat+0x13f/0x1f0 [ 2812.057288] ? __ia32_sys_open+0x1c0/0x1c0 [ 2812.057900] ? ksys_write+0x1a9/0x260 [ 2812.058433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2812.059198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2812.059949] do_syscall_64+0x33/0x40 [ 2812.060481] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2812.061215] RIP: 0033:0x7f2947304b19 [ 2812.061760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2812.064440] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2812.065554] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2812.066596] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2812.067646] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2812.068668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2812.069707] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:20:05 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 23) 03:20:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) (fail_nth: 8) 03:20:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x2) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) [ 2812.103455] EXT4-fs (sda): re-mounted. Opts: (null) [ 2812.129444] EXT4-fs (sda): re-mounted. Opts: (null) 03:20:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 12) [ 2812.165303] FAULT_INJECTION: forcing a failure. [ 2812.165303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2812.167166] CPU: 0 PID: 20104 Comm: syz-executor.1 Not tainted 5.10.161 #1 [ 2812.168311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2812.169638] Call Trace: [ 2812.170060] dump_stack+0x107/0x167 [ 2812.170643] should_fail.cold+0x5/0xa [ 2812.171286] _copy_to_user+0x2e/0x180 [ 2812.171906] simple_read_from_buffer+0xcc/0x160 [ 2812.172640] proc_fail_nth_read+0x198/0x230 [ 2812.173344] ? proc_sessionid_read+0x230/0x230 [ 2812.174059] ? security_file_permission+0x24e/0x570 [ 2812.174856] ? perf_trace_initcall_start+0x101/0x380 [ 2812.175710] ? proc_sessionid_read+0x230/0x230 [ 2812.176415] vfs_read+0x228/0x580 [ 2812.176980] ksys_read+0x12d/0x260 [ 2812.177521] ? vfs_write+0xa30/0xa30 [ 2812.178099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2812.178893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2812.179703] do_syscall_64+0x33/0x40 [ 2812.180272] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2812.181061] RIP: 0033:0x7f572ae9669c [ 2812.181625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2812.184742] RSP: 002b:00007f5728459170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2812.186232] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f572ae9669c [ 2812.187625] RDX: 000000000000000f RSI: 00007f57284591e0 RDI: 0000000000000003 [ 2812.188941] RBP: 00007f57284591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2812.190094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2812.191261] R13: 00007ffc3bfb44bf R14: 00007f5728459300 R15: 0000000000022000 03:20:05 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x10, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:20:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee66643b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd47d8f4e1df6476fa00"/63], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) [ 2812.222484] FAULT_INJECTION: forcing a failure. [ 2812.222484] name failslab, interval 1, probability 0, space 0, times 0 [ 2812.224228] CPU: 0 PID: 20095 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2812.225401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2812.226732] Call Trace: [ 2812.227151] dump_stack+0x107/0x167 [ 2812.227737] should_fail.cold+0x5/0xa [ 2812.228357] ? create_object.isra.0+0x3a/0xa20 [ 2812.229103] should_failslab+0x5/0x20 [ 2812.229715] kmem_cache_alloc+0x5b/0x360 [ 2812.230377] create_object.isra.0+0x3a/0xa20 [ 2812.231073] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2812.231848] kmem_cache_alloc_trace+0x151/0x360 [ 2812.232562] rfkill_fop_open+0x367/0x680 [ 2812.233209] ? rfkill_init_sw_state+0x150/0x150 [ 2812.233915] misc_open+0x375/0x4a0 [ 2812.234457] ? misc_devnode+0x130/0x130 [ 2812.235058] chrdev_open+0x268/0x6e0 [ 2812.235622] ? cdev_device_add+0x220/0x220 [ 2812.236269] ? security_file_open+0x20b/0x500 [ 2812.236960] do_dentry_open+0x4b7/0x1090 [ 2812.237580] ? cdev_device_add+0x220/0x220 [ 2812.238221] ? may_open+0x1e4/0x400 [ 2812.238777] path_openat+0x193d/0x26d0 [ 2812.239382] ? path_lookupat+0x860/0x860 [ 2812.239999] ? perf_trace_lock+0xac/0x490 [ 2812.240758] ? SOFTIRQ_verbose+0x10/0x10 [ 2812.241528] ? lock_acquire+0x197/0x490 [ 2812.242273] ? __lockdep_reset_lock+0x180/0x180 [ 2812.243143] do_filp_open+0x17e/0x3d0 [ 2812.243844] ? may_open_dev+0xf0/0xf0 [ 2812.244562] ? rwlock_bug.part.0+0x90/0x90 [ 2812.245365] ? _raw_spin_unlock+0x1a/0x30 [ 2812.246128] ? __alloc_fd+0x2a5/0x620 [ 2812.246844] do_sys_openat2+0x171/0x420 [ 2812.247584] ? build_open_flags+0x690/0x690 [ 2812.248376] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2812.249292] ? wait_for_completion+0x270/0x270 [ 2812.250146] __x64_sys_openat+0x13f/0x1f0 [ 2812.250838] ? __ia32_sys_open+0x1c0/0x1c0 [ 2812.251456] ? ksys_write+0x1a9/0x260 [ 2812.252023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2812.252833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2812.253608] do_syscall_64+0x33/0x40 [ 2812.254181] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2812.254953] RIP: 0033:0x7f6eaa02cb19 [ 2812.255518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2812.258434] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2812.259564] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2812.260614] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2812.261695] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2812.262764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2812.263834] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2812.266698] FAULT_INJECTION: forcing a failure. [ 2812.266698] name failslab, interval 1, probability 0, space 0, times 0 [ 2812.268543] CPU: 0 PID: 20142 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2812.269604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2812.270848] Call Trace: [ 2812.271248] dump_stack+0x107/0x167 [ 2812.271803] should_fail.cold+0x5/0xa [ 2812.272385] should_failslab+0x5/0x20 [ 2812.272967] __kmalloc_node_track_caller+0x74/0x3f0 [ 2812.273717] ? netlink_ack+0x1ed/0xab0 [ 2812.274316] __alloc_skb+0xb1/0x620 [ 2812.274875] netlink_ack+0x1ed/0xab0 [ 2812.275447] ? netlink_sendmsg+0xdf0/0xdf0 [ 2812.276081] ? __mutex_lock+0x425/0x1260 [ 2812.276727] ? __lockdep_reset_lock+0x180/0x180 [ 2812.277460] netlink_rcv_skb+0x348/0x430 [ 2812.278107] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2812.278896] ? netlink_ack+0xab0/0xab0 [ 2812.279503] ? netlink_deliver_tap+0x1c4/0xc40 [ 2812.280221] xfrm_netlink_rcv+0x6b/0x90 [ 2812.280819] netlink_unicast+0x549/0x7f0 [ 2812.281486] ? netlink_attachskb+0x810/0x810 [ 2812.282174] netlink_sendmsg+0x905/0xdf0 [ 2812.282821] ? netlink_unicast+0x7f0/0x7f0 [ 2812.283483] ? netlink_unicast+0x7f0/0x7f0 [ 2812.284151] sock_sendmsg+0x154/0x190 [ 2812.284736] ____sys_sendmsg+0x70d/0x870 [ 2812.285402] ? kernel_sendmsg+0x50/0x50 [ 2812.286145] ? do_recvmmsg+0x6d0/0x6d0 [ 2812.286927] ? perf_trace_lock+0xac/0x490 [ 2812.287772] ? __lockdep_reset_lock+0x180/0x180 [ 2812.288717] ? perf_trace_lock+0xac/0x490 [ 2812.289564] ? SOFTIRQ_verbose+0x10/0x10 [ 2812.290382] ___sys_sendmsg+0xf3/0x170 [ 2812.291177] ? sendmsg_copy_msghdr+0x160/0x160 [ 2812.292029] ? lock_downgrade+0x6d0/0x6d0 [ 2812.292716] ? find_held_lock+0x2c/0x110 [ 2812.293408] ? __fget_files+0x296/0x480 [ 2812.294057] ? __fget_light+0xea/0x290 [ 2812.294716] __sys_sendmsg+0xe5/0x1b0 [ 2812.295328] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2812.296017] ? rcu_read_lock_any_held+0x75/0xa0 [ 2812.296815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2812.297679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2812.298548] ? trace_hardirqs_on+0x5b/0x180 [ 2812.299250] do_syscall_64+0x33/0x40 [ 2812.299851] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2812.300700] RIP: 0033:0x7f8d57ad3b19 [ 2812.301330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2812.304344] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2812.305590] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2812.306739] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2812.307906] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2812.309099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2812.310272] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 03:20:05 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, 0x0, 0x0, &(0x7f0000000180)) 03:20:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2812.359753] EXT4-fs (sda): re-mounted. Opts: (null) 03:20:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) ptrace(0xffffffffffffffff, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x7, 0x1, 0x5}, &(0x7f0000000200)=[{}, {}, {}, {}, {}]) [ 2812.440085] EXT4-fs (sda): re-mounted. Opts: (null) [ 2825.812577] kmemleak: 11 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2833.946890] FAULT_INJECTION: forcing a failure. [ 2833.946890] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.949296] CPU: 0 PID: 20330 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2833.950756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.952572] Call Trace: [ 2833.953136] dump_stack+0x107/0x167 [ 2833.953891] should_fail.cold+0x5/0xa [ 2833.954708] ? rfkill_fop_open+0x367/0x680 [ 2833.955624] should_failslab+0x5/0x20 [ 2833.956441] kmem_cache_alloc_trace+0x55/0x360 [ 2833.957420] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2833.958473] rfkill_fop_open+0x367/0x680 [ 2833.959333] ? rfkill_init_sw_state+0x150/0x150 [ 2833.960291] misc_open+0x375/0x4a0 [ 2833.961030] ? misc_devnode+0x130/0x130 [ 2833.961855] chrdev_open+0x268/0x6e0 [ 2833.962259] FAULT_INJECTION: forcing a failure. [ 2833.962259] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.962628] ? cdev_device_add+0x220/0x220 [ 2833.962658] ? security_file_open+0x20b/0x500 [ 2833.966689] do_dentry_open+0x4b7/0x1090 [ 2833.967520] ? cdev_device_add+0x220/0x220 [ 2833.968424] ? may_open+0x1e4/0x400 [ 2833.969225] path_openat+0x193d/0x26d0 [ 2833.970045] ? path_lookupat+0x860/0x860 [ 2833.970881] ? perf_trace_lock+0xac/0x490 [ 2833.971732] ? SOFTIRQ_verbose+0x10/0x10 [ 2833.972568] ? lock_acquire+0x197/0x490 [ 2833.973396] ? __lockdep_reset_lock+0x180/0x180 [ 2833.974363] do_filp_open+0x17e/0x3d0 [ 2833.975139] ? may_open_dev+0xf0/0xf0 [ 2833.975943] ? rwlock_bug.part.0+0x90/0x90 [ 2833.976825] ? _raw_spin_unlock+0x1a/0x30 [ 2833.977687] ? __alloc_fd+0x2a5/0x620 [ 2833.978486] do_sys_openat2+0x171/0x420 [ 2833.979306] ? build_open_flags+0x690/0x690 [ 2833.980185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2833.981203] ? wait_for_completion+0x270/0x270 [ 2833.982151] __x64_sys_openat+0x13f/0x1f0 [ 2833.983000] ? __ia32_sys_open+0x1c0/0x1c0 [ 2833.983858] ? ksys_write+0x1a9/0x260 [ 2833.984650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2833.985731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.986789] do_syscall_64+0x33/0x40 [ 2833.987553] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2833.988625] RIP: 0033:0x7f6eaa02cb19 [ 2833.989398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.993176] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2833.994769] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2833.996223] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2833.997696] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2833.999152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2834.000607] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2834.002113] CPU: 1 PID: 20329 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2834.003534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2834.005238] Call Trace: [ 2834.005779] dump_stack+0x107/0x167 [ 2834.006528] should_fail.cold+0x5/0xa [ 2834.007309] ? create_object.isra.0+0x3a/0xa20 [ 2834.008241] should_failslab+0x5/0x20 [ 2834.009019] kmem_cache_alloc+0x5b/0x360 [ 2834.009872] create_object.isra.0+0x3a/0xa20 [ 2834.010779] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2834.012061] __kmalloc_node_track_caller+0x1a6/0x3f0 03:20:26 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 17) 03:20:26 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 24) 03:20:26 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x18, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:20:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 13) 03:20:26 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, 0x0, 0x0, &(0x7f0000000180)) 03:20:26 executing program 6: perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0/../file0\x00', 0x75ffc837, 0x0, &(0x7f0000000340), 0x2000004, &(0x7f0000000380)={[{@huge_never}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x57, 0x74, 0x0, 0x78, 0x38]}}, {@huge_never}, {@huge_always}, {@huge_never}, {@huge_within_size}], [{@measure}, {@fsname={'fsname', 0x3d, 'reiserfs\x00'}}]}) 03:20:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x2, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:20:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) ptrace$getsig(0x4202, r1, 0x1, &(0x7f00000000c0)) tkill(r1, 0x23) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) tkill(0x0, 0x0) r2 = getpgrp(r0) ptrace$setregs(0xd, r2, 0x1f000000, &(0x7f0000000200)="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") tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2c) ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000000180)) tkill(r3, 0x2c) [ 2834.013205] ? netlink_ack+0x1ed/0xab0 [ 2834.014153] __alloc_skb+0xb1/0x620 [ 2834.014906] netlink_ack+0x1ed/0xab0 [ 2834.015676] ? netlink_sendmsg+0xdf0/0xdf0 [ 2834.016535] ? __mutex_lock+0x425/0x1260 [ 2834.017383] ? __lockdep_reset_lock+0x180/0x180 [ 2834.018335] netlink_rcv_skb+0x348/0x430 [ 2834.019168] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2834.020186] ? netlink_ack+0xab0/0xab0 [ 2834.020993] ? netlink_deliver_tap+0x1c4/0xc40 [ 2834.021939] xfrm_netlink_rcv+0x6b/0x90 [ 2834.022750] netlink_unicast+0x549/0x7f0 [ 2834.023585] ? netlink_attachskb+0x810/0x810 [ 2834.024497] netlink_sendmsg+0x905/0xdf0 [ 2834.025355] ? netlink_unicast+0x7f0/0x7f0 [ 2834.026238] ? netlink_unicast+0x7f0/0x7f0 [ 2834.027113] sock_sendmsg+0x154/0x190 [ 2834.027898] ____sys_sendmsg+0x70d/0x870 [ 2834.028733] ? kernel_sendmsg+0x50/0x50 [ 2834.029059] FAULT_INJECTION: forcing a failure. [ 2834.029059] name failslab, interval 1, probability 0, space 0, times 0 [ 2834.029543] ? do_recvmmsg+0x6d0/0x6d0 [ 2834.029563] ? perf_trace_lock+0xac/0x490 [ 2834.029591] ? __lockdep_reset_lock+0x180/0x180 [ 2834.034336] ? perf_trace_lock+0xac/0x490 [ 2834.035177] ? SOFTIRQ_verbose+0x10/0x10 [ 2834.036006] ___sys_sendmsg+0xf3/0x170 [ 2834.036804] ? sendmsg_copy_msghdr+0x160/0x160 [ 2834.037746] ? lock_downgrade+0x6d0/0x6d0 [ 2834.038593] ? find_held_lock+0x2c/0x110 [ 2834.039434] ? __fget_files+0x296/0x480 [ 2834.040256] ? __fget_light+0xea/0x290 [ 2834.041058] __sys_sendmsg+0xe5/0x1b0 [ 2834.041840] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2834.042715] ? rcu_read_lock_any_held+0x75/0xa0 [ 2834.043685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2834.044753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2834.045820] ? trace_hardirqs_on+0x5b/0x180 [ 2834.046701] do_syscall_64+0x33/0x40 [ 2834.047460] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2834.048503] RIP: 0033:0x7f8d57ad3b19 [ 2834.049271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2834.052984] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2834.054533] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2834.055981] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2834.057441] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2834.058883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2834.060325] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2834.061820] CPU: 0 PID: 20339 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2834.063241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2834.064926] Call Trace: [ 2834.065477] dump_stack+0x107/0x167 [ 2834.066226] should_fail.cold+0x5/0xa [ 2834.067005] ? create_object.isra.0+0x3a/0xa20 [ 2834.067938] should_failslab+0x5/0x20 [ 2834.068713] kmem_cache_alloc+0x5b/0x360 [ 2834.069567] create_object.isra.0+0x3a/0xa20 [ 2834.070464] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2834.071504] kmem_cache_alloc_trace+0x151/0x360 [ 2834.072466] rfkill_fop_open+0x367/0x680 [ 2834.073313] ? rfkill_init_sw_state+0x150/0x150 [ 2834.074270] misc_open+0x375/0x4a0 [ 2834.074996] ? misc_devnode+0x130/0x130 [ 2834.075803] chrdev_open+0x268/0x6e0 [ 2834.076563] ? cdev_device_add+0x220/0x220 [ 2834.077448] ? security_file_open+0x20b/0x500 [ 2834.077506] EXT4-fs (sda): re-mounted. Opts: (null) [ 2834.078363] do_dentry_open+0x4b7/0x1090 [ 2834.078387] ? cdev_device_add+0x220/0x220 [ 2834.081044] ? may_open+0x1e4/0x400 [ 2834.081802] path_openat+0x193d/0x26d0 [ 2834.082619] ? path_lookupat+0x860/0x860 [ 2834.083447] ? perf_trace_lock+0xac/0x490 [ 2834.084294] ? SOFTIRQ_verbose+0x10/0x10 [ 2834.085117] ? lock_acquire+0x197/0x490 [ 2834.085951] ? __lockdep_reset_lock+0x180/0x180 [ 2834.086908] do_filp_open+0x17e/0x3d0 [ 2834.087689] ? may_open_dev+0xf0/0xf0 [ 2834.088487] ? rwlock_bug.part.0+0x90/0x90 [ 2834.089369] ? _raw_spin_unlock+0x1a/0x30 [ 2834.090211] ? __alloc_fd+0x2a5/0x620 [ 2834.091006] do_sys_openat2+0x171/0x420 [ 2834.091818] ? build_open_flags+0x690/0x690 [ 2834.092693] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2834.093683] ? wait_for_completion+0x270/0x270 [ 2834.094626] __x64_sys_openat+0x13f/0x1f0 [ 2834.095477] ? __ia32_sys_open+0x1c0/0x1c0 [ 2834.096335] ? ksys_write+0x1a9/0x260 [ 2834.097123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2834.098208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2834.099262] do_syscall_64+0x33/0x40 [ 2834.100024] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2834.101062] RIP: 0033:0x7f2947304b19 [ 2834.101823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2834.105545] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2834.107091] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2834.108534] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2834.109996] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2834.111444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2834.112890] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2834.159414] tmpfs: Unsupported parameter 'huge' [ 2834.175493] EXT4-fs (sda): re-mounted. Opts: (null) [ 2846.906001] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:20:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 14) 03:20:47 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, 0x0, 0x0, &(0x7f0000000180)) 03:20:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)=r1) tkill(r0, 0x2c) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x5c33, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r3, 0x5c33, 0x0, 0x0, 0x0, 0x0) dup2(r2, r3) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:20:47 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 25) 03:20:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:20:47 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x21, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:20:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x9, 0x2, 0x54, 0x7, 0x0, 0x0, 0x18000, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x400, 0x3}, 0x10000, 0xdc, 0x10000, 0x3, 0x6, 0x10000, 0x0, 0x0, 0x6, 0x0, 0x101}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:20:47 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 18) [ 2854.913572] FAULT_INJECTION: forcing a failure. [ 2854.913572] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.916075] CPU: 0 PID: 20463 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2854.917520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2854.919230] Call Trace: [ 2854.919781] dump_stack+0x107/0x167 [ 2854.920538] should_fail.cold+0x5/0xa [ 2854.921329] ? __skb_ext_alloc+0x19/0x90 [ 2854.922182] should_failslab+0x5/0x20 [ 2854.922980] kmem_cache_alloc+0x5b/0x360 [ 2854.923830] __skb_ext_alloc+0x19/0x90 [ 2854.924629] skb_ext_add+0x508/0x670 [ 2854.925418] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 2854.926502] __alloc_skb+0x3c1/0x620 [ 2854.927276] netlink_ack+0x1ed/0xab0 [ 2854.928051] ? netlink_sendmsg+0xdf0/0xdf0 [ 2854.928916] ? __mutex_lock+0x425/0x1260 [ 2854.929758] ? __lockdep_reset_lock+0x180/0x180 [ 2854.930715] netlink_rcv_skb+0x348/0x430 [ 2854.931551] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2854.932576] ? netlink_ack+0xab0/0xab0 [ 2854.933387] ? netlink_deliver_tap+0x1c4/0xc40 [ 2854.934350] xfrm_netlink_rcv+0x6b/0x90 [ 2854.935164] netlink_unicast+0x549/0x7f0 [ 2854.936005] ? netlink_attachskb+0x810/0x810 [ 2854.936924] netlink_sendmsg+0x905/0xdf0 [ 2854.937773] ? netlink_unicast+0x7f0/0x7f0 [ 2854.938683] ? netlink_unicast+0x7f0/0x7f0 [ 2854.939552] sock_sendmsg+0x154/0x190 [ 2854.940359] ____sys_sendmsg+0x70d/0x870 [ 2854.941199] ? kernel_sendmsg+0x50/0x50 [ 2854.942040] ? do_recvmmsg+0x6d0/0x6d0 [ 2854.942838] ? perf_trace_lock+0xac/0x490 [ 2854.943706] ? __lockdep_reset_lock+0x180/0x180 [ 2854.944656] ? perf_trace_lock+0xac/0x490 [ 2854.945528] ? SOFTIRQ_verbose+0x10/0x10 [ 2854.946366] ___sys_sendmsg+0xf3/0x170 [ 2854.947167] ? sendmsg_copy_msghdr+0x160/0x160 [ 2854.948110] ? lock_downgrade+0x6d0/0x6d0 [ 2854.948971] ? find_held_lock+0x2c/0x110 [ 2854.949823] ? __fget_files+0x296/0x480 [ 2854.950653] ? __fget_light+0xea/0x290 [ 2854.951468] __sys_sendmsg+0xe5/0x1b0 [ 2854.952264] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2854.953155] ? rcu_read_lock_any_held+0x75/0xa0 [ 2854.954159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2854.955241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2854.956311] ? trace_hardirqs_on+0x5b/0x180 [ 2854.957212] do_syscall_64+0x33/0x40 [ 2854.957986] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2854.959045] RIP: 0033:0x7f8d57ad3b19 [ 2854.959810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2854.963610] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2854.965168] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2854.966634] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2854.968121] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2854.969611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2854.971081] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2854.977304] FAULT_INJECTION: forcing a failure. 03:20:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x4b49, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2854.977304] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.979919] CPU: 0 PID: 20468 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2854.981311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2854.983029] Call Trace: [ 2854.983577] dump_stack+0x107/0x167 [ 2854.984337] should_fail.cold+0x5/0xa [ 2854.985131] ? rfkill_fop_open+0x367/0x680 [ 2854.986019] should_failslab+0x5/0x20 [ 2854.986800] kmem_cache_alloc_trace+0x55/0x360 [ 2854.987752] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2854.988800] rfkill_fop_open+0x367/0x680 [ 2854.989668] ? rfkill_init_sw_state+0x150/0x150 [ 2854.990622] misc_open+0x375/0x4a0 [ 2854.991354] ? misc_devnode+0x130/0x130 [ 2854.992168] chrdev_open+0x268/0x6e0 [ 2854.992930] ? cdev_device_add+0x220/0x220 [ 2854.993816] ? security_file_open+0x20b/0x500 [ 2854.994742] do_dentry_open+0x4b7/0x1090 [ 2854.995577] ? cdev_device_add+0x220/0x220 [ 2854.996445] ? may_open+0x1e4/0x400 [ 2854.997202] path_openat+0x193d/0x26d0 [ 2854.998029] ? path_lookupat+0x860/0x860 [ 2854.998863] ? perf_trace_lock+0xac/0x490 [ 2854.999713] ? SOFTIRQ_verbose+0x10/0x10 [ 2855.000543] ? lock_acquire+0x197/0x490 [ 2855.001363] ? __lockdep_reset_lock+0x180/0x180 [ 2855.002343] do_filp_open+0x17e/0x3d0 [ 2855.003122] ? may_open_dev+0xf0/0xf0 [ 2855.003926] ? rwlock_bug.part.0+0x90/0x90 [ 2855.004808] ? _raw_spin_unlock+0x1a/0x30 [ 2855.005661] ? __alloc_fd+0x2a5/0x620 [ 2855.006460] do_sys_openat2+0x171/0x420 [ 2855.007279] ? build_open_flags+0x690/0x690 [ 2855.008159] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2855.009149] ? wait_for_completion+0x270/0x270 [ 2855.010114] __x64_sys_openat+0x13f/0x1f0 [ 2855.010964] ? __ia32_sys_open+0x1c0/0x1c0 [ 2855.011829] ? ksys_write+0x1a9/0x260 [ 2855.012620] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2855.013702] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2855.014760] do_syscall_64+0x33/0x40 [ 2855.015527] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2855.016573] RIP: 0033:0x7f2947304b19 [ 2855.017336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.021096] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2855.022674] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2855.024134] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2855.025597] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.027054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.028510] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2855.031332] FAULT_INJECTION: forcing a failure. [ 2855.031332] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.033692] CPU: 1 PID: 20467 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2855.035129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.036847] Call Trace: [ 2855.037418] dump_stack+0x107/0x167 [ 2855.038178] should_fail.cold+0x5/0xa [ 2855.038973] ? create_object.isra.0+0x3a/0xa20 [ 2855.039922] should_failslab+0x5/0x20 [ 2855.040138] EXT4-fs (sda): re-mounted. Opts: (null) [ 2855.040709] kmem_cache_alloc+0x5b/0x360 [ 2855.040743] create_object.isra.0+0x3a/0xa20 [ 2855.040764] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2855.040793] kmem_cache_alloc_trace+0x151/0x360 [ 2855.040826] rfkill_fop_open+0x367/0x680 [ 2855.040859] ? rfkill_init_sw_state+0x150/0x150 [ 2855.047705] misc_open+0x375/0x4a0 [ 2855.048445] ? misc_devnode+0x130/0x130 [ 2855.049268] chrdev_open+0x268/0x6e0 [ 2855.050047] ? cdev_device_add+0x220/0x220 [ 2855.050917] ? security_file_open+0x20b/0x500 [ 2855.051901] do_dentry_open+0x4b7/0x1090 [ 2855.052802] ? cdev_device_add+0x220/0x220 [ 2855.053677] ? may_open+0x1e4/0x400 [ 2855.054429] path_openat+0x193d/0x26d0 [ 2855.055271] ? path_lookupat+0x860/0x860 [ 2855.056105] ? perf_trace_lock+0xac/0x490 [ 2855.056990] ? SOFTIRQ_verbose+0x10/0x10 [ 2855.057834] ? lock_acquire+0x197/0x490 [ 2855.058657] ? __lockdep_reset_lock+0x180/0x180 [ 2855.059626] do_filp_open+0x17e/0x3d0 [ 2855.060412] ? may_open_dev+0xf0/0xf0 [ 2855.061219] ? rwlock_bug.part.0+0x90/0x90 [ 2855.062114] ? _raw_spin_unlock+0x1a/0x30 [ 2855.062967] ? __alloc_fd+0x2a5/0x620 [ 2855.063771] do_sys_openat2+0x171/0x420 [ 2855.064592] ? build_open_flags+0x690/0x690 [ 2855.065494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2855.066494] ? wait_for_completion+0x270/0x270 [ 2855.067449] __x64_sys_openat+0x13f/0x1f0 [ 2855.068301] ? __ia32_sys_open+0x1c0/0x1c0 [ 2855.069187] ? ksys_write+0x1a9/0x260 [ 2855.070007] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2855.071084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2855.072156] do_syscall_64+0x33/0x40 [ 2855.072937] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2855.074003] RIP: 0033:0x7f6eaa02cb19 [ 2855.074770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.078545] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2855.080107] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2855.081576] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2855.083037] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.084497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.085972] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:20:48 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 19) 03:20:48 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) 03:20:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 15) 03:20:48 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$cont(0x9, r2, 0x9, 0xc85) tkill(r1, 0x2c) ptrace$setopts(0x4200, r1, 0x1, 0x4) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) [ 2855.204706] FAULT_INJECTION: forcing a failure. [ 2855.204706] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.207186] CPU: 1 PID: 20587 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2855.208601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.210318] Call Trace: [ 2855.210871] dump_stack+0x107/0x167 [ 2855.211639] should_fail.cold+0x5/0xa [ 2855.212428] ? create_object.isra.0+0x3a/0xa20 [ 2855.213372] should_failslab+0x5/0x20 [ 2855.214180] kmem_cache_alloc+0x5b/0x360 [ 2855.215029] create_object.isra.0+0x3a/0xa20 [ 2855.215936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2855.216992] kmem_cache_alloc+0x159/0x360 [ 2855.217875] __skb_ext_alloc+0x19/0x90 [ 2855.218674] skb_ext_add+0x508/0x670 [ 2855.219442] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 2855.220526] __alloc_skb+0x3c1/0x620 [ 2855.221305] netlink_ack+0x1ed/0xab0 [ 2855.222087] ? netlink_sendmsg+0xdf0/0xdf0 [ 2855.222957] ? __mutex_lock+0x425/0x1260 [ 2855.223801] ? __lockdep_reset_lock+0x180/0x180 [ 2855.224760] netlink_rcv_skb+0x348/0x430 [ 2855.225621] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2855.226647] ? netlink_ack+0xab0/0xab0 [ 2855.227462] ? netlink_deliver_tap+0x1c4/0xc40 [ 2855.228414] xfrm_netlink_rcv+0x6b/0x90 [ 2855.229232] netlink_unicast+0x549/0x7f0 [ 2855.230082] ? netlink_attachskb+0x810/0x810 [ 2855.231006] netlink_sendmsg+0x905/0xdf0 [ 2855.231855] ? netlink_unicast+0x7f0/0x7f0 [ 2855.232743] ? netlink_unicast+0x7f0/0x7f0 [ 2855.233624] sock_sendmsg+0x154/0x190 [ 2855.234411] ____sys_sendmsg+0x70d/0x870 [ 2855.235252] ? kernel_sendmsg+0x50/0x50 [ 2855.236064] ? do_recvmmsg+0x6d0/0x6d0 [ 2855.236863] ? perf_trace_lock+0xac/0x490 [ 2855.237738] ? __lockdep_reset_lock+0x180/0x180 [ 2855.238688] ? perf_trace_lock+0xac/0x490 [ 2855.239542] ? SOFTIRQ_verbose+0x10/0x10 [ 2855.240384] ___sys_sendmsg+0xf3/0x170 [ 2855.240631] FAULT_INJECTION: forcing a failure. [ 2855.240631] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.241182] ? sendmsg_copy_msghdr+0x160/0x160 [ 2855.241212] ? lock_downgrade+0x6d0/0x6d0 [ 2855.241246] ? find_held_lock+0x2c/0x110 [ 2855.246091] ? __fget_files+0x296/0x480 [ 2855.246928] ? __fget_light+0xea/0x290 [ 2855.247738] __sys_sendmsg+0xe5/0x1b0 [ 2855.248520] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2855.249413] ? rcu_read_lock_any_held+0x75/0xa0 [ 2855.250395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2855.251475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2855.252534] ? trace_hardirqs_on+0x5b/0x180 [ 2855.253431] do_syscall_64+0x33/0x40 [ 2855.254199] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2855.255249] RIP: 0033:0x7f8d57ad3b19 [ 2855.256014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.259773] RSP: 002b:00007f8d55049188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2855.261331] RAX: ffffffffffffffda RBX: 00007f8d57be6f60 RCX: 00007f8d57ad3b19 [ 2855.262797] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2855.264261] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.265724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.267181] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2855.268681] CPU: 0 PID: 20588 Comm: syz-executor.7 Not tainted 5.10.161 #1 03:20:48 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x30, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 2855.270190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.272027] Call Trace: [ 2855.272722] dump_stack+0x107/0x167 [ 2855.273525] should_fail.cold+0x5/0xa [ 2855.274321] ? create_object.isra.0+0x3a/0xa20 [ 2855.275269] should_failslab+0x5/0x20 [ 2855.276060] kmem_cache_alloc+0x5b/0x360 [ 2855.276927] create_object.isra.0+0x3a/0xa20 [ 2855.277838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2855.278888] kmem_cache_alloc_trace+0x151/0x360 [ 2855.279868] rfkill_fop_open+0x367/0x680 [ 2855.280737] ? rfkill_init_sw_state+0x150/0x150 [ 2855.281718] misc_open+0x375/0x4a0 [ 2855.282456] ? misc_devnode+0x130/0x130 [ 2855.283260] chrdev_open+0x268/0x6e0 [ 2855.284017] ? cdev_device_add+0x220/0x220 [ 2855.284884] ? security_file_open+0x20b/0x500 [ 2855.285822] do_dentry_open+0x4b7/0x1090 [ 2855.286650] ? cdev_device_add+0x220/0x220 [ 2855.287508] ? may_open+0x1e4/0x400 [ 2855.288256] path_openat+0x193d/0x26d0 [ 2855.289068] ? path_lookupat+0x860/0x860 [ 2855.289898] ? perf_trace_lock+0xac/0x490 [ 2855.290739] ? SOFTIRQ_verbose+0x10/0x10 [ 2855.291567] ? lock_acquire+0x197/0x490 [ 2855.292381] ? __lockdep_reset_lock+0x180/0x180 [ 2855.293336] do_filp_open+0x17e/0x3d0 [ 2855.294121] ? may_open_dev+0xf0/0xf0 [ 2855.294915] ? rwlock_bug.part.0+0x90/0x90 [ 2855.295788] ? _raw_spin_unlock+0x1a/0x30 [ 2855.296628] ? __alloc_fd+0x2a5/0x620 [ 2855.297426] do_sys_openat2+0x171/0x420 [ 2855.298238] ? build_open_flags+0x690/0x690 [ 2855.299112] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2855.300092] ? wait_for_completion+0x270/0x270 [ 2855.301034] __x64_sys_openat+0x13f/0x1f0 [ 2855.301880] ? __ia32_sys_open+0x1c0/0x1c0 [ 2855.302735] ? ksys_write+0x1a9/0x260 [ 2855.303523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2855.304585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2855.305651] do_syscall_64+0x33/0x40 [ 2855.306413] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2855.307451] RIP: 0033:0x7f2947304b19 [ 2855.308206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.311911] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2855.313457] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2855.314899] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2855.316341] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.317798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.319245] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2855.337987] EXT4-fs (sda): re-mounted. Opts: (null) 03:20:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x541b, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:20:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) (fail_nth: 16) 03:20:48 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 26) [ 2855.388386] FAULT_INJECTION: forcing a failure. [ 2855.388386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2855.390826] CPU: 0 PID: 20597 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 2855.392274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.394035] Call Trace: [ 2855.394593] dump_stack+0x107/0x167 [ 2855.395378] should_fail.cold+0x5/0xa [ 2855.396168] _copy_to_user+0x2e/0x180 [ 2855.396984] simple_read_from_buffer+0xcc/0x160 [ 2855.397977] proc_fail_nth_read+0x198/0x230 [ 2855.398889] ? proc_sessionid_read+0x230/0x230 [ 2855.399834] ? security_file_permission+0x24e/0x570 [ 2855.400848] ? perf_trace_initcall_start+0x101/0x380 [ 2855.401911] ? proc_sessionid_read+0x230/0x230 [ 2855.402849] vfs_read+0x228/0x580 [ 2855.403568] ksys_read+0x12d/0x260 [ 2855.404302] ? vfs_write+0xa30/0xa30 [ 2855.405074] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2855.406172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2855.407233] do_syscall_64+0x33/0x40 [ 2855.408001] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2855.409045] RIP: 0033:0x7f8d57a8669c [ 2855.409818] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2855.413577] RSP: 002b:00007f8d55049170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2855.415126] RAX: ffffffffffffffda RBX: 000000000000005c RCX: 00007f8d57a8669c [ 2855.416582] RDX: 000000000000000f RSI: 00007f8d550491e0 RDI: 0000000000000004 [ 2855.418041] RBP: 00007f8d550491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.419494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.420947] R13: 00007ffd366f93cf R14: 00007f8d55049300 R15: 0000000000022000 [ 2855.513608] FAULT_INJECTION: forcing a failure. [ 2855.513608] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.516156] CPU: 0 PID: 20606 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2855.517638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.519330] Call Trace: [ 2855.519894] dump_stack+0x107/0x167 [ 2855.520650] should_fail.cold+0x5/0xa [ 2855.521452] ? rfkill_fop_open+0x367/0x680 [ 2855.522322] should_failslab+0x5/0x20 [ 2855.523104] kmem_cache_alloc_trace+0x55/0x360 [ 2855.524036] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2855.525087] rfkill_fop_open+0x367/0x680 [ 2855.525932] ? rfkill_init_sw_state+0x150/0x150 [ 2855.526877] misc_open+0x375/0x4a0 [ 2855.527601] ? misc_devnode+0x130/0x130 [ 2855.528405] chrdev_open+0x268/0x6e0 [ 2855.529162] ? cdev_device_add+0x220/0x220 [ 2855.530034] ? security_file_open+0x20b/0x500 [ 2855.530950] do_dentry_open+0x4b7/0x1090 [ 2855.531781] ? cdev_device_add+0x220/0x220 [ 2855.532642] ? may_open+0x1e4/0x400 [ 2855.533391] path_openat+0x193d/0x26d0 [ 2855.534228] ? path_lookupat+0x860/0x860 [ 2855.535064] ? perf_trace_lock+0xac/0x490 [ 2855.535899] ? SOFTIRQ_verbose+0x10/0x10 [ 2855.536732] ? lock_acquire+0x197/0x490 [ 2855.537552] ? __lockdep_reset_lock+0x180/0x180 [ 2855.538511] do_filp_open+0x17e/0x3d0 [ 2855.539283] ? may_open_dev+0xf0/0xf0 [ 2855.540088] ? rwlock_bug.part.0+0x90/0x90 [ 2855.540982] ? _raw_spin_unlock+0x1a/0x30 [ 2855.541862] ? __alloc_fd+0x2a5/0x620 [ 2855.542657] do_sys_openat2+0x171/0x420 [ 2855.543474] ? build_open_flags+0x690/0x690 [ 2855.544348] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2855.545332] ? wait_for_completion+0x270/0x270 [ 2855.546282] __x64_sys_openat+0x13f/0x1f0 [ 2855.547128] ? __ia32_sys_open+0x1c0/0x1c0 [ 2855.547989] ? ksys_write+0x1a9/0x260 [ 2855.548777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2855.549854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2855.550917] do_syscall_64+0x33/0x40 [ 2855.551679] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2855.552727] RIP: 0033:0x7f6eaa02cb19 [ 2855.553654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.558107] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2855.559671] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2855.561176] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2855.562704] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.564154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.565607] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:20:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:20:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x5421, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:20:48 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x48, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:20:48 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 20) 03:20:48 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) [ 2855.743438] FAULT_INJECTION: forcing a failure. [ 2855.743438] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.745863] CPU: 0 PID: 20722 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2855.747322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.749175] Call Trace: [ 2855.749732] dump_stack+0x107/0x167 [ 2855.750478] should_fail.cold+0x5/0xa [ 2855.751260] ? rfkill_fop_open+0x367/0x680 [ 2855.752139] should_failslab+0x5/0x20 [ 2855.752927] kmem_cache_alloc_trace+0x55/0x360 [ 2855.753886] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2855.754943] rfkill_fop_open+0x367/0x680 [ 2855.755794] ? rfkill_init_sw_state+0x150/0x150 [ 2855.756770] misc_open+0x375/0x4a0 [ 2855.757524] ? misc_devnode+0x130/0x130 [ 2855.758505] chrdev_open+0x268/0x6e0 [ 2855.759487] ? cdev_device_add+0x220/0x220 [ 2855.760610] ? security_file_open+0x20b/0x500 [ 2855.761802] do_dentry_open+0x4b7/0x1090 [ 2855.762694] ? cdev_device_add+0x220/0x220 [ 2855.763607] ? may_open+0x1e4/0x400 [ 2855.764392] path_openat+0x193d/0x26d0 [ 2855.765230] ? path_lookupat+0x860/0x860 [ 2855.766127] ? perf_trace_lock+0xac/0x490 [ 2855.767024] ? SOFTIRQ_verbose+0x10/0x10 [ 2855.767880] ? lock_acquire+0x197/0x490 [ 2855.768706] ? __lockdep_reset_lock+0x180/0x180 [ 2855.769685] do_filp_open+0x17e/0x3d0 [ 2855.770456] ? may_open_dev+0xf0/0xf0 [ 2855.771269] ? rwlock_bug.part.0+0x90/0x90 [ 2855.772145] ? _raw_spin_unlock+0x1a/0x30 [ 2855.773005] ? __alloc_fd+0x2a5/0x620 [ 2855.773818] do_sys_openat2+0x171/0x420 [ 2855.774654] ? build_open_flags+0x690/0x690 [ 2855.775546] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2855.776558] ? wait_for_completion+0x270/0x270 [ 2855.777535] __x64_sys_openat+0x13f/0x1f0 [ 2855.778394] ? __ia32_sys_open+0x1c0/0x1c0 [ 2855.779263] ? ksys_write+0x1a9/0x260 [ 2855.780064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2855.781159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2855.782238] do_syscall_64+0x33/0x40 [ 2855.783011] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2855.784074] RIP: 0033:0x7f2947304b19 [ 2855.784835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.788631] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2855.790221] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2855.791615] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2855.793122] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.794582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.796055] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2871.418202] kmemleak: 11 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:21:12 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 21) [ 2879.668738] FAULT_INJECTION: forcing a failure. [ 2879.668738] name failslab, interval 1, probability 0, space 0, times 0 [ 2879.671116] CPU: 0 PID: 20728 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2879.672518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2879.674208] Call Trace: [ 2879.674755] dump_stack+0x107/0x167 [ 2879.675504] should_fail.cold+0x5/0xa [ 2879.676285] ? create_object.isra.0+0x3a/0xa20 [ 2879.677217] should_failslab+0x5/0x20 [ 2879.678014] kmem_cache_alloc+0x5b/0x360 [ 2879.678852] create_object.isra.0+0x3a/0xa20 [ 2879.679748] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2879.680788] kmem_cache_alloc_trace+0x151/0x360 [ 2879.681757] rfkill_fop_open+0x367/0x680 [ 2879.682602] ? rfkill_init_sw_state+0x150/0x150 [ 2879.683551] misc_open+0x375/0x4a0 [ 2879.684276] ? misc_devnode+0x130/0x130 [ 2879.685083] chrdev_open+0x268/0x6e0 [ 2879.685861] ? cdev_device_add+0x220/0x220 [ 2879.686729] ? security_file_open+0x20b/0x500 [ 2879.687649] do_dentry_open+0x4b7/0x1090 [ 2879.688487] ? cdev_device_add+0x220/0x220 03:21:12 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) 03:21:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:21:12 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 27) 03:21:12 executing program 6: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0xa}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7, 0x3f, 0x4, 0x5, 0x0, 0x7, 0x80202, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x6, @perf_config_ext={0x401, 0x20}, 0x1000, 0x81, 0x6, 0x9, 0x4, 0x3, 0xfffb, 0x0, 0x1, 0x0, 0x4}, r1, 0x12000000000, r0, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x64, 0x0, 0x4, 0xcc, 0x0, 0x80000001, 0x20201, 0x1491d5b76cffba15, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffc0, 0x1, @perf_bp={&(0x7f0000000380), 0xf}, 0x2, 0x2351, 0x1, 0x5, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r2, 0xa) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000180)={0x0, 0x8}) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) [ 2879.689355] ? may_open+0x1e4/0x400 [ 2879.690285] path_openat+0x193d/0x26d0 [ 2879.691114] ? path_lookupat+0x860/0x860 [ 2879.691951] ? perf_trace_lock+0xac/0x490 [ 2879.692794] ? SOFTIRQ_verbose+0x10/0x10 [ 2879.693621] ? lock_acquire+0x197/0x490 [ 2879.694454] ? __lockdep_reset_lock+0x180/0x180 [ 2879.695420] do_filp_open+0x17e/0x3d0 [ 2879.696200] ? may_open_dev+0xf0/0xf0 [ 2879.696993] ? rwlock_bug.part.0+0x90/0x90 [ 2879.697888] ? _raw_spin_unlock+0x1a/0x30 [ 2879.698731] ? __alloc_fd+0x2a5/0x620 [ 2879.699529] do_sys_openat2+0x171/0x420 [ 2879.700345] ? build_open_flags+0x690/0x690 [ 2879.701228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2879.702224] ? wait_for_completion+0x270/0x270 [ 2879.703165] __x64_sys_openat+0x13f/0x1f0 [ 2879.704012] ? __ia32_sys_open+0x1c0/0x1c0 [ 2879.704878] ? ksys_write+0x1a9/0x260 [ 2879.705666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2879.706756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2879.707811] do_syscall_64+0x33/0x40 [ 2879.708576] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2879.709619] RIP: 0033:0x7f2947304b19 [ 2879.710393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2879.714134] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2879.715685] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2879.717135] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2879.718599] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2879.720057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2879.720070] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:21:12 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x4c, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:21:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x5450, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:21:12 executing program 0: r0 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffc}, r0, 0x8, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_submit(r2, r5, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r6, 0x80, &(0x7f0000000840)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x9) r7 = fork() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(0x0, 0x0) tkill(r7, 0x2c) ptrace$getsig(0x4202, r7, 0x0, &(0x7f0000000180)) [ 2879.789932] EXT4-fs (sda): re-mounted. Opts: (null) [ 2879.868254] EXT4-fs (sda): re-mounted. Opts: (null) [ 2879.894542] FAULT_INJECTION: forcing a failure. [ 2879.894542] name failslab, interval 1, probability 0, space 0, times 0 [ 2879.897048] CPU: 1 PID: 20738 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2879.898467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2879.900159] Call Trace: [ 2879.900706] dump_stack+0x107/0x167 [ 2879.901461] should_fail.cold+0x5/0xa [ 2879.902249] ? rfkill_fop_open+0x367/0x680 [ 2879.903114] should_failslab+0x5/0x20 [ 2879.903918] kmem_cache_alloc_trace+0x55/0x360 [ 2879.904851] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2879.905915] rfkill_fop_open+0x367/0x680 [ 2879.906756] ? rfkill_init_sw_state+0x150/0x150 [ 2879.907710] misc_open+0x375/0x4a0 [ 2879.908438] ? misc_devnode+0x130/0x130 [ 2879.909253] chrdev_open+0x268/0x6e0 [ 2879.910022] ? cdev_device_add+0x220/0x220 [ 2879.910950] ? security_file_open+0x20b/0x500 [ 2879.911876] do_dentry_open+0x4b7/0x1090 [ 2879.912723] ? cdev_device_add+0x220/0x220 [ 2879.913591] ? may_open+0x1e4/0x400 [ 2879.914352] path_openat+0x193d/0x26d0 [ 2879.915169] ? path_lookupat+0x860/0x860 [ 2879.915990] ? perf_trace_lock+0xac/0x490 [ 2879.916835] ? SOFTIRQ_verbose+0x10/0x10 [ 2879.917659] ? lock_acquire+0x197/0x490 [ 2879.918496] ? __lockdep_reset_lock+0x180/0x180 [ 2879.919449] do_filp_open+0x17e/0x3d0 [ 2879.920224] ? may_open_dev+0xf0/0xf0 [ 2879.921016] ? rwlock_bug.part.0+0x90/0x90 [ 2879.921911] ? _raw_spin_unlock+0x1a/0x30 [ 2879.922757] ? __alloc_fd+0x2a5/0x620 [ 2879.923553] do_sys_openat2+0x171/0x420 [ 2879.924374] ? build_open_flags+0x690/0x690 [ 2879.925258] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2879.926269] ? wait_for_completion+0x270/0x270 [ 2879.927219] __x64_sys_openat+0x13f/0x1f0 [ 2879.928072] ? __ia32_sys_open+0x1c0/0x1c0 [ 2879.928939] ? ksys_write+0x1a9/0x260 [ 2879.929748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2879.930829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2879.931893] do_syscall_64+0x33/0x40 [ 2879.932662] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2879.933744] RIP: 0033:0x7f6eaa02cb19 [ 2879.934538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2879.938315] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2879.939875] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2879.941346] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2879.942825] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2879.944289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2879.945754] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:21:28 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 28) [ 2895.203675] FAULT_INJECTION: forcing a failure. [ 2895.203675] name failslab, interval 1, probability 0, space 0, times 0 [ 2895.205353] CPU: 0 PID: 20866 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2895.206325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2895.207483] Call Trace: [ 2895.207855] dump_stack+0x107/0x167 [ 2895.208371] should_fail.cold+0x5/0xa [ 2895.208907] ? create_object.isra.0+0x3a/0xa20 [ 2895.209540] should_failslab+0x5/0x20 [ 2895.210086] kmem_cache_alloc+0x5b/0x360 [ 2895.210653] create_object.isra.0+0x3a/0xa20 [ 2895.211259] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2895.211961] kmem_cache_alloc_trace+0x151/0x360 [ 2895.212743] rfkill_fop_open+0x367/0x680 [ 2895.213352] ? rfkill_init_sw_state+0x150/0x150 [ 2895.214062] misc_open+0x375/0x4a0 [ 2895.214604] ? misc_devnode+0x130/0x130 [ 2895.215215] chrdev_open+0x268/0x6e0 [ 2895.215786] ? cdev_device_add+0x220/0x220 [ 2895.216452] ? security_file_open+0x20b/0x500 [ 2895.217135] do_dentry_open+0x4b7/0x1090 [ 2895.217742] ? cdev_device_add+0x220/0x220 [ 2895.218404] ? may_open+0x1e4/0x400 [ 2895.218963] path_openat+0x193d/0x26d0 [ 2895.219554] ? path_lookupat+0x860/0x860 [ 2895.220160] ? perf_trace_lock+0xac/0x490 [ 2895.220796] ? SOFTIRQ_verbose+0x10/0x10 [ 2895.221412] ? lock_acquire+0x197/0x490 [ 2895.222029] ? __lockdep_reset_lock+0x180/0x180 [ 2895.222740] do_filp_open+0x17e/0x3d0 [ 2895.223321] ? may_open_dev+0xf0/0xf0 [ 2895.223913] ? rwlock_bug.part.0+0x90/0x90 [ 2895.224578] ? _raw_spin_unlock+0x1a/0x30 [ 2895.225202] ? __alloc_fd+0x2a5/0x620 [ 2895.225793] do_sys_openat2+0x171/0x420 [ 2895.226404] ? build_open_flags+0x690/0x690 [ 2895.227050] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2895.227779] ? wait_for_completion+0x270/0x270 [ 2895.228479] __x64_sys_openat+0x13f/0x1f0 [ 2895.229102] ? __ia32_sys_open+0x1c0/0x1c0 [ 2895.229738] ? ksys_write+0x1a9/0x260 [ 2895.230332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2895.231120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2895.231900] do_syscall_64+0x33/0x40 [ 2895.232244] FAULT_INJECTION: forcing a failure. [ 2895.232244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2895.232457] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2895.232478] RIP: 0033:0x7f6eaa02cb19 [ 2895.236384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2895.239147] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2895.240288] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2895.241354] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2895.242439] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.243499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2895.244572] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2895.245663] CPU: 1 PID: 20864 Comm: syz-executor.4 Not tainted 5.10.161 #1 [ 2895.247241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2895.249125] Call Trace: [ 2895.249728] dump_stack+0x107/0x167 [ 2895.250561] should_fail.cold+0x5/0xa [ 2895.251431] _copy_to_user+0x2e/0x180 [ 2895.252293] simple_read_from_buffer+0xcc/0x160 [ 2895.253337] proc_fail_nth_read+0x198/0x230 [ 2895.254342] ? proc_sessionid_read+0x230/0x230 [ 2895.255307] ? security_file_permission+0x24e/0x570 [ 2895.256290] ? perf_trace_initcall_start+0x101/0x380 [ 2895.257330] ? proc_sessionid_read+0x230/0x230 [ 2895.258281] vfs_read+0x228/0x580 [ 2895.259000] ksys_read+0x12d/0x260 03:21:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001e80)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000001f80)=0xe8) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) chroot(&(0x7f00000017c0)='./file0/../file0\x00') io_uring_enter(r2, 0x5c33, 0x0, 0x0, 0x0, 0x0) fchown(r2, r1, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x23, 0x9, &(0x7f00000016c0)=[{&(0x7f0000000340)="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", 0x1000, 0x80000001}, {&(0x7f0000000240)="7a663f11962d908f211b5cba4e5934aa834d6e3df58d57abe52b17d6d3ddc3c46b6ed38b291b0091f0b9d41df6fcb77b41226793c802ba29c79799a23885a6f53cd3e862e2b00ee22dc8f1adfb53195b7a82", 0x52, 0x10001}, {&(0x7f0000001340)="059999e9486d531f869fc55a1623124436fccc9937a755867c7230c1b889508b323f095316a3bf9e27a2879b", 0x2c, 0x3}, {&(0x7f0000001380)="7280716cb98ddc73b2f39a02d49ead426c475d968070b8877180deeb", 0x1c, 0x9fc}, {&(0x7f00000013c0)="a3e4b28d5674e0403d4d595b1cf41f77e36ee67bdc55cdb599f63c3fc6ca9a5fe6658671cb7648d81bb55edbcf9f52bc8fef327ebe0c016b3fc40feaf63dde0bcc4156dd9401d04fd07374324033a1ef65545b0a5707f002c2d923569a5265ed149ee081e3948d3d12e7c568cdaa1e993f3be1462a446b8cf65f877f856428e1552c07da5276872acf55e6e34b578e", 0x8f}, {&(0x7f0000001480)="e86d66a2093512f352b2dea594c6d769115956a22aea815612201fd01429b6fe3f68112fa965406243c21155e1ff36e5e0f93d8001700fd8d402fbf2f7251b77fa869e4c5bb900487559875131f8a9e290887bd04e995d1a683f066b58b4003b79b3e51da9d610ca8af79d90dd43dced23264a3a0aab92ee51f96fd84a8d457e45e59074c1b7330cb2c156a1ee2a89beaf385a1a486a9be04066f86aceca45d8a0b6d58b02a5eca4f244f5e05575de0f696c42c52f2f5f5e0f6e", 0xba, 0x7}, {&(0x7f0000001540)="3ecb51892a411bcbfdc0d29951514a5bce5cf85660aba1b523d733751b0370e32db6c258a7aeabbe5099e2a8889270944c316888ec67cd370b5b1882d58d7107371c5a9c493c3ea3163d", 0x4a}, {&(0x7f00000015c0)="f5839b", 0x3, 0x2}, {&(0x7f0000001600)="e1342360b28b4dae38ef9407ad767bf955cdd51346d4f314d314ed6ddd11e7d2b80b03d6f5f5fb4392776b9c05b61cbebcb51a330c4541978ce8ab570a95335fc09b908bdb942cc81bc02d64f63f76ea3d2d41134dcf65172a30512abdf8a7005620231ff3e372b100186bc3293191d4ddd1b185eee38a6576d1345449f27dbc793293f155cc9ab9d6546d1ddaab5d69cc19774df841d3603c6c15abcc67613360651361cf9d84b35ddeeeb352d00346451f32878c", 0xb5, 0xffffffff}], 0x108801, &(0x7f0000001fc0)={[{@uid={'uid', 0x3d, 0xee01}}, {@size={'size', 0x3d, [0x67, 0x74, 0x13, 0x37, 0x39, 0x6d, 0x70, 0x0, 0x6b, 0x6d]}}, {@uid={'uid', 0x3d, r0}}, {@uid={'uid', 0x3d, r1}}, {@huge_always}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@gid={'gid', 0x3d, 0xee00}}], [{@obj_type={'obj_type', 0x3d, '\xa3@%'}}, {@obj_type={'obj_type', 0x3d, '^},\x00'}}, {@uid_eq}, {@subj_type={'subj_type', 0x3d, 'reiserfs\x00'}}, {@seclabel}, {@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'reiserfs\x00'}}]}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:21:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x5451, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:21:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:21:28 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x60, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:21:28 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) (fail_nth: 1) 03:21:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) r1 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r1, 0x5c33, 0x0, 0x0, 0x0, 0x0) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) fcntl$setown(r1, 0x8, r2) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:21:28 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 22) [ 2895.259725] ? vfs_write+0xa30/0xa30 [ 2895.260668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2895.261744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2895.262803] do_syscall_64+0x33/0x40 [ 2895.263550] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2895.264577] RIP: 0033:0x7f56fafab69c [ 2895.264769] EXT4-fs (sda): re-mounted. Opts: (null) [ 2895.265321] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2895.265333] RSP: 002b:00007f56f856e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2895.265355] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f56fafab69c [ 2895.265373] RDX: 000000000000000f RSI: 00007f56f856e1e0 RDI: 0000000000000003 [ 2895.275281] RBP: 00007f56f856e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.277241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2895.279210] R13: 00007ffd1b19f4af R14: 00007f56f856e300 R15: 0000000000022000 [ 2895.292349] FAULT_INJECTION: forcing a failure. [ 2895.292349] name failslab, interval 1, probability 0, space 0, times 0 [ 2895.294702] CPU: 1 PID: 20870 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2895.296085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2895.297730] Call Trace: [ 2895.298272] dump_stack+0x107/0x167 [ 2895.299068] should_fail.cold+0x5/0xa [ 2895.299932] ? rfkill_fop_open+0x367/0x680 [ 2895.300891] should_failslab+0x5/0x20 [ 2895.301751] kmem_cache_alloc_trace+0x55/0x360 [ 2895.302820] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2895.303983] rfkill_fop_open+0x367/0x680 [ 2895.304921] ? rfkill_init_sw_state+0x150/0x150 [ 2895.306009] misc_open+0x375/0x4a0 [ 2895.306806] ? misc_devnode+0x130/0x130 [ 2895.307608] chrdev_open+0x268/0x6e0 [ 2895.308365] ? cdev_device_add+0x220/0x220 [ 2895.309236] ? security_file_open+0x20b/0x500 [ 2895.310157] do_dentry_open+0x4b7/0x1090 [ 2895.310986] ? cdev_device_add+0x220/0x220 [ 2895.311849] ? may_open+0x1e4/0x400 [ 2895.312596] path_openat+0x193d/0x26d0 [ 2895.313405] ? path_lookupat+0x860/0x860 [ 2895.314243] ? perf_trace_lock+0xac/0x490 [ 2895.315085] ? SOFTIRQ_verbose+0x10/0x10 [ 2895.315905] ? lock_acquire+0x197/0x490 [ 2895.316719] ? __lockdep_reset_lock+0x180/0x180 [ 2895.317676] do_filp_open+0x17e/0x3d0 [ 2895.318469] ? may_open_dev+0xf0/0xf0 [ 2895.319281] ? rwlock_bug.part.0+0x90/0x90 [ 2895.320158] ? _raw_spin_unlock+0x1a/0x30 [ 2895.320996] ? __alloc_fd+0x2a5/0x620 [ 2895.321786] do_sys_openat2+0x171/0x420 [ 2895.322605] ? build_open_flags+0x690/0x690 [ 2895.323476] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2895.324453] ? wait_for_completion+0x270/0x270 [ 2895.325394] __x64_sys_openat+0x13f/0x1f0 [ 2895.326242] ? __ia32_sys_open+0x1c0/0x1c0 [ 2895.327095] ? ksys_write+0x1a9/0x260 [ 2895.327882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2895.328944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2895.330036] do_syscall_64+0x33/0x40 [ 2895.330774] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2895.331828] RIP: 0033:0x7f2947304b19 [ 2895.332583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2895.336216] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2895.337719] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2895.339158] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2895.340572] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.342000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2895.343430] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:21:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:21:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:21:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x5452, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2895.434380] EXT4-fs (sda): re-mounted. Opts: (null) 03:21:28 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 29) 03:21:28 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x68, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:21:28 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) 03:21:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000340)=""/4096, 0x1000) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231b3d517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:21:28 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 23) [ 2895.497581] FAULT_INJECTION: forcing a failure. [ 2895.497581] name failslab, interval 1, probability 0, space 0, times 0 [ 2895.498933] CPU: 0 PID: 21060 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2895.499777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2895.500739] Call Trace: [ 2895.501056] dump_stack+0x107/0x167 [ 2895.501484] should_fail.cold+0x5/0xa [ 2895.501929] ? rfkill_fop_open+0x367/0x680 [ 2895.502398] should_failslab+0x5/0x20 [ 2895.502838] kmem_cache_alloc_trace+0x55/0x360 [ 2895.503379] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2895.503966] rfkill_fop_open+0x367/0x680 [ 2895.504414] ? rfkill_init_sw_state+0x150/0x150 [ 2895.504960] misc_open+0x375/0x4a0 [ 2895.505348] ? misc_devnode+0x130/0x130 [ 2895.505801] chrdev_open+0x268/0x6e0 [ 2895.506228] ? cdev_device_add+0x220/0x220 [ 2895.506722] ? security_file_open+0x20b/0x500 03:21:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 2895.507216] do_dentry_open+0x4b7/0x1090 [ 2895.507760] ? cdev_device_add+0x220/0x220 [ 2895.508230] ? may_open+0x1e4/0x400 [ 2895.508626] path_openat+0x193d/0x26d0 [ 2895.509058] ? path_lookupat+0x860/0x860 [ 2895.509531] ? perf_trace_lock+0xac/0x490 [ 2895.510014] ? SOFTIRQ_verbose+0x10/0x10 [ 2895.510495] ? lock_acquire+0x197/0x490 [ 2895.510959] ? __lockdep_reset_lock+0x180/0x180 [ 2895.511498] do_filp_open+0x17e/0x3d0 [ 2895.511938] ? may_open_dev+0xf0/0xf0 [ 2895.512395] ? rwlock_bug.part.0+0x90/0x90 [ 2895.512891] ? _raw_spin_unlock+0x1a/0x30 [ 2895.513373] ? __alloc_fd+0x2a5/0x620 [ 2895.513797] do_sys_openat2+0x171/0x420 [ 2895.514288] ? build_open_flags+0x690/0x690 [ 2895.514783] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2895.515307] ? wait_for_completion+0x270/0x270 [ 2895.515857] __x64_sys_openat+0x13f/0x1f0 [ 2895.516339] ? __ia32_sys_open+0x1c0/0x1c0 [ 2895.516824] ? ksys_write+0x1a9/0x260 [ 2895.517269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2895.517872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2895.518435] do_syscall_64+0x33/0x40 [ 2895.518863] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2895.519416] RIP: 0033:0x7f6eaa02cb19 [ 2895.519852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2895.521790] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2895.522679] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2895.523432] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2895.524245] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.525062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2895.525874] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2895.577357] EXT4-fs (sda): re-mounted. Opts: (null) [ 2895.585278] FAULT_INJECTION: forcing a failure. [ 2895.585278] name failslab, interval 1, probability 0, space 0, times 0 [ 2895.586676] CPU: 0 PID: 21105 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2895.587441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2895.588340] Call Trace: [ 2895.588623] dump_stack+0x107/0x167 [ 2895.589031] should_fail.cold+0x5/0xa [ 2895.589457] ? create_object.isra.0+0x3a/0xa20 [ 2895.589966] should_failslab+0x5/0x20 [ 2895.590395] kmem_cache_alloc+0x5b/0x360 [ 2895.590838] create_object.isra.0+0x3a/0xa20 [ 2895.591330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2895.591898] kmem_cache_alloc_trace+0x151/0x360 [ 2895.592423] rfkill_fop_open+0x367/0x680 [ 2895.592878] ? rfkill_init_sw_state+0x150/0x150 [ 2895.593384] misc_open+0x375/0x4a0 [ 2895.593774] ? misc_devnode+0x130/0x130 [ 2895.594191] chrdev_open+0x268/0x6e0 [ 2895.594612] ? cdev_device_add+0x220/0x220 [ 2895.595083] ? security_file_open+0x20b/0x500 [ 2895.595577] do_dentry_open+0x4b7/0x1090 [ 2895.596024] ? cdev_device_add+0x220/0x220 [ 2895.596460] ? may_open+0x1e4/0x400 [ 2895.596860] path_openat+0x193d/0x26d0 [ 2895.597271] ? path_lookupat+0x860/0x860 [ 2895.597720] ? perf_trace_lock+0xac/0x490 [ 2895.598148] ? SOFTIRQ_verbose+0x10/0x10 [ 2895.598589] ? lock_acquire+0x197/0x490 [ 2895.599004] ? __lockdep_reset_lock+0x180/0x180 [ 2895.599522] do_filp_open+0x17e/0x3d0 [ 2895.599908] ? may_open_dev+0xf0/0xf0 [ 2895.600339] ? rwlock_bug.part.0+0x90/0x90 [ 2895.600803] ? _raw_spin_unlock+0x1a/0x30 [ 2895.601251] ? __alloc_fd+0x2a5/0x620 [ 2895.601680] do_sys_openat2+0x171/0x420 [ 2895.602118] ? build_open_flags+0x690/0x690 [ 2895.602583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2895.603112] ? wait_for_completion+0x270/0x270 [ 2895.603585] __x64_sys_openat+0x13f/0x1f0 [ 2895.604042] ? __ia32_sys_open+0x1c0/0x1c0 [ 2895.604509] ? ksys_write+0x1a9/0x260 [ 2895.604899] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2895.605468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2895.606038] do_syscall_64+0x33/0x40 [ 2895.606445] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2895.606996] RIP: 0033:0x7f2947304b19 [ 2895.607410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2895.609394] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2895.610228] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2895.611013] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2895.611795] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.612532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2895.613296] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:21:28 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x6a, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:21:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:21:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x5460, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:21:28 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 30) 03:21:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x200, &(0x7f0000000000)=""/31) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:21:28 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x6c, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 2895.719960] EXT4-fs (sda): re-mounted. Opts: (null) [ 2895.726805] FAULT_INJECTION: forcing a failure. [ 2895.726805] name failslab, interval 1, probability 0, space 0, times 0 [ 2895.729423] CPU: 1 PID: 21122 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2895.731010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2895.732894] Call Trace: [ 2895.733506] dump_stack+0x107/0x167 [ 2895.734366] should_fail.cold+0x5/0xa [ 2895.735251] ? rfkill_fop_open+0x367/0x680 [ 2895.736204] should_failslab+0x5/0x20 [ 2895.737063] kmem_cache_alloc_trace+0x55/0x360 [ 2895.738099] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2895.739259] rfkill_fop_open+0x367/0x680 [ 2895.740184] ? rfkill_init_sw_state+0x150/0x150 [ 2895.741236] misc_open+0x375/0x4a0 [ 2895.742087] ? misc_devnode+0x130/0x130 [ 2895.742988] chrdev_open+0x268/0x6e0 [ 2895.743828] ? cdev_device_add+0x220/0x220 [ 2895.744802] ? security_file_open+0x20b/0x500 [ 2895.745910] do_dentry_open+0x4b7/0x1090 [ 2895.746862] ? cdev_device_add+0x220/0x220 [ 2895.748035] ? may_open+0x1e4/0x400 [ 2895.748884] path_openat+0x193d/0x26d0 [ 2895.749811] ? path_lookupat+0x860/0x860 [ 2895.750776] ? perf_trace_lock+0xac/0x490 [ 2895.751732] ? SOFTIRQ_verbose+0x10/0x10 [ 2895.752666] ? lock_acquire+0x197/0x490 [ 2895.753592] ? __lockdep_reset_lock+0x180/0x180 [ 2895.754689] do_filp_open+0x17e/0x3d0 [ 2895.755573] ? may_open_dev+0xf0/0xf0 [ 2895.756489] ? rwlock_bug.part.0+0x90/0x90 [ 2895.757486] ? _raw_spin_unlock+0x1a/0x30 [ 2895.758451] ? __alloc_fd+0x2a5/0x620 [ 2895.759360] do_sys_openat2+0x171/0x420 [ 2895.760288] ? build_open_flags+0x690/0x690 [ 2895.761280] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2895.762418] ? wait_for_completion+0x270/0x270 [ 2895.763495] __x64_sys_openat+0x13f/0x1f0 [ 2895.764451] ? __ia32_sys_open+0x1c0/0x1c0 [ 2895.765435] ? ksys_write+0x1a9/0x260 [ 2895.766347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2895.767562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2895.768756] do_syscall_64+0x33/0x40 [ 2895.769622] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2895.770819] RIP: 0033:0x7f6eaa02cb19 [ 2895.771682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2895.775889] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2895.777634] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2895.779278] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2895.780917] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.782582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2895.784216] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:21:28 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x2, r0, 0x0, 0x0) 03:21:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 2911.798542] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:21:52 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 31) 03:21:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240), 0x203000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=unix,access=any,dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB=',version=9p2000.L,access=ur#cQch,cache=loose,fowner=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB=',defcontext=unconfined_u,fsname=.\t&,\x00']) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="d940a30500000000ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df647605f2677a084087134c80f7278e873f582f8b4124897d81a9721113085cb42eb23d58a906d0764720d78f2b24f2f58ac9ca62288969bbab1fe0355d4526bef259b30265499af7539dae86f1cf4eb0fb0b4011f514944ed72c73ae136f0b41bf413ba6048c71af01a8ec0fa039f5b8f02e7d36298de73a1aed3159c01756cba16d6bb24b803e705c93b11c0159812bcaed80d45c47252079b0b61e974a29ffd60e72ea887922f3045e2907971b48087b3939e936a4e3d4f38e0b810323fbd5f1e8b21a3d2da7d52c24e3bd887b415c346a2564079a3231453378ed1cfa75050119184f638a896a18"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:21:52 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4, r0, 0x0, 0x0) 03:21:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) fork() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) tkill(0x0, 0x38) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:21:52 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x74, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:21:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:21:52 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 24) 03:21:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8901, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2919.819739] FAULT_INJECTION: forcing a failure. [ 2919.819739] name failslab, interval 1, probability 0, space 0, times 0 [ 2919.822229] CPU: 1 PID: 21252 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2919.823711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2919.825474] Call Trace: [ 2919.826051] dump_stack+0x107/0x167 [ 2919.826864] should_fail.cold+0x5/0xa [ 2919.827686] ? rfkill_fop_open+0x367/0x680 [ 2919.828593] should_failslab+0x5/0x20 [ 2919.829408] kmem_cache_alloc_trace+0x55/0x360 [ 2919.830396] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2919.831479] rfkill_fop_open+0x367/0x680 [ 2919.832357] ? rfkill_init_sw_state+0x150/0x150 [ 2919.833347] misc_open+0x375/0x4a0 [ 2919.834109] ? misc_devnode+0x130/0x130 [ 2919.834960] chrdev_open+0x268/0x6e0 [ 2919.835757] ? cdev_device_add+0x220/0x220 [ 2919.836669] ? security_file_open+0x20b/0x500 [ 2919.837630] do_dentry_open+0x4b7/0x1090 [ 2919.838527] ? cdev_device_add+0x220/0x220 [ 2919.839433] ? may_open+0x1e4/0x400 [ 2919.840218] path_openat+0x193d/0x26d0 [ 2919.841073] ? path_lookupat+0x860/0x860 [ 2919.841942] ? perf_trace_lock+0xac/0x490 [ 2919.842832] ? SOFTIRQ_verbose+0x10/0x10 [ 2919.843698] ? lock_acquire+0x197/0x490 [ 2919.844551] ? __lockdep_reset_lock+0x180/0x180 [ 2919.845553] do_filp_open+0x17e/0x3d0 [ 2919.846381] ? may_open_dev+0xf0/0xf0 [ 2919.847220] ? rwlock_bug.part.0+0x90/0x90 [ 2919.848133] ? _raw_spin_unlock+0x1a/0x30 [ 2919.849014] ? __alloc_fd+0x2a5/0x620 [ 2919.849848] do_sys_openat2+0x171/0x420 [ 2919.850724] ? build_open_flags+0x690/0x690 [ 2919.851636] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2919.852669] ? wait_for_completion+0x270/0x270 [ 2919.853651] __x64_sys_openat+0x13f/0x1f0 [ 2919.854544] ? __ia32_sys_open+0x1c0/0x1c0 [ 2919.855444] ? ksys_write+0x1a9/0x260 [ 2919.856269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2919.857389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2919.858510] do_syscall_64+0x33/0x40 [ 2919.859305] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2919.860388] RIP: 0033:0x7f2947304b19 [ 2919.861185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2919.865089] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2919.866717] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2919.868232] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2919.869742] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2919.871261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2919.872773] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2919.877669] FAULT_INJECTION: forcing a failure. [ 2919.877669] name failslab, interval 1, probability 0, space 0, times 0 [ 2919.880041] CPU: 0 PID: 21254 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2919.881431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2919.883131] Call Trace: [ 2919.883673] dump_stack+0x107/0x167 [ 2919.884418] should_fail.cold+0x5/0xa [ 2919.885189] ? create_object.isra.0+0x3a/0xa20 [ 2919.886115] should_failslab+0x5/0x20 [ 2919.886896] kmem_cache_alloc+0x5b/0x360 [ 2919.887725] create_object.isra.0+0x3a/0xa20 [ 2919.888613] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2919.889647] kmem_cache_alloc_trace+0x151/0x360 [ 2919.890620] rfkill_fop_open+0x367/0x680 [ 2919.891453] ? rfkill_init_sw_state+0x150/0x150 [ 2919.892392] misc_open+0x375/0x4a0 [ 2919.893114] ? misc_devnode+0x130/0x130 [ 2919.893917] chrdev_open+0x268/0x6e0 [ 2919.894693] ? cdev_device_add+0x220/0x220 [ 2919.895728] ? security_file_open+0x20b/0x500 [ 2919.896639] do_dentry_open+0x4b7/0x1090 [ 2919.897632] ? cdev_device_add+0x220/0x220 [ 2919.898508] ? may_open+0x1e4/0x400 [ 2919.899403] path_openat+0x193d/0x26d0 [ 2919.900212] ? path_lookupat+0x860/0x860 [ 2919.901195] ? perf_trace_lock+0xac/0x490 [ 2919.902034] ? SOFTIRQ_verbose+0x10/0x10 [ 2919.903041] ? lock_acquire+0x197/0x490 [ 2919.903854] ? __lockdep_reset_lock+0x180/0x180 [ 2919.905002] do_filp_open+0x17e/0x3d0 [ 2919.905776] ? may_open_dev+0xf0/0xf0 [ 2919.906739] ? rwlock_bug.part.0+0x90/0x90 [ 2919.907612] ? _raw_spin_unlock+0x1a/0x30 [ 2919.908617] ? __alloc_fd+0x2a5/0x620 [ 2919.909412] do_sys_openat2+0x171/0x420 [ 2919.910403] ? build_open_flags+0x690/0x690 [ 2919.911278] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2919.912462] ? wait_for_completion+0x270/0x270 [ 2919.913407] __x64_sys_openat+0x13f/0x1f0 [ 2919.914427] ? __ia32_sys_open+0x1c0/0x1c0 [ 2919.915284] ? ksys_write+0x1a9/0x260 [ 2919.916219] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2919.917287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2919.918578] do_syscall_64+0x33/0x40 [ 2919.919341] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2919.920586] RIP: 0033:0x7f6eaa02cb19 [ 2919.921342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2919.925808] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2919.927543] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2919.929010] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2919.930523] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2919.931981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2919.933442] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:22:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) tkill(r1, 0x30) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:22:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:22:09 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 32) [ 2935.998332] FAULT_INJECTION: forcing a failure. [ 2935.998332] name failslab, interval 1, probability 0, space 0, times 0 [ 2936.000728] CPU: 1 PID: 21373 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2936.002164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2936.003909] Call Trace: [ 2936.004466] dump_stack+0x107/0x167 [ 2936.005213] should_fail.cold+0x5/0xa [ 2936.005993] ? rfkill_fop_open+0x367/0x680 [ 2936.006905] ? rfkill_fop_open+0x367/0x680 [ 2936.007784] should_failslab+0x5/0x20 [ 2936.008580] kmem_cache_alloc_trace+0x55/0x360 [ 2936.009519] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2936.010573] rfkill_fop_open+0x367/0x680 [ 2936.011406] ? rfkill_init_sw_state+0x150/0x150 [ 2936.012350] misc_open+0x375/0x4a0 [ 2936.013072] ? misc_devnode+0x130/0x130 [ 2936.013878] chrdev_open+0x268/0x6e0 [ 2936.014645] ? cdev_device_add+0x220/0x220 [ 2936.015518] ? security_file_open+0x20b/0x500 [ 2936.016437] do_dentry_open+0x4b7/0x1090 [ 2936.017267] ? cdev_device_add+0x220/0x220 [ 2936.018128] ? may_open+0x1e4/0x400 03:22:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x81, 0xb0, 0x20, 0x0, 0x0, 0x9, 0x80000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40392d9b, 0x0, @perf_config_ext={0x2, 0x7f}, 0x0, 0x401, 0xfff, 0x6, 0x8, 0x4f96, 0xc1d5, 0x0, 0x10001, 0x0, 0xf61e}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x10020, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x5, 0x0, &(0x7f0000000340)="6caea0ec1f66b97897ebcb86988b68475a7068b854b7fb9328384879714849e47b1548644a1c0c10905b589c5f7597f0aa4b7d1c01a237644b180b8002e539f380c5561f496b8081b6cf781a2865df0200bd4709fe378788a22d3f9492a740314d7e52e4dbe4bc97dabbdb117d5329cd390c40b306968e727935a5f88fe5c4eac79a0477f08e27984f8b553b94fd03a109ddf8a7b156df227b883b904c6d", 0x3, 0x0, 0x1, {0x1}}, 0x4) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba14d35a2e106d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:22:09 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 25) 03:22:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8902, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:22:09 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x7a, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:22:09 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x5, r0, 0x0, 0x0) [ 2936.018895] path_openat+0x193d/0x26d0 [ 2936.019869] ? path_lookupat+0x860/0x860 [ 2936.020732] ? perf_trace_lock+0xac/0x490 [ 2936.021583] ? SOFTIRQ_verbose+0x10/0x10 [ 2936.022406] ? lock_acquire+0x197/0x490 [ 2936.023238] ? __lockdep_reset_lock+0x180/0x180 [ 2936.024195] do_filp_open+0x17e/0x3d0 [ 2936.024971] ? may_open_dev+0xf0/0xf0 [ 2936.025768] ? rwlock_bug.part.0+0x90/0x90 [ 2936.026657] ? _raw_spin_unlock+0x1a/0x30 [ 2936.027505] ? __alloc_fd+0x2a5/0x620 [ 2936.028298] do_sys_openat2+0x171/0x420 [ 2936.029112] ? build_open_flags+0x690/0x690 [ 2936.029986] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2936.030989] ? wait_for_completion+0x270/0x270 [ 2936.031945] __x64_sys_openat+0x13f/0x1f0 [ 2936.032796] ? __ia32_sys_open+0x1c0/0x1c0 [ 2936.033665] ? ksys_write+0x1a9/0x260 [ 2936.034468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2936.035543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2936.036611] do_syscall_64+0x33/0x40 [ 2936.037371] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2936.038415] RIP: 0033:0x7f6eaa02cb19 [ 2936.039195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2936.042937] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2936.044483] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2936.045932] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2936.047390] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2936.048848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2936.050298] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2936.065188] FAULT_INJECTION: forcing a failure. [ 2936.065188] name failslab, interval 1, probability 0, space 0, times 0 [ 2936.067513] CPU: 1 PID: 21374 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2936.068915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2936.070619] Call Trace: [ 2936.071160] dump_stack+0x107/0x167 [ 2936.071909] should_fail.cold+0x5/0xa [ 2936.072688] ? create_object.isra.0+0x3a/0xa20 [ 2936.073619] should_failslab+0x5/0x20 [ 2936.074393] kmem_cache_alloc+0x5b/0x360 [ 2936.075260] create_object.isra.0+0x3a/0xa20 [ 2936.076168] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2936.077210] kmem_cache_alloc_trace+0x151/0x360 [ 2936.078170] rfkill_fop_open+0x367/0x680 [ 2936.079022] ? rfkill_init_sw_state+0x150/0x150 [ 2936.079982] misc_open+0x375/0x4a0 [ 2936.080724] ? misc_devnode+0x130/0x130 [ 2936.081532] chrdev_open+0x268/0x6e0 [ 2936.082293] ? cdev_device_add+0x220/0x220 [ 2936.083176] ? security_file_open+0x20b/0x500 [ 2936.084094] do_dentry_open+0x4b7/0x1090 [ 2936.084923] ? cdev_device_add+0x220/0x220 [ 2936.085785] ? may_open+0x1e4/0x400 [ 2936.086547] path_openat+0x193d/0x26d0 [ 2936.087378] ? path_lookupat+0x860/0x860 [ 2936.088206] ? perf_trace_lock+0xac/0x490 [ 2936.089050] ? SOFTIRQ_verbose+0x10/0x10 [ 2936.089873] ? lock_acquire+0x197/0x490 [ 2936.090694] ? __lockdep_reset_lock+0x180/0x180 [ 2936.091657] do_filp_open+0x17e/0x3d0 [ 2936.092434] ? may_open_dev+0xf0/0xf0 [ 2936.093244] ? rwlock_bug.part.0+0x90/0x90 [ 2936.094140] ? _raw_spin_unlock+0x1a/0x30 [ 2936.095025] ? __alloc_fd+0x2a5/0x620 [ 2936.095829] do_sys_openat2+0x171/0x420 [ 2936.096656] ? build_open_flags+0x690/0x690 [ 2936.097558] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2936.098565] ? wait_for_completion+0x270/0x270 [ 2936.099513] __x64_sys_openat+0x13f/0x1f0 [ 2936.100368] ? __ia32_sys_open+0x1c0/0x1c0 [ 2936.101238] ? ksys_write+0x1a9/0x260 [ 2936.102045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2936.103157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2936.104229] do_syscall_64+0x33/0x40 [ 2936.105010] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2936.106070] RIP: 0033:0x7f2947304b19 [ 2936.106871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2936.110691] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2936.112261] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2936.113761] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2936.115244] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2936.116718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2936.118176] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2936.118765] EXT4-fs (sda): re-mounted. Opts: (null) 03:22:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:22:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8903, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:22:09 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 26) 03:22:09 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 33) 03:22:09 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x7, r0, 0x0, 0x0) 03:22:09 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x7e, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:22:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 2936.321497] FAULT_INJECTION: forcing a failure. [ 2936.321497] name failslab, interval 1, probability 0, space 0, times 0 [ 2936.324100] CPU: 1 PID: 21500 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2936.325508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2936.327239] Call Trace: [ 2936.327789] dump_stack+0x107/0x167 [ 2936.328542] should_fail.cold+0x5/0xa [ 2936.329329] ? rfkill_fop_open+0x367/0x680 [ 2936.330203] should_failslab+0x5/0x20 [ 2936.331011] kmem_cache_alloc_trace+0x55/0x360 [ 2936.331968] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2936.333030] rfkill_fop_open+0x367/0x680 [ 2936.333879] ? rfkill_init_sw_state+0x150/0x150 [ 2936.334857] misc_open+0x375/0x4a0 [ 2936.335598] ? misc_devnode+0x130/0x130 [ 2936.336421] chrdev_open+0x268/0x6e0 [ 2936.337191] ? cdev_device_add+0x220/0x220 [ 2936.338074] ? security_file_open+0x20b/0x500 [ 2936.339025] do_dentry_open+0x4b7/0x1090 [ 2936.339869] ? cdev_device_add+0x220/0x220 [ 2936.340743] ? may_open+0x1e4/0x400 [ 2936.341506] path_openat+0x193d/0x26d0 [ 2936.342331] ? path_lookupat+0x860/0x860 [ 2936.343178] ? perf_trace_lock+0xac/0x490 [ 2936.344036] ? SOFTIRQ_verbose+0x10/0x10 [ 2936.344870] ? lock_acquire+0x197/0x490 [ 2936.345694] ? __lockdep_reset_lock+0x180/0x180 [ 2936.346687] do_filp_open+0x17e/0x3d0 [ 2936.347478] ? may_open_dev+0xf0/0xf0 [ 2936.348291] ? rwlock_bug.part.0+0x90/0x90 [ 2936.349178] ? _raw_spin_unlock+0x1a/0x30 [ 2936.350032] ? __alloc_fd+0x2a5/0x620 [ 2936.350846] do_sys_openat2+0x171/0x420 [ 2936.351672] ? build_open_flags+0x690/0x690 [ 2936.352558] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2936.353558] ? wait_for_completion+0x270/0x270 [ 2936.354517] __x64_sys_openat+0x13f/0x1f0 [ 2936.355374] ? __ia32_sys_open+0x1c0/0x1c0 [ 2936.356249] ? ksys_write+0x1a9/0x260 [ 2936.357045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2936.358130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2936.359216] do_syscall_64+0x33/0x40 [ 2936.359988] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2936.361046] RIP: 0033:0x7f2947304b19 [ 2936.361817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2936.365598] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2936.367175] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2936.368647] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2936.370114] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2936.371594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2936.373073] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2936.377636] FAULT_INJECTION: forcing a failure. [ 2936.377636] name failslab, interval 1, probability 0, space 0, times 0 [ 2936.380248] CPU: 0 PID: 21503 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2936.381773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2936.382659] EXT4-fs (sda): re-mounted. Opts: (null) [ 2936.383597] Call Trace: [ 2936.383634] dump_stack+0x107/0x167 [ 2936.383663] should_fail.cold+0x5/0xa [ 2936.383692] ? create_object.isra.0+0x3a/0xa20 [ 2936.387843] should_failslab+0x5/0x20 [ 2936.388681] kmem_cache_alloc+0x5b/0x360 [ 2936.389585] create_object.isra.0+0x3a/0xa20 [ 2936.390571] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2936.391692] kmem_cache_alloc_trace+0x151/0x360 [ 2936.392727] rfkill_fop_open+0x367/0x680 [ 2936.393632] ? rfkill_init_sw_state+0x150/0x150 [ 2936.394661] misc_open+0x375/0x4a0 [ 2936.395445] ? misc_devnode+0x130/0x130 [ 2936.396332] chrdev_open+0x268/0x6e0 [ 2936.397152] ? cdev_device_add+0x220/0x220 [ 2936.398094] ? security_file_open+0x20b/0x500 [ 2936.399101] do_dentry_open+0x4b7/0x1090 [ 2936.399998] ? cdev_device_add+0x220/0x220 [ 2936.400924] ? may_open+0x1e4/0x400 [ 2936.401726] path_openat+0x193d/0x26d0 [ 2936.402603] ? path_lookupat+0x860/0x860 [ 2936.403504] ? perf_trace_lock+0xac/0x490 [ 2936.404404] ? SOFTIRQ_verbose+0x10/0x10 [ 2936.405291] ? lock_acquire+0x197/0x490 [ 2936.406165] ? __lockdep_reset_lock+0x180/0x180 [ 2936.407196] do_filp_open+0x17e/0x3d0 [ 2936.408028] ? may_open_dev+0xf0/0xf0 [ 2936.408882] ? rwlock_bug.part.0+0x90/0x90 [ 2936.409821] ? _raw_spin_unlock+0x1a/0x30 [ 2936.410741] ? __alloc_fd+0x2a5/0x620 [ 2936.411611] do_sys_openat2+0x171/0x420 [ 2936.412488] ? build_open_flags+0x690/0x690 [ 2936.413424] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2936.414488] ? wait_for_completion+0x270/0x270 [ 2936.415510] __x64_sys_openat+0x13f/0x1f0 [ 2936.416416] ? __ia32_sys_open+0x1c0/0x1c0 [ 2936.417337] ? ksys_write+0x1a9/0x260 [ 2936.418177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2936.419336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2936.420454] do_syscall_64+0x33/0x40 [ 2936.421251] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2936.422353] RIP: 0033:0x7f6eaa02cb19 [ 2936.423166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2936.427141] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2936.428791] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2936.430312] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2936.431871] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2936.433413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2936.434970] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:22:09 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 27) 03:22:09 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000600)=""/229, 0xe5}], 0x2, 0xfffffff9, 0x8) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="cd08891efdf6e46f6890066b23b4128135784ed62453ca44f26089e9fbaafe468ec3e89d40", 0x25, 0x8}], 0x8c008, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x32]}}, {@size={'size', 0x3d, [0x33, 0x6b, 0x31, 0x39, 0x39, 0x70]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x74]}}, {@huge_always}, {@huge_within_size}], [{@audit}, {@permit_directio}, {@fsname={'fsname', 0x3d, '^},\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x20}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x64, 0x32, 0x61, 0x39, 0x66, 0x34, 0x34], 0x2d, [0x62, 0x31, 0x66, 0x62], 0x2d, [0x64, 0x34, 0x37, 0x66], 0x2d, [0x38, 0x65, 0x31, 0x63], 0x2d, [0x66, 0x32, 0x50, 0x31, 0x0, 0x61, 0x31, 0x38]}}}, {@appraise}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x35, 0x35, 0x61, 0x68, 0x0, 0x33, 0x64], 0x2d, [0x64, 0x3, 0x34, 0x32], 0x2d, [0x37, 0x64, 0x38, 0x50], 0x2d, [0x38, 0xf, 0x63, 0x30], 0x2d, [0x23ff7752d7b093d6, 0x66, 0x35, 0x0, 0x32, 0x37, 0x64, 0x37]}}}]}) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x47, 0x2, 0x3, 0x3f, 0x0, 0x1, 0x80004, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000740), 0x2}, 0x5, 0xa1ca, 0x7f, 0x3, 0x7, 0x2, 0x9, 0x0, 0xffffff80, 0x0, 0x8001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x9) sendfile(r0, r1, &(0x7f0000000440)=0x307, 0x4) r3 = perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x6, 0x40, 0xde, 0x3, 0x0, 0xff, 0x200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000480), 0x2}, 0x41, 0x0, 0x1000, 0x1, 0x2, 0x10000, 0x9, 0x0, 0x5, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x3, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='unconfined_u') 03:22:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8904, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:22:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4200, r0, 0x8, 0x4) perf_event_open(&(0x7f0000009e40)={0x2, 0x80, 0x3, 0x6, 0x3, 0xe0, 0x0, 0x4, 0x80010, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0xc02a, 0x20}, 0x110a0, 0x0, 0x1, 0x2, 0x100, 0x80, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000009ec0), 0x3, 0x200000) lseek(r1, 0xd2, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000009bc0)=[{{&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000300)=""/245, 0xf5}], 0x3}, 0x6e}, {{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/118, 0x76}, {&(0x7f0000000640)=""/101, 0x65}, {&(0x7f00000006c0)=""/65, 0x41}, {&(0x7f0000006440)=""/210, 0xd2}], 0x5, &(0x7f00000008c0)=""/4096, 0x1000}, 0x1000}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000018c0)=""/6, 0x6}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/125, 0x7d}, {&(0x7f000000a0c0)=""/4104, 0x1008}, {&(0x7f0000003980)=""/65, 0x41}], 0x5, &(0x7f0000003a80)=""/241, 0xf1}, 0x3f}, {{&(0x7f0000003b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003c00)=""/132, 0x84}, {&(0x7f0000003cc0)=""/90, 0x5a}, {&(0x7f0000003d40)=""/143, 0x8f}, {&(0x7f0000003e00)=""/92, 0x5c}, {&(0x7f0000003e80)=""/233, 0xe9}, {&(0x7f0000003f80)=""/147, 0x93}], 0x6, &(0x7f00000040c0)=""/242, 0xf2}, 0x8001}, {{&(0x7f00000041c0)=@can, 0x80, &(0x7f00000067c0)=[{&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/113, 0x71}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/167, 0xa7}, {&(0x7f0000006380)=""/149, 0x95}, {&(0x7f0000009f00)=""/244, 0xf4}, {&(0x7f0000006540)=""/227, 0xe3}, {&(0x7f0000006640)=""/159, 0x9f}, {&(0x7f0000006700)=""/89, 0x59}, {&(0x7f0000006780)=""/56, 0x38}], 0xa, &(0x7f0000006880)=""/176, 0xb0}, 0x8}, {{&(0x7f0000006940)=@ieee802154, 0x80, &(0x7f0000007ac0)=[{&(0x7f00000069c0)=""/201, 0xc9}, {&(0x7f0000006ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000007b00)=""/83, 0x53}, 0x2}, {{&(0x7f0000007b80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000008100), 0x0, &(0x7f0000008180)=""/82, 0x52}, 0x80000001}, {{&(0x7f0000008200)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000008280)=""/123, 0x7b}, {&(0x7f0000008300)=""/146, 0x92}, {&(0x7f00000083c0)=""/205, 0xcd}, {&(0x7f00000084c0)=""/197, 0xc5}, {&(0x7f00000085c0)=""/51, 0x33}, {&(0x7f0000007c00)=""/139, 0x8b}], 0x6, &(0x7f0000008680)=""/81, 0x51}, 0x6}, {{&(0x7f0000008700)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000009a40)=[{&(0x7f0000008780)=""/83, 0x53}, {&(0x7f0000008800)=""/70, 0x46}, {&(0x7f0000008880)=""/137, 0x89}, {&(0x7f0000008940)=""/240, 0xf0}, {&(0x7f0000008a40)=""/4096, 0x1000}], 0x5, &(0x7f0000009ac0)=""/201, 0xc9}, 0xd739}], 0x9, 0x160, &(0x7f0000009e00)) tkill(0x0, 0x0) tkill(r0, 0x2c) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) waitid(0x3, r4, &(0x7f0000000740), 0x1000000, &(0x7f000000a000)) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:22:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 2936.669625] EXT4-fs (sda): re-mounted. Opts: (null) [ 2936.717675] FAULT_INJECTION: forcing a failure. [ 2936.717675] name failslab, interval 1, probability 0, space 0, times 0 [ 2936.720201] CPU: 0 PID: 21520 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2936.721702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2936.723446] Call Trace: [ 2936.724014] dump_stack+0x107/0x167 [ 2936.724777] should_fail.cold+0x5/0xa [ 2936.725575] ? create_object.isra.0+0x3a/0xa20 [ 2936.726543] should_failslab+0x5/0x20 [ 2936.727337] kmem_cache_alloc+0x5b/0x360 [ 2936.728192] create_object.isra.0+0x3a/0xa20 [ 2936.729123] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2936.730187] kmem_cache_alloc_trace+0x151/0x360 [ 2936.731192] rfkill_fop_open+0x367/0x680 [ 2936.732050] ? rfkill_init_sw_state+0x150/0x150 [ 2936.733030] misc_open+0x375/0x4a0 [ 2936.733785] ? misc_devnode+0x130/0x130 [ 2936.734611] chrdev_open+0x268/0x6e0 [ 2936.735385] ? cdev_device_add+0x220/0x220 [ 2936.736265] ? security_file_open+0x20b/0x500 [ 2936.737201] do_dentry_open+0x4b7/0x1090 [ 2936.738042] ? cdev_device_add+0x220/0x220 [ 2936.738929] ? may_open+0x1e4/0x400 [ 2936.739686] path_openat+0x193d/0x26d0 [ 2936.740512] ? path_lookupat+0x860/0x860 [ 2936.741350] ? perf_trace_lock+0xac/0x490 [ 2936.742201] ? SOFTIRQ_verbose+0x10/0x10 [ 2936.743054] ? lock_acquire+0x197/0x490 [ 2936.743879] ? __lockdep_reset_lock+0x180/0x180 [ 2936.744847] do_filp_open+0x17e/0x3d0 [ 2936.745634] ? may_open_dev+0xf0/0xf0 [ 2936.746448] ? rwlock_bug.part.0+0x90/0x90 [ 2936.747348] ? _raw_spin_unlock+0x1a/0x30 [ 2936.748197] ? __alloc_fd+0x2a5/0x620 [ 2936.748995] do_sys_openat2+0x171/0x420 [ 2936.749818] ? build_open_flags+0x690/0x690 [ 2936.750701] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2936.751690] ? wait_for_completion+0x270/0x270 [ 2936.752649] __x64_sys_openat+0x13f/0x1f0 [ 2936.753481] ? __ia32_sys_open+0x1c0/0x1c0 [ 2936.754354] ? ksys_write+0x1a9/0x260 [ 2936.755166] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2936.756243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2936.757300] do_syscall_64+0x33/0x40 [ 2936.758065] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2936.759114] RIP: 0033:0x7f2947304b19 [ 2936.759898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2936.763629] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2936.765184] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2936.766646] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2936.768089] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2936.769528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2936.770985] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2936.804900] EXT4-fs (sda): re-mounted. Opts: (null) 03:22:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:22:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240), 0x2, &(0x7f0000000340)={'trans=unix,', {[{@nodevmap}], [{@euid_gt={'euid>', 0xee01}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, ':$'}}, {@dont_appraise}]}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:22:25 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 28) 03:22:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8906, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:22:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0xc48, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x7, 0x1, 0x99, 0x0, 0x2, 0x20000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x8009, 0x2, 0x80000001, 0x5, 0xff, 0x80000001, 0x3ff, 0x0, 0xe81, 0x0, 0xc428}, 0x0, 0xa, r0, 0xa) r2 = fork() ptrace$setopts(0x4206, r2, 0x5c2, 0x100010) tkill(0x0, 0x0) tkill(r2, 0x2c) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000180)) 03:22:25 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 34) [ 2952.206803] FAULT_INJECTION: forcing a failure. [ 2952.206803] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.209468] CPU: 1 PID: 21640 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2952.211032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.212883] Call Trace: [ 2952.213486] dump_stack+0x107/0x167 [ 2952.214287] should_fail.cold+0x5/0xa [ 2952.215139] ? rfkill_fop_open+0x367/0x680 [ 2952.216090] ? rfkill_fop_open+0x367/0x680 [ 2952.217044] should_failslab+0x5/0x20 [ 2952.217897] kmem_cache_alloc_trace+0x55/0x360 [ 2952.218932] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2952.220102] rfkill_fop_open+0x367/0x680 [ 2952.221039] ? rfkill_init_sw_state+0x150/0x150 [ 2952.222108] misc_open+0x375/0x4a0 [ 2952.222945] ? misc_devnode+0x130/0x130 [ 2952.223842] chrdev_open+0x268/0x6e0 [ 2952.224685] ? cdev_device_add+0x220/0x220 [ 2952.225671] ? security_file_open+0x20b/0x500 [ 2952.226718] do_dentry_open+0x4b7/0x1090 [ 2952.227664] ? cdev_device_add+0x220/0x220 [ 2952.228641] ? may_open+0x1e4/0x400 [ 2952.229496] path_openat+0x193d/0x26d0 [ 2952.230428] ? path_lookupat+0x860/0x860 [ 2952.231382] ? perf_trace_lock+0xac/0x490 [ 2952.232350] ? SOFTIRQ_verbose+0x10/0x10 [ 2952.233307] ? lock_acquire+0x197/0x490 [ 2952.234249] ? __lockdep_reset_lock+0x180/0x180 [ 2952.235380] do_filp_open+0x17e/0x3d0 [ 2952.236265] ? may_open_dev+0xf0/0xf0 [ 2952.237161] ? rwlock_bug.part.0+0x90/0x90 [ 2952.238203] ? _raw_spin_unlock+0x1a/0x30 [ 2952.239201] ? __alloc_fd+0x2a5/0x620 [ 2952.240131] do_sys_openat2+0x171/0x420 [ 2952.240902] EXT4-fs (sda): re-mounted. Opts: (null) [ 2952.241079] ? build_open_flags+0x690/0x690 [ 2952.241100] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2952.241128] ? wait_for_completion+0x270/0x270 [ 2952.241167] __x64_sys_openat+0x13f/0x1f0 [ 2952.246473] ? __ia32_sys_open+0x1c0/0x1c0 [ 2952.247341] ? ksys_write+0x1a9/0x260 [ 2952.248134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2952.249214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2952.250280] do_syscall_64+0x33/0x40 [ 2952.251057] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2952.252108] RIP: 0033:0x7f6eaa02cb19 [ 2952.252889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.256642] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2952.258217] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2952.259703] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2952.261173] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.262628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.264100] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2952.269177] FAULT_INJECTION: forcing a failure. [ 2952.269177] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.271507] CPU: 0 PID: 21647 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2952.272910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.274610] Call Trace: [ 2952.275172] dump_stack+0x107/0x167 [ 2952.275923] should_fail.cold+0x5/0xa [ 2952.276707] ? rfkill_fop_open+0x367/0x680 [ 2952.277573] should_failslab+0x5/0x20 [ 2952.278351] kmem_cache_alloc_trace+0x55/0x360 [ 2952.279291] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2952.280333] rfkill_fop_open+0x367/0x680 [ 2952.281175] ? rfkill_init_sw_state+0x150/0x150 [ 2952.282126] misc_open+0x375/0x4a0 [ 2952.282860] ? misc_devnode+0x130/0x130 [ 2952.283670] chrdev_open+0x268/0x6e0 [ 2952.284431] ? cdev_device_add+0x220/0x220 [ 2952.285303] ? security_file_open+0x20b/0x500 [ 2952.286227] do_dentry_open+0x4b7/0x1090 [ 2952.287078] ? cdev_device_add+0x220/0x220 [ 2952.287943] ? may_open+0x1e4/0x400 [ 2952.288697] path_openat+0x193d/0x26d0 [ 2952.289514] ? path_lookupat+0x860/0x860 [ 2952.290345] ? perf_trace_lock+0xac/0x490 [ 2952.291195] ? SOFTIRQ_verbose+0x10/0x10 [ 2952.292022] ? lock_acquire+0x197/0x490 [ 2952.292838] ? __lockdep_reset_lock+0x180/0x180 [ 2952.293799] do_filp_open+0x17e/0x3d0 [ 2952.294574] ? may_open_dev+0xf0/0xf0 [ 2952.295389] ? rwlock_bug.part.0+0x90/0x90 [ 2952.296267] ? _raw_spin_unlock+0x1a/0x30 [ 2952.297107] ? __alloc_fd+0x2a5/0x620 [ 2952.297903] do_sys_openat2+0x171/0x420 [ 2952.298718] ? build_open_flags+0x690/0x690 [ 2952.299595] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2952.300575] ? wait_for_completion+0x270/0x270 [ 2952.301519] __x64_sys_openat+0x13f/0x1f0 [ 2952.302366] ? __ia32_sys_open+0x1c0/0x1c0 [ 2952.303242] ? ksys_write+0x1a9/0x260 [ 2952.304029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2952.305102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2952.306161] do_syscall_64+0x33/0x40 [ 2952.306929] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2952.307971] RIP: 0033:0x7f2947304b19 [ 2952.308732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.312483] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2952.314031] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2952.315496] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2952.316942] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.318393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.319860] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2952.323283] 9pnet: p9_fd_create_unix (21658): problem connecting socket: ./file0: -111 03:22:25 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:22:25 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x300, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:22:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8907, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2952.433310] EXT4-fs (sda): re-mounted. Opts: (null) [ 2952.436994] 9pnet: p9_fd_create_unix (21658): problem connecting socket: ./file0: -111 03:22:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:22:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000000340)=""/4, 0x4}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x5, &(0x7f0000001500)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x1, 0x40000041, &(0x7f00000015c0)) sendmsg$nl_generic(r1, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=ANY=[@ANYBLOB="20000086b7d14c012abd7000fedbdf2500"/32], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x8004) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:22:25 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 35) 03:22:25 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x480, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:22:25 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 29) 03:22:25 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x9, r0, 0x0, 0x0) 03:22:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8940, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 2952.589187] FAULT_INJECTION: forcing a failure. [ 2952.589187] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.591559] CPU: 1 PID: 21778 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2952.592977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.594688] Call Trace: [ 2952.595246] dump_stack+0x107/0x167 [ 2952.595999] should_fail.cold+0x5/0xa [ 2952.596781] ? create_object.isra.0+0x3a/0xa20 [ 2952.597720] should_failslab+0x5/0x20 [ 2952.598501] kmem_cache_alloc+0x5b/0x360 [ 2952.599352] create_object.isra.0+0x3a/0xa20 [ 2952.600254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2952.601296] kmem_cache_alloc_trace+0x151/0x360 [ 2952.602259] rfkill_fop_open+0x367/0x680 [ 2952.603106] ? rfkill_init_sw_state+0x150/0x150 [ 2952.604058] misc_open+0x375/0x4a0 [ 2952.604789] ? misc_devnode+0x130/0x130 [ 2952.605596] chrdev_open+0x268/0x6e0 [ 2952.606359] ? cdev_device_add+0x220/0x220 [ 2952.607258] ? security_file_open+0x20b/0x500 [ 2952.608181] do_dentry_open+0x4b7/0x1090 [ 2952.609010] ? cdev_device_add+0x220/0x220 [ 2952.609875] ? may_open+0x1e4/0x400 [ 2952.610624] path_openat+0x193d/0x26d0 [ 2952.611446] ? path_lookupat+0x860/0x860 [ 2952.612284] ? perf_trace_lock+0xac/0x490 [ 2952.613132] ? SOFTIRQ_verbose+0x10/0x10 [ 2952.613953] ? lock_acquire+0x197/0x490 [ 2952.614778] ? __lockdep_reset_lock+0x180/0x180 [ 2952.615734] do_filp_open+0x17e/0x3d0 [ 2952.616520] ? may_open_dev+0xf0/0xf0 [ 2952.617322] ? rwlock_bug.part.0+0x90/0x90 [ 2952.618201] ? _raw_spin_unlock+0x1a/0x30 [ 2952.619065] ? __alloc_fd+0x2a5/0x620 [ 2952.619863] do_sys_openat2+0x171/0x420 [ 2952.620676] ? build_open_flags+0x690/0x690 [ 2952.621547] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2952.622535] ? wait_for_completion+0x270/0x270 [ 2952.623482] __x64_sys_openat+0x13f/0x1f0 [ 2952.624325] ? __ia32_sys_open+0x1c0/0x1c0 [ 2952.625184] ? ksys_write+0x1a9/0x260 [ 2952.625970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2952.627049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2952.628099] do_syscall_64+0x33/0x40 [ 2952.628854] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2952.629902] RIP: 0033:0x7f6eaa02cb19 [ 2952.630658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.634377] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2952.635933] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2952.637377] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2952.638824] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.640266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.641708] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2952.699665] FAULT_INJECTION: forcing a failure. [ 2952.699665] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.702099] CPU: 0 PID: 21787 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2952.703516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.705211] Call Trace: [ 2952.705766] dump_stack+0x107/0x167 [ 2952.706509] should_fail.cold+0x5/0xa [ 2952.707306] ? create_object.isra.0+0x3a/0xa20 [ 2952.708234] should_failslab+0x5/0x20 [ 2952.709008] kmem_cache_alloc+0x5b/0x360 [ 2952.709832] create_object.isra.0+0x3a/0xa20 [ 2952.710731] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2952.711771] kmem_cache_alloc_trace+0x151/0x360 [ 2952.712740] rfkill_fop_open+0x367/0x680 [ 2952.713575] ? rfkill_init_sw_state+0x150/0x150 [ 2952.714517] misc_open+0x375/0x4a0 [ 2952.715253] ? misc_devnode+0x130/0x130 [ 2952.716060] chrdev_open+0x268/0x6e0 [ 2952.716566] EXT4-fs (sda): re-mounted. Opts: (null) [ 2952.716832] ? cdev_device_add+0x220/0x220 [ 2952.718734] ? security_file_open+0x20b/0x500 [ 2952.719653] do_dentry_open+0x4b7/0x1090 [ 2952.720485] ? cdev_device_add+0x220/0x220 [ 2952.721344] ? may_open+0x1e4/0x400 [ 2952.722093] path_openat+0x193d/0x26d0 [ 2952.722911] ? path_lookupat+0x860/0x860 [ 2952.723737] ? perf_trace_lock+0xac/0x490 [ 2952.724575] ? SOFTIRQ_verbose+0x10/0x10 [ 2952.725404] ? lock_acquire+0x197/0x490 [ 2952.726215] ? __lockdep_reset_lock+0x180/0x180 [ 2952.727181] do_filp_open+0x17e/0x3d0 [ 2952.727961] ? may_open_dev+0xf0/0xf0 [ 2952.728760] ? rwlock_bug.part.0+0x90/0x90 [ 2952.729642] ? _raw_spin_unlock+0x1a/0x30 [ 2952.730482] ? __alloc_fd+0x2a5/0x620 [ 2952.731281] do_sys_openat2+0x171/0x420 [ 2952.732086] ? build_open_flags+0x690/0x690 [ 2952.732956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2952.733939] ? wait_for_completion+0x270/0x270 [ 2952.734890] __x64_sys_openat+0x13f/0x1f0 [ 2952.735742] ? __ia32_sys_open+0x1c0/0x1c0 [ 2952.736599] ? ksys_write+0x1a9/0x260 [ 2952.737382] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2952.738447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2952.739507] do_syscall_64+0x33/0x40 [ 2952.740269] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2952.741307] RIP: 0033:0x7f2947304b19 [ 2952.742071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.745771] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2952.747321] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2952.748758] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2952.750204] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.751651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.753092] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2952.847500] EXT4-fs (sda): re-mounted. Opts: (null) [ 2965.708232] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2976.575968] FAULT_INJECTION: forcing a failure. [ 2976.575968] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.578349] CPU: 0 PID: 21809 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2976.579778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.581465] Call Trace: [ 2976.582017] dump_stack+0x107/0x167 [ 2976.582769] should_fail.cold+0x5/0xa [ 2976.583570] ? rfkill_fop_open+0x367/0x680 [ 2976.584438] should_failslab+0x5/0x20 [ 2976.585219] kmem_cache_alloc_trace+0x55/0x360 [ 2976.586147] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2976.587219] rfkill_fop_open+0x367/0x680 [ 2976.588080] ? rfkill_init_sw_state+0x150/0x150 [ 2976.589032] misc_open+0x375/0x4a0 [ 2976.589760] ? misc_devnode+0x130/0x130 [ 2976.590592] chrdev_open+0x268/0x6e0 [ 2976.591367] ? cdev_device_add+0x220/0x220 [ 2976.592246] ? security_file_open+0x20b/0x500 [ 2976.593168] do_dentry_open+0x4b7/0x1090 [ 2976.594002] ? cdev_device_add+0x220/0x220 [ 2976.594870] ? may_open+0x1e4/0x400 [ 2976.595631] path_openat+0x193d/0x26d0 [ 2976.596458] ? path_lookupat+0x860/0x860 [ 2976.597300] ? perf_trace_lock+0xac/0x490 [ 2976.598147] ? SOFTIRQ_verbose+0x10/0x10 [ 2976.598972] ? lock_acquire+0x197/0x490 [ 2976.599811] ? __lockdep_reset_lock+0x180/0x180 [ 2976.600782] do_filp_open+0x17e/0x3d0 [ 2976.601559] ? may_open_dev+0xf0/0xf0 [ 2976.602365] ? rwlock_bug.part.0+0x90/0x90 [ 2976.603257] ? _raw_spin_unlock+0x1a/0x30 [ 2976.604109] ? __alloc_fd+0x2a5/0x620 [ 2976.604905] do_sys_openat2+0x171/0x420 [ 2976.605723] ? build_open_flags+0x690/0x690 [ 2976.606604] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2976.607601] ? wait_for_completion+0x270/0x270 [ 2976.608557] __x64_sys_openat+0x13f/0x1f0 [ 2976.609410] ? __ia32_sys_open+0x1c0/0x1c0 [ 2976.610271] ? ksys_write+0x1a9/0x260 [ 2976.611085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.612160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.613219] do_syscall_64+0x33/0x40 [ 2976.613985] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2976.615042] RIP: 0033:0x7f2947304b19 [ 2976.615806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.619567] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2976.621115] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2976.622567] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2976.624030] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.625480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2976.626936] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2976.635444] FAULT_INJECTION: forcing a failure. [ 2976.635444] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.637879] CPU: 0 PID: 21837 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2976.639309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.641004] Call Trace: [ 2976.641546] dump_stack+0x107/0x167 03:22:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8941, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:22:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:22:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x2, 0xe1, 0x9, 0x5, 0x0, 0xffff, 0x1041, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x3d7, 0xe2}, 0x420, 0xffffffff, 0x2000000, 0x7, 0x0, 0x0, 0x4, 0x0, 0x9098, 0x0, 0x4}, r1, 0x1, r0, 0x1) 03:22:49 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 30) 03:22:49 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x500, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:22:49 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 36) 03:22:49 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x10, r0, 0x0, 0x0) 03:22:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x52, 0x2, 0x0, 0xe0fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x3, 0x0, 0xffffa1c8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) tkill(r1, 0x40) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) [ 2976.642296] should_fail.cold+0x5/0xa [ 2976.643315] ? rfkill_fop_open+0x367/0x680 [ 2976.644262] should_failslab+0x5/0x20 [ 2976.645052] kmem_cache_alloc_trace+0x55/0x360 [ 2976.646040] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2976.647094] rfkill_fop_open+0x367/0x680 [ 2976.647940] ? rfkill_init_sw_state+0x150/0x150 [ 2976.648899] misc_open+0x375/0x4a0 [ 2976.649626] ? misc_devnode+0x130/0x130 [ 2976.650441] chrdev_open+0x268/0x6e0 [ 2976.651228] ? cdev_device_add+0x220/0x220 [ 2976.652104] ? security_file_open+0x20b/0x500 [ 2976.653024] do_dentry_open+0x4b7/0x1090 [ 2976.653855] ? cdev_device_add+0x220/0x220 [ 2976.654716] ? may_open+0x1e4/0x400 [ 2976.655472] path_openat+0x193d/0x26d0 [ 2976.656291] ? path_lookupat+0x860/0x860 [ 2976.657123] ? perf_trace_lock+0xac/0x490 [ 2976.657970] ? SOFTIRQ_verbose+0x10/0x10 [ 2976.658797] ? lock_acquire+0x197/0x490 [ 2976.659634] ? __lockdep_reset_lock+0x180/0x180 [ 2976.660596] do_filp_open+0x17e/0x3d0 [ 2976.661378] ? may_open_dev+0xf0/0xf0 [ 2976.662178] ? rwlock_bug.part.0+0x90/0x90 [ 2976.663066] ? _raw_spin_unlock+0x1a/0x30 [ 2976.663909] ? __alloc_fd+0x2a5/0x620 [ 2976.664709] do_sys_openat2+0x171/0x420 [ 2976.665525] ? build_open_flags+0x690/0x690 [ 2976.666403] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2976.667399] ? wait_for_completion+0x270/0x270 [ 2976.668348] __x64_sys_openat+0x13f/0x1f0 [ 2976.669200] ? __ia32_sys_open+0x1c0/0x1c0 [ 2976.670064] ? ksys_write+0x1a9/0x260 [ 2976.670856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.671948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.673005] do_syscall_64+0x33/0x40 [ 2976.673775] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2976.674819] RIP: 0033:0x7f6eaa02cb19 [ 2976.675585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.679336] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2976.680912] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2976.682373] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2976.683841] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.685296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2976.686761] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 2976.718739] EXT4-fs (sda): re-mounted. Opts: (null) 03:22:49 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x600, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:22:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:22:49 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 37) 03:22:49 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 31) [ 2976.882848] EXT4-fs (sda): re-mounted. Opts: (null) [ 2976.890238] FAULT_INJECTION: forcing a failure. [ 2976.890238] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.892570] CPU: 1 PID: 21936 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2976.893985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.895696] Call Trace: [ 2976.896253] dump_stack+0x107/0x167 [ 2976.897017] should_fail.cold+0x5/0xa [ 2976.897808] ? create_object.isra.0+0x3a/0xa20 [ 2976.898753] should_failslab+0x5/0x20 [ 2976.899567] kmem_cache_alloc+0x5b/0x360 [ 2976.900420] create_object.isra.0+0x3a/0xa20 [ 2976.901330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2976.902377] kmem_cache_alloc_trace+0x151/0x360 [ 2976.903352] rfkill_fop_open+0x367/0x680 [ 2976.904191] ? rfkill_init_sw_state+0x150/0x150 [ 2976.905160] misc_open+0x375/0x4a0 [ 2976.905894] ? misc_devnode+0x130/0x130 [ 2976.906720] chrdev_open+0x268/0x6e0 [ 2976.907494] ? cdev_device_add+0x220/0x220 [ 2976.908368] ? security_file_open+0x20b/0x500 [ 2976.909297] do_dentry_open+0x4b7/0x1090 [ 2976.910132] ? cdev_device_add+0x220/0x220 [ 2976.911024] ? may_open+0x1e4/0x400 [ 2976.911781] path_openat+0x193d/0x26d0 [ 2976.912602] ? path_lookupat+0x860/0x860 [ 2976.913437] ? perf_trace_lock+0xac/0x490 [ 2976.914285] ? SOFTIRQ_verbose+0x10/0x10 [ 2976.915133] ? lock_acquire+0x197/0x490 [ 2976.915952] ? __lockdep_reset_lock+0x180/0x180 [ 2976.916918] do_filp_open+0x17e/0x3d0 [ 2976.917695] ? may_open_dev+0xf0/0xf0 [ 2976.918498] ? rwlock_bug.part.0+0x90/0x90 [ 2976.919387] ? _raw_spin_unlock+0x1a/0x30 [ 2976.920236] ? __alloc_fd+0x2a5/0x620 [ 2976.921036] do_sys_openat2+0x171/0x420 [ 2976.921850] ? build_open_flags+0x690/0x690 [ 2976.922726] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2976.923728] ? wait_for_completion+0x270/0x270 [ 2976.924673] __x64_sys_openat+0x13f/0x1f0 [ 2976.925546] ? __ia32_sys_open+0x1c0/0x1c0 [ 2976.926408] ? ksys_write+0x1a9/0x260 [ 2976.927211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.928291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.929351] do_syscall_64+0x33/0x40 [ 2976.930117] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2976.931182] RIP: 0033:0x7f6eaa02cb19 [ 2976.931949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.935694] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2976.937249] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2976.938702] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2976.940172] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.941628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2976.943092] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:22:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x894c, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:22:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) waitid(0x3, r1, &(0x7f00000000c0), 0x4, &(0x7f0000000200)) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:22:50 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x700, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:22:50 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x11, r0, 0x0, 0x0) [ 2977.012309] FAULT_INJECTION: forcing a failure. [ 2977.012309] name failslab, interval 1, probability 0, space 0, times 0 [ 2977.014643] CPU: 1 PID: 21942 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 2977.016039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2977.017721] Call Trace: [ 2977.018260] dump_stack+0x107/0x167 [ 2977.019037] should_fail.cold+0x5/0xa [ 2977.019824] ? create_object.isra.0+0x3a/0xa20 [ 2977.020742] should_failslab+0x5/0x20 [ 2977.021523] kmem_cache_alloc+0x5b/0x360 [ 2977.022340] create_object.isra.0+0x3a/0xa20 [ 2977.023255] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2977.024271] kmem_cache_alloc_trace+0x151/0x360 [ 2977.025234] rfkill_fop_open+0x367/0x680 [ 2977.026062] ? rfkill_init_sw_state+0x150/0x150 [ 2977.027021] misc_open+0x375/0x4a0 [ 2977.027751] ? misc_devnode+0x130/0x130 [ 2977.028562] chrdev_open+0x268/0x6e0 [ 2977.029324] ? cdev_device_add+0x220/0x220 [ 2977.030203] ? security_file_open+0x20b/0x500 [ 2977.031145] do_dentry_open+0x4b7/0x1090 [ 2977.031976] ? cdev_device_add+0x220/0x220 [ 2977.032841] ? may_open+0x1e4/0x400 [ 2977.033595] path_openat+0x193d/0x26d0 [ 2977.034421] ? path_lookupat+0x860/0x860 [ 2977.035259] ? perf_trace_lock+0xac/0x490 [ 2977.036105] ? SOFTIRQ_verbose+0x10/0x10 [ 2977.036932] ? lock_acquire+0x197/0x490 [ 2977.037766] ? __lockdep_reset_lock+0x180/0x180 [ 2977.038727] do_filp_open+0x17e/0x3d0 [ 2977.039519] ? may_open_dev+0xf0/0xf0 [ 2977.040324] ? rwlock_bug.part.0+0x90/0x90 [ 2977.041205] ? _raw_spin_unlock+0x1a/0x30 [ 2977.042066] ? __alloc_fd+0x2a5/0x620 [ 2977.042865] do_sys_openat2+0x171/0x420 [ 2977.043708] ? build_open_flags+0x690/0x690 [ 2977.044586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2977.045655] ? wait_for_completion+0x270/0x270 [ 2977.046611] __x64_sys_openat+0x13f/0x1f0 [ 2977.047506] ? __ia32_sys_open+0x1c0/0x1c0 [ 2977.048378] ? ksys_write+0x1a9/0x260 [ 2977.049192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2977.050268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2977.051360] do_syscall_64+0x33/0x40 [ 2977.052130] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2977.053186] RIP: 0033:0x7f2947304b19 [ 2977.053953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2977.057691] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2977.059254] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 2977.060717] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2977.062170] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2977.063644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2977.065106] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 2990.889597] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2999.833909] FAULT_INJECTION: forcing a failure. [ 2999.833909] name failslab, interval 1, probability 0, space 0, times 0 [ 2999.836399] CPU: 0 PID: 22068 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 2999.837855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2999.839639] Call Trace: [ 2999.840265] dump_stack+0x107/0x167 [ 2999.841063] should_fail.cold+0x5/0xa [ 2999.841868] ? create_object.isra.0+0x3a/0xa20 [ 2999.842919] should_failslab+0x5/0x20 [ 2999.843762] kmem_cache_alloc+0x5b/0x360 [ 2999.844710] create_object.isra.0+0x3a/0xa20 [ 2999.845653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2999.846824] kmem_cache_alloc_trace+0x151/0x360 [ 2999.847876] rfkill_fop_open+0x367/0x680 [ 2999.848353] EXT4-fs (sda): re-mounted. Opts: (null) [ 2999.848803] ? rfkill_init_sw_state+0x150/0x150 [ 2999.848829] misc_open+0x375/0x4a0 [ 2999.851670] ? misc_devnode+0x130/0x130 [ 2999.852593] chrdev_open+0x268/0x6e0 [ 2999.853405] ? cdev_device_add+0x220/0x220 [ 2999.854391] ? security_file_open+0x20b/0x500 [ 2999.855372] do_dentry_open+0x4b7/0x1090 [ 2999.856329] ? cdev_device_add+0x220/0x220 [ 2999.857243] ? may_open+0x1e4/0x400 [ 2999.858102] path_openat+0x193d/0x26d0 [ 2999.858968] ? path_lookupat+0x860/0x860 [ 2999.859934] ? perf_trace_lock+0xac/0x490 [ 2999.860820] ? SOFTIRQ_verbose+0x10/0x10 [ 2999.861752] ? lock_acquire+0x197/0x490 [ 2999.862612] ? __lockdep_reset_lock+0x180/0x180 [ 2999.863691] do_filp_open+0x17e/0x3d0 03:23:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8980, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:23:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:23:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffe9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:23:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000180)) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba15a8f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476faa8202515fc1af45024c5c32146fc6faca35aa692a6f183709b4e5e4de9a8855f57a2afbffd311a82f3fad1d6b97c8eaf95d0a9b71b3960296b23002a4e384d01828549e01a66e75d4c6e9274456f027e0c01a6d1435cb823c0b1dc7bba8c6a8e62305a1663a704d0f92d296d5bbe9365836df28bbb4930efe5a618d86abf520f86c467a7347f912a285e7bc0e81072136cf4fdd234632011e00dfaa8cb410d415941b39fc231c282abbde514c34d365ab7784f0f35397ed0adb844c94ac23b48d15d4465f073922b38a436d2967ac9e405c63fe37e88de932168ffd722eec2b2ddaffee216dc36c8f8904f09a5eb38e9e567431259ea181541c550046f14fe90214da842324ff99b44f156c27f32ad4ce51bd0bbf415d98cd14b9ac0a1b7aae994ea8e66f74a74a88314be009f235c2a8ad80e20a8b3e1815d8cb294f8d95211f1176f"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:23:12 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 38) 03:23:12 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x1800, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:23:12 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x15, r0, 0x0, 0x0) 03:23:12 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 32) [ 2999.864518] ? may_open_dev+0xf0/0xf0 [ 2999.865647] ? rwlock_bug.part.0+0x90/0x90 [ 2999.866603] ? _raw_spin_unlock+0x1a/0x30 [ 2999.867617] ? __alloc_fd+0x2a5/0x620 [ 2999.868455] do_sys_openat2+0x171/0x420 [ 2999.869377] ? build_open_flags+0x690/0x690 [ 2999.870311] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2999.871414] ? wait_for_completion+0x270/0x270 [ 2999.872417] __x64_sys_openat+0x13f/0x1f0 [ 2999.873375] ? __ia32_sys_open+0x1c0/0x1c0 [ 2999.874272] ? ksys_write+0x1a9/0x260 [ 2999.875160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2999.876293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2999.877450] do_syscall_64+0x33/0x40 [ 2999.878264] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2999.879423] RIP: 0033:0x7f6eaa02cb19 [ 2999.880232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2999.884366] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2999.886008] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 2999.887615] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2999.889204] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2999.890779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2999.892374] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:23:12 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x2000, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3000.006379] FAULT_INJECTION: forcing a failure. [ 3000.006379] name failslab, interval 1, probability 0, space 0, times 0 [ 3000.008772] CPU: 1 PID: 22070 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3000.010177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3000.011871] Call Trace: [ 3000.012420] dump_stack+0x107/0x167 [ 3000.013169] should_fail.cold+0x5/0xa [ 3000.013950] ? rfkill_fop_open+0x367/0x680 [ 3000.014817] should_failslab+0x5/0x20 [ 3000.015607] kmem_cache_alloc_trace+0x55/0x360 [ 3000.016550] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3000.017594] rfkill_fop_open+0x367/0x680 [ 3000.018443] ? rfkill_init_sw_state+0x150/0x150 [ 3000.019419] misc_open+0x375/0x4a0 [ 3000.020152] ? misc_devnode+0x130/0x130 [ 3000.020962] chrdev_open+0x268/0x6e0 [ 3000.021723] ? cdev_device_add+0x220/0x220 [ 3000.022598] ? security_file_open+0x20b/0x500 [ 3000.023537] do_dentry_open+0x4b7/0x1090 [ 3000.024370] ? cdev_device_add+0x220/0x220 [ 3000.025236] ? may_open+0x1e4/0x400 [ 3000.025991] path_openat+0x193d/0x26d0 [ 3000.026809] ? path_lookupat+0x860/0x860 [ 3000.027654] ? perf_trace_lock+0xac/0x490 [ 3000.028512] ? SOFTIRQ_verbose+0x10/0x10 [ 3000.029343] ? lock_acquire+0x197/0x490 [ 3000.030167] ? __lockdep_reset_lock+0x180/0x180 [ 3000.031129] do_filp_open+0x17e/0x3d0 [ 3000.031923] ? may_open_dev+0xf0/0xf0 [ 3000.032728] ? rwlock_bug.part.0+0x90/0x90 [ 3000.033605] ? _raw_spin_unlock+0x1a/0x30 [ 3000.034452] ? __alloc_fd+0x2a5/0x620 [ 3000.035251] do_sys_openat2+0x171/0x420 [ 3000.036079] ? build_open_flags+0x690/0x690 [ 3000.036956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3000.037945] ? wait_for_completion+0x270/0x270 [ 3000.038890] __x64_sys_openat+0x13f/0x1f0 [ 3000.039766] ? __ia32_sys_open+0x1c0/0x1c0 [ 3000.040628] ? ksys_write+0x1a9/0x260 [ 3000.041414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3000.042488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3000.043578] do_syscall_64+0x33/0x40 [ 3000.044346] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3000.045398] RIP: 0033:0x7f2947304b19 [ 3000.046158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3000.049909] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3000.051470] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3000.052934] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3000.054393] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3000.055867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3000.057321] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:23:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x385, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:23:13 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x18, r0, 0x0, 0x0) [ 3000.099929] EXT4-fs (sda): re-mounted. Opts: (null) 03:23:13 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 39) 03:23:13 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 33) 03:23:13 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x3000, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3000.241293] FAULT_INJECTION: forcing a failure. [ 3000.241293] name failslab, interval 1, probability 0, space 0, times 0 [ 3000.243767] CPU: 0 PID: 22186 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3000.245204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3000.246912] Call Trace: [ 3000.247495] dump_stack+0x107/0x167 [ 3000.248253] should_fail.cold+0x5/0xa [ 3000.249086] ? create_object.isra.0+0x3a/0xa20 [ 3000.250030] should_failslab+0x5/0x20 [ 3000.250824] kmem_cache_alloc+0x5b/0x360 [ 3000.251714] create_object.isra.0+0x3a/0xa20 [ 3000.252665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3000.253705] kmem_cache_alloc_trace+0x151/0x360 [ 3000.254676] rfkill_fop_open+0x367/0x680 [ 3000.255544] ? rfkill_init_sw_state+0x150/0x150 [ 3000.256506] misc_open+0x375/0x4a0 [ 3000.257233] ? misc_devnode+0x130/0x130 [ 3000.258052] chrdev_open+0x268/0x6e0 [ 3000.258811] ? cdev_device_add+0x220/0x220 [ 3000.259728] ? security_file_open+0x20b/0x500 [ 3000.260647] do_dentry_open+0x4b7/0x1090 [ 3000.261484] ? cdev_device_add+0x220/0x220 [ 3000.262353] ? may_open+0x1e4/0x400 [ 3000.263106] path_openat+0x193d/0x26d0 [ 3000.263950] ? path_lookupat+0x860/0x860 [ 3000.264785] ? perf_trace_lock+0xac/0x490 [ 3000.265633] ? SOFTIRQ_verbose+0x10/0x10 [ 3000.266464] ? lock_acquire+0x197/0x490 [ 3000.267284] ? __lockdep_reset_lock+0x180/0x180 [ 3000.268286] do_filp_open+0x17e/0x3d0 [ 3000.269065] ? may_open_dev+0xf0/0xf0 [ 3000.269872] ? rwlock_bug.part.0+0x90/0x90 [ 3000.270757] ? _raw_spin_unlock+0x1a/0x30 [ 3000.271631] ? __alloc_fd+0x2a5/0x620 [ 3000.272436] do_sys_openat2+0x171/0x420 [ 3000.273258] ? build_open_flags+0x690/0x690 [ 3000.274138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3000.275130] ? wait_for_completion+0x270/0x270 [ 3000.276116] __x64_sys_openat+0x13f/0x1f0 [ 3000.276969] ? __ia32_sys_open+0x1c0/0x1c0 [ 3000.277836] ? ksys_write+0x1a9/0x260 [ 3000.278636] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3000.279747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3000.280812] do_syscall_64+0x33/0x40 [ 3000.281580] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3000.282631] RIP: 0033:0x7f2947304b19 [ 3000.283432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3000.287193] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3000.288783] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3000.290243] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3000.291731] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3000.293189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3000.294656] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3000.377450] FAULT_INJECTION: forcing a failure. [ 3000.377450] name failslab, interval 1, probability 0, space 0, times 0 [ 3000.379867] CPU: 1 PID: 22200 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3000.381288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3000.382982] Call Trace: [ 3000.383554] dump_stack+0x107/0x167 [ 3000.384309] should_fail.cold+0x5/0xa [ 3000.385088] ? create_object.isra.0+0x3a/0xa20 [ 3000.386012] should_failslab+0x5/0x20 [ 3000.386784] kmem_cache_alloc+0x5b/0x360 [ 3000.387640] create_object.isra.0+0x3a/0xa20 [ 3000.388545] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3000.389630] kmem_cache_alloc_trace+0x151/0x360 [ 3000.390609] rfkill_fop_open+0x367/0x680 [ 3000.391471] ? rfkill_init_sw_state+0x150/0x150 [ 3000.392434] misc_open+0x375/0x4a0 [ 3000.393170] ? misc_devnode+0x130/0x130 [ 3000.394005] chrdev_open+0x268/0x6e0 [ 3000.394772] ? cdev_device_add+0x220/0x220 [ 3000.395663] ? security_file_open+0x20b/0x500 [ 3000.396593] do_dentry_open+0x4b7/0x1090 [ 3000.397424] ? cdev_device_add+0x220/0x220 [ 3000.398291] ? may_open+0x1e4/0x400 [ 3000.399042] path_openat+0x193d/0x26d0 [ 3000.399869] ? path_lookupat+0x860/0x860 [ 3000.400703] ? perf_trace_lock+0xac/0x490 [ 3000.401551] ? SOFTIRQ_verbose+0x10/0x10 [ 3000.402378] ? lock_acquire+0x197/0x490 [ 3000.403224] ? __lockdep_reset_lock+0x180/0x180 [ 3000.404193] do_filp_open+0x17e/0x3d0 [ 3000.404967] ? may_open_dev+0xf0/0xf0 [ 3000.405771] ? rwlock_bug.part.0+0x90/0x90 [ 3000.406650] ? _raw_spin_unlock+0x1a/0x30 [ 3000.407512] ? __alloc_fd+0x2a5/0x620 [ 3000.408305] do_sys_openat2+0x171/0x420 [ 3000.409130] ? build_open_flags+0x690/0x690 [ 3000.410011] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3000.411003] ? wait_for_completion+0x270/0x270 [ 3000.411959] __x64_sys_openat+0x13f/0x1f0 [ 3000.412805] ? __ia32_sys_open+0x1c0/0x1c0 [ 3000.413670] ? ksys_write+0x1a9/0x260 [ 3000.414475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3000.415571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3000.416632] do_syscall_64+0x33/0x40 [ 3000.417404] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3000.418464] RIP: 0033:0x7f6eaa02cb19 [ 3000.419239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3000.422968] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3000.424567] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3000.426008] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3000.427463] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3000.428901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3000.430341] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3016.396038] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:23:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:23:37 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x21, r0, 0x0, 0x0) 03:23:37 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 40) 03:23:37 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 34) 03:23:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4ed0700ee6664aba1349e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa0000"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x204028, &(0x7f0000000040)='^\fj\x95<\r;\x99},\x00\x00\x00\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80800001, 0x7, 0xc74, 0x3ff, 0x2}) 03:23:37 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x3f00, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:23:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() r1 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r1, 0x5c33, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffffff90}}, './file0\x00'}) capset(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000200)={0x0, 0x3a, 0x607, 0x8001, 0x0, 0x80000001}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) r2 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) ptrace$getsig(0x4202, r0, 0x200000, &(0x7f0000000140)) 03:23:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8981, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3024.812705] FAULT_INJECTION: forcing a failure. [ 3024.812705] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.815492] CPU: 0 PID: 22218 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3024.817107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3024.818920] Call Trace: [ 3024.819535] dump_stack+0x107/0x167 [ 3024.820334] should_fail.cold+0x5/0xa [ 3024.821159] ? rfkill_fop_open+0x367/0x680 [ 3024.822070] should_failslab+0x5/0x20 [ 3024.822912] kmem_cache_alloc_trace+0x55/0x360 [ 3024.823911] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3024.825056] rfkill_fop_open+0x367/0x680 [ 3024.825986] ? rfkill_init_sw_state+0x150/0x150 [ 3024.827031] misc_open+0x375/0x4a0 [ 3024.827845] ? misc_devnode+0x130/0x130 [ 3024.828728] chrdev_open+0x268/0x6e0 [ 3024.829553] ? cdev_device_add+0x220/0x220 [ 3024.830502] ? security_file_open+0x20b/0x500 [ 3024.831503] do_dentry_open+0x4b7/0x1090 [ 3024.832424] ? cdev_device_add+0x220/0x220 [ 3024.833364] ? may_open+0x1e4/0x400 [ 3024.834182] path_openat+0x193d/0x26d0 [ 3024.835070] ? path_lookupat+0x860/0x860 [ 3024.835989] ? perf_trace_lock+0xac/0x490 [ 3024.836914] ? SOFTIRQ_verbose+0x10/0x10 [ 3024.837809] ? lock_acquire+0x197/0x490 [ 3024.838701] ? __lockdep_reset_lock+0x180/0x180 [ 3024.839768] do_filp_open+0x17e/0x3d0 [ 3024.840615] ? may_open_dev+0xf0/0xf0 [ 3024.841486] ? rwlock_bug.part.0+0x90/0x90 [ 3024.842428] ? strncpy_from_user+0x254/0x470 [ 3024.843411] ? strncpy_from_user+0x25b/0x470 [ 3024.844410] ? _raw_spin_unlock+0x1a/0x30 [ 3024.845332] ? __alloc_fd+0x2a5/0x620 [ 3024.846198] do_sys_openat2+0x171/0x420 [ 3024.847093] ? build_open_flags+0x690/0x690 [ 3024.848056] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3024.849131] ? wait_for_completion+0x270/0x270 [ 3024.850158] __x64_sys_openat+0x13f/0x1f0 [ 3024.851082] ? __ia32_sys_open+0x1c0/0x1c0 [ 3024.852043] ? ksys_write+0x1a9/0x260 [ 3024.852866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3024.854040] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3024.855157] do_syscall_64+0x33/0x40 [ 3024.855960] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3024.857061] RIP: 0033:0x7f2947304b19 [ 3024.857876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3024.862246] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3024.864118] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3024.865832] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3024.867571] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.868892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3024.870048] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3024.930539] FAULT_INJECTION: forcing a failure. [ 3024.930539] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.933317] CPU: 1 PID: 22225 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3024.934988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3024.937108] Call Trace: [ 3024.937661] dump_stack+0x107/0x167 [ 3024.938415] should_fail.cold+0x5/0xa [ 3024.939218] ? rfkill_fop_open+0x367/0x680 [ 3024.940358] should_failslab+0x5/0x20 [ 3024.941291] kmem_cache_alloc_trace+0x55/0x360 [ 3024.942225] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3024.943325] rfkill_fop_open+0x367/0x680 [ 3024.944203] ? rfkill_init_sw_state+0x150/0x150 [ 3024.945196] misc_open+0x375/0x4a0 [ 3024.945913] ? misc_devnode+0x130/0x130 [ 3024.946742] chrdev_open+0x268/0x6e0 [ 3024.947514] ? cdev_device_add+0x220/0x220 [ 3024.948413] ? security_file_open+0x20b/0x500 [ 3024.949360] do_dentry_open+0x4b7/0x1090 [ 3024.950226] ? cdev_device_add+0x220/0x220 [ 3024.951112] ? may_open+0x1e4/0x400 [ 3024.951888] path_openat+0x193d/0x26d0 [ 3024.952726] ? path_lookupat+0x860/0x860 [ 3024.953579] ? perf_trace_lock+0xac/0x490 [ 3024.954434] ? SOFTIRQ_verbose+0x10/0x10 [ 3024.955292] ? lock_acquire+0x197/0x490 [ 3024.956139] ? __lockdep_reset_lock+0x180/0x180 [ 3024.957116] do_filp_open+0x17e/0x3d0 [ 3024.957901] ? may_open_dev+0xf0/0xf0 [ 3024.958718] ? rwlock_bug.part.0+0x90/0x90 [ 3024.959609] ? _raw_spin_unlock+0x1a/0x30 [ 3024.960511] ? __alloc_fd+0x2a5/0x620 [ 3024.961326] do_sys_openat2+0x171/0x420 [ 3024.962359] ? build_open_flags+0x690/0x690 [ 3024.963428] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3024.964638] ? wait_for_completion+0x270/0x270 [ 3024.965788] __x64_sys_openat+0x13f/0x1f0 [ 3024.966817] ? __ia32_sys_open+0x1c0/0x1c0 [ 3024.967892] ? ksys_write+0x1a9/0x260 [ 3024.968878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3024.970172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3024.971462] do_syscall_64+0x33/0x40 [ 3024.972400] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3024.973683] RIP: 0033:0x7f6eaa02cb19 [ 3024.974648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3024.978704] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3024.980339] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3024.981830] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3024.983322] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.984831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3024.986325] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:23:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=@ng={0x4, 0x1, "e05a"}, 0x4, 0x2) tkill(r0, 0x2c) fork() ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:23:38 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4200, r0, 0x0, 0x0) 03:23:38 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 35) 03:23:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3025.084514] EXT4-fs (sda): re-mounted. Opts: (null) [ 3025.085798] EXT4-fs (sda): Unrecognized mount option "^ j•<;™}" or missing value [ 3025.143592] FAULT_INJECTION: forcing a failure. [ 3025.143592] name failslab, interval 1, probability 0, space 0, times 0 [ 3025.145898] CPU: 0 PID: 22340 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3025.147223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3025.148825] Call Trace: [ 3025.149341] dump_stack+0x107/0x167 [ 3025.150046] should_fail.cold+0x5/0xa [ 3025.150783] ? create_object.isra.0+0x3a/0xa20 [ 3025.151690] should_failslab+0x5/0x20 [ 3025.152429] kmem_cache_alloc+0x5b/0x360 [ 3025.153224] create_object.isra.0+0x3a/0xa20 [ 3025.154038] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3025.154972] kmem_cache_alloc_trace+0x151/0x360 [ 3025.155848] rfkill_fop_open+0x367/0x680 03:23:38 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x4000, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3025.156603] ? rfkill_init_sw_state+0x150/0x150 [ 3025.157608] misc_open+0x375/0x4a0 [ 3025.158267] ? misc_devnode+0x130/0x130 [ 3025.158998] chrdev_open+0x268/0x6e0 [ 3025.159701] ? cdev_device_add+0x220/0x220 [ 3025.160487] ? security_file_open+0x20b/0x500 [ 3025.161314] do_dentry_open+0x4b7/0x1090 [ 3025.162058] ? cdev_device_add+0x220/0x220 [ 3025.162836] ? may_open+0x1e4/0x400 [ 3025.163512] path_openat+0x193d/0x26d0 [ 3025.164255] ? path_lookupat+0x860/0x860 [ 3025.164998] ? perf_trace_lock+0xac/0x490 [ 3025.165767] ? SOFTIRQ_verbose+0x10/0x10 [ 3025.166520] ? lock_acquire+0x197/0x490 [ 3025.167256] ? __lockdep_reset_lock+0x180/0x180 [ 3025.168139] do_filp_open+0x17e/0x3d0 [ 3025.168841] ? may_open_dev+0xf0/0xf0 [ 3025.169572] ? rwlock_bug.part.0+0x90/0x90 [ 3025.170366] ? _raw_spin_unlock+0x1a/0x30 [ 3025.171134] ? __alloc_fd+0x2a5/0x620 [ 3025.171918] do_sys_openat2+0x171/0x420 [ 3025.172663] ? build_open_flags+0x690/0x690 [ 3025.173458] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3025.174353] ? wait_for_completion+0x270/0x270 [ 3025.175214] __x64_sys_openat+0x13f/0x1f0 [ 3025.175993] ? __ia32_sys_open+0x1c0/0x1c0 [ 3025.176765] ? ksys_write+0x1a9/0x260 [ 3025.177484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3025.178452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3025.179402] do_syscall_64+0x33/0x40 [ 3025.180139] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3025.181095] RIP: 0033:0x7f2947304b19 [ 3025.181791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3025.185173] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3025.186588] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3025.187931] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3025.189253] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3025.190583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3025.191923] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:23:38 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 41) [ 3025.226844] FAULT_INJECTION: forcing a failure. [ 3025.226844] name failslab, interval 1, probability 0, space 0, times 0 [ 3025.229312] CPU: 1 PID: 22344 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3025.230738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3025.232470] Call Trace: [ 3025.233015] dump_stack+0x107/0x167 [ 3025.233775] should_fail.cold+0x5/0xa [ 3025.234585] ? create_object.isra.0+0x3a/0xa20 [ 3025.235535] should_failslab+0x5/0x20 [ 3025.236340] kmem_cache_alloc+0x5b/0x360 [ 3025.237184] create_object.isra.0+0x3a/0xa20 [ 3025.238086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3025.239142] kmem_cache_alloc_trace+0x151/0x360 [ 3025.240137] rfkill_fop_open+0x367/0x680 [ 3025.240967] ? rfkill_init_sw_state+0x150/0x150 [ 3025.241943] misc_open+0x375/0x4a0 [ 3025.242683] ? misc_devnode+0x130/0x130 [ 3025.243515] chrdev_open+0x268/0x6e0 [ 3025.244326] ? cdev_device_add+0x220/0x220 [ 3025.245206] ? security_file_open+0x20b/0x500 [ 3025.246134] do_dentry_open+0x4b7/0x1090 [ 3025.246954] ? cdev_device_add+0x220/0x220 [ 3025.247860] ? may_open+0x1e4/0x400 [ 3025.248621] path_openat+0x193d/0x26d0 [ 3025.249442] ? path_lookupat+0x860/0x860 [ 3025.250278] ? perf_trace_lock+0xac/0x490 [ 3025.251126] ? SOFTIRQ_verbose+0x10/0x10 [ 3025.251985] ? lock_acquire+0x197/0x490 [ 3025.252824] ? __lockdep_reset_lock+0x180/0x180 [ 3025.253813] do_filp_open+0x17e/0x3d0 [ 3025.254600] ? may_open_dev+0xf0/0xf0 [ 3025.255406] ? rwlock_bug.part.0+0x90/0x90 [ 3025.256329] ? _raw_spin_unlock+0x1a/0x30 [ 3025.257182] ? __alloc_fd+0x2a5/0x620 [ 3025.257969] do_sys_openat2+0x171/0x420 [ 3025.258792] ? build_open_flags+0x690/0x690 [ 3025.259695] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3025.260705] ? wait_for_completion+0x270/0x270 [ 3025.261682] __x64_sys_openat+0x13f/0x1f0 [ 3025.262561] ? __ia32_sys_open+0x1c0/0x1c0 [ 3025.263556] ? ksys_write+0x1a9/0x260 [ 3025.264381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3025.265450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3025.266507] do_syscall_64+0x33/0x40 [ 3025.267288] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3025.268378] RIP: 0033:0x7f6eaa02cb19 [ 3025.269299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3025.273960] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3025.275746] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3025.277260] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3025.278735] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3025.280241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3025.281736] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:23:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc46664aba1348f869e06b72dff9fc35ddeee249a6c521c7a88e67d5eb7331dec8308e231add517d3df39ddec8e7092fda05b58d8f4e1df6476fa8c31a49fcce2d25d43130ba80e2170b0bdb0ad5aba204bdeba51a690a6ccc598375c0a503840d8ff3c716bb156020086e787dfd6ad32020000004f25b216740af650468b4695ba31b56ac5b12b0679cd4e99c91811b3b20b872b7e4c3d45a912396cf9ba4e74cbf26d2c8896da9d239f8f2561fad652ec0daaa17a112a"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:23:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8982, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3025.415727] EXT4-fs (sda): re-mounted. Opts: (null) [ 3025.485222] EXT4-fs (sda): re-mounted. Opts: (null) [ 3038.965134] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:24:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:24:01 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4201, r0, 0x0, 0x0) 03:24:01 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x321, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x11, r0, 0x5) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400400, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0x7, 0x50, 0xf7, 0x0, 0x5, 0x120, 0x17, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp, 0x221, 0x1000, 0xfffffffe, 0x4, 0x8, 0x1, 0x1, 0x0, 0x10001, 0x0, 0x1000}, r1, 0xffffffffffffffff, r2, 0x8) r3 = fork() r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2c) wait4(r4, &(0x7f0000000200), 0x1000000, &(0x7f0000000240)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2c) recvmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000300), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000440)=""/211, 0xd3}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000380)=""/49, 0x31}], 0x5, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2060) wait4(r5, &(0x7f0000000840), 0x1, &(0x7f0000000940)) ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000000180)) 03:24:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000000380)="c84be06ec095c8bc8c5208b9a99de328776282334c5662926d64117b8e2504e336a22e7162f3342f92a6fa125cff9b81f8f1d67b3f77ad62caadbaa9021e2640bcef6076b23addc40b5d606ffc94d91164247c6dee04b8916649da0f68420c6a697082d826dcd5a5052563503ce4a09669dd397d9c96e3ac5659433c59acafddcf5f73d862a07d1e54df6155bccd9f511026fd40a1a75e4b04ee7ebea97fb462d1d23ba36aa958ee1c21c12750b5e7006afc5ba0204883ba8cf87b77e3544ebf99c6d36987688c13f347f8963b475834b375f441b98062c28116030eb929640f597e609f0b97b70c9b", 0xe9, 0x7}, {&(0x7f0000000240)="275a216422eafc683826a18a187b10555fab7c54c3d6c15c1a90da706a7c79f93e7c364fcf739c259b7a527d65f3b018ce97d7e0e31e32810e5a23464ab7f63cc094ddab006b", 0x46, 0xffffffff}, {&(0x7f0000000480)="abbf4141fb2e56ebb759", 0xa, 0x5}, {&(0x7f00000004c0)="f526b412a242b4aa13a5277881b047dd998fa2c8ab33adcacad243955edd0dfed896f818b3c3ff74342a865d278fd1ad410b584ba7ccaff5d8489ba180758fcd4686896e6040b945e645526c89c2c72e91b2e3c4dbf674e2", 0x58, 0xffffffffffffffff}], 0x80420, &(0x7f0000000640)={[{@size={'size', 0x3d, [0x32, 0x6d, 0x2d, 0x6d, 0x6b, 0x32, 0x32, 0x38]}}, {@huge_within_size}, {@huge_always}], [{@audit}, {@smackfstransmute}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x33, 0x65, 0x33, 0x31, 0x35, 0x31, 0x37], 0x2d, [0x39, 0x36, 0x65, 0x35], 0x2d, [0x33, 0x63, 0x64, 0x66], 0x2d, [0x32, 0x39, 0x33], 0x2d, [0x66, 0x33, 0x31, 0x30, 0x66, 0x38, 0x33, 0x37]}}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@euid_lt={'euid<', r1}}, {@subj_type={'subj_type', 0x3d, '}+'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@audit}, {@fsname={'fsname', 0x3d, '^},\x00'}}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000780)='./file0/../file0\x00', 0x8) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e5070057317ce3c9b3e20cf182973bda8f4c49d906c4464dfe5f17b5473f008f869e06d32dff9fc31723e13b9f4c11ca9f178797c2542f79a393f291a17f5eb7331dec8308e231bad517d3df39ddec810092fd47e15ef47b0dac68f0fabdc69a"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x5c33, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000740)=@req={0x28, &(0x7f0000000700)={'veth0_virt_wifi\x00', @ifru_mtu}}) 03:24:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x8983, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:24:01 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x4800, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:24:01 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 42) 03:24:01 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 36) [ 3048.105176] FAULT_INJECTION: forcing a failure. [ 3048.105176] name failslab, interval 1, probability 0, space 0, times 0 [ 3048.107625] CPU: 0 PID: 22477 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3048.109043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3048.110746] Call Trace: [ 3048.111286] dump_stack+0x107/0x167 [ 3048.112046] should_fail.cold+0x5/0xa [ 3048.112815] ? rfkill_fop_open+0x367/0x680 [ 3048.113683] should_failslab+0x5/0x20 [ 3048.114469] kmem_cache_alloc_trace+0x55/0x360 [ 3048.115401] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3048.116467] rfkill_fop_open+0x367/0x680 [ 3048.117311] ? rfkill_init_sw_state+0x150/0x150 [ 3048.118287] misc_open+0x375/0x4a0 [ 3048.119022] ? misc_devnode+0x130/0x130 [ 3048.119829] chrdev_open+0x268/0x6e0 [ 3048.120609] ? cdev_device_add+0x220/0x220 [ 3048.121470] ? security_file_open+0x20b/0x500 [ 3048.122381] do_dentry_open+0x4b7/0x1090 [ 3048.123216] ? cdev_device_add+0x220/0x220 [ 3048.124082] ? may_open+0x1e4/0x400 [ 3048.124826] path_openat+0x193d/0x26d0 [ 3048.125624] ? path_lookupat+0x860/0x860 [ 3048.126457] ? perf_trace_lock+0xac/0x490 [ 3048.127301] ? SOFTIRQ_verbose+0x10/0x10 [ 3048.128126] ? lock_acquire+0x197/0x490 [ 3048.128940] ? __lockdep_reset_lock+0x180/0x180 [ 3048.129872] do_filp_open+0x17e/0x3d0 [ 3048.130635] ? may_open_dev+0xf0/0xf0 [ 3048.131418] ? rwlock_bug.part.0+0x90/0x90 [ 3048.132324] ? _raw_spin_unlock+0x1a/0x30 [ 3048.133149] ? __alloc_fd+0x2a5/0x620 [ 3048.133927] do_sys_openat2+0x171/0x420 [ 3048.134744] ? build_open_flags+0x690/0x690 [ 3048.135598] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3048.136600] ? wait_for_completion+0x270/0x270 [ 3048.137528] __x64_sys_openat+0x13f/0x1f0 [ 3048.138374] ? __ia32_sys_open+0x1c0/0x1c0 [ 3048.139214] ? ksys_write+0x1a9/0x260 [ 3048.140014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3048.141075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3048.142132] do_syscall_64+0x33/0x40 [ 3048.142907] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3048.143970] RIP: 0033:0x7f2947304b19 [ 3048.144755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3048.148485] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3048.150061] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3048.151533] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3048.153004] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3048.154456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3048.155913] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:24:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3048.168678] FAULT_INJECTION: forcing a failure. [ 3048.168678] name failslab, interval 1, probability 0, space 0, times 0 [ 3048.171020] CPU: 0 PID: 22474 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3048.172435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3048.174129] Call Trace: [ 3048.174670] dump_stack+0x107/0x167 [ 3048.175420] should_fail.cold+0x5/0xa [ 3048.176209] ? rfkill_fop_open+0x367/0x680 [ 3048.177071] should_failslab+0x5/0x20 [ 3048.177837] kmem_cache_alloc_trace+0x55/0x360 [ 3048.178771] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3048.179804] rfkill_fop_open+0x367/0x680 [ 3048.180711] ? rfkill_init_sw_state+0x150/0x150 [ 3048.181643] misc_open+0x375/0x4a0 [ 3048.182376] ? misc_devnode+0x130/0x130 [ 3048.183174] chrdev_open+0x268/0x6e0 [ 3048.183944] ? cdev_device_add+0x220/0x220 [ 3048.184816] ? security_file_open+0x20b/0x500 [ 3048.185746] do_dentry_open+0x4b7/0x1090 [ 3048.186562] ? cdev_device_add+0x220/0x220 [ 3048.187433] ? may_open+0x1e4/0x400 [ 3048.188182] path_openat+0x193d/0x26d0 [ 3048.189000] ? path_lookupat+0x860/0x860 [ 3048.189823] ? perf_trace_lock+0xac/0x490 [ 3048.190676] ? SOFTIRQ_verbose+0x10/0x10 [ 3048.191481] ? lock_acquire+0x197/0x490 [ 3048.192308] ? __lockdep_reset_lock+0x180/0x180 [ 3048.193270] do_filp_open+0x17e/0x3d0 [ 3048.194048] ? may_open_dev+0xf0/0xf0 [ 3048.194846] ? rwlock_bug.part.0+0x90/0x90 [ 3048.195718] ? _raw_spin_unlock+0x1a/0x30 [ 3048.196572] ? __alloc_fd+0x2a5/0x620 [ 3048.197362] do_sys_openat2+0x171/0x420 [ 3048.198166] ? build_open_flags+0x690/0x690 [ 3048.199045] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3048.200053] ? wait_for_completion+0x270/0x270 [ 3048.201000] __x64_sys_openat+0x13f/0x1f0 [ 3048.201830] ? __ia32_sys_open+0x1c0/0x1c0 [ 3048.202698] ? ksys_write+0x1a9/0x260 [ 3048.203490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3048.204574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3048.205614] do_syscall_64+0x33/0x40 [ 3048.206374] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3048.207412] RIP: 0033:0x7f6eaa02cb19 [ 3048.208196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3048.211948] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3048.213483] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3048.214929] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3048.216392] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3048.217840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3048.219285] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:24:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x89a0, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:24:01 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 43) 03:24:01 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x4c00, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:24:01 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, 0x0) [ 3048.359523] EXT4-fs (sda): Unrecognized mount option "size=2m-mk228" or missing value 03:24:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:24:01 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 37) 03:24:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df393a2184a392fd476258d8f4e1df6476fa36"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x820, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0/../file0\x00'}) openat(r1, &(0x7f0000000340)='./file0\x00', 0x402000, 0x8f) accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000180)=0x6e) 03:24:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) fork() 03:24:01 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4203, r0, 0x0, 0x0) [ 3048.550937] FAULT_INJECTION: forcing a failure. [ 3048.550937] name failslab, interval 1, probability 0, space 0, times 0 [ 3048.553341] CPU: 1 PID: 22624 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3048.554843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3048.556563] Call Trace: [ 3048.557122] dump_stack+0x107/0x167 [ 3048.557892] should_fail.cold+0x5/0xa [ 3048.558713] ? create_object.isra.0+0x3a/0xa20 [ 3048.559663] should_failslab+0x5/0x20 [ 3048.560480] kmem_cache_alloc+0x5b/0x360 [ 3048.561318] create_object.isra.0+0x3a/0xa20 [ 3048.562252] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3048.563287] kmem_cache_alloc_trace+0x151/0x360 [ 3048.564270] rfkill_fop_open+0x367/0x680 [ 3048.565103] ? rfkill_init_sw_state+0x150/0x150 [ 3048.566088] misc_open+0x375/0x4a0 [ 3048.566831] ? misc_devnode+0x130/0x130 [ 3048.567632] chrdev_open+0x268/0x6e0 [ 3048.568421] ? cdev_device_add+0x220/0x220 [ 3048.569292] ? security_file_open+0x20b/0x500 [ 3048.570245] do_dentry_open+0x4b7/0x1090 [ 3048.571077] ? cdev_device_add+0x220/0x220 [ 3048.571991] ? may_open+0x1e4/0x400 [ 3048.572739] path_openat+0x193d/0x26d0 [ 3048.573572] ? path_lookupat+0x860/0x860 [ 3048.574398] ? perf_trace_lock+0xac/0x490 [ 3048.575276] ? SOFTIRQ_verbose+0x10/0x10 [ 3048.576120] ? lock_acquire+0x197/0x490 [ 3048.576932] ? __lockdep_reset_lock+0x180/0x180 [ 3048.577889] do_filp_open+0x17e/0x3d0 [ 3048.578678] ? may_open_dev+0xf0/0xf0 [ 3048.579474] ? rwlock_bug.part.0+0x90/0x90 [ 3048.580405] ? _raw_spin_unlock+0x1a/0x30 [ 3048.581249] ? __alloc_fd+0x2a5/0x620 [ 3048.582064] do_sys_openat2+0x171/0x420 [ 3048.582876] ? build_open_flags+0x690/0x690 [ 3048.583781] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3048.584782] ? wait_for_completion+0x270/0x270 [ 3048.585741] __x64_sys_openat+0x13f/0x1f0 [ 3048.586584] ? __ia32_sys_open+0x1c0/0x1c0 [ 3048.587471] ? ksys_write+0x1a9/0x260 [ 3048.588267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3048.589380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3048.590443] do_syscall_64+0x33/0x40 [ 3048.591230] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3048.592291] RIP: 0033:0x7f2947304b19 [ 3048.593082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3048.596832] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3048.598407] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3048.599855] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3048.601311] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3048.602758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3048.604217] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3048.614281] FAULT_INJECTION: forcing a failure. [ 3048.614281] name failslab, interval 1, probability 0, space 0, times 0 [ 3048.616660] CPU: 1 PID: 22623 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3048.618090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3048.619828] Call Trace: [ 3048.620389] dump_stack+0x107/0x167 [ 3048.621164] should_fail.cold+0x5/0xa [ 3048.621962] ? create_object.isra.0+0x3a/0xa20 [ 3048.622923] should_failslab+0x5/0x20 [ 3048.623709] kmem_cache_alloc+0x5b/0x360 [ 3048.624561] create_object.isra.0+0x3a/0xa20 [ 3048.625457] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3048.626498] kmem_cache_alloc_trace+0x151/0x360 [ 3048.627478] rfkill_fop_open+0x367/0x680 [ 3048.628337] ? rfkill_init_sw_state+0x150/0x150 [ 3048.629284] misc_open+0x375/0x4a0 [ 3048.630007] ? misc_devnode+0x130/0x130 [ 3048.630819] chrdev_open+0x268/0x6e0 [ 3048.631601] ? cdev_device_add+0x220/0x220 [ 3048.632481] ? security_file_open+0x20b/0x500 [ 3048.633430] do_dentry_open+0x4b7/0x1090 [ 3048.634260] ? cdev_device_add+0x220/0x220 [ 3048.634937] EXT4-fs (sda): re-mounted. Opts: (null) [ 3048.635121] ? may_open+0x1e4/0x400 [ 3048.635149] path_openat+0x193d/0x26d0 [ 3048.635190] ? path_lookupat+0x860/0x860 [ 3048.638562] ? perf_trace_lock+0xac/0x490 [ 3048.639403] ? SOFTIRQ_verbose+0x10/0x10 [ 3048.640257] ? lock_acquire+0x197/0x490 [ 3048.641072] ? __lockdep_reset_lock+0x180/0x180 [ 3048.642053] do_filp_open+0x17e/0x3d0 [ 3048.642830] ? may_open_dev+0xf0/0xf0 [ 3048.643641] ? rwlock_bug.part.0+0x90/0x90 [ 3048.644518] ? _raw_spin_unlock+0x1a/0x30 [ 3048.645389] ? __alloc_fd+0x2a5/0x620 [ 3048.646191] do_sys_openat2+0x171/0x420 [ 3048.647002] ? build_open_flags+0x690/0x690 [ 3048.647880] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3048.648875] ? wait_for_completion+0x270/0x270 [ 3048.649819] __x64_sys_openat+0x13f/0x1f0 [ 3048.650662] ? __ia32_sys_open+0x1c0/0x1c0 [ 3048.651512] ? ksys_write+0x1a9/0x260 [ 3048.652306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3048.653369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3048.654434] do_syscall_64+0x33/0x40 [ 3048.655194] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3048.656236] RIP: 0033:0x7f6eaa02cb19 [ 3048.656992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3048.660722] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3048.662269] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3048.663719] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3048.665211] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3048.666652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3048.668110] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3048.697337] EXT4-fs (sda): re-mounted. Opts: (null) [ 3048.767367] EXT4-fs (sda): re-mounted. Opts: (null) [ 3048.775289] EXT4-fs (sda): re-mounted. Opts: (null) 03:24:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x89a1, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:24:16 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x5dfe, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:24:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xb00, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:24:16 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 38) 03:24:16 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 44) 03:24:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:24:16 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4204, r0, 0x0, 0x0) 03:24:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x6) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) [ 3063.644205] FAULT_INJECTION: forcing a failure. [ 3063.644205] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.646576] CPU: 0 PID: 22753 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3063.647987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.649689] Call Trace: [ 3063.650244] dump_stack+0x107/0x167 [ 3063.650998] should_fail.cold+0x5/0xa [ 3063.651789] ? rfkill_fop_open+0x367/0x680 [ 3063.652673] should_failslab+0x5/0x20 [ 3063.653456] kmem_cache_alloc_trace+0x55/0x360 [ 3063.654392] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3063.655437] rfkill_fop_open+0x367/0x680 [ 3063.656301] ? rfkill_init_sw_state+0x150/0x150 [ 3063.657254] misc_open+0x375/0x4a0 [ 3063.657984] ? misc_devnode+0x130/0x130 [ 3063.658792] chrdev_open+0x268/0x6e0 [ 3063.659557] ? cdev_device_add+0x220/0x220 [ 3063.660430] ? security_file_open+0x20b/0x500 [ 3063.661359] do_dentry_open+0x4b7/0x1090 [ 3063.662194] ? cdev_device_add+0x220/0x220 [ 3063.663066] ? may_open+0x1e4/0x400 [ 3063.663819] path_openat+0x193d/0x26d0 [ 3063.664656] ? path_lookupat+0x860/0x860 [ 3063.665488] ? perf_trace_lock+0xac/0x490 [ 3063.666334] ? SOFTIRQ_verbose+0x10/0x10 [ 3063.667162] ? lock_acquire+0x197/0x490 [ 3063.667982] ? __lockdep_reset_lock+0x180/0x180 [ 3063.668951] do_filp_open+0x17e/0x3d0 [ 3063.669731] ? may_open_dev+0xf0/0xf0 [ 3063.670533] ? rwlock_bug.part.0+0x90/0x90 [ 3063.671412] ? _raw_spin_unlock+0x1a/0x30 [ 3063.672276] ? __alloc_fd+0x2a5/0x620 [ 3063.673076] do_sys_openat2+0x171/0x420 [ 3063.673892] ? build_open_flags+0x690/0x690 [ 3063.674769] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3063.675760] ? wait_for_completion+0x270/0x270 [ 3063.676714] __x64_sys_openat+0x13f/0x1f0 [ 3063.677565] ? __ia32_sys_open+0x1c0/0x1c0 [ 3063.678428] ? ksys_write+0x1a9/0x260 [ 3063.679221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3063.680304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.681367] do_syscall_64+0x33/0x40 [ 3063.682132] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3063.683178] RIP: 0033:0x7f2947304b19 [ 3063.683943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.687705] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3063.689263] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3063.690716] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3063.692174] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.693627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3063.695081] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3063.699846] FAULT_INJECTION: forcing a failure. [ 3063.699846] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.702379] CPU: 1 PID: 22756 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3063.703792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.705486] Call Trace: [ 3063.706037] dump_stack+0x107/0x167 [ 3063.706790] should_fail.cold+0x5/0xa [ 3063.707571] ? rfkill_fop_open+0x367/0x680 [ 3063.708461] ? rfkill_fop_open+0x367/0x680 [ 3063.709331] should_failslab+0x5/0x20 [ 3063.710112] kmem_cache_alloc_trace+0x55/0x360 [ 3063.711052] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3063.712097] rfkill_fop_open+0x367/0x680 [ 3063.712946] ? rfkill_init_sw_state+0x150/0x150 [ 3063.713901] misc_open+0x375/0x4a0 [ 3063.714631] ? misc_devnode+0x130/0x130 [ 3063.715444] chrdev_open+0x268/0x6e0 [ 3063.716244] ? cdev_device_add+0x220/0x220 [ 3063.717117] ? security_file_open+0x20b/0x500 [ 3063.718043] do_dentry_open+0x4b7/0x1090 [ 3063.718872] ? cdev_device_add+0x220/0x220 [ 3063.719744] ? may_open+0x1e4/0x400 [ 3063.720509] path_openat+0x193d/0x26d0 [ 3063.721327] ? path_lookupat+0x860/0x860 [ 3063.722159] ? perf_trace_lock+0xac/0x490 [ 3063.723001] ? SOFTIRQ_verbose+0x10/0x10 [ 3063.723825] ? lock_acquire+0x197/0x490 [ 3063.724650] ? __lockdep_reset_lock+0x180/0x180 [ 3063.725616] do_filp_open+0x17e/0x3d0 [ 3063.726395] ? may_open_dev+0xf0/0xf0 [ 3063.727198] ? rwlock_bug.part.0+0x90/0x90 [ 3063.728077] ? _raw_spin_unlock+0x1a/0x30 [ 3063.728947] ? __alloc_fd+0x2a5/0x620 [ 3063.729743] do_sys_openat2+0x171/0x420 [ 3063.730552] ? build_open_flags+0x690/0x690 [ 3063.731433] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3063.732441] ? wait_for_completion+0x270/0x270 [ 3063.733389] __x64_sys_openat+0x13f/0x1f0 [ 3063.734239] ? __ia32_sys_open+0x1c0/0x1c0 [ 3063.735107] ? ksys_write+0x1a9/0x260 [ 3063.735908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3063.736981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.738043] do_syscall_64+0x33/0x40 [ 3063.738815] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3063.739857] RIP: 0033:0x7f6eaa02cb19 [ 3063.740635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.744367] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3063.745868] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3063.747321] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3063.748798] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.750248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3063.751699] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:24:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:24:16 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 39) [ 3063.815785] FAULT_INJECTION: forcing a failure. [ 3063.815785] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.818724] CPU: 1 PID: 22841 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3063.820398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.822363] Call Trace: [ 3063.823007] dump_stack+0x107/0x167 [ 3063.823892] should_fail.cold+0x5/0xa [ 3063.824820] ? create_object.isra.0+0x3a/0xa20 [ 3063.825910] should_failslab+0x5/0x20 [ 3063.826828] kmem_cache_alloc+0x5b/0x360 [ 3063.827813] create_object.isra.0+0x3a/0xa20 [ 3063.828866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3063.830078] kmem_cache_alloc_trace+0x151/0x360 [ 3063.831200] rfkill_fop_open+0x367/0x680 [ 3063.832208] ? rfkill_init_sw_state+0x150/0x150 [ 3063.833321] misc_open+0x375/0x4a0 [ 3063.834168] ? misc_devnode+0x130/0x130 [ 3063.835110] chrdev_open+0x268/0x6e0 [ 3063.835996] ? cdev_device_add+0x220/0x220 [ 3063.837025] ? security_file_open+0x20b/0x500 [ 3063.838099] do_dentry_open+0x4b7/0x1090 [ 3063.839064] ? cdev_device_add+0x220/0x220 [ 3063.840077] ? may_open+0x1e4/0x400 [ 3063.840977] path_openat+0x193d/0x26d0 [ 3063.841927] ? path_lookupat+0x860/0x860 [ 3063.842897] ? perf_trace_lock+0xac/0x490 [ 3063.843883] ? SOFTIRQ_verbose+0x10/0x10 [ 3063.844854] ? lock_acquire+0x197/0x490 [ 3063.845798] ? __lockdep_reset_lock+0x180/0x180 [ 3063.846910] do_filp_open+0x17e/0x3d0 [ 3063.847808] ? may_open_dev+0xf0/0xf0 [ 3063.848755] ? rwlock_bug.part.0+0x90/0x90 [ 3063.849771] ? _raw_spin_unlock+0x1a/0x30 [ 3063.850745] ? __alloc_fd+0x2a5/0x620 [ 3063.851665] do_sys_openat2+0x171/0x420 [ 3063.852616] ? build_open_flags+0x690/0x690 [ 3063.853626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3063.854774] ? wait_for_completion+0x270/0x270 [ 3063.855865] __x64_sys_openat+0x13f/0x1f0 [ 3063.856868] ? __ia32_sys_open+0x1c0/0x1c0 [ 3063.857861] ? ksys_write+0x1a9/0x260 [ 3063.858776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3063.860020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.861250] do_syscall_64+0x33/0x40 [ 3063.862137] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3063.863346] RIP: 0033:0x7f2947304b19 [ 3063.864245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.868561] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3063.870356] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3063.872037] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3063.873733] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.875389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3063.877065] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3063.882152] EXT4-fs (sda): re-mounted. Opts: (null) 03:24:16 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4205, r0, 0x0, 0x0) 03:24:16 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 45) 03:24:16 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x5efe, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:24:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:24:17 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"/419]) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x6, 0x4, 0x40, 0x0, 0xd4, 0x400, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x293, 0x2, @perf_config_ext={0x7ff, 0x3}, 0x50, 0xfff, 0x7fff, 0x5, 0x7a, 0x0, 0x9e3e, 0x0, 0x9, 0x0, 0xde34}, 0xffffffffffffffff, 0xb, r2, 0x3) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) tkill(r1, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) ptrace$cont(0x1f, r5, 0x6, 0x0) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) [ 3063.982389] FAULT_INJECTION: forcing a failure. [ 3063.982389] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.984745] CPU: 0 PID: 22875 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3063.986159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.987849] Call Trace: [ 3063.988424] dump_stack+0x107/0x167 [ 3063.989181] should_fail.cold+0x5/0xa [ 3063.989965] ? create_object.isra.0+0x3a/0xa20 [ 3063.990907] should_failslab+0x5/0x20 [ 3063.991683] kmem_cache_alloc+0x5b/0x360 [ 3063.992534] create_object.isra.0+0x3a/0xa20 [ 3063.993438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3063.994485] kmem_cache_alloc_trace+0x151/0x360 [ 3063.995449] rfkill_fop_open+0x367/0x680 [ 3063.996307] ? rfkill_init_sw_state+0x150/0x150 [ 3063.997283] misc_open+0x375/0x4a0 [ 3063.998033] ? misc_devnode+0x130/0x130 [ 3063.998862] chrdev_open+0x268/0x6e0 [ 3063.999640] ? cdev_device_add+0x220/0x220 [ 3064.000548] ? security_file_open+0x20b/0x500 [ 3064.001492] do_dentry_open+0x4b7/0x1090 [ 3064.002340] ? cdev_device_add+0x220/0x220 [ 3064.003221] ? may_open+0x1e4/0x400 [ 3064.003986] path_openat+0x193d/0x26d0 [ 3064.004819] ? path_lookupat+0x860/0x860 [ 3064.005669] ? perf_trace_lock+0xac/0x490 [ 3064.006534] ? SOFTIRQ_verbose+0x10/0x10 [ 3064.007387] ? lock_acquire+0x197/0x490 [ 3064.008234] ? __lockdep_reset_lock+0x180/0x180 [ 3064.009209] do_filp_open+0x17e/0x3d0 [ 3064.010007] ? may_open_dev+0xf0/0xf0 [ 3064.010826] ? rwlock_bug.part.0+0x90/0x90 [ 3064.011738] ? _raw_spin_unlock+0x1a/0x30 [ 3064.012591] ? __alloc_fd+0x2a5/0x620 [ 3064.013393] do_sys_openat2+0x171/0x420 [ 3064.014209] ? build_open_flags+0x690/0x690 [ 3064.015092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3064.016082] ? wait_for_completion+0x270/0x270 [ 3064.017051] __x64_sys_openat+0x13f/0x1f0 [ 3064.017902] ? __ia32_sys_open+0x1c0/0x1c0 [ 3064.018771] ? ksys_write+0x1a9/0x260 [ 3064.019561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3064.020649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3064.021712] do_syscall_64+0x33/0x40 [ 3064.022478] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3064.023526] RIP: 0033:0x7f6eaa02cb19 [ 3064.024298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.028056] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3064.029624] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3064.031085] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3064.032564] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.034022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3064.035481] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3064.056078] EXT4-fs (sda): re-mounted. Opts: (null) 03:24:17 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 46) 03:24:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x1100, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3064.110672] FAULT_INJECTION: forcing a failure. [ 3064.110672] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.113309] CPU: 1 PID: 22888 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3064.114816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.116620] Call Trace: [ 3064.117215] dump_stack+0x107/0x167 [ 3064.118023] should_fail.cold+0x5/0xa [ 3064.118863] ? rfkill_fop_open+0x367/0x680 [ 3064.119798] should_failslab+0x5/0x20 [ 3064.120647] kmem_cache_alloc_trace+0x55/0x360 [ 3064.121642] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3064.122755] rfkill_fop_open+0x367/0x680 [ 3064.123653] ? rfkill_init_sw_state+0x150/0x150 [ 3064.124676] misc_open+0x375/0x4a0 [ 3064.125454] ? misc_devnode+0x130/0x130 [ 3064.126318] chrdev_open+0x268/0x6e0 [ 3064.127131] ? cdev_device_add+0x220/0x220 [ 3064.128055] ? security_file_open+0x20b/0x500 [ 3064.129038] do_dentry_open+0x4b7/0x1090 [ 3064.129922] ? cdev_device_add+0x220/0x220 [ 3064.130836] ? may_open+0x1e4/0x400 [ 3064.131628] path_openat+0x193d/0x26d0 [ 3064.132507] ? path_lookupat+0x860/0x860 [ 3064.133386] ? perf_trace_lock+0xac/0x490 [ 3064.134277] ? SOFTIRQ_verbose+0x10/0x10 [ 3064.135149] ? lock_acquire+0x197/0x490 [ 3064.136011] ? __lockdep_reset_lock+0x180/0x180 [ 3064.137048] do_filp_open+0x17e/0x3d0 [ 3064.137867] ? may_open_dev+0xf0/0xf0 [ 3064.138715] ? rwlock_bug.part.0+0x90/0x90 [ 3064.139639] ? _raw_spin_unlock+0x1a/0x30 [ 3064.140561] ? __alloc_fd+0x2a5/0x620 [ 3064.141410] do_sys_openat2+0x171/0x420 [ 3064.142266] ? build_open_flags+0x690/0x690 [ 3064.143190] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3064.144231] ? wait_for_completion+0x270/0x270 [ 3064.145227] __x64_sys_openat+0x13f/0x1f0 [ 3064.146105] ? __ia32_sys_open+0x1c0/0x1c0 [ 3064.147000] ? ksys_write+0x1a9/0x260 [ 3064.147824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3064.148969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3064.150069] do_syscall_64+0x33/0x40 [ 3064.150861] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3064.151944] RIP: 0033:0x7f6eaa02cb19 [ 3064.152746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.156632] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3064.158243] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3064.159758] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3064.161288] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.162800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3064.164302] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:24:17 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x5ffe, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3076.772382] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:24:37 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 40) 03:24:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x8503, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:24:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:24:37 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 47) 03:24:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0/../file0\x00', 0x6, 0x1, &(0x7f0000000280)=[{&(0x7f0000000340)="846c38fad3a2b976be77825924a133bbc381aab6c6ef88bfa980e0ce9e51a3dae7cc2dfb3a276d412453b72292233d1187bb25f3f0ab495ead7edb4c991f7cc58c3c2412d07b3914cb7f18b09e504c0d590ee4994efe679dc433f93e78ade5df93aabf71c228ff607857c12f6bd439cd84e2a4b50077805fa6747e120a73262867e3250bf1521d56a0853067b9362c2d105a6ed092c3a67fac4642a0f10aacd5e569a1138806f2", 0xa7, 0x4}], 0x2, &(0x7f0000000400)={[{@shortname_mixed}, {@uni_xlateno}, {@uni_xlate}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) syz_mount_image$iso9660(&(0x7f0000000480), &(0x7f00000004c0)='./file0/../file0\x00', 0x800, 0x4, &(0x7f0000000800)=[{&(0x7f0000000500)="bb657191a5313c45ad6c19bdbd404c9618838d1fa382de21e494641bf6749a03dbb8c6e3bc9d60515c2c3f389541f88ccd31732656595553588a55fdc9dbd0f1c8a63b47", 0x44, 0x3}, {&(0x7f0000000580)="b552baed56f634fd3b31190352afd3d216240c2849a6c6f51604899f841dde789baf9ff0f745129d95101f182eef5608333c2649477c4855378a0728dcef34191000481424ca9171221464efcd1f3f12b358a688c185fe586dcb9938501fc95dc637f1a8839d4b3f", 0x68, 0x42c}, {&(0x7f0000000600)="50aef01735228ac9e3ad26a767950c6db6deb5ff0689ceebe7e3a10cb844dfaad331fca45926c261c057e6f7dbc073f483d2c3719aaf42e60e466ce9d5d57ab8d294e740728ada810b401609217b9859f18f9b6fe9fe9f95801c85f15b97f71c1ee5b46c82c8c52566a42ac8f9532b6c366006c87c83fc79094c8e51b8f2f073a8bc891831e9749d34657c755c087e81fda81e0332dcf65b98ca3cbc7873fc43970dd46888d0d8407984930ba63921df13706cf4d4b29e65de031f1f19ab7e9eb611867b749afe80", 0xc8}, {&(0x7f0000000700)="d5f59c08befea279d9bdc3ec5e9aebdf008807bda5aa5f1073b83ed79a4c3a4cdbc6e7ad143d21eb9008abbf0c45bc4e71804f55017998d804e7b83f4aa3cf11900264797030e5c0db15f107348b01e40bd554a2e9f944017bd0c7774ccb2a0607a933aa54658991979b8edbc89b91c0ea74e37837f0acb9b60c37ae4f0fe0c6cdd529356c70d94411ae38517078f20d5cff713ce2b18aefa9425501ef936e20fe0ffedf8c0e2d14e1969c05db292b3ac74e796a7c3949a6654e7f137c4caf3a0a9c4b64002971ac47f14d7644a8b5cd91cd42638374c3812797dd77", 0xdc, 0x80000001}], 0x8000, &(0x7f0000000880)={[{@mode={'mode', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@nocompress}, {@nojoliet}, {@hide}, {@unhide}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@overriderock}], [{@audit}, {@euid_eq={'euid', 0x3d, r2}}, {@dont_appraise}, {@dont_measure}, {@measure}]}) sendfile(r1, r0, &(0x7f0000000040)=0x80, 0x800) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d940a3fdc4e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad517d3df39ddec8e7092fd476258d8f4e1df6476fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setreuid(0xffffffffffffffff, r3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:24:37 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x6000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:24:37 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4206, r0, 0x0, 0x0) 03:24:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3084.827531] FAULT_INJECTION: forcing a failure. [ 3084.827531] name failslab, interval 1, probability 0, space 0, times 0 [ 3084.829216] CPU: 1 PID: 23013 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3084.830207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3084.831404] Call Trace: [ 3084.831800] dump_stack+0x107/0x167 [ 3084.832345] should_fail.cold+0x5/0xa [ 3084.832923] ? rfkill_fop_open+0x367/0x680 [ 3084.833552] should_failslab+0x5/0x20 [ 3084.834108] kmem_cache_alloc_trace+0x55/0x360 [ 3084.834772] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3084.835527] rfkill_fop_open+0x367/0x680 [ 3084.836110] ? rfkill_init_sw_state+0x150/0x150 [ 3084.836801] misc_open+0x375/0x4a0 [ 3084.837320] ? misc_devnode+0x130/0x130 [ 3084.837901] chrdev_open+0x268/0x6e0 [ 3084.838445] ? cdev_device_add+0x220/0x220 [ 3084.839077] ? security_file_open+0x20b/0x500 [ 3084.839742] do_dentry_open+0x4b7/0x1090 [ 3084.840342] ? cdev_device_add+0x220/0x220 [ 3084.840990] ? may_open+0x1e4/0x400 [ 3084.841535] path_openat+0x193d/0x26d0 [ 3084.842119] ? path_lookupat+0x860/0x860 [ 3084.842721] ? perf_trace_lock+0xac/0x490 [ 3084.843327] ? SOFTIRQ_verbose+0x10/0x10 [ 3084.843944] ? lock_acquire+0x197/0x490 [ 3084.844550] ? __lockdep_reset_lock+0x180/0x180 [ 3084.845253] do_filp_open+0x17e/0x3d0 [ 3084.845820] ? may_open_dev+0xf0/0xf0 [ 3084.846400] ? rwlock_bug.part.0+0x90/0x90 [ 3084.847048] ? _raw_spin_unlock+0x1a/0x30 [ 3084.847666] ? __alloc_fd+0x2a5/0x620 [ 3084.848242] do_sys_openat2+0x171/0x420 [ 3084.848852] ? build_open_flags+0x690/0x690 [ 3084.849485] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3084.850196] ? wait_for_completion+0x270/0x270 [ 3084.850880] __x64_sys_openat+0x13f/0x1f0 [ 3084.851493] ? __ia32_sys_open+0x1c0/0x1c0 [ 3084.852117] ? ksys_write+0x1a9/0x260 [ 3084.852710] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3084.853478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3084.854244] do_syscall_64+0x33/0x40 [ 3084.854795] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3084.855547] RIP: 0033:0x7f2947304b19 [ 3084.856090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3084.858792] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3084.859917] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3084.860982] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3084.862018] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3084.863052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3084.864102] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3084.866772] FAULT_INJECTION: forcing a failure. [ 3084.866772] name failslab, interval 1, probability 0, space 0, times 0 [ 3084.869320] CPU: 0 PID: 23008 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3084.870771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3084.872529] Call Trace: [ 3084.873092] dump_stack+0x107/0x167 [ 3084.873864] should_fail.cold+0x5/0xa [ 3084.874667] ? create_object.isra.0+0x3a/0xa20 [ 3084.875629] should_failslab+0x5/0x20 [ 3084.876434] kmem_cache_alloc+0x5b/0x360 [ 3084.877301] create_object.isra.0+0x3a/0xa20 [ 3084.878225] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3084.879306] kmem_cache_alloc_trace+0x151/0x360 [ 3084.880293] rfkill_fop_open+0x367/0x680 [ 3084.881167] ? rfkill_init_sw_state+0x150/0x150 [ 3084.882148] misc_open+0x375/0x4a0 [ 3084.882898] ? misc_devnode+0x130/0x130 [ 3084.883731] chrdev_open+0x268/0x6e0 [ 3084.884532] ? cdev_device_add+0x220/0x220 [ 3084.885433] ? security_file_open+0x20b/0x500 [ 3084.886380] do_dentry_open+0x4b7/0x1090 [ 3084.887236] ? cdev_device_add+0x220/0x220 [ 3084.888126] ? may_open+0x1e4/0x400 [ 3084.888907] path_openat+0x193d/0x26d0 [ 3084.889747] ? path_lookupat+0x860/0x860 [ 3084.890605] ? perf_trace_lock+0xac/0x490 [ 3084.891471] ? SOFTIRQ_verbose+0x10/0x10 [ 3084.892323] ? __lockdep_reset_lock+0x180/0x180 [ 3084.893307] do_filp_open+0x17e/0x3d0 [ 3084.894100] ? may_open_dev+0xf0/0xf0 [ 3084.894916] ? rwlock_bug.part.0+0x90/0x90 [ 3084.895810] ? _raw_spin_unlock+0x1a/0x30 [ 3084.896693] ? __alloc_fd+0x2a5/0x620 [ 3084.897506] do_sys_openat2+0x171/0x420 [ 3084.898337] ? build_open_flags+0x690/0x690 [ 3084.899234] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3084.900239] ? wait_for_completion+0x270/0x270 [ 3084.901209] __x64_sys_openat+0x13f/0x1f0 [ 3084.902071] ? __ia32_sys_open+0x1c0/0x1c0 [ 3084.902947] ? ksys_write+0x1a9/0x260 [ 3084.903755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3084.904860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3084.905936] do_syscall_64+0x33/0x40 [ 3084.906714] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3084.907777] RIP: 0033:0x7f6eaa02cb19 [ 3084.908573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3084.912382] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3084.913977] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3084.915445] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3084.916918] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3084.918382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3084.919850] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3084.999514] FAT-fs (loop6): Unrecognized mount option "mask=MAY_APPEND" or missing value [ 3085.051811] EXT4-fs (sda): re-mounted. Opts: (null) 03:24:52 executing program 6: io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x8001, 0xffffffffffffffff, &(0x7f0000000300)="8f6d1048ddbdb2137618ad0652163912f414b28900c6223db6aad12bd1dbd3a6ccbe860db0902a826e19118de950c1099afe8d3d8f35d0baceab45636ee459d77e09491f2165316c3bf552291496df37d742fb356d69a415cf02680ccf5bb8e2f1cc8ab01c18a7a21b1b66876f", 0x6d, 0x68b7}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = creat(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0xc4, 0x1, 0x7f, 0x5, 0x0, 0x80000001, 0x22840, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x21, 0x1000}, 0x10200, 0x4, 0x1, 0x4, 0x10000, 0x7, 0xe1, 0x0, 0x9, 0x0, 0x4}, r1, 0xf, r2, 0x1) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000040)=0x400, 0x4) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="d908000000e50700ee6664aba1348f869e06d12dff9fc31723e13b9f4c91a17d5eb7331dec8308e231bad52c1dca018637743a92fd4762581371d8f4e1df64f6fa"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x80000001, 0x7, 0xc74, 0x3ff, 0x2}) 03:24:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:24:52 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4207, r0, 0x0, 0x0) 03:24:52 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2c) ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x2, 0x6, 0x5, 0x0, 0x0, 0x400000000ff, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2f, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x4, 0x801, 0x1, 0x88, 0x8f74, 0xd92, 0x0, 0x1, 0x0, 0x7f5}, r3, 0xfffffffffffffffb, r0, 0x9) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000180)) ptrace(0x4208, r2) tkill(0x0, 0x0) tkill(r1, 0x2c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) 03:24:52 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 48) 03:24:52 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 41) 03:24:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:24:52 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x60fe, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3099.175811] FAULT_INJECTION: forcing a failure. [ 3099.175811] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.178216] CPU: 0 PID: 23144 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3099.179609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3099.181361] Call Trace: [ 3099.181923] dump_stack+0x107/0x167 [ 3099.182685] should_fail.cold+0x5/0xa [ 3099.183492] ? rfkill_fop_open+0x367/0x680 [ 3099.184381] should_failslab+0x5/0x20 [ 3099.185177] kmem_cache_alloc_trace+0x55/0x360 [ 3099.186122] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3099.187192] rfkill_fop_open+0x367/0x680 [ 3099.188052] ? rfkill_init_sw_state+0x150/0x150 [ 3099.189029] misc_open+0x375/0x4a0 [ 3099.189762] ? misc_devnode+0x130/0x130 [ 3099.190586] chrdev_open+0x268/0x6e0 [ 3099.191359] ? cdev_device_add+0x220/0x220 [ 3099.192251] ? security_file_open+0x20b/0x500 [ 3099.193193] do_dentry_open+0x4b7/0x1090 [ 3099.194040] ? cdev_device_add+0x220/0x220 [ 3099.194925] ? may_open+0x1e4/0x400 [ 3099.195703] path_openat+0x193d/0x26d0 [ 3099.196539] ? path_lookupat+0x860/0x860 [ 3099.197406] ? perf_trace_lock+0xac/0x490 [ 3099.198256] ? SOFTIRQ_verbose+0x10/0x10 [ 3099.199093] ? lock_acquire+0x197/0x490 [ 3099.199929] ? __lockdep_reset_lock+0x180/0x180 [ 3099.200916] do_filp_open+0x17e/0x3d0 [ 3099.201703] ? may_open_dev+0xf0/0xf0 [ 3099.202510] ? rwlock_bug.part.0+0x90/0x90 [ 3099.203391] ? _raw_spin_unlock+0x1a/0x30 [ 3099.204243] ? __alloc_fd+0x2a5/0x620 [ 3099.205048] do_sys_openat2+0x171/0x420 [ 3099.205887] ? build_open_flags+0x690/0x690 [ 3099.206792] ? __mutex_unlock_slowpath+0xe1/0x600 03:24:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3099.207803] ? wait_for_completion+0x270/0x270 [ 3099.208906] __x64_sys_openat+0x13f/0x1f0 [ 3099.209783] ? __ia32_sys_open+0x1c0/0x1c0 [ 3099.210669] ? ksys_write+0x1a9/0x260 [ 3099.211472] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3099.212550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3099.213628] do_syscall_64+0x33/0x40 [ 3099.214417] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3099.215489] RIP: 0033:0x7f2947304b19 [ 3099.216274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3099.220052] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3099.221615] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3099.223097] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3099.224554] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3099.226025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3099.227502] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3099.231156] FAULT_INJECTION: forcing a failure. [ 3099.231156] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.233785] CPU: 1 PID: 23145 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3099.235236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3099.236972] Call Trace: [ 3099.237536] dump_stack+0x107/0x167 [ 3099.238314] should_fail.cold+0x5/0xa [ 3099.239125] ? create_object.isra.0+0x3a/0xa20 [ 3099.240081] should_failslab+0x5/0x20 [ 3099.240903] kmem_cache_alloc+0x5b/0x360 [ 3099.241765] create_object.isra.0+0x3a/0xa20 [ 3099.242691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3099.243780] kmem_cache_alloc_trace+0x151/0x360 [ 3099.244777] rfkill_fop_open+0x367/0x680 [ 3099.245647] ? rfkill_init_sw_state+0x150/0x150 [ 3099.246638] misc_open+0x375/0x4a0 [ 3099.247393] ? misc_devnode+0x130/0x130 [ 3099.248225] chrdev_open+0x268/0x6e0 [ 3099.249021] ? cdev_device_add+0x220/0x220 [ 3099.249922] ? security_file_open+0x20b/0x500 [ 3099.250874] do_dentry_open+0x4b7/0x1090 [ 3099.251728] ? cdev_device_add+0x220/0x220 [ 3099.252653] ? may_open+0x1e4/0x400 [ 3099.253424] path_openat+0x193d/0x26d0 [ 3099.254259] ? path_lookupat+0x860/0x860 [ 3099.255114] ? perf_trace_lock+0xac/0x490 [ 3099.255983] ? SOFTIRQ_verbose+0x10/0x10 [ 3099.256841] ? lock_acquire+0x197/0x490 [ 3099.257666] ? __lockdep_reset_lock+0x180/0x180 [ 3099.258642] do_filp_open+0x17e/0x3d0 [ 3099.259427] ? may_open_dev+0xf0/0xf0 [ 3099.260232] ? rwlock_bug.part.0+0x90/0x90 [ 3099.261145] ? _raw_spin_unlock+0x1a/0x30 [ 3099.261994] ? __alloc_fd+0x2a5/0x620 [ 3099.262798] do_sys_openat2+0x171/0x420 [ 3099.263618] ? build_open_flags+0x690/0x690 [ 3099.264499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3099.265508] ? wait_for_completion+0x270/0x270 [ 3099.266472] __x64_sys_openat+0x13f/0x1f0 [ 3099.267323] ? __ia32_sys_open+0x1c0/0x1c0 [ 3099.268189] ? ksys_write+0x1a9/0x260 [ 3099.268997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3099.270083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3099.271363] do_syscall_64+0x33/0x40 [ 3099.272144] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3099.273430] RIP: 0033:0x7f6eaa02cb19 [ 3099.274206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3099.277944] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3099.279505] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3099.280965] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3099.282426] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3099.283884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3099.285363] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:24:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3099.304954] EXT4-fs (sda): re-mounted. Opts: (null) 03:24:52 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 49) 03:24:52 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4208, r0, 0x0, 0x0) [ 3099.438574] EXT4-fs (sda): re-mounted. Opts: (null) 03:24:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448e4, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:24:52 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 42) 03:24:52 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x60ff, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3099.502890] FAULT_INJECTION: forcing a failure. [ 3099.502890] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.505310] CPU: 1 PID: 23215 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3099.506742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3099.508449] Call Trace: [ 3099.509032] dump_stack+0x107/0x167 [ 3099.509818] should_fail.cold+0x5/0xa [ 3099.510614] ? create_object.isra.0+0x3a/0xa20 [ 3099.511572] should_failslab+0x5/0x20 [ 3099.512445] kmem_cache_alloc+0x5b/0x360 [ 3099.513317] create_object.isra.0+0x3a/0xa20 [ 3099.514208] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3099.515261] kmem_cache_alloc_trace+0x151/0x360 [ 3099.516222] rfkill_fop_open+0x367/0x680 [ 3099.517099] ? rfkill_init_sw_state+0x150/0x150 03:24:52 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3099.518017] misc_open+0x375/0x4a0 [ 3099.518862] ? misc_devnode+0x130/0x130 [ 3099.519702] chrdev_open+0x268/0x6e0 [ 3099.520468] ? cdev_device_add+0x220/0x220 [ 3099.521352] ? security_file_open+0x20b/0x500 [ 3099.522270] do_dentry_open+0x4b7/0x1090 [ 3099.523110] ? cdev_device_add+0x220/0x220 [ 3099.523972] ? may_open+0x1e4/0x400 [ 3099.524729] path_openat+0x193d/0x26d0 [ 3099.525545] ? path_lookupat+0x860/0x860 [ 3099.526372] ? perf_trace_lock+0xac/0x490 [ 3099.527214] ? SOFTIRQ_verbose+0x10/0x10 [ 3099.528038] ? lock_acquire+0x197/0x490 [ 3099.528874] ? __lockdep_reset_lock+0x180/0x180 [ 3099.529832] do_filp_open+0x17e/0x3d0 [ 3099.530609] ? may_open_dev+0xf0/0xf0 [ 3099.531398] ? rwlock_bug.part.0+0x90/0x90 [ 3099.532271] ? _raw_spin_unlock+0x1a/0x30 [ 3099.533118] ? __alloc_fd+0x2a5/0x620 [ 3099.533914] do_sys_openat2+0x171/0x420 [ 3099.534727] ? build_open_flags+0x690/0x690 [ 3099.535617] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3099.536632] ? wait_for_completion+0x270/0x270 [ 3099.537583] __x64_sys_openat+0x13f/0x1f0 [ 3099.538442] ? __ia32_sys_open+0x1c0/0x1c0 [ 3099.539305] ? ksys_write+0x1a9/0x260 [ 3099.540103] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3099.541200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3099.542261] do_syscall_64+0x33/0x40 [ 3099.543036] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3099.544092] RIP: 0033:0x7f6eaa02cb19 [ 3099.544878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3099.548589] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 03:24:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x40049409, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3099.550170] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3099.551779] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3099.553253] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3099.554719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3099.556172] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:24:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3099.629676] FAULT_INJECTION: forcing a failure. [ 3099.629676] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.632046] CPU: 0 PID: 23247 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3099.633492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3099.635177] Call Trace: [ 3099.635725] dump_stack+0x107/0x167 [ 3099.636470] should_fail.cold+0x5/0xa [ 3099.637260] ? rfkill_fop_open+0x367/0x680 [ 3099.638126] should_failslab+0x5/0x20 [ 3099.638903] kmem_cache_alloc_trace+0x55/0x360 [ 3099.639835] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3099.640898] rfkill_fop_open+0x367/0x680 [ 3099.641754] ? rfkill_init_sw_state+0x150/0x150 [ 3099.642734] misc_open+0x375/0x4a0 [ 3099.643482] ? misc_devnode+0x130/0x130 [ 3099.644315] chrdev_open+0x268/0x6e0 [ 3099.645114] ? cdev_device_add+0x220/0x220 [ 3099.646013] ? security_file_open+0x20b/0x500 [ 3099.646954] do_dentry_open+0x4b7/0x1090 [ 3099.647813] ? cdev_device_add+0x220/0x220 [ 3099.648703] ? may_open+0x1e4/0x400 [ 3099.649463] path_openat+0x193d/0x26d0 [ 3099.650300] ? path_lookupat+0x860/0x860 [ 3099.651143] ? perf_trace_lock+0xac/0x490 [ 3099.652002] ? SOFTIRQ_verbose+0x10/0x10 [ 3099.652863] ? lock_acquire+0x197/0x490 [ 3099.653689] ? __lockdep_reset_lock+0x180/0x180 [ 3099.654655] do_filp_open+0x17e/0x3d0 [ 3099.655441] ? may_open_dev+0xf0/0xf0 [ 3099.656253] ? rwlock_bug.part.0+0x90/0x90 [ 3099.657147] ? _raw_spin_unlock+0x1a/0x30 [ 3099.658012] ? __alloc_fd+0x2a5/0x620 [ 3099.658817] do_sys_openat2+0x171/0x420 [ 3099.659643] ? build_open_flags+0x690/0x690 [ 3099.660526] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3099.661529] ? wait_for_completion+0x270/0x270 [ 3099.662489] __x64_sys_openat+0x13f/0x1f0 [ 3099.663347] ? __ia32_sys_open+0x1c0/0x1c0 [ 3099.664241] ? ksys_write+0x1a9/0x260 [ 3099.665068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3099.666153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3099.667220] do_syscall_64+0x33/0x40 [ 3099.667988] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3099.669036] RIP: 0033:0x7f2947304b19 [ 3099.669798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3099.673527] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3099.675116] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3099.676559] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3099.678049] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3099.679518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3099.680992] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:24:52 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4209, r0, 0x0, 0x0) [ 3114.389814] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:25:17 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:17 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420b, r0, 0x0, 0x0) 03:25:17 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 43) 03:25:17 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 50) 03:25:17 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x61fe, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:25:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x40086602, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x400300, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:25:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) ptrace$getsig(0x4202, r0, 0x9482, &(0x7f00000000c0)) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x5c33, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r3, 0x5c33, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r0, 0x4, r2, r3) [ 3124.651180] FAULT_INJECTION: forcing a failure. [ 3124.651180] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.653631] CPU: 1 PID: 23301 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3124.655055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3124.656757] Call Trace: [ 3124.657333] dump_stack+0x107/0x167 [ 3124.658094] should_fail.cold+0x5/0xa [ 3124.658889] ? create_object.isra.0+0x3a/0xa20 [ 3124.659836] should_failslab+0x5/0x20 [ 3124.660624] kmem_cache_alloc+0x5b/0x360 [ 3124.661467] create_object.isra.0+0x3a/0xa20 [ 3124.662365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3124.663407] kmem_cache_alloc_trace+0x151/0x360 [ 3124.664369] rfkill_fop_open+0x367/0x680 [ 3124.665229] ? rfkill_init_sw_state+0x150/0x150 [ 3124.666177] misc_open+0x375/0x4a0 [ 3124.666904] ? misc_devnode+0x130/0x130 [ 3124.667716] chrdev_open+0x268/0x6e0 [ 3124.668476] ? cdev_device_add+0x220/0x220 [ 3124.669354] ? security_file_open+0x20b/0x500 [ 3124.670277] do_dentry_open+0x4b7/0x1090 [ 3124.671111] ? cdev_device_add+0x220/0x220 [ 3124.671975] ? may_open+0x1e4/0x400 [ 3124.672725] path_openat+0x193d/0x26d0 [ 3124.673549] ? path_lookupat+0x860/0x860 [ 3124.674374] ? perf_trace_lock+0xac/0x490 [ 3124.675212] ? SOFTIRQ_verbose+0x10/0x10 [ 3124.676033] ? lock_acquire+0x197/0x490 [ 3124.676842] ? __lockdep_reset_lock+0x180/0x180 [ 3124.677829] do_filp_open+0x17e/0x3d0 [ 3124.678602] ? may_open_dev+0xf0/0xf0 [ 3124.679398] ? rwlock_bug.part.0+0x90/0x90 [ 3124.680270] ? _raw_spin_unlock+0x1a/0x30 [ 3124.681117] ? __alloc_fd+0x2a5/0x620 [ 3124.681907] do_sys_openat2+0x171/0x420 [ 3124.682717] ? build_open_flags+0x690/0x690 [ 3124.683587] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3124.684566] ? wait_for_completion+0x270/0x270 [ 3124.685516] __x64_sys_openat+0x13f/0x1f0 [ 3124.686356] ? __ia32_sys_open+0x1c0/0x1c0 [ 3124.687210] ? ksys_write+0x1a9/0x260 [ 3124.687993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3124.689063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3124.690113] do_syscall_64+0x33/0x40 [ 3124.690869] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3124.691901] RIP: 0033:0x7f2947304b19 [ 3124.692654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3124.696357] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3124.697903] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3124.699341] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3124.700778] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3124.702233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3124.703680] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:25:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:25:17 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3124.740657] FAULT_INJECTION: forcing a failure. [ 3124.740657] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.743034] CPU: 0 PID: 23308 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3124.744454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3124.746162] Call Trace: [ 3124.746720] dump_stack+0x107/0x167 [ 3124.747476] should_fail.cold+0x5/0xa [ 3124.748266] ? create_object.isra.0+0x3a/0xa20 [ 3124.749232] should_failslab+0x5/0x20 [ 3124.750014] kmem_cache_alloc+0x5b/0x360 [ 3124.750852] create_object.isra.0+0x3a/0xa20 [ 3124.751760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3124.752816] kmem_cache_alloc_trace+0x151/0x360 [ 3124.753799] rfkill_fop_open+0x367/0x680 [ 3124.754645] ? rfkill_init_sw_state+0x150/0x150 [ 3124.755605] misc_open+0x375/0x4a0 [ 3124.756338] ? misc_devnode+0x130/0x130 [ 3124.757172] chrdev_open+0x268/0x6e0 [ 3124.757940] ? cdev_device_add+0x220/0x220 [ 3124.758819] ? security_file_open+0x20b/0x500 [ 3124.759757] do_dentry_open+0x4b7/0x1090 [ 3124.760597] ? cdev_device_add+0x220/0x220 [ 3124.761484] ? may_open+0x1e4/0x400 [ 3124.762248] path_openat+0x193d/0x26d0 [ 3124.763072] ? path_lookupat+0x860/0x860 [ 3124.763910] ? perf_trace_lock+0xac/0x490 [ 3124.764762] ? SOFTIRQ_verbose+0x10/0x10 [ 3124.765608] ? lock_acquire+0x197/0x490 [ 3124.766434] ? __lockdep_reset_lock+0x180/0x180 [ 3124.767403] do_filp_open+0x17e/0x3d0 [ 3124.768191] ? may_open_dev+0xf0/0xf0 [ 3124.769020] ? rwlock_bug.part.0+0x90/0x90 [ 3124.769907] ? _raw_spin_unlock+0x1a/0x30 [ 3124.770759] ? __alloc_fd+0x2a5/0x620 [ 3124.771564] do_sys_openat2+0x171/0x420 [ 3124.772389] ? build_open_flags+0x690/0x690 [ 3124.773280] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3124.774275] ? wait_for_completion+0x270/0x270 [ 3124.775227] __x64_sys_openat+0x13f/0x1f0 [ 3124.776080] ? __ia32_sys_open+0x1c0/0x1c0 [ 3124.776971] ? ksys_write+0x1a9/0x260 [ 3124.777772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3124.778853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3124.779915] do_syscall_64+0x33/0x40 [ 3124.780685] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3124.781746] RIP: 0033:0x7f6eaa02cb19 [ 3124.782516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3124.786251] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3124.787811] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3124.789280] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3124.790734] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3124.792191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3124.793666] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:25:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x40087602, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:17 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x62fe, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:25:17 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 51) 03:25:17 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 44) [ 3124.969440] FAULT_INJECTION: forcing a failure. [ 3124.969440] name failslab, interval 1, probability 0, space 0, times 0 [ 3124.971913] CPU: 1 PID: 23428 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3124.973356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3124.975040] Call Trace: [ 3124.975589] dump_stack+0x107/0x167 [ 3124.976341] should_fail.cold+0x5/0xa [ 3124.977148] ? create_object.isra.0+0x3a/0xa20 [ 3124.978082] should_failslab+0x5/0x20 [ 3124.978857] kmem_cache_alloc+0x5b/0x360 [ 3124.979695] create_object.isra.0+0x3a/0xa20 [ 3124.980587] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3124.981660] kmem_cache_alloc_trace+0x151/0x360 [ 3124.982616] rfkill_fop_open+0x367/0x680 [ 3124.983451] ? rfkill_init_sw_state+0x150/0x150 [ 3124.984397] misc_open+0x375/0x4a0 [ 3124.985149] ? misc_devnode+0x130/0x130 [ 3124.985953] chrdev_open+0x268/0x6e0 [ 3124.986713] ? cdev_device_add+0x220/0x220 [ 3124.987579] ? security_file_open+0x20b/0x500 [ 3124.988494] do_dentry_open+0x4b7/0x1090 [ 3124.989344] ? cdev_device_add+0x220/0x220 [ 3124.990206] ? may_open+0x1e4/0x400 [ 3124.990953] path_openat+0x193d/0x26d0 [ 3124.991765] ? path_lookupat+0x860/0x860 [ 3124.992594] ? perf_trace_lock+0xac/0x490 [ 3124.993470] ? SOFTIRQ_verbose+0x10/0x10 [ 3124.994292] ? lock_acquire+0x197/0x490 [ 3124.995104] ? __lockdep_reset_lock+0x180/0x180 [ 3124.996055] do_filp_open+0x17e/0x3d0 [ 3124.996828] ? may_open_dev+0xf0/0xf0 [ 3124.997645] ? rwlock_bug.part.0+0x90/0x90 [ 3124.998520] ? _raw_spin_unlock+0x1a/0x30 [ 3124.999359] ? __alloc_fd+0x2a5/0x620 [ 3125.000152] do_sys_openat2+0x171/0x420 [ 3125.000977] ? build_open_flags+0x690/0x690 [ 3125.001884] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3125.002875] ? wait_for_completion+0x270/0x270 [ 3125.003837] __x64_sys_openat+0x13f/0x1f0 [ 3125.004678] ? __ia32_sys_open+0x1c0/0x1c0 [ 3125.005591] ? ksys_write+0x1a9/0x260 [ 3125.006375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3125.007483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3125.008539] do_syscall_64+0x33/0x40 [ 3125.009355] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3125.010398] RIP: 0033:0x7f6eaa02cb19 [ 3125.011200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3125.014936] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3125.016561] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3125.018018] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3125.019436] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3125.020864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3125.022317] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:25:18 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420c, r0, 0x0, 0x0) 03:25:18 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() r2 = fcntl$getown(r0, 0x9) ptrace$cont(0x9, r2, 0x0, 0x3) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace(0x10, r3) r4 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x1, 0x1f}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r4, 0x5c33, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$poke(0x4, r5, &(0x7f0000000140), 0x21) tkill(r1, 0x2c) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000240)=""/79) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) 03:25:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:25:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x4020940d, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:18 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:25:18 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3125.254594] FAULT_INJECTION: forcing a failure. [ 3125.254594] name failslab, interval 1, probability 0, space 0, times 0 [ 3125.257091] CPU: 0 PID: 23433 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3125.258490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3125.260199] Call Trace: [ 3125.260744] dump_stack+0x107/0x167 [ 3125.261508] should_fail.cold+0x5/0xa [ 3125.262287] ? rfkill_fop_open+0x367/0x680 [ 3125.263143] should_failslab+0x5/0x20 [ 3125.263913] kmem_cache_alloc_trace+0x55/0x360 [ 3125.264840] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3125.265897] rfkill_fop_open+0x367/0x680 [ 3125.266735] ? rfkill_init_sw_state+0x150/0x150 [ 3125.267688] misc_open+0x375/0x4a0 [ 3125.268414] ? misc_devnode+0x130/0x130 [ 3125.269229] chrdev_open+0x268/0x6e0 [ 3125.269987] ? cdev_device_add+0x220/0x220 [ 3125.270861] ? security_file_open+0x20b/0x500 [ 3125.271784] do_dentry_open+0x4b7/0x1090 [ 3125.272608] ? cdev_device_add+0x220/0x220 [ 3125.273493] ? may_open+0x1e4/0x400 [ 3125.274242] path_openat+0x193d/0x26d0 [ 3125.275055] ? path_lookupat+0x860/0x860 [ 3125.275884] ? perf_trace_lock+0xac/0x490 [ 3125.276726] ? SOFTIRQ_verbose+0x10/0x10 [ 3125.277559] ? lock_acquire+0x197/0x490 [ 3125.278374] ? __lockdep_reset_lock+0x180/0x180 [ 3125.279329] do_filp_open+0x17e/0x3d0 [ 3125.280102] ? may_open_dev+0xf0/0xf0 [ 3125.280901] ? rwlock_bug.part.0+0x90/0x90 [ 3125.281792] ? _raw_spin_unlock+0x1a/0x30 [ 3125.282633] ? __alloc_fd+0x2a5/0x620 [ 3125.283430] do_sys_openat2+0x171/0x420 [ 3125.284241] ? build_open_flags+0x690/0x690 [ 3125.285120] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3125.286104] ? wait_for_completion+0x270/0x270 [ 3125.287048] __x64_sys_openat+0x13f/0x1f0 [ 3125.287887] ? __ia32_sys_open+0x1c0/0x1c0 [ 3125.288738] ? ksys_write+0x1a9/0x260 [ 3125.289535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3125.290592] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3125.291634] do_syscall_64+0x33/0x40 [ 3125.292388] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3125.293423] RIP: 0033:0x7f2947304b19 [ 3125.294176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3125.297874] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3125.299410] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3125.300840] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3125.302297] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3125.303730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3125.305167] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:25:18 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420d, r0, 0x0, 0x0) 03:25:18 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x63fe, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:25:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d2, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:32 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 52) 03:25:32 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:32 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420e, r0, 0x0, 0x0) [ 3139.450205] FAULT_INJECTION: forcing a failure. [ 3139.450205] name failslab, interval 1, probability 0, space 0, times 0 [ 3139.452769] CPU: 0 PID: 23576 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3139.454313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3139.456171] Call Trace: [ 3139.456777] dump_stack+0x107/0x167 [ 3139.457643] should_fail.cold+0x5/0xa [ 3139.458518] ? rfkill_fop_open+0x367/0x680 [ 3139.459476] should_failslab+0x5/0x20 [ 3139.460332] kmem_cache_alloc_trace+0x55/0x360 [ 3139.461365] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3139.462520] rfkill_fop_open+0x367/0x680 [ 3139.463452] ? rfkill_init_sw_state+0x150/0x150 [ 3139.464509] misc_open+0x375/0x4a0 [ 3139.465325] ? misc_devnode+0x130/0x130 [ 3139.466218] chrdev_open+0x268/0x6e0 [ 3139.467063] ? cdev_device_add+0x220/0x220 [ 3139.468030] ? security_file_open+0x20b/0x500 [ 3139.469038] do_dentry_open+0x4b7/0x1090 [ 3139.469973] ? cdev_device_add+0x220/0x220 [ 3139.470924] ? may_open+0x1e4/0x400 [ 3139.471750] path_openat+0x193d/0x26d0 [ 3139.472650] ? path_lookupat+0x860/0x860 [ 3139.473570] ? perf_trace_lock+0xac/0x490 [ 3139.474500] ? SOFTIRQ_verbose+0x10/0x10 [ 3139.475409] ? lock_acquire+0x197/0x490 03:25:32 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x6800, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:25:32 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x39, 0x5e, 0x6d, 0x81, 0x0, 0x5, 0x200e, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfa09, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x16, 0x4, 0x7ff, 0x1, 0x6, 0x200, 0xb9, 0x0, 0x5}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) tkill(0x0, 0x0) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) syz_open_procfs(r2, &(0x7f0000000200)='cpuset\x00') tkill(r1, 0x2c) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x7, r1}) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) 03:25:32 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 45) 03:25:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3139.476305] ? __lockdep_reset_lock+0x180/0x180 [ 3139.477529] do_filp_open+0x17e/0x3d0 [ 3139.478406] ? may_open_dev+0xf0/0xf0 [ 3139.479328] ? rwlock_bug.part.0+0x90/0x90 [ 3139.480334] ? _raw_spin_unlock+0x1a/0x30 [ 3139.481315] ? __alloc_fd+0x2a5/0x620 [ 3139.482224] do_sys_openat2+0x171/0x420 [ 3139.483168] ? build_open_flags+0x690/0x690 [ 3139.484185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3139.485331] ? wait_for_completion+0x270/0x270 [ 3139.486401] __x64_sys_openat+0x13f/0x1f0 [ 3139.487372] ? __ia32_sys_open+0x1c0/0x1c0 [ 3139.488288] ? ksys_write+0x1a9/0x260 [ 3139.489204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3139.490439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3139.491567] do_syscall_64+0x33/0x40 [ 3139.492436] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3139.493558] RIP: 0033:0x7f6eaa02cb19 [ 3139.494372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3139.498382] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3139.500042] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3139.501611] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3139.503170] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3139.504746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3139.506321] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:25:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3139.538083] FAULT_INJECTION: forcing a failure. [ 3139.538083] name failslab, interval 1, probability 0, space 0, times 0 [ 3139.540667] CPU: 0 PID: 23622 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3139.542183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3139.543991] Call Trace: [ 3139.544584] dump_stack+0x107/0x167 [ 3139.545390] should_fail.cold+0x5/0xa [ 3139.546209] ? create_object.isra.0+0x3a/0xa20 [ 3139.547199] should_failslab+0x5/0x20 [ 3139.548019] kmem_cache_alloc+0x5b/0x360 [ 3139.548901] create_object.isra.0+0x3a/0xa20 [ 3139.549867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3139.550962] kmem_cache_alloc_trace+0x151/0x360 [ 3139.551974] rfkill_fop_open+0x367/0x680 [ 3139.552856] ? rfkill_init_sw_state+0x150/0x150 [ 3139.553865] misc_open+0x375/0x4a0 [ 3139.554631] ? misc_devnode+0x130/0x130 [ 3139.555481] chrdev_open+0x268/0x6e0 [ 3139.556281] ? cdev_device_add+0x220/0x220 [ 3139.557207] ? security_file_open+0x20b/0x500 [ 3139.558175] do_dentry_open+0x4b7/0x1090 [ 3139.559050] ? cdev_device_add+0x220/0x220 [ 3139.559960] ? may_open+0x1e4/0x400 [ 3139.560754] path_openat+0x193d/0x26d0 [ 3139.561644] ? path_lookupat+0x860/0x860 [ 3139.562516] ? perf_trace_lock+0xac/0x490 [ 3139.563398] ? SOFTIRQ_verbose+0x10/0x10 [ 3139.564267] ? lock_acquire+0x197/0x490 [ 3139.565104] ? __lockdep_reset_lock+0x180/0x180 [ 3139.566098] do_filp_open+0x17e/0x3d0 [ 3139.566890] ? may_open_dev+0xf0/0xf0 [ 3139.567708] ? rwlock_bug.part.0+0x90/0x90 [ 3139.568603] ? _raw_spin_unlock+0x1a/0x30 [ 3139.569482] ? __alloc_fd+0x2a5/0x620 [ 3139.570298] do_sys_openat2+0x171/0x420 [ 3139.571132] ? build_open_flags+0x690/0x690 [ 3139.572029] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3139.573038] ? wait_for_completion+0x270/0x270 [ 3139.574036] __x64_sys_openat+0x13f/0x1f0 [ 3139.574922] ? __ia32_sys_open+0x1c0/0x1c0 03:25:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3139.575822] ? ksys_write+0x1a9/0x260 [ 3139.576792] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3139.577970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3139.579108] do_syscall_64+0x33/0x40 [ 3139.579937] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3139.581037] RIP: 0033:0x7f2947304b19 [ 3139.581836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3139.585659] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3139.587243] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3139.588731] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3139.590217] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3139.591693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3139.593176] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:25:32 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:25:32 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 53) [ 3139.738458] FAULT_INJECTION: forcing a failure. [ 3139.738458] name failslab, interval 1, probability 0, space 0, times 0 [ 3139.740020] CPU: 1 PID: 23706 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3139.740878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3139.741924] Call Trace: [ 3139.742262] dump_stack+0x107/0x167 [ 3139.742722] should_fail.cold+0x5/0xa [ 3139.743216] ? create_object.isra.0+0x3a/0xa20 [ 3139.743799] should_failslab+0x5/0x20 [ 3139.744282] kmem_cache_alloc+0x5b/0x360 [ 3139.744797] create_object.isra.0+0x3a/0xa20 [ 3139.745378] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3139.746016] kmem_cache_alloc_trace+0x151/0x360 [ 3139.746604] rfkill_fop_open+0x367/0x680 [ 3139.747117] ? rfkill_init_sw_state+0x150/0x150 [ 3139.747719] misc_open+0x375/0x4a0 [ 3139.748163] ? misc_devnode+0x130/0x130 [ 3139.748656] chrdev_open+0x268/0x6e0 [ 3139.749134] ? cdev_device_add+0x220/0x220 [ 3139.749681] ? security_file_open+0x20b/0x500 [ 3139.750253] do_dentry_open+0x4b7/0x1090 [ 3139.750749] ? cdev_device_add+0x220/0x220 [ 3139.751282] ? may_open+0x1e4/0x400 [ 3139.751754] path_openat+0x193d/0x26d0 [ 3139.752253] ? path_lookupat+0x860/0x860 [ 3139.752775] ? perf_trace_lock+0xac/0x490 [ 3139.753313] ? SOFTIRQ_verbose+0x10/0x10 [ 3139.753819] ? lock_acquire+0x197/0x490 [ 3139.754316] ? __lockdep_reset_lock+0x180/0x180 [ 3139.754908] do_filp_open+0x17e/0x3d0 [ 3139.755384] ? may_open_dev+0xf0/0xf0 [ 3139.755873] ? rwlock_bug.part.0+0x90/0x90 [ 3139.756412] ? _raw_spin_unlock+0x1a/0x30 [ 3139.756924] ? __alloc_fd+0x2a5/0x620 [ 3139.757445] do_sys_openat2+0x171/0x420 [ 3139.757934] ? build_open_flags+0x690/0x690 [ 3139.758460] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3139.759069] ? wait_for_completion+0x270/0x270 [ 3139.759643] __x64_sys_openat+0x13f/0x1f0 [ 3139.760156] ? __ia32_sys_open+0x1c0/0x1c0 [ 3139.760681] ? ksys_write+0x1a9/0x260 [ 3139.761171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3139.761842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3139.762484] do_syscall_64+0x33/0x40 [ 3139.762940] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3139.763572] RIP: 0033:0x7f6eaa02cb19 [ 3139.764028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3139.766287] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3139.767227] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3139.768098] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3139.768967] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3139.769848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3139.770732] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:25:49 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 54) 03:25:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3156.108520] FAULT_INJECTION: forcing a failure. [ 3156.108520] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.110882] CPU: 1 PID: 23710 Comm: syz-executor.2 Not tainted 5.10.161 #1 03:25:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3156.112287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3156.114075] Call Trace: [ 3156.114677] dump_stack+0x107/0x167 [ 3156.115429] should_fail.cold+0x5/0xa [ 3156.116209] ? rfkill_fop_open+0x367/0x680 [ 3156.117068] should_failslab+0x5/0x20 [ 3156.117865] kmem_cache_alloc_trace+0x55/0x360 [ 3156.118805] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3156.119840] rfkill_fop_open+0x367/0x680 [ 3156.120681] ? rfkill_init_sw_state+0x150/0x150 [ 3156.121669] misc_open+0x375/0x4a0 [ 3156.122399] ? misc_devnode+0x130/0x130 03:25:49 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x6a00, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:25:49 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 46) [ 3156.123205] chrdev_open+0x268/0x6e0 [ 3156.124065] ? cdev_device_add+0x220/0x220 [ 3156.124945] ? security_file_open+0x20b/0x500 [ 3156.125875] do_dentry_open+0x4b7/0x1090 [ 3156.126705] ? cdev_device_add+0x220/0x220 [ 3156.127566] ? may_open+0x1e4/0x400 [ 3156.128317] path_openat+0x193d/0x26d0 [ 3156.129129] ? path_lookupat+0x860/0x860 03:25:49 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x8, 0x0) 03:25:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3156.129966] ? perf_trace_lock+0xac/0x490 [ 3156.130911] ? SOFTIRQ_verbose+0x10/0x10 [ 3156.131736] ? lock_acquire+0x197/0x490 [ 3156.132545] ? __lockdep_reset_lock+0x180/0x180 [ 3156.133523] do_filp_open+0x17e/0x3d0 [ 3156.134296] ? may_open_dev+0xf0/0xf0 [ 3156.135092] ? rwlock_bug.part.0+0x90/0x90 [ 3156.135967] ? _raw_spin_unlock+0x1a/0x30 [ 3156.136811] ? __alloc_fd+0x2a5/0x620 [ 3156.137613] do_sys_openat2+0x171/0x420 [ 3156.138425] ? build_open_flags+0x690/0x690 [ 3156.139298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3156.140299] ? wait_for_completion+0x270/0x270 [ 3156.141245] __x64_sys_openat+0x13f/0x1f0 03:25:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = fork() tkill(0x0, 0x0) tkill(r1, 0x1d) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) ptrace$setopts(0x4206, r2, 0x80000001, 0x100010) fork() [ 3156.142092] ? __ia32_sys_open+0x1c0/0x1c0 [ 3156.143032] ? ksys_write+0x1a9/0x260 [ 3156.143823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3156.144889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3156.145952] do_syscall_64+0x33/0x40 [ 3156.146713] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3156.147754] RIP: 0033:0x7f6eaa02cb19 [ 3156.148515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3156.152234] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3156.153795] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3156.155244] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3156.156694] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3156.158146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3156.159594] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3156.162176] FAULT_INJECTION: forcing a failure. [ 3156.162176] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.164498] CPU: 0 PID: 23715 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3156.165922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3156.167607] Call Trace: [ 3156.168147] dump_stack+0x107/0x167 [ 3156.168894] should_fail.cold+0x5/0xa [ 3156.169682] ? rfkill_fop_open+0x367/0x680 [ 3156.170547] should_failslab+0x5/0x20 [ 3156.171322] kmem_cache_alloc_trace+0x55/0x360 [ 3156.172257] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3156.173295] rfkill_fop_open+0x367/0x680 [ 3156.174148] ? rfkill_init_sw_state+0x150/0x150 [ 3156.175095] misc_open+0x375/0x4a0 [ 3156.175828] ? misc_devnode+0x130/0x130 [ 3156.176640] chrdev_open+0x268/0x6e0 [ 3156.177415] ? cdev_device_add+0x220/0x220 [ 3156.178286] ? security_file_open+0x20b/0x500 [ 3156.179208] do_dentry_open+0x4b7/0x1090 [ 3156.180041] ? cdev_device_add+0x220/0x220 [ 3156.180906] ? may_open+0x1e4/0x400 [ 3156.181663] path_openat+0x193d/0x26d0 [ 3156.182476] ? path_lookupat+0x860/0x860 [ 3156.183302] ? perf_trace_lock+0xac/0x490 [ 3156.184141] ? SOFTIRQ_verbose+0x10/0x10 [ 3156.184965] ? lock_acquire+0x197/0x490 [ 3156.185794] ? __lockdep_reset_lock+0x180/0x180 [ 3156.186750] do_filp_open+0x17e/0x3d0 [ 3156.187533] ? may_open_dev+0xf0/0xf0 [ 3156.188344] ? rwlock_bug.part.0+0x90/0x90 [ 3156.189225] ? _raw_spin_unlock+0x1a/0x30 [ 3156.190100] ? __alloc_fd+0x2a5/0x620 [ 3156.190910] do_sys_openat2+0x171/0x420 [ 3156.191737] ? build_open_flags+0x690/0x690 [ 3156.192619] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3156.193606] ? wait_for_completion+0x270/0x270 [ 3156.194552] __x64_sys_openat+0x13f/0x1f0 [ 3156.195399] ? __ia32_sys_open+0x1c0/0x1c0 [ 3156.196267] ? ksys_write+0x1a9/0x260 [ 3156.197054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3156.198146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3156.199202] do_syscall_64+0x33/0x40 [ 3156.199962] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3156.201008] RIP: 0033:0x7f2947304b19 [ 3156.201786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3156.205519] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3156.207074] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3156.208521] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3156.209982] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3156.211434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3156.212879] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:26:03 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x8000000, 0x0) 03:26:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000000c0)={0x4, 0x1ff, 0x101}) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:26:03 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 55) 03:26:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3170.891909] FAULT_INJECTION: forcing a failure. 03:26:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:26:03 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x6c00, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3170.891909] name failslab, interval 1, probability 0, space 0, times 0 [ 3170.893551] CPU: 0 PID: 23842 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3170.894407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3170.895430] Call Trace: [ 3170.895771] dump_stack+0x107/0x167 [ 3170.896238] should_fail.cold+0x5/0xa [ 3170.896712] ? create_object.isra.0+0x3a/0xa20 [ 3170.897295] should_failslab+0x5/0x20 [ 3170.897781] kmem_cache_alloc+0x5b/0x360 [ 3170.898292] create_object.isra.0+0x3a/0xa20 [ 3170.898840] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3170.899471] kmem_cache_alloc_trace+0x151/0x360 [ 3170.900062] rfkill_fop_open+0x367/0x680 [ 3170.900588] ? rfkill_init_sw_state+0x150/0x150 [ 3170.901161] misc_open+0x375/0x4a0 [ 3170.901622] ? misc_devnode+0x130/0x130 [ 3170.902113] chrdev_open+0x268/0x6e0 [ 3170.902591] ? cdev_device_add+0x220/0x220 [ 3170.903141] ? security_file_open+0x20b/0x500 [ 3170.903711] do_dentry_open+0x4b7/0x1090 [ 3170.904237] ? cdev_device_add+0x220/0x220 [ 3170.904774] ? may_open+0x1e4/0x400 [ 3170.905245] path_openat+0x193d/0x26d0 [ 3170.905752] ? path_lookupat+0x860/0x860 [ 3170.906270] ? perf_trace_lock+0xac/0x490 [ 3170.906790] ? SOFTIRQ_verbose+0x10/0x10 [ 3170.907304] ? lock_acquire+0x197/0x490 [ 3170.907811] ? __lockdep_reset_lock+0x180/0x180 [ 3170.908412] do_filp_open+0x17e/0x3d0 [ 3170.908902] ? may_open_dev+0xf0/0xf0 [ 3170.909380] ? rwlock_bug.part.0+0x90/0x90 [ 3170.909941] ? _raw_spin_unlock+0x1a/0x30 [ 3170.910469] ? __alloc_fd+0x2a5/0x620 [ 3170.910969] do_sys_openat2+0x171/0x420 [ 3170.911479] ? build_open_flags+0x690/0x690 [ 3170.912006] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3170.912621] ? wait_for_completion+0x270/0x270 [ 3170.913219] __x64_sys_openat+0x13f/0x1f0 [ 3170.913769] ? __ia32_sys_open+0x1c0/0x1c0 [ 3170.914307] ? ksys_write+0x1a9/0x260 [ 3170.914799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3170.915471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3170.916144] do_syscall_64+0x33/0x40 [ 3170.916631] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3170.917287] RIP: 0033:0x7f6eaa02cb19 [ 3170.917774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3170.920152] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3170.921128] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3170.921997] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3170.922907] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3170.923816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3170.924677] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:26:03 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 47) 03:26:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x80086601, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3170.966502] FAULT_INJECTION: forcing a failure. [ 3170.966502] name failslab, interval 1, probability 0, space 0, times 0 [ 3170.968948] CPU: 1 PID: 23846 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3170.970388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3170.972078] Call Trace: [ 3170.972628] dump_stack+0x107/0x167 [ 3170.973405] should_fail.cold+0x5/0xa [ 3170.974219] ? create_object.isra.0+0x3a/0xa20 [ 3170.975185] should_failslab+0x5/0x20 [ 3170.975988] kmem_cache_alloc+0x5b/0x360 [ 3170.976833] create_object.isra.0+0x3a/0xa20 [ 3170.977761] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3170.978822] kmem_cache_alloc_trace+0x151/0x360 [ 3170.979799] rfkill_fop_open+0x367/0x680 [ 3170.980643] ? rfkill_init_sw_state+0x150/0x150 [ 3170.981628] misc_open+0x375/0x4a0 [ 3170.982371] ? misc_devnode+0x130/0x130 [ 3170.983203] chrdev_open+0x268/0x6e0 [ 3170.983988] ? cdev_device_add+0x220/0x220 [ 3170.984882] ? security_file_open+0x20b/0x500 [ 3170.985858] do_dentry_open+0x4b7/0x1090 [ 3170.986722] ? cdev_device_add+0x220/0x220 [ 3170.987596] ? may_open+0x1e4/0x400 [ 3170.988364] path_openat+0x193d/0x26d0 [ 3170.989221] ? path_lookupat+0x860/0x860 [ 3170.990081] ? perf_trace_lock+0xac/0x490 [ 3170.990945] ? SOFTIRQ_verbose+0x10/0x10 [ 3170.991778] ? lock_acquire+0x197/0x490 [ 3170.992607] ? __lockdep_reset_lock+0x180/0x180 [ 3170.993594] do_filp_open+0x17e/0x3d0 [ 3170.994396] ? may_open_dev+0xf0/0xf0 [ 3170.995213] ? rwlock_bug.part.0+0x90/0x90 [ 3170.996116] ? _raw_spin_unlock+0x1a/0x30 [ 3170.996981] ? __alloc_fd+0x2a5/0x620 [ 3170.997799] do_sys_openat2+0x171/0x420 [ 3170.998640] ? build_open_flags+0x690/0x690 [ 3170.999545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3171.000546] ? wait_for_completion+0x270/0x270 [ 3171.001504] __x64_sys_openat+0x13f/0x1f0 [ 3171.002372] ? __ia32_sys_open+0x1c0/0x1c0 [ 3171.003269] ? ksys_write+0x1a9/0x260 [ 3171.004076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3171.005170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3171.006265] do_syscall_64+0x33/0x40 [ 3171.007042] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3171.008116] RIP: 0033:0x7f2947304b19 [ 3171.008896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3171.012664] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3171.014252] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3171.015725] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3171.017209] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3171.018697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3171.020179] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:26:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x8, 0xff, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6, 0x4000000000003, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x8) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=r0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) ptrace(0x4217, r0) ptrace$setopts(0x4200, r0, 0x8, 0x100020) 03:26:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x8000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:26:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x80087601, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:26:04 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 48) 03:26:04 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 56) 03:26:04 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:26:04 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x7400, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3171.141141] FAULT_INJECTION: forcing a failure. [ 3171.141141] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.142647] CPU: 0 PID: 24004 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3171.143407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3171.144301] Call Trace: [ 3171.144598] dump_stack+0x107/0x167 [ 3171.144995] should_fail.cold+0x5/0xa [ 3171.145413] ? rfkill_fop_open+0x367/0x680 [ 3171.145914] should_failslab+0x5/0x20 [ 3171.146334] kmem_cache_alloc_trace+0x55/0x360 [ 3171.146830] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3171.147384] rfkill_fop_open+0x367/0x680 [ 3171.147830] ? rfkill_init_sw_state+0x150/0x150 [ 3171.148339] misc_open+0x375/0x4a0 [ 3171.148724] ? misc_devnode+0x130/0x130 [ 3171.149151] chrdev_open+0x268/0x6e0 [ 3171.149562] ? cdev_device_add+0x220/0x220 [ 3171.150028] ? security_file_open+0x20b/0x500 [ 3171.150513] do_dentry_open+0x4b7/0x1090 [ 3171.150960] ? cdev_device_add+0x220/0x220 [ 3171.151419] ? may_open+0x1e4/0x400 [ 3171.151823] path_openat+0x193d/0x26d0 [ 3171.152257] ? path_lookupat+0x860/0x860 [ 3171.152714] ? perf_trace_lock+0xac/0x490 [ 3171.153158] ? SOFTIRQ_verbose+0x10/0x10 [ 3171.153614] ? lock_acquire+0x197/0x490 [ 3171.154053] ? __lockdep_reset_lock+0x180/0x180 [ 3171.154576] do_filp_open+0x17e/0x3d0 [ 3171.154985] ? may_open_dev+0xf0/0xf0 [ 3171.155419] ? rwlock_bug.part.0+0x90/0x90 [ 3171.155884] ? _raw_spin_unlock+0x1a/0x30 [ 3171.156331] ? __alloc_fd+0x2a5/0x620 [ 3171.156754] do_sys_openat2+0x171/0x420 [ 3171.157203] ? build_open_flags+0x690/0x690 [ 3171.157675] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3171.158205] ? wait_for_completion+0x270/0x270 [ 3171.158711] __x64_sys_openat+0x13f/0x1f0 [ 3171.159169] ? __ia32_sys_open+0x1c0/0x1c0 [ 3171.159629] ? ksys_write+0x1a9/0x260 [ 3171.160052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3171.160615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3171.161180] do_syscall_64+0x33/0x40 [ 3171.161594] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3171.162156] RIP: 0033:0x7f6eaa02cb19 [ 3171.162568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3171.164527] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3171.165351] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3171.166133] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3171.166907] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3171.167669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3171.168432] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3171.173588] FAULT_INJECTION: forcing a failure. [ 3171.173588] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.174904] CPU: 0 PID: 24002 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3171.175651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3171.176537] Call Trace: [ 3171.176834] dump_stack+0x107/0x167 [ 3171.177233] should_fail.cold+0x5/0xa [ 3171.177659] ? rfkill_fop_open+0x367/0x680 [ 3171.178117] should_failslab+0x5/0x20 [ 3171.178530] kmem_cache_alloc_trace+0x55/0x360 [ 3171.179029] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3171.179587] rfkill_fop_open+0x367/0x680 [ 3171.180038] ? rfkill_init_sw_state+0x150/0x150 [ 3171.180543] misc_open+0x375/0x4a0 [ 3171.180930] ? misc_devnode+0x130/0x130 [ 3171.181356] chrdev_open+0x268/0x6e0 [ 3171.181780] ? cdev_device_add+0x220/0x220 [ 3171.182250] ? security_file_open+0x20b/0x500 [ 3171.182737] do_dentry_open+0x4b7/0x1090 [ 3171.183180] ? cdev_device_add+0x220/0x220 [ 3171.183642] ? may_open+0x1e4/0x400 [ 3171.184045] path_openat+0x193d/0x26d0 [ 3171.184475] ? path_lookupat+0x860/0x860 [ 3171.184917] ? perf_trace_lock+0xac/0x490 [ 3171.185366] ? SOFTIRQ_verbose+0x10/0x10 [ 3171.185819] ? lock_acquire+0x197/0x490 [ 3171.186251] ? __lockdep_reset_lock+0x180/0x180 [ 3171.186753] do_filp_open+0x17e/0x3d0 [ 3171.187166] ? may_open_dev+0xf0/0xf0 [ 3171.187587] ? rwlock_bug.part.0+0x90/0x90 [ 3171.188061] ? _raw_spin_unlock+0x1a/0x30 [ 3171.188508] ? __alloc_fd+0x2a5/0x620 [ 3171.188927] do_sys_openat2+0x171/0x420 [ 3171.189366] ? build_open_flags+0x690/0x690 [ 3171.189865] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3171.190394] ? wait_for_completion+0x270/0x270 [ 3171.190900] __x64_sys_openat+0x13f/0x1f0 [ 3171.191357] ? __ia32_sys_open+0x1c0/0x1c0 [ 3171.191812] ? ksys_write+0x1a9/0x260 [ 3171.192229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3171.192800] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3171.193367] do_syscall_64+0x33/0x40 [ 3171.193776] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3171.194330] RIP: 0033:0x7f2947304b19 [ 3171.194734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3171.196701] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3171.197527] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3171.198301] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3171.199082] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3171.199849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3171.200631] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:26:04 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x800000000000000, 0x0) 03:26:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:26:04 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 49) 03:26:04 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 57) 03:26:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xa000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3171.319591] FAULT_INJECTION: forcing a failure. [ 3171.319591] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.321981] CPU: 1 PID: 24089 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3171.323396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3171.325095] Call Trace: [ 3171.325767] dump_stack+0x107/0x167 [ 3171.326562] should_fail.cold+0x5/0xa [ 3171.327359] ? create_object.isra.0+0x3a/0xa20 [ 3171.328331] should_failslab+0x5/0x20 [ 3171.329136] kmem_cache_alloc+0x5b/0x360 [ 3171.330147] create_object.isra.0+0x3a/0xa20 [ 3171.331048] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3171.332099] kmem_cache_alloc_trace+0x151/0x360 [ 3171.333129] rfkill_fop_open+0x367/0x680 [ 3171.333989] ? rfkill_init_sw_state+0x150/0x150 [ 3171.335110] misc_open+0x375/0x4a0 [ 3171.335841] ? misc_devnode+0x130/0x130 [ 3171.336748] chrdev_open+0x268/0x6e0 [ 3171.337509] ? cdev_device_add+0x220/0x220 [ 3171.338417] ? security_file_open+0x20b/0x500 [ 3171.339343] do_dentry_open+0x4b7/0x1090 [ 3171.340172] ? cdev_device_add+0x220/0x220 [ 3171.341035] ? may_open+0x1e4/0x400 [ 3171.341905] path_openat+0x193d/0x26d0 [ 3171.342738] ? path_lookupat+0x860/0x860 [ 3171.343565] ? perf_trace_lock+0xac/0x490 [ 3171.344414] ? SOFTIRQ_verbose+0x10/0x10 [ 3171.345328] ? lock_acquire+0x197/0x490 [ 3171.346186] ? __lockdep_reset_lock+0x180/0x180 [ 3171.347179] do_filp_open+0x17e/0x3d0 [ 3171.347980] ? may_open_dev+0xf0/0xf0 [ 3171.348808] ? rwlock_bug.part.0+0x90/0x90 [ 3171.349763] ? _raw_spin_unlock+0x1a/0x30 [ 3171.350629] ? __alloc_fd+0x2a5/0x620 [ 3171.351584] do_sys_openat2+0x171/0x420 [ 3171.352425] ? build_open_flags+0x690/0x690 [ 3171.353368] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3171.354407] ? wait_for_completion+0x270/0x270 [ 3171.355480] __x64_sys_openat+0x13f/0x1f0 [ 3171.356448] ? __ia32_sys_open+0x1c0/0x1c0 [ 3171.357337] ? ksys_write+0x1a9/0x260 [ 3171.358144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3171.359221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3171.360290] do_syscall_64+0x33/0x40 [ 3171.361123] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3171.362186] RIP: 0033:0x7f6eaa02cb19 [ 3171.363027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3171.367335] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3171.368966] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3171.370545] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3171.372080] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3171.373607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3171.375104] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:26:04 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:26:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x80108906, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3171.424324] FAULT_INJECTION: forcing a failure. [ 3171.424324] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.426766] CPU: 1 PID: 24091 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3171.428332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3171.430055] Call Trace: [ 3171.430681] dump_stack+0x107/0x167 [ 3171.431440] should_fail.cold+0x5/0xa [ 3171.432380] ? rfkill_fop_open+0x367/0x680 [ 3171.433408] should_failslab+0x5/0x20 03:26:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) [ 3171.434363] kmem_cache_alloc_trace+0x55/0x360 [ 3171.435415] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3171.436461] rfkill_fop_open+0x367/0x680 [ 3171.437468] ? rfkill_init_sw_state+0x150/0x150 [ 3171.438450] misc_open+0x375/0x4a0 [ 3171.439220] ? misc_devnode+0x130/0x130 [ 3171.440159] chrdev_open+0x268/0x6e0 [ 3171.441070] ? cdev_device_add+0x220/0x220 [ 3171.442131] ? security_file_open+0x20b/0x500 [ 3171.443069] do_dentry_open+0x4b7/0x1090 [ 3171.444029] ? cdev_device_add+0x220/0x220 [ 3171.444911] ? may_open+0x1e4/0x400 [ 3171.445691] path_openat+0x193d/0x26d0 [ 3171.446527] ? path_lookupat+0x860/0x860 [ 3171.447372] ? perf_trace_lock+0xac/0x490 [ 3171.448232] ? SOFTIRQ_verbose+0x10/0x10 [ 3171.449075] ? lock_acquire+0x197/0x490 [ 3171.449976] ? __lockdep_reset_lock+0x180/0x180 [ 3171.450968] do_filp_open+0x17e/0x3d0 [ 3171.451781] ? may_open_dev+0xf0/0xf0 [ 3171.452691] ? rwlock_bug.part.0+0x90/0x90 [ 3171.453597] ? _raw_spin_unlock+0x1a/0x30 [ 3171.454608] ? __alloc_fd+0x2a5/0x620 [ 3171.455412] do_sys_openat2+0x171/0x420 [ 3171.456230] ? build_open_flags+0x690/0x690 [ 3171.457106] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3171.458108] ? wait_for_completion+0x270/0x270 [ 3171.459060] __x64_sys_openat+0x13f/0x1f0 [ 3171.459913] ? __ia32_sys_open+0x1c0/0x1c0 [ 3171.460780] ? ksys_write+0x1a9/0x260 [ 3171.461582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3171.462676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3171.463840] do_syscall_64+0x33/0x40 [ 3171.464605] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3171.465726] RIP: 0033:0x7f2947304b19 [ 3171.466627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3171.470922] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3171.472519] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3171.473995] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3171.475461] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3171.476935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3171.478432] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:26:04 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x7a00, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:26:04 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:26:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xb000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3184.011506] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:26:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) r1 = getpgid(r0) syz_open_procfs$userns(r1, &(0x7f0000000000)) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:26:35 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) tkill(r1, 0x2) ptrace$getsig(0x420a, r0, 0x0, 0x0) 03:26:35 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x7e00, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:26:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x80108907, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:26:35 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:26:35 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 58) 03:26:35 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 50) 03:26:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3202.094912] FAULT_INJECTION: forcing a failure. [ 3202.094912] name failslab, interval 1, probability 0, space 0, times 0 [ 3202.097348] CPU: 1 PID: 24222 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3202.098926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3202.100577] Call Trace: [ 3202.101157] dump_stack+0x107/0x167 [ 3202.101888] should_fail.cold+0x5/0xa [ 3202.102747] ? rfkill_fop_open+0x367/0x680 [ 3202.103595] should_failslab+0x5/0x20 [ 3202.104403] kmem_cache_alloc_trace+0x55/0x360 [ 3202.105340] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3202.106503] rfkill_fop_open+0x367/0x680 [ 3202.107341] ? rfkill_init_sw_state+0x150/0x150 [ 3202.108294] misc_open+0x375/0x4a0 [ 3202.109005] ? misc_devnode+0x130/0x130 [ 3202.109813] chrdev_open+0x268/0x6e0 [ 3202.110617] ? cdev_device_add+0x220/0x220 [ 3202.111500] ? security_file_open+0x20b/0x500 [ 3202.112391] do_dentry_open+0x4b7/0x1090 [ 3202.113220] ? cdev_device_add+0x220/0x220 [ 3202.114276] ? may_open+0x1e4/0x400 [ 3202.115233] path_openat+0x193d/0x26d0 [ 3202.116266] ? path_lookupat+0x860/0x860 [ 3202.117296] ? perf_trace_lock+0xac/0x490 [ 3202.118395] ? SOFTIRQ_verbose+0x10/0x10 [ 3202.119422] ? lock_acquire+0x197/0x490 [ 3202.120436] ? __lockdep_reset_lock+0x180/0x180 [ 3202.121601] do_filp_open+0x17e/0x3d0 [ 3202.122419] ? may_open_dev+0xf0/0xf0 [ 3202.123236] ? rwlock_bug.part.0+0x90/0x90 [ 3202.124132] ? _raw_spin_unlock+0x1a/0x30 [ 3202.124980] ? __alloc_fd+0x2a5/0x620 [ 3202.125804] do_sys_openat2+0x171/0x420 [ 3202.126652] ? build_open_flags+0x690/0x690 [ 3202.127552] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3202.128558] ? wait_for_completion+0x270/0x270 [ 3202.129520] __x64_sys_openat+0x13f/0x1f0 [ 3202.130427] ? __ia32_sys_open+0x1c0/0x1c0 [ 3202.131315] ? ksys_write+0x1a9/0x260 [ 3202.132133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3202.133228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3202.134333] do_syscall_64+0x33/0x40 [ 3202.135114] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3202.136176] RIP: 0033:0x7f6eaa02cb19 [ 3202.136942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3202.140770] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3202.142383] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3202.143857] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3202.145351] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3202.146842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3202.148346] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:26:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x10000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:26:35 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) [ 3202.153584] FAULT_INJECTION: forcing a failure. [ 3202.153584] name failslab, interval 1, probability 0, space 0, times 0 [ 3202.155958] CPU: 0 PID: 24226 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3202.157367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3202.159072] Call Trace: [ 3202.159621] dump_stack+0x107/0x167 [ 3202.160384] should_fail.cold+0x5/0xa [ 3202.161178] ? rfkill_fop_open+0x367/0x680 [ 3202.162066] should_failslab+0x5/0x20 [ 3202.162855] kmem_cache_alloc_trace+0x55/0x360 [ 3202.163799] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3202.164856] rfkill_fop_open+0x367/0x680 [ 3202.165706] ? rfkill_init_sw_state+0x150/0x150 [ 3202.166715] misc_open+0x375/0x4a0 [ 3202.167469] ? misc_devnode+0x130/0x130 [ 3202.168287] chrdev_open+0x268/0x6e0 [ 3202.169044] ? cdev_device_add+0x220/0x220 [ 3202.169893] ? security_file_open+0x20b/0x500 [ 3202.170848] do_dentry_open+0x4b7/0x1090 [ 3202.171667] ? cdev_device_add+0x220/0x220 [ 3202.172515] ? may_open+0x1e4/0x400 [ 3202.173264] path_openat+0x193d/0x26d0 [ 3202.174075] ? path_lookupat+0x860/0x860 [ 3202.174899] ? perf_trace_lock+0xac/0x490 [ 3202.175768] ? SOFTIRQ_verbose+0x10/0x10 [ 3202.176591] ? lock_acquire+0x197/0x490 [ 3202.177522] ? __lockdep_reset_lock+0x180/0x180 [ 3202.178768] do_filp_open+0x17e/0x3d0 [ 3202.179761] ? may_open_dev+0xf0/0xf0 [ 3202.180788] ? rwlock_bug.part.0+0x90/0x90 [ 3202.181903] ? _raw_spin_unlock+0x1a/0x30 [ 3202.182975] ? __alloc_fd+0x2a5/0x620 03:26:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3202.184000] do_sys_openat2+0x171/0x420 [ 3202.185051] ? build_open_flags+0x690/0x690 [ 3202.186029] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3202.187101] ? wait_for_completion+0x270/0x270 [ 3202.188095] __x64_sys_openat+0x13f/0x1f0 [ 3202.188999] ? __ia32_sys_open+0x1c0/0x1c0 [ 3202.189919] ? ksys_write+0x1a9/0x260 [ 3202.190761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3202.191923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3202.193045] do_syscall_64+0x33/0x40 [ 3202.193902] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3202.195041] RIP: 0033:0x7f2947304b19 [ 3202.195831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3202.199767] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3202.201407] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3202.202984] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3202.204507] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3202.206079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3202.207621] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3202.388849] cgroup: fork rejected by pids controller in /syz4 03:26:51 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 59) [ 3218.585909] FAULT_INJECTION: forcing a failure. [ 3218.585909] name failslab, interval 1, probability 0, space 0, times 0 [ 3218.588629] CPU: 0 PID: 24351 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3218.590077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3218.592123] Call Trace: [ 3218.592700] dump_stack+0x107/0x167 [ 3218.593604] should_fail.cold+0x5/0xa 03:26:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:26:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x11000000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:26:51 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x8004, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:26:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:26:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 03:26:51 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 51) 03:26:51 executing program 4: r0 = fork() r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) wait4(r1, 0x0, 0x8, &(0x7f0000000000)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x462880, 0x12345}, 0x40000) tkill(r2, 0x2c) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000180)) getpgrp(r2) ptrace$getsig(0x420a, r0, 0x0, 0x0) [ 3218.594428] ? create_object.isra.0+0x3a/0xa20 [ 3218.595652] should_failslab+0x5/0x20 [ 3218.596590] kmem_cache_alloc+0x5b/0x360 [ 3218.597459] create_object.isra.0+0x3a/0xa20 [ 3218.598398] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3218.599473] kmem_cache_alloc_trace+0x151/0x360 [ 3218.600459] rfkill_fop_open+0x367/0x680 [ 3218.601320] ? rfkill_init_sw_state+0x150/0x150 [ 3218.602328] misc_open+0x375/0x4a0 [ 3218.603076] ? misc_devnode+0x130/0x130 [ 3218.603907] chrdev_open+0x268/0x6e0 [ 3218.604689] ? cdev_device_add+0x220/0x220 [ 3218.605591] ? security_file_open+0x20b/0x500 [ 3218.606561] do_dentry_open+0x4b7/0x1090 [ 3218.607416] ? cdev_device_add+0x220/0x220 [ 3218.608305] ? may_open+0x1e4/0x400 [ 3218.609078] path_openat+0x193d/0x26d0 [ 3218.609918] ? path_lookupat+0x860/0x860 [ 3218.610803] ? perf_trace_lock+0xac/0x490 [ 3218.611682] ? SOFTIRQ_verbose+0x10/0x10 [ 3218.612548] ? lock_acquire+0x197/0x490 [ 3218.613404] ? __lockdep_reset_lock+0x180/0x180 [ 3218.614424] do_filp_open+0x17e/0x3d0 [ 3218.615229] ? may_open_dev+0xf0/0xf0 [ 3218.616045] ? rwlock_bug.part.0+0x90/0x90 [ 3218.616947] ? _raw_spin_unlock+0x1a/0x30 [ 3218.617809] ? __alloc_fd+0x2a5/0x620 [ 3218.618656] do_sys_openat2+0x171/0x420 [ 3218.619490] ? build_open_flags+0x690/0x690 [ 3218.620387] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3218.621406] ? wait_for_completion+0x270/0x270 [ 3218.622416] __x64_sys_openat+0x13f/0x1f0 [ 3218.623283] ? __ia32_sys_open+0x1c0/0x1c0 [ 3218.624166] ? ksys_write+0x1a9/0x260 [ 3218.624967] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3218.626068] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3218.627242] do_syscall_64+0x33/0x40 [ 3218.628188] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3218.629469] RIP: 0033:0x7f6eaa02cb19 [ 3218.630434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3218.634988] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3218.636829] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3218.638628] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3218.640448] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3218.642246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3218.644089] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:26:51 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xfe5d, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:26:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 03:26:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) clock_gettime(0x0, &(0x7f00000017c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000380)=""/99, 0x63}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3, &(0x7f0000001540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000001780)=[{&(0x7f0000001680)=""/196, 0xc4}], 0x1, &(0x7f0000003500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001880)=""/244, 0xf4}, {&(0x7f0000001980)=""/113, 0x71}, {&(0x7f0000001a00)=""/250, 0xfa}, {&(0x7f0000001b00)=""/20, 0x14}, {&(0x7f0000001b40)=""/87, 0x57}], 0x5, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xf0}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000003100)=[{&(0x7f0000001dc0)=""/21, 0x15}, {&(0x7f0000001e00)=""/241, 0xf1}, {&(0x7f0000001f00)=""/4, 0x4}, {&(0x7f0000001f40)=""/237, 0xed}, {&(0x7f0000002040)=""/109, 0x6d}, {&(0x7f00000020c0)=""/52, 0x34}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x7, &(0x7f0000003180)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000031c0), 0x6e, &(0x7f0000003280)=[{&(0x7f0000003240)=""/60, 0x3c}], 0x1}}], 0x5, 0x1, &(0x7f0000003400)={r1, r2+60000000}) r5 = fork() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x2c) clone3(&(0x7f0000003480)={0x4000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x6}, &(0x7f0000000200)=""/223, 0xdf, &(0x7f0000000140)=""/54, &(0x7f0000003440)=[r0, r0, r3, r5, r0], 0x5}, 0x58) ptrace$cont(0x9, r4, 0x5, 0x9) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) [ 3218.752653] FAULT_INJECTION: forcing a failure. [ 3218.752653] name failslab, interval 1, probability 0, space 0, times 0 [ 3218.754271] CPU: 1 PID: 24354 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3218.755066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3218.756028] Call Trace: [ 3218.756351] dump_stack+0x107/0x167 [ 3218.756779] should_fail.cold+0x5/0xa [ 3218.757224] ? create_object.isra.0+0x3a/0xa20 [ 3218.757754] should_failslab+0x5/0x20 [ 3218.758216] kmem_cache_alloc+0x5b/0x360 [ 3218.758691] create_object.isra.0+0x3a/0xa20 [ 3218.759192] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3218.759786] kmem_cache_alloc_trace+0x151/0x360 [ 3218.760345] rfkill_fop_open+0x367/0x680 [ 3218.760827] ? rfkill_init_sw_state+0x150/0x150 [ 3218.761378] misc_open+0x375/0x4a0 [ 3218.761791] ? misc_devnode+0x130/0x130 [ 3218.762272] chrdev_open+0x268/0x6e0 [ 3218.762713] ? cdev_device_add+0x220/0x220 [ 3218.763243] ? security_file_open+0x20b/0x500 [ 3218.763774] do_dentry_open+0x4b7/0x1090 [ 3218.764276] ? cdev_device_add+0x220/0x220 [ 3218.764792] ? may_open+0x1e4/0x400 [ 3218.765241] path_openat+0x193d/0x26d0 [ 3218.765721] ? path_lookupat+0x860/0x860 [ 3218.766217] ? perf_trace_lock+0xac/0x490 [ 3218.766724] ? SOFTIRQ_verbose+0x10/0x10 [ 3218.767207] ? lock_acquire+0x197/0x490 [ 3218.767686] ? __lockdep_reset_lock+0x180/0x180 [ 3218.768239] do_filp_open+0x17e/0x3d0 [ 3218.768695] ? may_open_dev+0xf0/0xf0 [ 3218.769170] ? rwlock_bug.part.0+0x90/0x90 [ 3218.769690] ? _raw_spin_unlock+0x1a/0x30 [ 3218.770196] ? __alloc_fd+0x2a5/0x620 [ 3218.770682] do_sys_openat2+0x171/0x420 [ 3218.771154] ? build_open_flags+0x690/0x690 [ 3218.771660] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3218.772249] ? wait_for_completion+0x270/0x270 [ 3218.772807] __x64_sys_openat+0x13f/0x1f0 [ 3218.773279] ? __ia32_sys_open+0x1c0/0x1c0 [ 3218.773793] ? ksys_write+0x1a9/0x260 [ 3218.774278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3218.774908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3218.775529] do_syscall_64+0x33/0x40 [ 3218.775974] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3218.776604] RIP: 0033:0x7f2947304b19 [ 3218.777044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3218.779201] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3218.780118] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3218.780964] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3218.781805] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3218.782655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3218.783512] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:26:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x85030000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:26:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:26:51 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 60) 03:26:51 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 52) 03:26:51 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xfe5e, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:26:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:26:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3218.933639] FAULT_INJECTION: forcing a failure. [ 3218.933639] name failslab, interval 1, probability 0, space 0, times 0 [ 3218.936221] CPU: 0 PID: 24520 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3218.937797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3218.939688] Call Trace: [ 3218.940292] dump_stack+0x107/0x167 [ 3218.941129] should_fail.cold+0x5/0xa [ 3218.942006] ? create_object.isra.0+0x3a/0xa20 [ 3218.943077] should_failslab+0x5/0x20 [ 3218.943921] kmem_cache_alloc+0x5b/0x360 [ 3218.944860] create_object.isra.0+0x3a/0xa20 [ 3218.945856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3218.947032] kmem_cache_alloc_trace+0x151/0x360 [ 3218.948101] rfkill_fop_open+0x367/0x680 [ 3218.949042] ? rfkill_init_sw_state+0x150/0x150 [ 3218.950105] misc_open+0x375/0x4a0 [ 3218.950915] ? misc_devnode+0x130/0x130 [ 3218.951820] chrdev_open+0x268/0x6e0 [ 3218.952670] ? cdev_device_add+0x220/0x220 [ 3218.953647] ? security_file_open+0x20b/0x500 [ 3218.954702] do_dentry_open+0x4b7/0x1090 [ 3218.955614] ? cdev_device_add+0x220/0x220 [ 3218.956557] ? may_open+0x1e4/0x400 [ 3218.957402] path_openat+0x193d/0x26d0 [ 3218.958295] ? path_lookupat+0x860/0x860 [ 3218.959178] ? perf_trace_lock+0xac/0x490 [ 3218.960115] ? SOFTIRQ_verbose+0x10/0x10 [ 3218.961018] ? lock_acquire+0x197/0x490 [ 3218.961882] ? __lockdep_reset_lock+0x180/0x180 [ 3218.962986] do_filp_open+0x17e/0x3d0 [ 3218.963844] ? may_open_dev+0xf0/0xf0 [ 3218.964875] ? rwlock_bug.part.0+0x90/0x90 [ 3218.965871] ? _raw_spin_unlock+0x1a/0x30 [ 3218.966820] ? __alloc_fd+0x2a5/0x620 [ 3218.967818] do_sys_openat2+0x171/0x420 [ 3218.968681] ? build_open_flags+0x690/0x690 [ 3218.969602] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3218.970646] ? wait_for_completion+0x270/0x270 [ 3218.971633] __x64_sys_openat+0x13f/0x1f0 [ 3218.972520] ? __ia32_sys_open+0x1c0/0x1c0 [ 3218.973570] ? ksys_write+0x1a9/0x260 [ 3218.974478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3218.975604] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3218.976930] do_syscall_64+0x33/0x40 [ 3218.977731] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3218.978844] RIP: 0033:0x7f2947304b19 [ 3218.979651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3218.983814] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3218.985440] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3218.986988] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3218.988510] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3218.990033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3218.991567] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3219.001804] FAULT_INJECTION: forcing a failure. 03:26:52 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xfe5f, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:26:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3219.001804] name failslab, interval 1, probability 0, space 0, times 0 [ 3219.003373] CPU: 1 PID: 24537 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3219.004180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3219.005321] Call Trace: [ 3219.005692] dump_stack+0x107/0x167 [ 3219.006231] should_fail.cold+0x5/0xa [ 3219.006687] ? rfkill_fop_open+0x367/0x680 [ 3219.007182] should_failslab+0x5/0x20 [ 3219.007632] kmem_cache_alloc_trace+0x55/0x360 [ 3219.008164] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3219.008756] rfkill_fop_open+0x367/0x680 [ 3219.009199] ? rfkill_init_sw_state+0x150/0x150 [ 3219.009746] misc_open+0x375/0x4a0 [ 3219.010140] ? misc_devnode+0x130/0x130 [ 3219.010614] chrdev_open+0x268/0x6e0 [ 3219.011022] ? cdev_device_add+0x220/0x220 [ 3219.011507] ? security_file_open+0x20b/0x500 [ 3219.011995] do_dentry_open+0x4b7/0x1090 [ 3219.012470] ? cdev_device_add+0x220/0x220 [ 3219.012962] ? may_open+0x1e4/0x400 [ 3219.013396] path_openat+0x193d/0x26d0 [ 3219.013850] ? path_lookupat+0x860/0x860 [ 3219.014323] ? perf_trace_lock+0xac/0x490 [ 3219.014803] ? SOFTIRQ_verbose+0x10/0x10 [ 3219.015257] ? lock_acquire+0x197/0x490 [ 3219.015726] ? __lockdep_reset_lock+0x180/0x180 [ 3219.016272] do_filp_open+0x17e/0x3d0 [ 3219.016713] ? may_open_dev+0xf0/0xf0 [ 3219.017159] ? rwlock_bug.part.0+0x90/0x90 [ 3219.017655] ? _raw_spin_unlock+0x1a/0x30 [ 3219.018131] ? __alloc_fd+0x2a5/0x620 [ 3219.018584] do_sys_openat2+0x171/0x420 [ 3219.019050] ? build_open_flags+0x690/0x690 [ 3219.019520] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3219.020083] ? wait_for_completion+0x270/0x270 [ 3219.020630] __x64_sys_openat+0x13f/0x1f0 [ 3219.021114] ? __ia32_sys_open+0x1c0/0x1c0 [ 3219.021590] ? ksys_write+0x1a9/0x260 [ 3219.022042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3219.022661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3219.023254] do_syscall_64+0x33/0x40 [ 3219.023665] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3219.024246] RIP: 0033:0x7f6eaa02cb19 [ 3219.024652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3219.026793] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3219.027662] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3219.028479] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3219.029302] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3219.030114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3219.030949] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:26:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:26:52 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 53) 03:26:52 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3219.188991] FAULT_INJECTION: forcing a failure. [ 3219.188991] name failslab, interval 1, probability 0, space 0, times 0 [ 3219.191413] CPU: 0 PID: 24716 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3219.192833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3219.194531] Call Trace: [ 3219.195076] dump_stack+0x107/0x167 [ 3219.195826] should_fail.cold+0x5/0xa [ 3219.196609] ? create_object.isra.0+0x3a/0xa20 [ 3219.197544] should_failslab+0x5/0x20 [ 3219.198336] kmem_cache_alloc+0x5b/0x360 [ 3219.199173] create_object.isra.0+0x3a/0xa20 [ 3219.200078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3219.201120] kmem_cache_alloc_trace+0x151/0x360 [ 3219.202078] rfkill_fop_open+0x367/0x680 [ 3219.202927] ? rfkill_init_sw_state+0x150/0x150 [ 3219.203878] misc_open+0x375/0x4a0 [ 3219.204609] ? misc_devnode+0x130/0x130 [ 3219.205420] chrdev_open+0x268/0x6e0 [ 3219.206202] ? cdev_device_add+0x220/0x220 [ 3219.207076] ? security_file_open+0x20b/0x500 [ 3219.207994] do_dentry_open+0x4b7/0x1090 [ 3219.208829] ? cdev_device_add+0x220/0x220 [ 3219.209705] ? may_open+0x1e4/0x400 [ 3219.210464] path_openat+0x193d/0x26d0 [ 3219.211274] ? path_lookupat+0x860/0x860 [ 3219.212105] ? perf_trace_lock+0xac/0x490 [ 3219.212953] ? SOFTIRQ_verbose+0x10/0x10 [ 3219.213789] ? lock_acquire+0x197/0x490 [ 3219.214623] ? __lockdep_reset_lock+0x180/0x180 [ 3219.215575] do_filp_open+0x17e/0x3d0 [ 3219.216352] ? may_open_dev+0xf0/0xf0 [ 3219.217148] ? rwlock_bug.part.0+0x90/0x90 [ 3219.218024] ? _raw_spin_unlock+0x1a/0x30 [ 3219.218871] ? __alloc_fd+0x2a5/0x620 [ 3219.219665] do_sys_openat2+0x171/0x420 [ 3219.220475] ? build_open_flags+0x690/0x690 [ 3219.221349] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3219.222355] ? wait_for_completion+0x270/0x270 [ 3219.223295] __x64_sys_openat+0x13f/0x1f0 [ 3219.224139] ? __ia32_sys_open+0x1c0/0x1c0 [ 3219.225002] ? ksys_write+0x1a9/0x260 [ 3219.225788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3219.226866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3219.227917] do_syscall_64+0x33/0x40 [ 3219.228669] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3219.229711] RIP: 0033:0x7f2947304b19 [ 3219.230490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3219.234210] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3219.235765] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3219.237211] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3219.238662] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3219.240107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3219.241552] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3233.204551] kmemleak: 7 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:27:15 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 54) 03:27:15 executing program 0: r0 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x3b9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r0, 0x5c33, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x28) dup2(r0, r0) tkill(0x0, 0x0) io_pgetevents(0x0, 0x3, 0x9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000140)={&(0x7f0000000000)={[0x9]}, 0x8}) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) 03:27:15 executing program 6: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xfe5e, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:27:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:27:15 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 61) 03:27:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:27:15 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xfe60, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:27:15 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) tkill(r0, 0x36) [ 3242.449532] FAULT_INJECTION: forcing a failure. [ 3242.449532] name failslab, interval 1, probability 0, space 0, times 0 [ 3242.451905] CPU: 1 PID: 24735 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3242.453304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3242.454987] Call Trace: [ 3242.455522] dump_stack+0x107/0x167 [ 3242.456274] should_fail.cold+0x5/0xa [ 3242.457053] ? rfkill_fop_open+0x367/0x680 [ 3242.457914] should_failslab+0x5/0x20 [ 3242.458704] kmem_cache_alloc_trace+0x55/0x360 [ 3242.459636] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3242.460679] rfkill_fop_open+0x367/0x680 [ 3242.461519] ? rfkill_init_sw_state+0x150/0x150 [ 3242.462491] misc_open+0x375/0x4a0 [ 3242.463221] ? misc_devnode+0x130/0x130 [ 3242.464028] chrdev_open+0x268/0x6e0 [ 3242.464785] ? cdev_device_add+0x220/0x220 [ 3242.465655] ? security_file_open+0x20b/0x500 [ 3242.466580] do_dentry_open+0x4b7/0x1090 [ 3242.467411] ? cdev_device_add+0x220/0x220 [ 3242.468273] ? may_open+0x1e4/0x400 [ 3242.469023] path_openat+0x193d/0x26d0 [ 3242.469838] ? path_lookupat+0x860/0x860 [ 3242.470677] ? perf_trace_lock+0xac/0x490 [ 3242.471519] ? SOFTIRQ_verbose+0x10/0x10 [ 3242.472342] ? lock_acquire+0x197/0x490 [ 3242.473157] ? __lockdep_reset_lock+0x180/0x180 [ 3242.474112] do_filp_open+0x17e/0x3d0 [ 3242.474904] ? may_open_dev+0xf0/0xf0 [ 3242.475702] ? rwlock_bug.part.0+0x90/0x90 [ 3242.476577] ? _raw_spin_unlock+0x1a/0x30 [ 3242.477416] ? __alloc_fd+0x2a5/0x620 [ 3242.478209] do_sys_openat2+0x171/0x420 [ 3242.479030] ? build_open_flags+0x690/0x690 [ 3242.479902] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3242.480883] ? wait_for_completion+0x270/0x270 [ 3242.481823] __x64_sys_openat+0x13f/0x1f0 [ 3242.482685] ? __ia32_sys_open+0x1c0/0x1c0 [ 3242.483543] ? ksys_write+0x1a9/0x260 03:27:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3242.484327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3242.485620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3242.486681] do_syscall_64+0x33/0x40 [ 3242.487441] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3242.488477] RIP: 0033:0x7f2947304b19 [ 3242.489235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3242.492947] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3242.494554] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3242.496050] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3242.497536] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3242.499030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3242.500464] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3242.511851] FAULT_INJECTION: forcing a failure. [ 3242.511851] name failslab, interval 1, probability 0, space 0, times 0 [ 3242.514353] CPU: 1 PID: 24736 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3242.515789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3242.517483] Call Trace: [ 3242.518041] dump_stack+0x107/0x167 [ 3242.518808] should_fail.cold+0x5/0xa [ 3242.519587] ? create_object.isra.0+0x3a/0xa20 [ 3242.520509] should_failslab+0x5/0x20 [ 3242.521277] kmem_cache_alloc+0x5b/0x360 [ 3242.522106] create_object.isra.0+0x3a/0xa20 [ 3242.523039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3242.524077] kmem_cache_alloc_trace+0x151/0x360 [ 3242.525028] rfkill_fop_open+0x367/0x680 [ 3242.525876] ? rfkill_init_sw_state+0x150/0x150 [ 3242.526848] misc_open+0x375/0x4a0 [ 3242.527583] ? misc_devnode+0x130/0x130 [ 3242.528399] chrdev_open+0x268/0x6e0 [ 3242.529164] ? cdev_device_add+0x220/0x220 [ 3242.530036] ? security_file_open+0x20b/0x500 [ 3242.530977] do_dentry_open+0x4b7/0x1090 [ 3242.531814] ? cdev_device_add+0x220/0x220 [ 3242.532682] ? may_open+0x1e4/0x400 [ 3242.533437] path_openat+0x193d/0x26d0 [ 3242.534254] ? path_lookupat+0x860/0x860 [ 3242.535092] ? perf_trace_lock+0xac/0x490 [ 3242.535934] ? SOFTIRQ_verbose+0x10/0x10 [ 3242.536758] ? lock_acquire+0x197/0x490 [ 3242.537574] ? __lockdep_reset_lock+0x180/0x180 [ 3242.538549] do_filp_open+0x17e/0x3d0 [ 3242.539325] ? may_open_dev+0xf0/0xf0 03:27:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3242.540122] ? rwlock_bug.part.0+0x90/0x90 [ 3242.541211] ? _raw_spin_unlock+0x1a/0x30 [ 3242.542053] ? __alloc_fd+0x2a5/0x620 [ 3242.542856] do_sys_openat2+0x171/0x420 [ 3242.543661] ? build_open_flags+0x690/0x690 [ 3242.544527] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3242.545504] ? wait_for_completion+0x270/0x270 [ 3242.546450] __x64_sys_openat+0x13f/0x1f0 [ 3242.547291] ? __ia32_sys_open+0x1c0/0x1c0 [ 3242.548150] ? ksys_write+0x1a9/0x260 [ 3242.548925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3242.549980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3242.551046] do_syscall_64+0x33/0x40 [ 3242.551800] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3242.552891] RIP: 0033:0x7f6eaa02cb19 [ 3242.553641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3242.557318] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3242.558818] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3242.560242] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3242.561662] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3242.563096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3242.564518] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:27:15 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xfe61, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3257.053568] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:27:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:27:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x2, 0x0, "be8652"}) 03:27:39 executing program 4: r0 = fork() ptrace$setopts(0x4200, r0, 0x1, 0x40) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000040), 0x2, 0x0) 03:27:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x6, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4002, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000640)=""/40, 0x28}, {&(0x7f0000000680)=""/180, 0xb4}], 0x6, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/197, 0xc5}, {&(0x7f0000000a40)=""/217, 0xd9}], 0x2}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/15, 0xf}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/17, 0x11}, {&(0x7f0000002dc0)=""/151, 0x97}, {&(0x7f0000002e80)}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x6, &(0x7f0000003f40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x60}}], 0x4, 0x0, &(0x7f00000040c0)={0x77359400}) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000002e80)={&(0x7f0000000280)=""/61, 0x3d}) wait4(r1, &(0x7f0000000000), 0x1000000, &(0x7f00000000c0)) tkill(r0, 0x2c) ptrace(0x4207, r0) waitid(0x2, r1, &(0x7f0000000200), 0x80000000, 0x0) tkill(r1, 0x27) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:27:39 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 62) 03:27:39 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 55) 03:27:39 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xfe62, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:27:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3266.544698] FAULT_INJECTION: forcing a failure. [ 3266.544698] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.547175] CPU: 1 PID: 24861 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3266.548587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3266.550282] Call Trace: [ 3266.550832] dump_stack+0x107/0x167 [ 3266.551568] should_fail.cold+0x5/0xa [ 3266.552328] ? create_object.isra.0+0x3a/0xa20 [ 3266.553236] ? create_object.isra.0+0x3a/0xa20 [ 3266.554152] should_failslab+0x5/0x20 [ 3266.554931] kmem_cache_alloc+0x5b/0x360 [ 3266.555745] create_object.isra.0+0x3a/0xa20 [ 3266.556620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3266.557634] kmem_cache_alloc_trace+0x151/0x360 [ 3266.558578] rfkill_fop_open+0x367/0x680 [ 3266.559447] ? rfkill_init_sw_state+0x150/0x150 [ 3266.560380] misc_open+0x375/0x4a0 [ 3266.561090] ? misc_devnode+0x130/0x130 [ 3266.561908] chrdev_open+0x268/0x6e0 [ 3266.562685] ? cdev_device_add+0x220/0x220 [ 3266.563595] ? security_file_open+0x20b/0x500 [ 3266.564532] do_dentry_open+0x4b7/0x1090 [ 3266.565395] ? cdev_device_add+0x220/0x220 [ 3266.566257] ? may_open+0x1e4/0x400 [ 3266.567045] path_openat+0x193d/0x26d0 [ 3266.567872] ? path_lookupat+0x860/0x860 [ 3266.568712] ? perf_trace_lock+0xac/0x490 [ 3266.569567] ? SOFTIRQ_verbose+0x10/0x10 [ 3266.570412] ? __lockdep_reset_lock+0x180/0x180 [ 3266.571395] do_filp_open+0x17e/0x3d0 [ 3266.572193] ? may_open_dev+0xf0/0xf0 [ 3266.572991] ? rwlock_bug.part.0+0x90/0x90 [ 3266.573884] ? _raw_spin_unlock+0x1a/0x30 [ 3266.574741] ? __alloc_fd+0x2a5/0x620 [ 3266.575577] do_sys_openat2+0x171/0x420 [ 3266.576409] ? build_open_flags+0x690/0x690 [ 3266.577293] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3266.578292] ? wait_for_completion+0x270/0x270 [ 3266.579254] __x64_sys_openat+0x13f/0x1f0 [ 3266.580110] ? __ia32_sys_open+0x1c0/0x1c0 [ 3266.580979] ? ksys_write+0x1a9/0x260 [ 3266.581778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3266.582838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3266.583889] do_syscall_64+0x33/0x40 [ 3266.584628] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3266.585641] RIP: 0033:0x7f2947304b19 [ 3266.586380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3266.590020] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3266.591540] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3266.592954] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3266.594357] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3266.595806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3266.597246] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3266.613381] FAULT_INJECTION: forcing a failure. [ 3266.613381] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.615695] CPU: 0 PID: 24871 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3266.617080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3266.618733] Call Trace: [ 3266.619288] dump_stack+0x107/0x167 [ 3266.620043] should_fail.cold+0x5/0xa [ 3266.620813] ? rfkill_fop_open+0x367/0x680 [ 3266.621664] should_failslab+0x5/0x20 [ 3266.622428] kmem_cache_alloc_trace+0x55/0x360 [ 3266.623366] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3266.624392] rfkill_fop_open+0x367/0x680 [ 3266.625216] ? rfkill_init_sw_state+0x150/0x150 [ 3266.626145] misc_open+0x375/0x4a0 [ 3266.626871] ? misc_devnode+0x130/0x130 [ 3266.627674] chrdev_open+0x268/0x6e0 [ 3266.628419] ? cdev_device_add+0x220/0x220 [ 3266.629309] ? security_file_open+0x20b/0x500 [ 3266.630217] do_dentry_open+0x4b7/0x1090 [ 3266.631042] ? cdev_device_add+0x220/0x220 [ 3266.631892] ? may_open+0x1e4/0x400 [ 3266.632630] path_openat+0x193d/0x26d0 [ 3266.633430] ? path_lookupat+0x860/0x860 [ 3266.634242] ? perf_trace_lock+0xac/0x490 [ 3266.635088] ? SOFTIRQ_verbose+0x10/0x10 [ 3266.635897] ? lock_acquire+0x197/0x490 [ 3266.636699] ? __lockdep_reset_lock+0x180/0x180 [ 3266.637638] do_filp_open+0x17e/0x3d0 [ 3266.638423] ? may_open_dev+0xf0/0xf0 [ 3266.639227] ? rwlock_bug.part.0+0x90/0x90 [ 3266.640106] ? _raw_spin_unlock+0x1a/0x30 [ 3266.640953] ? __alloc_fd+0x2a5/0x620 [ 3266.641751] do_sys_openat2+0x171/0x420 [ 3266.642567] ? build_open_flags+0x690/0x690 [ 3266.643466] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3266.644457] ? wait_for_completion+0x270/0x270 [ 3266.645397] __x64_sys_openat+0x13f/0x1f0 [ 3266.646247] ? __ia32_sys_open+0x1c0/0x1c0 [ 3266.647122] ? ksys_write+0x1a9/0x260 [ 3266.647910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3266.648980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3266.650055] do_syscall_64+0x33/0x40 [ 3266.650822] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3266.651891] RIP: 0033:0x7f6eaa02cb19 [ 3266.652660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3266.656416] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3266.657974] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3266.659452] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3266.660927] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3266.662386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3266.663865] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:27:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x3, 0x0, "be8652"}) 03:27:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:27:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:27:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0xf, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:27:39 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xfe63, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:27:39 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 56) 03:27:39 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 63) [ 3266.854754] FAULT_INJECTION: forcing a failure. [ 3266.854754] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.857119] CPU: 0 PID: 24977 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3266.858501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3266.860173] Call Trace: [ 3266.860711] dump_stack+0x107/0x167 [ 3266.861448] should_fail.cold+0x5/0xa [ 3266.862218] ? rfkill_fop_open+0x367/0x680 [ 3266.863080] should_failslab+0x5/0x20 [ 3266.863841] kmem_cache_alloc_trace+0x55/0x360 [ 3266.864755] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3266.865782] rfkill_fop_open+0x367/0x680 [ 3266.866609] ? rfkill_init_sw_state+0x150/0x150 [ 3266.867561] misc_open+0x375/0x4a0 [ 3266.868277] ? misc_devnode+0x130/0x130 [ 3266.869077] chrdev_open+0x268/0x6e0 [ 3266.869824] ? cdev_device_add+0x220/0x220 [ 3266.870681] ? security_file_open+0x20b/0x500 [ 3266.871594] do_dentry_open+0x4b7/0x1090 [ 3266.872411] ? cdev_device_add+0x220/0x220 [ 3266.873265] ? may_open+0x1e4/0x400 [ 3266.874001] path_openat+0x193d/0x26d0 [ 3266.874815] ? path_lookupat+0x860/0x860 [ 3266.875633] ? perf_trace_lock+0xac/0x490 [ 3266.876459] ? SOFTIRQ_verbose+0x10/0x10 [ 3266.877262] ? lock_acquire+0x197/0x490 [ 3266.878059] ? __lockdep_reset_lock+0x180/0x180 [ 3266.879008] do_filp_open+0x17e/0x3d0 [ 3266.879761] ? may_open_dev+0xf0/0xf0 [ 3266.880539] ? rwlock_bug.part.0+0x90/0x90 [ 3266.881390] ? _raw_spin_unlock+0x1a/0x30 [ 3266.882207] ? __alloc_fd+0x2a5/0x620 [ 3266.882992] do_sys_openat2+0x171/0x420 [ 3266.883784] ? build_open_flags+0x690/0x690 [ 3266.884635] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3266.885594] ? wait_for_completion+0x270/0x270 [ 3266.886513] __x64_sys_openat+0x13f/0x1f0 [ 3266.887371] ? __ia32_sys_open+0x1c0/0x1c0 [ 3266.888206] ? ksys_write+0x1a9/0x260 [ 3266.888970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3266.890007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3266.891044] do_syscall_64+0x33/0x40 [ 3266.891781] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3266.892791] RIP: 0033:0x7f2947304b19 [ 3266.893532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3266.897141] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3266.898643] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3266.900059] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3266.901458] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3266.902861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3266.904250] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3266.956677] FAULT_INJECTION: forcing a failure. [ 3266.956677] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.959079] CPU: 1 PID: 25001 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3266.960491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3266.962184] Call Trace: [ 3266.962738] dump_stack+0x107/0x167 [ 3266.963515] should_fail.cold+0x5/0xa [ 3266.964303] ? create_object.isra.0+0x3a/0xa20 [ 3266.965242] should_failslab+0x5/0x20 [ 3266.966024] kmem_cache_alloc+0x5b/0x360 [ 3266.966873] create_object.isra.0+0x3a/0xa20 [ 3266.967773] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3266.968820] kmem_cache_alloc_trace+0x151/0x360 [ 3266.969792] rfkill_fop_open+0x367/0x680 [ 3266.970635] ? rfkill_init_sw_state+0x150/0x150 [ 3266.971596] misc_open+0x375/0x4a0 [ 3266.972326] ? misc_devnode+0x130/0x130 [ 3266.973137] chrdev_open+0x268/0x6e0 [ 3266.973899] ? cdev_device_add+0x220/0x220 [ 3266.974775] ? security_file_open+0x20b/0x500 [ 3266.975721] do_dentry_open+0x4b7/0x1090 [ 3266.976557] ? cdev_device_add+0x220/0x220 [ 3266.977425] ? may_open+0x1e4/0x400 [ 3266.978180] path_openat+0x193d/0x26d0 [ 3266.979009] ? path_lookupat+0x860/0x860 [ 3266.979842] ? perf_trace_lock+0xac/0x490 [ 3266.980688] ? SOFTIRQ_verbose+0x10/0x10 [ 3266.981518] ? lock_acquire+0x197/0x490 [ 3266.982339] ? __lockdep_reset_lock+0x180/0x180 [ 3266.983308] do_filp_open+0x17e/0x3d0 [ 3266.984087] ? may_open_dev+0xf0/0xf0 [ 3266.984889] ? rwlock_bug.part.0+0x90/0x90 [ 3266.985774] ? _raw_spin_unlock+0x1a/0x30 [ 3266.986621] ? __alloc_fd+0x2a5/0x620 [ 3266.987438] do_sys_openat2+0x171/0x420 [ 3266.988256] ? build_open_flags+0x690/0x690 [ 3266.989139] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3266.990128] ? wait_for_completion+0x270/0x270 [ 3266.991083] __x64_sys_openat+0x13f/0x1f0 [ 3266.991932] ? __ia32_sys_open+0x1c0/0x1c0 [ 3266.992794] ? ksys_write+0x1a9/0x260 [ 3266.993588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3266.994664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3266.995740] do_syscall_64+0x33/0x40 [ 3266.996504] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3266.997550] RIP: 0033:0x7f6eaa02cb19 [ 3266.998313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3267.002056] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3267.003626] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3267.005084] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3267.006539] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3267.008002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3267.009455] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3282.254109] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:28:03 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 64) 03:28:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x5, 0x0, "be8652"}) 03:28:03 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 57) 03:28:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() r1 = clone3(&(0x7f0000000280)={0x80000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x22}, &(0x7f0000000140)=""/47, 0x2f, &(0x7f0000000200)=""/30, &(0x7f0000000240)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x8}, 0x58) ptrace$setopts(0x4200, r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x100010, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) tkill(r2, 0x16) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:28:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:28:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:28:03 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x10000, 0x0) tkill(r0, 0x2c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ptrace$getsig(0x420a, r0, 0x0, 0x0) 03:28:03 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x80000, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3290.887295] FAULT_INJECTION: forcing a failure. [ 3290.887295] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.889754] CPU: 1 PID: 25016 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3290.891229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3290.893048] Call Trace: [ 3290.893621] dump_stack+0x107/0x167 [ 3290.894396] should_fail.cold+0x5/0xa [ 3290.895225] ? create_object.isra.0+0x3a/0xa20 [ 3290.896203] should_failslab+0x5/0x20 [ 3290.897010] kmem_cache_alloc+0x5b/0x360 [ 3290.897864] create_object.isra.0+0x3a/0xa20 [ 3290.898795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3290.899908] kmem_cache_alloc_trace+0x151/0x360 [ 3290.900918] rfkill_fop_open+0x367/0x680 [ 3290.901785] ? rfkill_init_sw_state+0x150/0x150 [ 3290.902838] misc_open+0x375/0x4a0 [ 3290.903594] ? misc_devnode+0x130/0x130 [ 3290.904473] chrdev_open+0x268/0x6e0 [ 3290.905258] ? cdev_device_add+0x220/0x220 [ 3290.906156] ? security_file_open+0x20b/0x500 [ 3290.907126] do_dentry_open+0x4b7/0x1090 [ 3290.907995] ? cdev_device_add+0x220/0x220 [ 3290.908886] ? may_open+0x1e4/0x400 [ 3290.909647] path_openat+0x193d/0x26d0 [ 3290.910491] ? path_lookupat+0x860/0x860 [ 3290.911362] ? perf_trace_lock+0xac/0x490 [ 3290.912229] ? SOFTIRQ_verbose+0x10/0x10 [ 3290.913088] ? lock_acquire+0x197/0x490 [ 3290.913931] ? __lockdep_reset_lock+0x180/0x180 [ 3290.914915] do_filp_open+0x17e/0x3d0 [ 3290.915733] ? may_open_dev+0xf0/0xf0 [ 3290.916550] ? rwlock_bug.part.0+0x90/0x90 [ 3290.917462] ? _raw_spin_unlock+0x1a/0x30 [ 3290.918384] ? __alloc_fd+0x2a5/0x620 [ 3290.919233] do_sys_openat2+0x171/0x420 [ 3290.920078] ? build_open_flags+0x690/0x690 [ 3290.920996] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3290.922013] ? wait_for_completion+0x270/0x270 [ 3290.923017] __x64_sys_openat+0x13f/0x1f0 [ 3290.923897] ? __ia32_sys_open+0x1c0/0x1c0 [ 3290.924789] ? ksys_write+0x1a9/0x260 [ 3290.925593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3290.926695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3290.927821] do_syscall_64+0x33/0x40 [ 3290.928600] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3290.929668] RIP: 0033:0x7f2947304b19 [ 3290.930460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3290.934359] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3290.935974] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3290.937457] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3290.938970] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3290.940478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3290.942001] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:28:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0xc0, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:28:04 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:28:04 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x200000, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3291.186258] FAULT_INJECTION: forcing a failure. [ 3291.186258] name failslab, interval 1, probability 0, space 0, times 0 [ 3291.189169] CPU: 0 PID: 25014 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3291.190863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3291.192933] Call Trace: [ 3291.193587] dump_stack+0x107/0x167 [ 3291.194495] should_fail.cold+0x5/0xa [ 3291.195452] ? rfkill_fop_open+0x367/0x680 [ 3291.196498] should_failslab+0x5/0x20 [ 3291.197433] kmem_cache_alloc_trace+0x55/0x360 [ 3291.198557] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3291.199839] rfkill_fop_open+0x367/0x680 [ 3291.200857] ? rfkill_init_sw_state+0x150/0x150 [ 3291.202002] misc_open+0x375/0x4a0 [ 3291.202882] ? misc_devnode+0x130/0x130 [ 3291.203873] chrdev_open+0x268/0x6e0 [ 3291.204793] ? cdev_device_add+0x220/0x220 [ 3291.205842] ? security_file_open+0x20b/0x500 [ 3291.206960] do_dentry_open+0x4b7/0x1090 [ 3291.207903] ? cdev_device_add+0x220/0x220 [ 3291.208767] ? may_open+0x1e4/0x400 [ 3291.209514] path_openat+0x193d/0x26d0 [ 3291.210322] ? path_lookupat+0x860/0x860 [ 3291.211164] ? perf_trace_lock+0xac/0x490 [ 3291.212000] ? SOFTIRQ_verbose+0x10/0x10 [ 3291.212817] ? lock_acquire+0x197/0x490 [ 3291.213631] ? __lockdep_reset_lock+0x180/0x180 [ 3291.214580] do_filp_open+0x17e/0x3d0 [ 3291.215361] ? may_open_dev+0xf0/0xf0 [ 3291.216154] ? rwlock_bug.part.0+0x90/0x90 [ 3291.217021] ? _raw_spin_unlock+0x1a/0x30 [ 3291.217855] ? __alloc_fd+0x2a5/0x620 [ 3291.218650] do_sys_openat2+0x171/0x420 [ 3291.219488] ? build_open_flags+0x690/0x690 [ 3291.220354] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3291.221330] ? wait_for_completion+0x270/0x270 [ 3291.222262] __x64_sys_openat+0x13f/0x1f0 [ 3291.223111] ? __ia32_sys_open+0x1c0/0x1c0 [ 3291.223962] ? ksys_write+0x1a9/0x260 [ 3291.224742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3291.225802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3291.226843] do_syscall_64+0x33/0x40 [ 3291.227604] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3291.228633] RIP: 0033:0x7f6eaa02cb19 [ 3291.229386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3291.233164] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3291.234700] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3291.236141] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3291.237572] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3291.239005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3291.240462] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3292.992080] Bluetooth: hci5: command 0x0c1a tx timeout [ 3295.041028] Bluetooth: hci5: command 0x0c1a tx timeout [ 3307.425789] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:28:29 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) tkill(r0, 0x7) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) tkill(r0, 0x37) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/udplite6\x00') migrate_pages(r0, 0x4, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x80, 0x40, 0xfd, 0x4f, 0x0, 0x9, 0x5020, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x100000000, 0x6}, 0x10000, 0x0, 0x0, 0x1, 0x1, 0x80000000, 0xd907, 0x0, 0x50d94eea, 0x0, 0x40}, 0xffffffffffffffff, 0x10, r1, 0x2) tkill(r0, 0x1d) tkill(0xffffffffffffffff, 0xa) 03:28:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:28:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x300, 0x0, "be8652"}) 03:28:29 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xf0ff1f, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:28:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000640)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/141, 0x8d}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/173, 0xad}], 0x7}, 0x0, 0x20, 0x0, {0x2}}, 0x5) unlink(&(0x7f0000000680)='./file0\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:28:29 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 65) 03:28:29 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 58) 03:28:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0xec0, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3316.014585] FAULT_INJECTION: forcing a failure. [ 3316.014585] name failslab, interval 1, probability 0, space 0, times 0 [ 3316.015918] CPU: 1 PID: 25151 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3316.016712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3316.017659] Call Trace: [ 3316.017976] dump_stack+0x107/0x167 [ 3316.018401] should_fail.cold+0x5/0xa [ 3316.018853] ? rfkill_fop_open+0x367/0x680 [ 3316.019352] should_failslab+0x5/0x20 [ 3316.019787] kmem_cache_alloc_trace+0x55/0x360 [ 3316.020317] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3316.020914] rfkill_fop_open+0x367/0x680 [ 3316.021397] ? rfkill_init_sw_state+0x150/0x150 [ 3316.021943] misc_open+0x375/0x4a0 [ 3316.022362] ? misc_devnode+0x130/0x130 [ 3316.022832] chrdev_open+0x268/0x6e0 [ 3316.023272] ? cdev_device_add+0x220/0x220 [ 3316.023800] ? security_file_open+0x20b/0x500 [ 3316.024332] do_dentry_open+0x4b7/0x1090 [ 3316.024810] ? cdev_device_add+0x220/0x220 [ 3316.025310] ? may_open+0x1e4/0x400 [ 3316.025742] path_openat+0x193d/0x26d0 [ 3316.026208] ? path_lookupat+0x860/0x860 [ 3316.026682] ? perf_trace_lock+0xac/0x490 [ 3316.027163] ? SOFTIRQ_verbose+0x10/0x10 [ 3316.027641] ? lock_acquire+0x197/0x490 [ 3316.028109] ? __lockdep_reset_lock+0x180/0x180 [ 3316.028638] do_filp_open+0x17e/0x3d0 [ 3316.029085] ? may_open_dev+0xf0/0xf0 [ 3316.029542] ? rwlock_bug.part.0+0x90/0x90 [ 3316.030041] ? _raw_spin_unlock+0x1a/0x30 [ 3316.030511] ? __alloc_fd+0x2a5/0x620 [ 3316.030964] do_sys_openat2+0x171/0x420 [ 3316.031432] ? build_open_flags+0x690/0x690 [ 3316.031931] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3316.032482] ? wait_for_completion+0x270/0x270 [ 3316.033017] __x64_sys_openat+0x13f/0x1f0 [ 3316.033491] ? __ia32_sys_open+0x1c0/0x1c0 [ 3316.033970] ? ksys_write+0x1a9/0x260 [ 3316.034410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3316.035015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3316.035616] do_syscall_64+0x33/0x40 [ 3316.036047] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3316.036629] RIP: 0033:0x7f6eaa02cb19 [ 3316.037059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3316.039169] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3316.040079] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3316.040919] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3316.041755] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3316.042596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3316.043445] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3316.045479] FAULT_INJECTION: forcing a failure. [ 3316.045479] name failslab, interval 1, probability 0, space 0, times 0 [ 3316.047953] CPU: 0 PID: 25157 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3316.049465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3316.051271] Call Trace: [ 3316.051879] dump_stack+0x107/0x167 [ 3316.052779] should_fail.cold+0x5/0xa [ 3316.053617] ? create_object.isra.0+0x3a/0xa20 [ 3316.054619] should_failslab+0x5/0x20 [ 3316.055461] kmem_cache_alloc+0x5b/0x360 [ 3316.056357] create_object.isra.0+0x3a/0xa20 [ 3316.057316] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3316.058429] kmem_cache_alloc_trace+0x151/0x360 [ 3316.059476] rfkill_fop_open+0x367/0x680 [ 3316.060376] ? rfkill_init_sw_state+0x150/0x150 [ 3316.061392] misc_open+0x375/0x4a0 [ 3316.062171] ? misc_devnode+0x130/0x130 [ 3316.063041] chrdev_open+0x268/0x6e0 [ 3316.063865] ? cdev_device_add+0x220/0x220 [ 3316.064796] ? security_file_open+0x20b/0x500 [ 3316.065778] do_dentry_open+0x4b7/0x1090 [ 3316.066666] ? cdev_device_add+0x220/0x220 [ 3316.067598] ? may_open+0x1e4/0x400 [ 3316.068401] path_openat+0x193d/0x26d0 [ 3316.069274] ? path_lookupat+0x860/0x860 [ 3316.070161] ? perf_trace_lock+0xac/0x490 [ 3316.071065] ? SOFTIRQ_verbose+0x10/0x10 [ 3316.071961] ? lock_acquire+0x197/0x490 [ 3316.072835] ? __lockdep_reset_lock+0x180/0x180 [ 3316.073860] do_filp_open+0x17e/0x3d0 [ 3316.074693] ? may_open_dev+0xf0/0xf0 [ 3316.075556] ? rwlock_bug.part.0+0x90/0x90 [ 3316.076494] ? _raw_spin_unlock+0x1a/0x30 [ 3316.077396] ? __alloc_fd+0x2a5/0x620 [ 3316.078246] do_sys_openat2+0x171/0x420 [ 3316.079150] ? build_open_flags+0x690/0x690 [ 3316.080143] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3316.081203] ? wait_for_completion+0x270/0x270 [ 3316.082212] __x64_sys_openat+0x13f/0x1f0 [ 3316.083119] ? __ia32_sys_open+0x1c0/0x1c0 [ 3316.084051] ? ksys_write+0x1a9/0x260 [ 3316.084970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3316.086428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3316.087888] do_syscall_64+0x33/0x40 [ 3316.088777] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3316.089919] RIP: 0033:0x7f2947304b19 [ 3316.090747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3316.094833] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3316.096561] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3316.098112] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3316.099669] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3316.101216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3316.102768] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:28:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x500, 0x0, "be8652"}) 03:28:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:28:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x33fe0, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:28:29 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 59) 03:28:29 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 66) 03:28:29 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x28, 0x5f, 0x2) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3, &(0x7f0000001200)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x40010002) syz_open_procfs(r2, &(0x7f0000001280)='net/sco\x00') tkill(r1, 0xd) 03:28:29 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0xfeffff, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:28:29 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) fork() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) [ 3316.328821] FAULT_INJECTION: forcing a failure. [ 3316.328821] name failslab, interval 1, probability 0, space 0, times 0 [ 3316.331221] CPU: 0 PID: 25379 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3316.332660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3316.334357] Call Trace: [ 3316.334908] dump_stack+0x107/0x167 [ 3316.335669] should_fail.cold+0x5/0xa [ 3316.336460] ? create_object.isra.0+0x3a/0xa20 [ 3316.337397] should_failslab+0x5/0x20 [ 3316.338196] kmem_cache_alloc+0x5b/0x360 [ 3316.339038] create_object.isra.0+0x3a/0xa20 [ 3316.339944] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3316.340989] kmem_cache_alloc_trace+0x151/0x360 [ 3316.341952] rfkill_fop_open+0x367/0x680 [ 3316.342793] ? rfkill_init_sw_state+0x150/0x150 [ 3316.343764] misc_open+0x375/0x4a0 [ 3316.344495] ? misc_devnode+0x130/0x130 [ 3316.345307] chrdev_open+0x268/0x6e0 [ 3316.346069] ? cdev_device_add+0x220/0x220 [ 3316.346943] ? security_file_open+0x20b/0x500 [ 3316.347877] do_dentry_open+0x4b7/0x1090 [ 3316.348710] ? cdev_device_add+0x220/0x220 [ 3316.349578] ? may_open+0x1e4/0x400 [ 3316.350335] path_openat+0x193d/0x26d0 [ 3316.351152] ? path_lookupat+0x860/0x860 [ 3316.351998] ? perf_trace_lock+0xac/0x490 [ 3316.352845] ? SOFTIRQ_verbose+0x10/0x10 [ 3316.353673] ? lock_acquire+0x197/0x490 [ 3316.354491] ? __lockdep_reset_lock+0x180/0x180 [ 3316.355459] do_filp_open+0x17e/0x3d0 [ 3316.356246] ? may_open_dev+0xf0/0xf0 [ 3316.357049] ? rwlock_bug.part.0+0x90/0x90 [ 3316.357949] ? _raw_spin_unlock+0x1a/0x30 [ 3316.358802] ? __alloc_fd+0x2a5/0x620 [ 3316.359639] do_sys_openat2+0x171/0x420 [ 3316.360476] ? build_open_flags+0x690/0x690 [ 3316.361354] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3316.362343] ? wait_for_completion+0x270/0x270 [ 3316.363301] __x64_sys_openat+0x13f/0x1f0 [ 3316.364167] ? __ia32_sys_open+0x1c0/0x1c0 [ 3316.365052] ? ksys_write+0x1a9/0x260 [ 3316.365851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3316.366928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3316.368009] do_syscall_64+0x33/0x40 [ 3316.368778] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3316.369828] RIP: 0033:0x7f2947304b19 [ 3316.370595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3316.374351] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3316.375930] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3316.377383] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3316.378839] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3316.380302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3316.381759] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:28:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x2000045c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3316.429398] FAULT_INJECTION: forcing a failure. [ 3316.429398] name failslab, interval 1, probability 0, space 0, times 0 [ 3316.431809] CPU: 0 PID: 25382 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3316.433240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3316.434917] Call Trace: [ 3316.435487] dump_stack+0x107/0x167 [ 3316.436232] should_fail.cold+0x5/0xa [ 3316.437031] ? rfkill_fop_open+0x367/0x680 [ 3316.437899] should_failslab+0x5/0x20 [ 3316.438673] kmem_cache_alloc_trace+0x55/0x360 [ 3316.439623] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3316.440660] rfkill_fop_open+0x367/0x680 [ 3316.441511] ? rfkill_init_sw_state+0x150/0x150 [ 3316.442460] misc_open+0x375/0x4a0 [ 3316.443196] ? misc_devnode+0x130/0x130 [ 3316.444016] chrdev_open+0x268/0x6e0 [ 3316.444789] ? cdev_device_add+0x220/0x220 [ 3316.445659] ? security_file_open+0x20b/0x500 [ 3316.446591] do_dentry_open+0x4b7/0x1090 [ 3316.447419] ? cdev_device_add+0x220/0x220 [ 3316.448309] ? may_open+0x1e4/0x400 [ 3316.449081] path_openat+0x193d/0x26d0 [ 3316.449903] ? path_lookupat+0x860/0x860 [ 3316.450744] ? perf_trace_lock+0xac/0x490 03:28:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x7ffff000, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3316.451595] ? SOFTIRQ_verbose+0x10/0x10 [ 3316.452554] ? lock_acquire+0x197/0x490 [ 3316.453387] ? __lockdep_reset_lock+0x180/0x180 [ 3316.454365] do_filp_open+0x17e/0x3d0 [ 3316.455160] ? may_open_dev+0xf0/0xf0 [ 3316.455991] ? rwlock_bug.part.0+0x90/0x90 [ 3316.456884] ? _raw_spin_unlock+0x1a/0x30 [ 3316.457738] ? __alloc_fd+0x2a5/0x620 [ 3316.458543] do_sys_openat2+0x171/0x420 [ 3316.459366] ? build_open_flags+0x690/0x690 [ 3316.460263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3316.461260] ? wait_for_completion+0x270/0x270 [ 3316.462220] __x64_sys_openat+0x13f/0x1f0 [ 3316.463077] ? __ia32_sys_open+0x1c0/0x1c0 [ 3316.463963] ? ksys_write+0x1a9/0x260 [ 3316.464762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3316.465844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3316.466912] do_syscall_64+0x33/0x40 [ 3316.467697] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3316.468752] RIP: 0033:0x7f6eaa02cb19 [ 3316.469523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3316.473293] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3316.474863] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3316.476347] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3316.477817] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3316.479289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3316.480768] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:28:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0xfffffdef, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:28:29 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 60) 03:28:29 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3316.544726] FAULT_INJECTION: forcing a failure. [ 3316.544726] name failslab, interval 1, probability 0, space 0, times 0 [ 3316.546022] CPU: 1 PID: 25435 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3316.546777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3316.547683] Call Trace: [ 3316.547981] dump_stack+0x107/0x167 [ 3316.548379] should_fail.cold+0x5/0xa [ 3316.548799] ? rfkill_fop_open+0x367/0x680 [ 3316.549261] should_failslab+0x5/0x20 [ 3316.549687] kmem_cache_alloc_trace+0x55/0x360 [ 3316.550182] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3316.550721] rfkill_fop_open+0x367/0x680 [ 3316.551185] ? rfkill_init_sw_state+0x150/0x150 [ 3316.551689] misc_open+0x375/0x4a0 [ 3316.552075] ? misc_devnode+0x130/0x130 [ 3316.552488] chrdev_open+0x268/0x6e0 [ 3316.552901] ? cdev_device_add+0x220/0x220 [ 3316.553358] ? security_file_open+0x20b/0x500 [ 3316.553855] do_dentry_open+0x4b7/0x1090 [ 3316.554296] ? cdev_device_add+0x220/0x220 [ 3316.554741] ? may_open+0x1e4/0x400 [ 3316.555165] path_openat+0x193d/0x26d0 [ 3316.555583] ? path_lookupat+0x860/0x860 [ 3316.556055] ? perf_trace_lock+0xac/0x490 [ 3316.556472] ? SOFTIRQ_verbose+0x10/0x10 [ 3316.556936] ? lock_acquire+0x197/0x490 [ 3316.557358] ? __lockdep_reset_lock+0x180/0x180 [ 3316.557903] do_filp_open+0x17e/0x3d0 [ 3316.558294] ? may_open_dev+0xf0/0xf0 [ 3316.558752] ? rwlock_bug.part.0+0x90/0x90 [ 3316.559192] ? _raw_spin_unlock+0x1a/0x30 [ 3316.559674] ? __alloc_fd+0x2a5/0x620 [ 3316.560128] do_sys_openat2+0x171/0x420 [ 3316.560584] ? build_open_flags+0x690/0x690 [ 3316.561084] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3316.561646] ? wait_for_completion+0x270/0x270 [ 3316.562179] __x64_sys_openat+0x13f/0x1f0 [ 3316.562655] ? __ia32_sys_open+0x1c0/0x1c0 [ 3316.563134] ? ksys_write+0x1a9/0x260 [ 3316.563593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3316.564191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3316.564784] do_syscall_64+0x33/0x40 [ 3316.565208] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3316.565786] RIP: 0033:0x7f2947304b19 [ 3316.566216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3316.568313] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3316.569185] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3316.569988] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3316.570801] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3316.571618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3316.572424] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3330.986918] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:28:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0xf, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:28:53 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) wait4(r1, &(0x7f0000000000), 0x2, &(0x7f0000000040)) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) 03:28:53 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x1000000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:28:53 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:28:53 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 61) 03:28:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = fork() waitid(0x2, r1, &(0x7f00000000c0), 0x1000000, &(0x7f0000000200)) tkill(0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x3]}, &(0x7f00000002c0), &(0x7f0000000140), 0x8) tkill(r0, 0x2c) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) 03:28:53 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 67) 03:28:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3340.034361] FAULT_INJECTION: forcing a failure. [ 3340.034361] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.036695] CPU: 1 PID: 25613 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3340.038090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3340.039790] Call Trace: [ 3340.040339] dump_stack+0x107/0x167 [ 3340.041092] should_fail.cold+0x5/0xa [ 3340.041876] ? create_object.isra.0+0x3a/0xa20 [ 3340.042807] should_failslab+0x5/0x20 [ 3340.043585] kmem_cache_alloc+0x5b/0x360 [ 3340.044449] create_object.isra.0+0x3a/0xa20 [ 3340.045352] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3340.046384] kmem_cache_alloc_trace+0x151/0x360 [ 3340.047349] rfkill_fop_open+0x367/0x680 [ 3340.048200] ? rfkill_init_sw_state+0x150/0x150 [ 3340.049145] misc_open+0x375/0x4a0 [ 3340.049867] ? misc_devnode+0x130/0x130 [ 3340.050677] chrdev_open+0x268/0x6e0 [ 3340.051444] ? cdev_device_add+0x220/0x220 [ 3340.052326] ? security_file_open+0x20b/0x500 [ 3340.053244] do_dentry_open+0x4b7/0x1090 [ 3340.054069] ? cdev_device_add+0x220/0x220 [ 3340.054932] ? may_open+0x1e4/0x400 [ 3340.055680] path_openat+0x193d/0x26d0 [ 3340.056544] ? path_lookupat+0x860/0x860 [ 3340.057378] ? perf_trace_lock+0xac/0x490 [ 3340.058234] ? SOFTIRQ_verbose+0x10/0x10 [ 3340.059072] ? lock_acquire+0x197/0x490 [ 3340.059892] ? __lockdep_reset_lock+0x180/0x180 [ 3340.060859] do_filp_open+0x17e/0x3d0 [ 3340.061635] ? may_open_dev+0xf0/0xf0 [ 3340.062435] ? rwlock_bug.part.0+0x90/0x90 [ 3340.063312] ? _raw_spin_unlock+0x1a/0x30 [ 3340.064168] ? __alloc_fd+0x2a5/0x620 [ 3340.064963] do_sys_openat2+0x171/0x420 [ 3340.065773] ? build_open_flags+0x690/0x690 [ 3340.066645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3340.067627] ? wait_for_completion+0x270/0x270 [ 3340.068577] __x64_sys_openat+0x13f/0x1f0 [ 3340.069418] ? __ia32_sys_open+0x1c0/0x1c0 [ 3340.070284] ? ksys_write+0x1a9/0x260 [ 3340.071070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3340.072160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3340.073220] do_syscall_64+0x33/0x40 [ 3340.073981] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3340.075023] RIP: 0033:0x7f2947304b19 [ 3340.075786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3340.079520] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3340.081070] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3340.082519] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3340.083979] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3340.085433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3340.086876] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3340.099227] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=25618 comm=syz-executor.5 [ 3340.113776] FAULT_INJECTION: forcing a failure. [ 3340.113776] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.117169] CPU: 1 PID: 25620 Comm: syz-executor.2 Not tainted 5.10.161 #1 03:28:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3340.118598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3340.120510] Call Trace: [ 3340.121063] dump_stack+0x107/0x167 [ 3340.121820] should_fail.cold+0x5/0xa [ 3340.122613] ? create_object.isra.0+0x3a/0xa20 [ 3340.123559] should_failslab+0x5/0x20 [ 3340.124381] kmem_cache_alloc+0x5b/0x360 [ 3340.125213] create_object.isra.0+0x3a/0xa20 [ 3340.126123] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3340.127161] kmem_cache_alloc_trace+0x151/0x360 [ 3340.128138] rfkill_fop_open+0x367/0x680 [ 3340.128979] ? rfkill_init_sw_state+0x150/0x150 [ 3340.129931] misc_open+0x375/0x4a0 [ 3340.130657] ? misc_devnode+0x130/0x130 [ 3340.131459] chrdev_open+0x268/0x6e0 [ 3340.132235] ? cdev_device_add+0x220/0x220 [ 3340.133100] ? security_file_open+0x20b/0x500 [ 3340.134010] do_dentry_open+0x4b7/0x1090 [ 3340.134832] ? cdev_device_add+0x220/0x220 [ 3340.135685] ? may_open+0x1e4/0x400 [ 3340.136441] path_openat+0x193d/0x26d0 [ 3340.137249] ? path_lookupat+0x860/0x860 [ 3340.138073] ? perf_trace_lock+0xac/0x490 [ 3340.138909] ? SOFTIRQ_verbose+0x10/0x10 03:28:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x2, "be8652"}) [ 3340.139727] ? lock_acquire+0x197/0x490 [ 3340.140670] ? __lockdep_reset_lock+0x180/0x180 [ 3340.141646] do_filp_open+0x17e/0x3d0 [ 3340.142419] ? may_open_dev+0xf0/0xf0 [ 3340.143215] ? rwlock_bug.part.0+0x90/0x90 [ 3340.144101] ? _raw_spin_unlock+0x1a/0x30 [ 3340.144937] ? __alloc_fd+0x2a5/0x620 [ 3340.145738] do_sys_openat2+0x171/0x420 [ 3340.146546] ? build_open_flags+0x690/0x690 [ 3340.147416] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3340.148410] ? wait_for_completion+0x270/0x270 [ 3340.149346] __x64_sys_openat+0x13f/0x1f0 [ 3340.150194] ? __ia32_sys_open+0x1c0/0x1c0 [ 3340.151049] ? ksys_write+0x1a9/0x260 [ 3340.151857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3340.152927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3340.153978] do_syscall_64+0x33/0x40 [ 3340.154741] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3340.155791] RIP: 0033:0x7f6eaa02cb19 [ 3340.156560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3340.160322] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3340.161881] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3340.163328] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3340.164810] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3340.166228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3340.167694] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:28:53 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x2000000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:28:53 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 68) 03:28:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3340.330643] FAULT_INJECTION: forcing a failure. [ 3340.330643] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.333042] CPU: 0 PID: 25766 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3340.334468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3340.336171] Call Trace: [ 3340.336717] dump_stack+0x107/0x167 [ 3340.337474] should_fail.cold+0x5/0xa [ 3340.338273] ? rfkill_fop_open+0x367/0x680 [ 3340.339139] should_failslab+0x5/0x20 [ 3340.339947] kmem_cache_alloc_trace+0x55/0x360 [ 3340.340883] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3340.341922] rfkill_fop_open+0x367/0x680 [ 3340.342758] ? rfkill_init_sw_state+0x150/0x150 [ 3340.343704] misc_open+0x375/0x4a0 [ 3340.344449] ? misc_devnode+0x130/0x130 [ 3340.345264] chrdev_open+0x268/0x6e0 [ 3340.346019] ? cdev_device_add+0x220/0x220 [ 3340.346882] ? security_file_open+0x20b/0x500 [ 3340.347816] do_dentry_open+0x4b7/0x1090 [ 3340.348642] ? cdev_device_add+0x220/0x220 [ 3340.349505] ? may_open+0x1e4/0x400 [ 3340.350251] path_openat+0x193d/0x26d0 [ 3340.351067] ? path_lookupat+0x860/0x860 [ 3340.351926] ? perf_trace_lock+0xac/0x490 [ 3340.352768] ? SOFTIRQ_verbose+0x10/0x10 [ 3340.353599] ? lock_acquire+0x197/0x490 [ 3340.354410] ? __lockdep_reset_lock+0x180/0x180 [ 3340.355365] do_filp_open+0x17e/0x3d0 [ 3340.356154] ? may_open_dev+0xf0/0xf0 [ 3340.356952] ? rwlock_bug.part.0+0x90/0x90 [ 3340.357828] ? _raw_spin_unlock+0x1a/0x30 [ 3340.358674] ? __alloc_fd+0x2a5/0x620 [ 3340.359481] do_sys_openat2+0x171/0x420 [ 3340.360303] ? build_open_flags+0x690/0x690 [ 3340.361191] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3340.362171] ? wait_for_completion+0x270/0x270 [ 3340.363125] __x64_sys_openat+0x13f/0x1f0 [ 3340.363973] ? __ia32_sys_open+0x1c0/0x1c0 [ 3340.364837] ? ksys_write+0x1a9/0x260 [ 3340.365624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3340.366707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3340.367762] do_syscall_64+0x33/0x40 [ 3340.368529] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3340.369565] RIP: 0033:0x7f6eaa02cb19 [ 3340.370330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3340.374071] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3340.375636] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3340.377093] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3340.378548] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3340.379993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3340.381465] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x3, "be8652"}) [ 3356.159592] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3356.164066] FAULT_INJECTION: forcing a failure. [ 3356.164066] name failslab, interval 1, probability 0, space 0, times 0 [ 3356.166439] CPU: 0 PID: 25853 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3356.167866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3356.169573] Call Trace: [ 3356.170122] dump_stack+0x107/0x167 [ 3356.170872] should_fail.cold+0x5/0xa [ 3356.171657] ? create_object.isra.0+0x3a/0xa20 [ 3356.172616] should_failslab+0x5/0x20 [ 3356.173403] kmem_cache_alloc+0x5b/0x360 [ 3356.174244] create_object.isra.0+0x3a/0xa20 [ 3356.175141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3356.176198] kmem_cache_alloc_trace+0x151/0x360 [ 3356.177157] rfkill_fop_open+0x367/0x680 [ 3356.178000] ? rfkill_init_sw_state+0x150/0x150 [ 3356.178952] misc_open+0x375/0x4a0 [ 3356.179680] ? misc_devnode+0x130/0x130 [ 3356.180502] chrdev_open+0x268/0x6e0 [ 3356.181267] ? cdev_device_add+0x220/0x220 [ 3356.182142] ? security_file_open+0x20b/0x500 [ 3356.183068] do_dentry_open+0x4b7/0x1090 [ 3356.183925] ? cdev_device_add+0x220/0x220 [ 3356.184852] ? may_open+0x1e4/0x400 [ 3356.185644] path_openat+0x193d/0x26d0 [ 3356.186501] ? path_lookupat+0x860/0x860 [ 3356.187372] ? perf_trace_lock+0xac/0x490 [ 3356.188274] ? SOFTIRQ_verbose+0x10/0x10 [ 3356.189134] ? lock_acquire+0x197/0x490 [ 3356.189984] ? __lockdep_reset_lock+0x180/0x180 [ 3356.191003] do_filp_open+0x17e/0x3d0 [ 3356.191817] ? may_open_dev+0xf0/0xf0 [ 3356.192679] ? rwlock_bug.part.0+0x90/0x90 [ 3356.193605] ? _raw_spin_unlock+0x1a/0x30 [ 3356.194496] ? __alloc_fd+0x2a5/0x620 [ 3356.195336] do_sys_openat2+0x171/0x420 [ 3356.196199] ? build_open_flags+0x690/0x690 [ 3356.197116] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3356.198152] ? wait_for_completion+0x270/0x270 [ 3356.199135] __x64_sys_openat+0x13f/0x1f0 [ 3356.200054] ? __ia32_sys_open+0x1c0/0x1c0 [ 3356.200979] ? ksys_write+0x1a9/0x260 [ 3356.201824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3356.203008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3356.204189] do_syscall_64+0x33/0x40 [ 3356.205034] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3356.206181] RIP: 0033:0x7f2947304b19 [ 3356.207016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3356.211095] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3356.212817] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3356.214411] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3356.216018] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3356.217608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3356.219197] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:29:09 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 69) 03:29:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x11, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:29:09 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = fork() r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/rt_cache\x00') io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="ee", 0x1, 0x800000}]) clone3(&(0x7f0000000380)={0x200004000, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0xb}, &(0x7f0000000280)=""/43, 0x2b, &(0x7f00000002c0)=""/123, &(0x7f0000000340)=[r2, r2, r2, r2, r2, 0xffffffffffffffff, r2, r2], 0x8, {r3}}, 0x58) r5 = signalfd(r0, &(0x7f0000000480)={[0x1]}, 0x8) r6 = syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x9, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000600)="17672e18171d8eb11c09d36f1f68746c892659a4a98b7bd7c5afa2b31815fb3483e93725a368d97734a00e7a313639f212dbe34d31b627f0b4e29f8cc5322bf37e21b3a9ea7ea51ca419e98126b9eae351901b9f67bf3fb020ef7cf66e6f3b59725c967d94e44544409b717186d915b0a9086b14d05bf2c23f1d1252fe8e003aaa934135167ac3907464bc66ba57ab4633", 0x91, 0x80}], 0x8, &(0x7f0000000700)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@abort}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x93ef}}, {@sysvgroups}, {@grpquota}, {@test_dummy_encryption}, {@barrier}, {@errors_continue}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}) r7 = perf_event_open$cgroup(&(0x7f0000000940)={0x3, 0x80, 0x26, 0x2, 0x7, 0x7, 0x0, 0x7, 0x7c02, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000900), 0x3}, 0x4020f, 0x5, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x1cc, 0x0, 0x200}, r1, 0x10, 0xffffffffffffffff, 0x4) r8 = creat(0x0, 0x0) fallocate(r8, 0x0, 0x0, 0x8800000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r10 = timerfd_create(0x3, 0x80000) io_submit(0x0, 0x6, &(0x7f0000000b80)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x9b8, r1, &(0x7f00000000c0)="5f89300b5100459ab63b7eba1dd4d466ba070ea6569943643b301af811314ada0cbf0e8a9003f7048c5a646b23a9ff230202e442af9b", 0x36, 0x0, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xa69, r4, &(0x7f0000000400)="026788ec7efd8f4adead35719c1a29bbace12510b97c311aa929edae9e2b15f033f5e09c6897b5b3ddf5926875ff90fa21e5d6a2664d4bc0105ec9fefd21233b8fa04e94ce4df8f35362f1385087063e8775a00c575e95e579b183e759e450e02d17f95a886f90720c", 0x69, 0x6, 0x0, 0x0, r5}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0xf7, r3, &(0x7f0000000500)="e5c01ed1ab70dbb227924b0d1b84cbc59dc3fadb8a12e76ab092ce1036d8436381247d702d1b9bdd285da044dde04e23", 0x30, 0xd1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x100, r6, &(0x7f0000000840)="fa675868f244237a055f0daa402a17196c82674772baa9048d50b55193419f85734194eeaf6519d44620ede62614b0d1e894fba9ddb3eb512d28538d8bb3ca60bf7248180d84ed590d140e5d294f858577c9", 0x52, 0x1, 0x0, 0x3, r3}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x5, r7, &(0x7f00000009c0)="bc165e222b047b9ececb4835f3441a3cdf6c5a", 0x13, 0x7fffffff, 0x0, 0x3, r8}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x2, 0x2, r10, &(0x7f0000000a40)="607ae22244e3c55afb8eedbc4ad8e27b564c22b77ffa3738a11a4d809c85da2b1960bbf550c3a81e6e15b7e971154df62717034adb72a4c10b3157cef21af88786990e84a67199d574a34879de4b92f0322e59d88734bfe15a0c85288e3b09901013e84617ba31680536e1cfbb8d846e754f28cc8e3dd6dc2f712046ea1b5e114218ba9d428d4247853c0af6cd81701ce1eb430f11fee29999fe4b10d0bcfcfc0064ca101fbe8426d2fb37a200fd9500100690234f46fccafd0146bfc168a351dbefac2cdaa2022ddfc7", 0xca, 0x1, 0x0, 0x2, r3}]) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x0) tkill(r2, 0x2c) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000180)) 03:29:09 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 62) 03:29:09 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x3000000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:29:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:29:09 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x81, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) [ 3356.317445] FAULT_INJECTION: forcing a failure. [ 3356.317445] name failslab, interval 1, probability 0, space 0, times 0 [ 3356.319799] CPU: 1 PID: 25851 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3356.321238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3356.322966] Call Trace: [ 3356.323514] dump_stack+0x107/0x167 [ 3356.324284] should_fail.cold+0x5/0xa [ 3356.325076] ? create_object.isra.0+0x3a/0xa20 [ 3356.326017] should_failslab+0x5/0x20 [ 3356.326811] kmem_cache_alloc+0x5b/0x360 [ 3356.327663] create_object.isra.0+0x3a/0xa20 [ 3356.328582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3356.329633] kmem_cache_alloc_trace+0x151/0x360 [ 3356.330596] rfkill_fop_open+0x367/0x680 [ 3356.331437] ? rfkill_init_sw_state+0x150/0x150 [ 3356.332395] misc_open+0x375/0x4a0 [ 3356.333126] ? misc_devnode+0x130/0x130 [ 3356.333933] chrdev_open+0x268/0x6e0 [ 3356.334700] ? cdev_device_add+0x220/0x220 [ 3356.335573] ? security_file_open+0x20b/0x500 [ 3356.336503] do_dentry_open+0x4b7/0x1090 [ 3356.337337] ? cdev_device_add+0x220/0x220 [ 3356.338205] ? may_open+0x1e4/0x400 [ 3356.338964] path_openat+0x193d/0x26d0 [ 3356.339790] ? path_lookupat+0x860/0x860 03:29:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3356.340640] ? perf_trace_lock+0xac/0x490 [ 3356.341697] ? SOFTIRQ_verbose+0x10/0x10 [ 3356.342539] ? lock_acquire+0x197/0x490 [ 3356.343369] ? __lockdep_reset_lock+0x180/0x180 03:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x5, "be8652"}) [ 3356.344353] do_filp_open+0x17e/0x3d0 [ 3356.345266] ? may_open_dev+0xf0/0xf0 [ 3356.346071] ? rwlock_bug.part.0+0x90/0x90 [ 3356.346956] ? _raw_spin_unlock+0x1a/0x30 [ 3356.347808] ? __alloc_fd+0x2a5/0x620 [ 3356.348627] do_sys_openat2+0x171/0x420 [ 3356.349442] ? build_open_flags+0x690/0x690 [ 3356.350322] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3356.351312] ? wait_for_completion+0x270/0x270 [ 3356.352266] __x64_sys_openat+0x13f/0x1f0 [ 3356.353118] ? __ia32_sys_open+0x1c0/0x1c0 [ 3356.353985] ? ksys_write+0x1a9/0x260 [ 3356.354780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3356.355852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3356.356925] do_syscall_64+0x33/0x40 [ 3356.357690] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3356.358735] RIP: 0033:0x7f6eaa02cb19 [ 3356.359500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3356.363240] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 03:29:09 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x4000000, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3356.364802] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3356.366369] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3356.367827] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3356.369299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3356.370776] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:29:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x12, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3356.425469] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:09 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 63) 03:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x300, "be8652"}) [ 3356.519226] FAULT_INJECTION: forcing a failure. [ 3356.519226] name failslab, interval 1, probability 0, space 0, times 0 [ 3356.521556] CPU: 1 PID: 26035 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3356.522935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3356.524592] Call Trace: [ 3356.525123] dump_stack+0x107/0x167 [ 3356.525859] should_fail.cold+0x5/0xa [ 3356.526621] ? create_object.isra.0+0x3a/0xa20 [ 3356.527530] should_failslab+0x5/0x20 [ 3356.528310] kmem_cache_alloc+0x5b/0x360 [ 3356.529125] create_object.isra.0+0x3a/0xa20 [ 3356.530000] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3356.531014] kmem_cache_alloc_trace+0x151/0x360 [ 3356.531969] rfkill_fop_open+0x367/0x680 [ 3356.532790] ? rfkill_init_sw_state+0x150/0x150 [ 3356.533725] misc_open+0x375/0x4a0 [ 3356.534435] ? misc_devnode+0x130/0x130 [ 3356.535222] chrdev_open+0x268/0x6e0 [ 3356.535974] ? cdev_device_add+0x220/0x220 [ 3356.536823] ? security_file_open+0x20b/0x500 [ 3356.537720] do_dentry_open+0x4b7/0x1090 [ 3356.538538] ? cdev_device_add+0x220/0x220 [ 3356.539381] ? may_open+0x1e4/0x400 [ 3356.540129] path_openat+0x193d/0x26d0 [ 3356.540944] ? path_lookupat+0x860/0x860 [ 3356.541752] ? perf_trace_lock+0xac/0x490 [ 3356.542578] ? SOFTIRQ_verbose+0x10/0x10 [ 3356.543379] ? lock_acquire+0x197/0x490 [ 3356.544215] ? __lockdep_reset_lock+0x180/0x180 [ 3356.545151] do_filp_open+0x17e/0x3d0 [ 3356.545907] ? may_open_dev+0xf0/0xf0 [ 3356.546693] ? rwlock_bug.part.0+0x90/0x90 [ 3356.547563] ? _raw_spin_unlock+0x1a/0x30 [ 3356.548404] ? __alloc_fd+0x2a5/0x620 [ 3356.549180] do_sys_openat2+0x171/0x420 [ 3356.549969] ? build_open_flags+0x690/0x690 [ 3356.550815] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3356.551772] ? wait_for_completion+0x270/0x270 [ 3356.552710] __x64_sys_openat+0x13f/0x1f0 [ 3356.553538] ? __ia32_sys_open+0x1c0/0x1c0 [ 3356.554374] ? ksys_write+0x1a9/0x260 [ 3356.555160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3356.556242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3356.557278] do_syscall_64+0x33/0x40 [ 3356.558018] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3356.559026] RIP: 0033:0x7f2947304b19 [ 3356.559766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3356.563396] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3356.564933] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3356.566338] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3356.567742] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3356.569201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3356.570654] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:29:09 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:29:09 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x5000000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:29:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x2c) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) ptrace$setsig(0x4203, r0, 0x3, &(0x7f00000000c0)={0xf, 0x4, 0xa5d}) ptrace$getregs(0xe, r1, 0x10001, &(0x7f0000000200)=""/209) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) [ 3369.589266] kmemleak: 7 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:29:31 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 64) 03:29:31 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x3) tkill(r1, 0x2c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x0, r1}) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) 03:29:31 executing program 4: r0 = fork() get_robust_list(r0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) syz_open_procfs(r1, &(0x7f0000000000)='setgroups\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) 03:29:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x500, "be8652"}) 03:29:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x13, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:29:32 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 70) 03:29:32 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:29:32 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x6000000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:29:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:29:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3379.017774] FAULT_INJECTION: forcing a failure. [ 3379.017774] name failslab, interval 1, probability 0, space 0, times 0 [ 3379.020199] CPU: 1 PID: 26252 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3379.021613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3379.023274] Call Trace: [ 3379.023819] dump_stack+0x107/0x167 [ 3379.024573] should_fail.cold+0x5/0xa [ 3379.025349] ? rfkill_fop_open+0x367/0x680 [ 3379.026210] should_failslab+0x5/0x20 [ 3379.026984] kmem_cache_alloc_trace+0x55/0x360 [ 3379.027928] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3379.028991] rfkill_fop_open+0x367/0x680 [ 3379.029829] ? rfkill_init_sw_state+0x150/0x150 [ 3379.030777] misc_open+0x375/0x4a0 [ 3379.031503] ? misc_devnode+0x130/0x130 [ 3379.032314] chrdev_open+0x268/0x6e0 [ 3379.033069] ? cdev_device_add+0x220/0x220 [ 3379.033933] ? security_file_open+0x20b/0x500 [ 3379.034845] do_dentry_open+0x4b7/0x1090 [ 3379.035666] ? cdev_device_add+0x220/0x220 [ 3379.036541] ? may_open+0x1e4/0x400 [ 3379.037290] path_openat+0x193d/0x26d0 [ 3379.038110] ? path_lookupat+0x860/0x860 [ 3379.038935] ? perf_trace_lock+0xac/0x490 [ 3379.039783] ? SOFTIRQ_verbose+0x10/0x10 [ 3379.040622] ? lock_acquire+0x197/0x490 [ 3379.041435] ? __lockdep_reset_lock+0x180/0x180 [ 3379.042386] do_filp_open+0x17e/0x3d0 [ 3379.043155] ? may_open_dev+0xf0/0xf0 [ 3379.043952] ? rwlock_bug.part.0+0x90/0x90 [ 3379.044834] ? _raw_spin_unlock+0x1a/0x30 [ 3379.045674] ? __alloc_fd+0x2a5/0x620 [ 3379.046466] do_sys_openat2+0x171/0x420 [ 3379.047277] ? build_open_flags+0x690/0x690 [ 3379.048149] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3379.049136] ? wait_for_completion+0x270/0x270 [ 3379.050071] __x64_sys_openat+0x13f/0x1f0 [ 3379.050910] ? __ia32_sys_open+0x1c0/0x1c0 [ 3379.051760] ? ksys_write+0x1a9/0x260 [ 3379.052557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3379.053621] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3379.054667] do_syscall_64+0x33/0x40 [ 3379.055421] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3379.056466] RIP: 0033:0x7f2947304b19 [ 3379.057220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3379.060915] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3379.062450] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3379.063880] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3379.065320] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3379.066751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3379.068183] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3379.083759] FAULT_INJECTION: forcing a failure. [ 3379.083759] name failslab, interval 1, probability 0, space 0, times 0 [ 3379.086156] CPU: 1 PID: 26298 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3379.087557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3379.089238] Call Trace: [ 3379.089781] dump_stack+0x107/0x167 [ 3379.090535] should_fail.cold+0x5/0xa [ 3379.091314] ? rfkill_fop_open+0x367/0x680 [ 3379.092180] should_failslab+0x5/0x20 [ 3379.092967] kmem_cache_alloc_trace+0x55/0x360 [ 3379.093894] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3379.094925] rfkill_fop_open+0x367/0x680 [ 3379.095757] ? rfkill_init_sw_state+0x150/0x150 [ 3379.096710] misc_open+0x375/0x4a0 [ 3379.097431] ? misc_devnode+0x130/0x130 [ 3379.098232] chrdev_open+0x268/0x6e0 [ 3379.098986] ? cdev_device_add+0x220/0x220 [ 3379.099850] ? security_file_open+0x20b/0x500 [ 3379.100782] do_dentry_open+0x4b7/0x1090 [ 3379.101605] ? cdev_device_add+0x220/0x220 [ 3379.102461] ? may_open+0x1e4/0x400 [ 3379.103205] path_openat+0x193d/0x26d0 [ 3379.104014] ? path_lookupat+0x860/0x860 [ 3379.104857] ? perf_trace_lock+0xac/0x490 [ 3379.105699] ? SOFTIRQ_verbose+0x10/0x10 [ 3379.106529] ? lock_acquire+0x197/0x490 [ 3379.107340] ? __lockdep_reset_lock+0x180/0x180 [ 3379.108295] do_filp_open+0x17e/0x3d0 [ 3379.109063] ? may_open_dev+0xf0/0xf0 [ 3379.109856] ? rwlock_bug.part.0+0x90/0x90 [ 3379.110725] ? _raw_spin_unlock+0x1a/0x30 [ 3379.111560] ? __alloc_fd+0x2a5/0x620 [ 3379.112368] do_sys_openat2+0x171/0x420 [ 3379.113176] ? build_open_flags+0x690/0x690 [ 3379.114045] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3379.115029] ? wait_for_completion+0x270/0x270 [ 3379.115967] __x64_sys_openat+0x13f/0x1f0 [ 3379.116818] ? __ia32_sys_open+0x1c0/0x1c0 [ 3379.117670] ? ksys_write+0x1a9/0x260 [ 3379.118452] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3379.119513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3379.120568] do_syscall_64+0x33/0x40 [ 3379.121335] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3379.122369] RIP: 0033:0x7f6eaa02cb19 [ 3379.123124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3379.126815] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3379.128355] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3379.129790] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3379.131224] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3379.132667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3379.134101] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:29:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x28, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3379.194369] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:32 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x7000000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:29:32 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cb, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:29:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652", 0x2}) 03:29:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x8, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:29:32 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x80000000, 0x20001a) tkill(r0, 0x2c) fork() ptrace$getsig(0x420a, r0, 0x0, 0x0) 03:29:32 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 65) 03:29:32 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0xf2, 0xe5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0xc304d724bb87eb64, @perf_config_ext={0x3, 0x7fffffff}, 0xc800, 0xd891, 0x0, 0x4, 0x9, 0x3, 0x6867, 0x0, 0x0, 0x0, 0x20}, r1, 0x0, r0, 0x4) tkill(0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) 03:29:32 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) [ 3379.406532] FAULT_INJECTION: forcing a failure. [ 3379.406532] name failslab, interval 1, probability 0, space 0, times 0 [ 3379.408945] CPU: 0 PID: 26442 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3379.410371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3379.412068] Call Trace: [ 3379.412633] dump_stack+0x107/0x167 [ 3379.413387] should_fail.cold+0x5/0xa [ 3379.414177] ? create_object.isra.0+0x3a/0xa20 [ 3379.415117] should_failslab+0x5/0x20 [ 3379.415901] kmem_cache_alloc+0x5b/0x360 [ 3379.416770] create_object.isra.0+0x3a/0xa20 [ 3379.417670] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3379.418712] kmem_cache_alloc_trace+0x151/0x360 [ 3379.419677] rfkill_fop_open+0x367/0x680 [ 3379.420530] ? rfkill_init_sw_state+0x150/0x150 [ 3379.421485] misc_open+0x375/0x4a0 [ 3379.422214] ? misc_devnode+0x130/0x130 [ 3379.423023] chrdev_open+0x268/0x6e0 [ 3379.423786] ? cdev_device_add+0x220/0x220 [ 3379.424676] ? security_file_open+0x20b/0x500 [ 3379.425601] do_dentry_open+0x4b7/0x1090 [ 3379.426440] ? cdev_device_add+0x220/0x220 [ 3379.427310] ? may_open+0x1e4/0x400 [ 3379.428065] path_openat+0x193d/0x26d0 [ 3379.428890] ? path_lookupat+0x860/0x860 [ 3379.429709] ? perf_trace_lock+0xac/0x490 [ 3379.430553] ? SOFTIRQ_verbose+0x10/0x10 [ 3379.431382] ? lock_acquire+0x197/0x490 [ 3379.432204] ? __lockdep_reset_lock+0x180/0x180 [ 3379.433181] do_filp_open+0x17e/0x3d0 [ 3379.433964] ? may_open_dev+0xf0/0xf0 [ 3379.434761] ? rwlock_bug.part.0+0x90/0x90 [ 3379.435638] ? _raw_spin_unlock+0x1a/0x30 [ 3379.436496] ? __alloc_fd+0x2a5/0x620 [ 3379.437289] do_sys_openat2+0x171/0x420 [ 3379.438105] ? build_open_flags+0x690/0x690 [ 3379.438984] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3379.439969] ? wait_for_completion+0x270/0x270 [ 3379.440935] __x64_sys_openat+0x13f/0x1f0 [ 3379.441796] ? __ia32_sys_open+0x1c0/0x1c0 [ 3379.442665] ? ksys_write+0x1a9/0x260 [ 3379.443458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3379.444534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3379.445599] do_syscall_64+0x33/0x40 [ 3379.446372] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3379.447425] RIP: 0033:0x7f6eaa02cb19 [ 3379.448186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3379.451964] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3379.453524] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3379.454972] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3379.456423] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3379.457872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3379.459315] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:29:32 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 71) [ 3379.549672] FAULT_INJECTION: forcing a failure. [ 3379.549672] name failslab, interval 1, probability 0, space 0, times 0 [ 3379.552022] CPU: 1 PID: 26447 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3379.553434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3379.555126] Call Trace: [ 3379.555676] dump_stack+0x107/0x167 [ 3379.556434] should_fail.cold+0x5/0xa [ 3379.557210] ? rfkill_fop_open+0x367/0x680 [ 3379.558080] should_failslab+0x5/0x20 [ 3379.558849] kmem_cache_alloc_trace+0x55/0x360 [ 3379.559783] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3379.560841] rfkill_fop_open+0x367/0x680 [ 3379.561676] ? rfkill_init_sw_state+0x150/0x150 [ 3379.562625] misc_open+0x375/0x4a0 [ 3379.563350] ? misc_devnode+0x130/0x130 [ 3379.564157] chrdev_open+0x268/0x6e0 [ 3379.564924] ? cdev_device_add+0x220/0x220 [ 3379.565799] ? security_file_open+0x20b/0x500 [ 3379.566711] do_dentry_open+0x4b7/0x1090 [ 3379.567544] ? cdev_device_add+0x220/0x220 [ 3379.568430] ? may_open+0x1e4/0x400 [ 3379.569187] path_openat+0x193d/0x26d0 [ 3379.570002] ? path_lookupat+0x860/0x860 [ 3379.570829] ? perf_trace_lock+0xac/0x490 [ 3379.571673] ? SOFTIRQ_verbose+0x10/0x10 [ 3379.572513] ? lock_acquire+0x197/0x490 [ 3379.573333] ? __lockdep_reset_lock+0x180/0x180 [ 3379.574285] do_filp_open+0x17e/0x3d0 [ 3379.575058] ? may_open_dev+0xf0/0xf0 [ 3379.575863] ? rwlock_bug.part.0+0x90/0x90 [ 3379.576739] ? _raw_spin_unlock+0x1a/0x30 [ 3379.577607] ? __alloc_fd+0x2a5/0x620 [ 3379.578401] do_sys_openat2+0x171/0x420 [ 3379.579209] ? build_open_flags+0x690/0x690 [ 3379.580093] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3379.581092] ? wait_for_completion+0x270/0x270 [ 3379.582044] __x64_sys_openat+0x13f/0x1f0 [ 3379.582886] ? __ia32_sys_open+0x1c0/0x1c0 [ 3379.583748] ? ksys_write+0x1a9/0x260 [ 3379.584544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3379.585610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3379.586666] do_syscall_64+0x33/0x40 [ 3379.587419] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3379.588474] RIP: 0033:0x7f2947304b19 [ 3379.589225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3379.592896] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3379.594438] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3379.595875] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3379.597318] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3379.598749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3379.600175] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3391.933172] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:29:54 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) 03:29:54 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x10000000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:29:54 executing program 4: tkill(0x0, 0x2d) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0xffffffffffffffff, 0x33) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) tkill(r1, 0x3b) ptrace$getsig(0x420a, r0, 0x0, 0x0) 03:29:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652", 0x3}) 03:29:54 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 72) 03:29:54 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 66) 03:29:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbda}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x0) tkill(r0, 0x9) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xa) ptrace(0x4207, r1) tkill(r0, 0x2c) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x20000000000) r3 = getpgid(r1) wait4(r3, 0x0, 0x2, &(0x7f0000000140)) r4 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) ptrace$getsig(0x4202, r4, 0x4, &(0x7f00000000c0)) 03:29:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x19, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3400.998853] FAULT_INJECTION: forcing a failure. [ 3400.998853] name failslab, interval 1, probability 0, space 0, times 0 [ 3401.001278] CPU: 1 PID: 26654 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3401.002668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3401.004336] Call Trace: [ 3401.004886] dump_stack+0x107/0x167 [ 3401.005629] should_fail.cold+0x5/0xa [ 3401.006402] ? rfkill_fop_open+0x367/0x680 [ 3401.007261] should_failslab+0x5/0x20 [ 3401.008030] kmem_cache_alloc_trace+0x55/0x360 [ 3401.008981] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3401.010012] rfkill_fop_open+0x367/0x680 [ 3401.010843] ? rfkill_init_sw_state+0x150/0x150 [ 3401.011787] misc_open+0x375/0x4a0 [ 3401.012516] ? misc_devnode+0x130/0x130 [ 3401.013332] chrdev_open+0x268/0x6e0 [ 3401.014081] ? cdev_device_add+0x220/0x220 [ 3401.014938] ? security_file_open+0x20b/0x500 [ 3401.015856] do_dentry_open+0x4b7/0x1090 [ 3401.016686] ? cdev_device_add+0x220/0x220 [ 3401.017557] ? may_open+0x1e4/0x400 [ 3401.018310] path_openat+0x193d/0x26d0 [ 3401.019125] ? path_lookupat+0x860/0x860 [ 3401.019944] ? perf_trace_lock+0xac/0x490 [ 3401.020803] ? SOFTIRQ_verbose+0x10/0x10 [ 3401.021631] ? lock_acquire+0x197/0x490 [ 3401.022452] ? __lockdep_reset_lock+0x180/0x180 [ 3401.023399] do_filp_open+0x17e/0x3d0 [ 3401.024170] ? may_open_dev+0xf0/0xf0 [ 3401.024969] ? rwlock_bug.part.0+0x90/0x90 [ 3401.025846] ? _raw_spin_unlock+0x1a/0x30 [ 3401.026681] ? __alloc_fd+0x2a5/0x620 [ 3401.027477] do_sys_openat2+0x171/0x420 [ 3401.028284] ? build_open_flags+0x690/0x690 [ 3401.029169] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3401.030152] ? wait_for_completion+0x270/0x270 [ 3401.031095] __x64_sys_openat+0x13f/0x1f0 [ 3401.031934] ? __ia32_sys_open+0x1c0/0x1c0 [ 3401.032793] ? ksys_write+0x1a9/0x260 [ 3401.033578] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3401.034645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3401.035694] do_syscall_64+0x33/0x40 [ 3401.036456] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3401.037499] RIP: 0033:0x7f2947304b19 [ 3401.038261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3401.041967] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3401.043505] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3401.044950] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3401.046386] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3401.047823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3401.049277] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3401.093428] FAULT_INJECTION: forcing a failure. [ 3401.093428] name failslab, interval 1, probability 0, space 0, times 0 [ 3401.095809] CPU: 0 PID: 26668 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3401.097243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3401.098880] Call Trace: [ 3401.099423] dump_stack+0x107/0x167 [ 3401.100164] should_fail.cold+0x5/0xa [ 3401.100955] ? rfkill_fop_open+0x367/0x680 [ 3401.101825] should_failslab+0x5/0x20 [ 3401.102602] kmem_cache_alloc_trace+0x55/0x360 [ 3401.103530] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3401.104568] rfkill_fop_open+0x367/0x680 [ 3401.105401] ? rfkill_init_sw_state+0x150/0x150 [ 3401.106344] misc_open+0x375/0x4a0 [ 3401.107064] ? misc_devnode+0x130/0x130 [ 3401.107865] chrdev_open+0x268/0x6e0 [ 3401.108637] ? cdev_device_add+0x220/0x220 [ 3401.109502] ? security_file_open+0x20b/0x500 [ 3401.110412] do_dentry_open+0x4b7/0x1090 [ 3401.111235] ? cdev_device_add+0x220/0x220 [ 3401.112092] ? may_open+0x1e4/0x400 [ 3401.112844] path_openat+0x193d/0x26d0 [ 3401.113653] ? path_lookupat+0x860/0x860 [ 3401.114474] ? perf_trace_lock+0xac/0x490 [ 3401.115312] ? SOFTIRQ_verbose+0x10/0x10 [ 3401.116130] ? lock_acquire+0x197/0x490 [ 3401.116953] ? __lockdep_reset_lock+0x180/0x180 [ 3401.117907] do_filp_open+0x17e/0x3d0 [ 3401.118677] ? may_open_dev+0xf0/0xf0 [ 3401.119473] ? rwlock_bug.part.0+0x90/0x90 [ 3401.120345] ? _raw_spin_unlock+0x1a/0x30 [ 3401.121188] ? __alloc_fd+0x2a5/0x620 [ 3401.121979] do_sys_openat2+0x171/0x420 [ 3401.122791] ? build_open_flags+0x690/0x690 [ 3401.123662] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3401.124657] ? wait_for_completion+0x270/0x270 [ 3401.125596] __x64_sys_openat+0x13f/0x1f0 [ 3401.126437] ? __ia32_sys_open+0x1c0/0x1c0 [ 3401.127291] ? ksys_write+0x1a9/0x260 [ 3401.128074] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3401.129141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3401.130191] do_syscall_64+0x33/0x40 [ 3401.130948] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3401.131984] RIP: 0033:0x7f6eaa02cb19 [ 3401.132749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3401.136446] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3401.137997] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3401.139437] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3401.140883] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3401.142322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3401.143759] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:29:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652", 0x5}) 03:29:54 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 67) [ 3401.222797] FAULT_INJECTION: forcing a failure. [ 3401.222797] name failslab, interval 1, probability 0, space 0, times 0 [ 3401.225207] CPU: 1 PID: 26747 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3401.226622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3401.228310] Call Trace: [ 3401.228861] dump_stack+0x107/0x167 [ 3401.229609] should_fail.cold+0x5/0xa [ 3401.230375] ? create_object.isra.0+0x3a/0xa20 [ 3401.231316] should_failslab+0x5/0x20 [ 3401.232085] kmem_cache_alloc+0x5b/0x360 [ 3401.232950] create_object.isra.0+0x3a/0xa20 [ 3401.233842] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3401.234886] kmem_cache_alloc_trace+0x151/0x360 [ 3401.235841] rfkill_fop_open+0x367/0x680 [ 3401.236689] ? rfkill_init_sw_state+0x150/0x150 [ 3401.237637] misc_open+0x375/0x4a0 [ 3401.238361] ? misc_devnode+0x130/0x130 [ 3401.239165] chrdev_open+0x268/0x6e0 [ 3401.239920] ? cdev_device_add+0x220/0x220 [ 3401.240806] ? security_file_open+0x20b/0x500 [ 3401.241723] do_dentry_open+0x4b7/0x1090 [ 3401.242565] ? cdev_device_add+0x220/0x220 [ 3401.243420] ? may_open+0x1e4/0x400 [ 3401.244168] path_openat+0x193d/0x26d0 [ 3401.244996] ? path_lookupat+0x860/0x860 [ 3401.245820] ? perf_trace_lock+0xac/0x490 [ 3401.246675] ? asm_sysvec_call_function_single+0x12/0x20 [ 3401.247782] ? __lockdep_reset_lock+0x180/0x180 [ 3401.248756] do_filp_open+0x17e/0x3d0 [ 3401.249530] ? may_open_dev+0xf0/0xf0 [ 3401.250336] ? rwlock_bug.part.0+0x90/0x90 [ 3401.251212] ? _raw_spin_unlock+0x1a/0x30 [ 3401.252071] ? __alloc_fd+0x2a5/0x620 [ 3401.252897] do_sys_openat2+0x171/0x420 [ 3401.253717] ? build_open_flags+0x690/0x690 [ 3401.254604] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3401.255613] ? wait_for_completion+0x270/0x270 [ 3401.256584] __x64_sys_openat+0x13f/0x1f0 [ 3401.257428] ? __ia32_sys_open+0x1c0/0x1c0 [ 3401.258283] ? ksys_write+0x1a9/0x260 [ 3401.259068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3401.260130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3401.261188] do_syscall_64+0x33/0x40 [ 3401.261950] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3401.262988] RIP: 0033:0x7f2947304b19 [ 3401.263746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3401.267448] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3401.269006] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3401.270448] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3401.271888] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3401.273339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3401.274781] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:29:54 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x18000000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:29:54 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) [ 3415.312096] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:30:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x300, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:30:16 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 73) 03:30:16 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x1ffff000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:30:16 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 68) 03:30:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:30:16 executing program 6: r0 = fork() ptrace$setopts(0x4200, r0, 0x1, 0x40) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000040), 0x2, 0x0) 03:30:16 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() r2 = dup(r0) sendfile(r0, r2, &(0x7f0000000000)=0x1f, 0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x1) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0xffffffffffffffff, &(0x7f0000000180)) 03:30:16 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) r1 = fork() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xbc, 0x7, 0x4, 0x86, 0x0, 0x6, 0x1e00c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x400}, 0x4000, 0x3e000000000000, 0x3, 0x7, 0x1, 0x4, 0x40, 0x0, 0x4, 0x0, 0x5}, r0, 0xf, 0xffffffffffffffff, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) ptrace$getsig(0x420a, r1, 0x1000005, 0x0) [ 3423.029358] FAULT_INJECTION: forcing a failure. [ 3423.029358] name failslab, interval 1, probability 0, space 0, times 0 [ 3423.032236] CPU: 1 PID: 26892 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3423.033885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3423.035839] Call Trace: [ 3423.036473] dump_stack+0x107/0x167 [ 3423.037374] should_fail.cold+0x5/0xa [ 3423.038284] ? create_object.isra.0+0x3a/0xa20 [ 3423.039366] should_failslab+0x5/0x20 [ 3423.040267] kmem_cache_alloc+0x5b/0x360 [ 3423.041237] create_object.isra.0+0x3a/0xa20 [ 3423.042265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3423.043463] kmem_cache_alloc_trace+0x151/0x360 [ 3423.044564] rfkill_fop_open+0x367/0x680 [ 3423.045533] ? rfkill_init_sw_state+0x150/0x150 [ 3423.046625] misc_open+0x375/0x4a0 [ 3423.047459] ? misc_devnode+0x130/0x130 [ 3423.048385] chrdev_open+0x268/0x6e0 [ 3423.049273] ? cdev_device_add+0x220/0x220 [ 3423.050274] ? security_file_open+0x20b/0x500 [ 3423.051328] do_dentry_open+0x4b7/0x1090 [ 3423.052280] ? cdev_device_add+0x220/0x220 [ 3423.053505] ? may_open+0x1e4/0x400 [ 3423.054465] path_openat+0x193d/0x26d0 [ 3423.055505] ? path_lookupat+0x860/0x860 [ 3423.056552] ? perf_trace_lock+0xac/0x490 [ 3423.057655] ? SOFTIRQ_verbose+0x10/0x10 [ 3423.058712] ? lock_acquire+0x197/0x490 [ 3423.059754] ? __lockdep_reset_lock+0x180/0x180 [ 3423.060987] do_filp_open+0x17e/0x3d0 [ 3423.061979] ? may_open_dev+0xf0/0xf0 [ 3423.063002] ? rwlock_bug.part.0+0x90/0x90 [ 3423.064129] ? _raw_spin_unlock+0x1a/0x30 [ 3423.065231] ? __alloc_fd+0x2a5/0x620 [ 3423.065940] do_sys_openat2+0x171/0x420 [ 3423.066599] ? build_open_flags+0x690/0x690 [ 3423.067302] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3423.068105] ? wait_for_completion+0x270/0x270 [ 3423.068871] __x64_sys_openat+0x13f/0x1f0 [ 3423.069560] ? __ia32_sys_open+0x1c0/0x1c0 [ 3423.070244] ? ksys_write+0x1a9/0x260 [ 3423.070884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3423.071738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3423.072587] do_syscall_64+0x33/0x40 [ 3423.073200] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3423.074045] RIP: 0033:0x7f6eaa02cb19 [ 3423.074656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3423.077745] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3423.078975] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3423.080131] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3423.081295] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3423.082448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3423.083619] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 [ 3423.102805] FAULT_INJECTION: forcing a failure. [ 3423.102805] name failslab, interval 1, probability 0, space 0, times 0 [ 3423.105192] CPU: 0 PID: 26902 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3423.106613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3423.108321] Call Trace: [ 3423.108884] dump_stack+0x107/0x167 [ 3423.109663] should_fail.cold+0x5/0xa [ 3423.110461] ? rfkill_fop_open+0x367/0x680 [ 3423.111349] should_failslab+0x5/0x20 [ 3423.112152] kmem_cache_alloc_trace+0x55/0x360 [ 3423.113124] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3423.114166] rfkill_fop_open+0x367/0x680 [ 3423.115007] ? rfkill_init_sw_state+0x150/0x150 [ 3423.115962] misc_open+0x375/0x4a0 [ 3423.116694] ? misc_devnode+0x130/0x130 [ 3423.117519] chrdev_open+0x268/0x6e0 [ 3423.118283] ? cdev_device_add+0x220/0x220 [ 3423.119157] ? security_file_open+0x20b/0x500 [ 3423.120087] do_dentry_open+0x4b7/0x1090 [ 3423.120927] ? cdev_device_add+0x220/0x220 [ 3423.121802] ? may_open+0x1e4/0x400 [ 3423.122557] path_openat+0x193d/0x26d0 [ 3423.123382] ? path_lookupat+0x860/0x860 [ 3423.124217] ? perf_trace_lock+0xac/0x490 [ 3423.125081] ? SOFTIRQ_verbose+0x10/0x10 [ 3423.125910] ? lock_acquire+0x197/0x490 [ 3423.126731] ? __lockdep_reset_lock+0x180/0x180 [ 3423.127694] do_filp_open+0x17e/0x3d0 [ 3423.128469] ? may_open_dev+0xf0/0xf0 [ 3423.129277] ? rwlock_bug.part.0+0x90/0x90 [ 3423.130157] ? _raw_spin_unlock+0x1a/0x30 [ 3423.131007] ? __alloc_fd+0x2a5/0x620 [ 3423.131806] do_sys_openat2+0x171/0x420 [ 3423.132623] ? build_open_flags+0x690/0x690 [ 3423.133517] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3423.134510] ? wait_for_completion+0x270/0x270 [ 3423.135458] __x64_sys_openat+0x13f/0x1f0 [ 3423.136311] ? __ia32_sys_open+0x1c0/0x1c0 [ 3423.137182] ? ksys_write+0x1a9/0x260 [ 3423.137977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3423.139051] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3423.140108] do_syscall_64+0x33/0x40 [ 3423.140893] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3423.141938] RIP: 0033:0x7f2947304b19 [ 3423.142703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3423.146445] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3423.148002] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3423.149459] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3423.150913] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3423.152366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3423.153835] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:30:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:30:16 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 74) 03:30:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3423.289939] FAULT_INJECTION: forcing a failure. [ 3423.289939] name failslab, interval 1, probability 0, space 0, times 0 [ 3423.292470] CPU: 0 PID: 27055 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3423.293900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3423.295585] Call Trace: [ 3423.296135] dump_stack+0x107/0x167 [ 3423.296890] should_fail.cold+0x5/0xa [ 3423.297676] ? rfkill_fop_open+0x367/0x680 [ 3423.298542] should_failslab+0x5/0x20 [ 3423.299326] kmem_cache_alloc_trace+0x55/0x360 [ 3423.300268] ? _raw_spin_unlock_irqrestore+0x38/0x40 03:30:16 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x20000000, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3423.301337] rfkill_fop_open+0x367/0x680 03:30:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652", 0x0, 0x2}) [ 3423.302309] ? rfkill_init_sw_state+0x150/0x150 [ 3423.303312] misc_open+0x375/0x4a0 [ 3423.304044] ? misc_devnode+0x130/0x130 [ 3423.304856] chrdev_open+0x268/0x6e0 [ 3423.305624] ? cdev_device_add+0x220/0x220 [ 3423.306513] ? security_file_open+0x20b/0x500 [ 3423.307432] do_dentry_open+0x4b7/0x1090 [ 3423.308263] ? cdev_device_add+0x220/0x220 [ 3423.309135] ? may_open+0x1e4/0x400 [ 3423.309884] path_openat+0x193d/0x26d0 [ 3423.310700] ? path_lookupat+0x860/0x860 [ 3423.311523] ? perf_trace_lock+0xac/0x490 [ 3423.312369] ? SOFTIRQ_verbose+0x10/0x10 [ 3423.313213] ? lock_acquire+0x197/0x490 [ 3423.314033] ? __lockdep_reset_lock+0x180/0x180 [ 3423.314981] do_filp_open+0x17e/0x3d0 [ 3423.315747] ? may_open_dev+0xf0/0xf0 [ 3423.316544] ? rwlock_bug.part.0+0x90/0x90 [ 3423.317428] ? _raw_spin_unlock+0x1a/0x30 [ 3423.318269] ? __alloc_fd+0x2a5/0x620 [ 3423.319064] do_sys_openat2+0x171/0x420 [ 3423.319874] ? build_open_flags+0x690/0x690 [ 3423.320744] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3423.321729] ? wait_for_completion+0x270/0x270 [ 3423.322677] __x64_sys_openat+0x13f/0x1f0 [ 3423.323515] ? __ia32_sys_open+0x1c0/0x1c0 [ 3423.324372] ? ksys_write+0x1a9/0x260 [ 3423.325178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3423.326247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3423.327293] do_syscall_64+0x33/0x40 [ 3423.328047] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3423.329089] RIP: 0033:0x7f6eaa02cb19 [ 3423.329854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3423.333587] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3423.335127] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3423.336562] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3423.338003] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3423.339436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3423.340881] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:30:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa3, 0x3, 0x3, 0x5, 0x0, 0xa, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x1, 0xd46}, 0x10, 0x0, 0x8, 0x8, 0x9, 0xed6, 0x3, 0x0, 0x3f, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) 03:30:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:30:16 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) gettid() r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) wait4(r1, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) [ 3438.633644] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 03:30:41 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) ptrace$getsig(0x420a, r0, 0x0, 0x0) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x39}) syz_open_procfs(r0, &(0x7f0000000040)='mounts\x00') 03:30:41 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x21000000, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:30:41 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0xd9, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000180)) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x7f, 0x4, 0x7f, 0x0, 0x4, 0x40010, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x4e}, 0x2490, 0x8, 0x7, 0x4, 0x10001, 0x2000000, 0x6, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x4, r0, 0xd) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x3, 0x6, 0x20, 0x2, 0x0, 0x6, 0x20000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x10170, 0x800, 0xffffffff, 0x2, 0x100, 0x5c4eb244, 0x5, 0x0, 0x9, 0x0, 0x6}, r1, 0xb, r3, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0x6, 0x0, 0x9, 0x0, 0x2169, 0x4142, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x1ff, 0x40}, 0x20c0, 0x0, 0x7, 0x2, 0xfffffffffffffffe, 0x4, 0x7, 0x0, 0x7, 0x0, 0x1}, r2, 0x0, r3, 0x1a) tkill(0x0, 0x0) tkill(r1, 0x2c) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000180)) 03:30:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652", 0x0, 0x3}) 03:30:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x2, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3448.749324] FAULT_INJECTION: forcing a failure. [ 3448.749324] name failslab, interval 1, probability 0, space 0, times 0 [ 3448.750600] CPU: 0 PID: 27347 Comm: syz-executor.7 Not tainted 5.10.161 #1 03:30:41 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 75) 03:30:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:30:41 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 69) [ 3448.751339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3448.752340] Call Trace: [ 3448.752638] dump_stack+0x107/0x167 [ 3448.753038] should_fail.cold+0x5/0xa [ 3448.753454] ? create_object.isra.0+0x3a/0xa20 [ 3448.753945] should_failslab+0x5/0x20 [ 3448.754358] kmem_cache_alloc+0x5b/0x360 [ 3448.754810] create_object.isra.0+0x3a/0xa20 [ 3448.755287] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3448.755846] kmem_cache_alloc_trace+0x151/0x360 [ 3448.756356] rfkill_fop_open+0x367/0x680 [ 3448.756799] ? rfkill_init_sw_state+0x150/0x150 [ 3448.757306] misc_open+0x375/0x4a0 [ 3448.757684] ? misc_devnode+0x130/0x130 [ 3448.758116] chrdev_open+0x268/0x6e0 [ 3448.758535] ? cdev_device_add+0x220/0x220 [ 3448.759000] ? security_file_open+0x20b/0x500 [ 3448.759484] do_dentry_open+0x4b7/0x1090 [ 3448.759925] ? cdev_device_add+0x220/0x220 [ 3448.760380] ? may_open+0x1e4/0x400 [ 3448.760781] path_openat+0x193d/0x26d0 [ 3448.761251] ? path_lookupat+0x860/0x860 [ 3448.761720] ? perf_trace_lock+0xac/0x490 [ 3448.762192] ? SOFTIRQ_verbose+0x10/0x10 [ 3448.762646] ? lock_acquire+0x197/0x490 [ 3448.763105] ? __lockdep_reset_lock+0x180/0x180 [ 3448.763629] do_filp_open+0x17e/0x3d0 [ 3448.764069] ? may_open_dev+0xf0/0xf0 [ 3448.764499] ? rwlock_bug.part.0+0x90/0x90 [ 3448.764996] ? _raw_spin_unlock+0x1a/0x30 [ 3448.765480] ? __alloc_fd+0x2a5/0x620 [ 3448.765921] do_sys_openat2+0x171/0x420 [ 3448.766386] ? build_open_flags+0x690/0x690 [ 3448.766872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3448.767439] ? wait_for_completion+0x270/0x270 [ 3448.767976] __x64_sys_openat+0x13f/0x1f0 [ 3448.768437] ? __ia32_sys_open+0x1c0/0x1c0 [ 3448.768919] ? ksys_write+0x1a9/0x260 [ 3448.769371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3448.769969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3448.770557] do_syscall_64+0x33/0x40 [ 3448.770990] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3448.771567] RIP: 0033:0x7f2947304b19 [ 3448.771976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3448.774058] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3448.774919] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3448.775696] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3448.776497] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3448.777319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3448.778125] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:30:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x3, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:30:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, &(0x7f0000000000)={0x0, 0x0, "be8652"}) [ 3448.829221] FAULT_INJECTION: forcing a failure. [ 3448.829221] name failslab, interval 1, probability 0, space 0, times 0 [ 3448.831733] CPU: 1 PID: 27352 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3448.833280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3448.835102] Call Trace: [ 3448.835685] dump_stack+0x107/0x167 [ 3448.836511] should_fail.cold+0x5/0xa [ 3448.837383] ? create_object.isra.0+0x3a/0xa20 [ 3448.838398] should_failslab+0x5/0x20 [ 3448.839240] kmem_cache_alloc+0x5b/0x360 [ 3448.840153] create_object.isra.0+0x3a/0xa20 [ 3448.841138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3448.842270] kmem_cache_alloc_trace+0x151/0x360 [ 3448.843303] rfkill_fop_open+0x367/0x680 [ 3448.844211] ? rfkill_init_sw_state+0x150/0x150 [ 3448.845254] misc_open+0x375/0x4a0 [ 3448.846040] ? misc_devnode+0x130/0x130 [ 3448.846918] chrdev_open+0x268/0x6e0 [ 3448.847741] ? cdev_device_add+0x220/0x220 [ 3448.848688] ? security_file_open+0x20b/0x500 [ 3448.849686] do_dentry_open+0x4b7/0x1090 [ 3448.850590] ? cdev_device_add+0x220/0x220 [ 3448.851541] ? may_open+0x1e4/0x400 [ 3448.852358] path_openat+0x193d/0x26d0 [ 3448.853250] ? path_lookupat+0x860/0x860 [ 3448.854160] ? perf_trace_lock+0xac/0x490 [ 3448.855081] ? SOFTIRQ_verbose+0x10/0x10 [ 3448.855972] ? lock_acquire+0x197/0x490 [ 3448.856854] ? __lockdep_reset_lock+0x180/0x180 [ 3448.857907] do_filp_open+0x17e/0x3d0 [ 3448.858743] ? may_open_dev+0xf0/0xf0 [ 3448.859603] ? rwlock_bug.part.0+0x90/0x90 [ 3448.860562] ? _raw_spin_unlock+0x1a/0x30 [ 3448.861481] ? __alloc_fd+0x2a5/0x620 [ 3448.862343] do_sys_openat2+0x171/0x420 [ 3448.863224] ? build_open_flags+0x690/0x690 [ 3448.864177] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3448.865252] ? wait_for_completion+0x270/0x270 [ 3448.866272] __x64_sys_openat+0x13f/0x1f0 [ 3448.867181] ? __ia32_sys_open+0x1c0/0x1c0 [ 3448.868115] ? ksys_write+0x1a9/0x260 [ 3448.868953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3448.870141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3448.871273] do_syscall_64+0x33/0x40 [ 3448.872090] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3448.873224] RIP: 0033:0x7f6eaa02cb19 [ 3448.874042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3448.878072] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3448.879749] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3448.881325] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3448.882870] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3448.884421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3448.885991] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:30:41 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 70) 03:30:41 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 76) 03:30:42 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x2b1401c0, 0x0, &(0x7f0000001400), 0x0, 0x0) 03:30:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652", 0x0, 0x5}) 03:30:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xc}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x6, 0x2, 0x56}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28, 0x1, 0x0, 0x9, 0x0, 0x0, 0xffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) getpgrp(r2) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x100000, &(0x7f0000000140)) [ 3449.037937] FAULT_INJECTION: forcing a failure. [ 3449.037937] name failslab, interval 1, probability 0, space 0, times 0 [ 3449.039193] CPU: 0 PID: 27556 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3449.039971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3449.040891] Call Trace: [ 3449.041203] dump_stack+0x107/0x167 [ 3449.041629] should_fail.cold+0x5/0xa [ 3449.042064] ? rfkill_fop_open+0x367/0x680 [ 3449.042543] should_failslab+0x5/0x20 [ 3449.042976] kmem_cache_alloc_trace+0x55/0x360 [ 3449.043487] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3449.044064] rfkill_fop_open+0x367/0x680 [ 3449.044525] ? rfkill_init_sw_state+0x150/0x150 [ 3449.045044] misc_open+0x375/0x4a0 [ 3449.045456] ? misc_devnode+0x130/0x130 [ 3449.045899] chrdev_open+0x268/0x6e0 [ 3449.046318] ? cdev_device_add+0x220/0x220 [ 3449.046808] ? security_file_open+0x20b/0x500 [ 3449.047313] do_dentry_open+0x4b7/0x1090 [ 3449.047773] ? cdev_device_add+0x220/0x220 [ 3449.048250] ? may_open+0x1e4/0x400 [ 3449.048673] path_openat+0x193d/0x26d0 [ 3449.049129] ? path_lookupat+0x860/0x860 [ 3449.049608] ? perf_trace_lock+0xac/0x490 [ 3449.050053] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3449.050607] ? __lockdep_reset_lock+0x180/0x180 [ 3449.051085] do_filp_open+0x17e/0x3d0 [ 3449.051467] ? may_open_dev+0xf0/0xf0 [ 3449.051862] ? rwlock_bug.part.0+0x90/0x90 [ 3449.052296] ? _raw_spin_unlock+0x1a/0x30 [ 3449.052712] ? __alloc_fd+0x2a5/0x620 [ 3449.053106] do_sys_openat2+0x171/0x420 [ 3449.053519] ? build_open_flags+0x690/0x690 [ 3449.053956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3449.054450] ? wait_for_completion+0x270/0x270 [ 3449.054915] __x64_sys_openat+0x13f/0x1f0 [ 3449.055333] ? __ia32_sys_open+0x1c0/0x1c0 [ 3449.055758] ? ksys_write+0x1a9/0x260 [ 3449.056148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3449.056673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3449.057203] do_syscall_64+0x33/0x40 [ 3449.057585] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3449.058122] RIP: 0033:0x7f2947304b19 [ 3449.058509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3449.060421] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3449.061201] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3449.061935] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3449.062693] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3449.063437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3449.064185] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 [ 3449.074468] FAULT_INJECTION: forcing a failure. [ 3449.074468] name failslab, interval 1, probability 0, space 0, times 0 [ 3449.077208] CPU: 1 PID: 27567 Comm: syz-executor.2 Not tainted 5.10.161 #1 [ 3449.078693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3449.080465] Call Trace: [ 3449.081037] dump_stack+0x107/0x167 [ 3449.081836] should_fail.cold+0x5/0xa [ 3449.082664] ? rfkill_fop_open+0x367/0x680 [ 3449.083580] should_failslab+0x5/0x20 [ 3449.084403] kmem_cache_alloc_trace+0x55/0x360 [ 3449.085410] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3449.086509] rfkill_fop_open+0x367/0x680 [ 3449.087397] ? rfkill_init_sw_state+0x150/0x150 [ 3449.088431] misc_open+0x375/0x4a0 [ 3449.089208] ? misc_devnode+0x130/0x130 [ 3449.090061] chrdev_open+0x268/0x6e0 [ 3449.090863] ? cdev_device_add+0x220/0x220 [ 3449.091785] ? security_file_open+0x20b/0x500 [ 3449.092753] do_dentry_open+0x4b7/0x1090 [ 3449.093647] ? cdev_device_add+0x220/0x220 [ 3449.094560] ? may_open+0x1e4/0x400 [ 3449.095351] path_openat+0x193d/0x26d0 [ 3449.096208] ? path_lookupat+0x860/0x860 [ 3449.097080] ? perf_trace_lock+0xac/0x490 [ 3449.097981] ? SOFTIRQ_verbose+0x10/0x10 [ 3449.098849] ? lock_acquire+0x197/0x490 [ 3449.099706] ? __lockdep_reset_lock+0x180/0x180 [ 3449.100719] do_filp_open+0x17e/0x3d0 [ 3449.101550] ? may_open_dev+0xf0/0xf0 [ 3449.102446] ? rwlock_bug.part.0+0x90/0x90 [ 3449.103618] ? _raw_spin_unlock+0x1a/0x30 [ 3449.104754] ? __alloc_fd+0x2a5/0x620 [ 3449.105843] do_sys_openat2+0x171/0x420 [ 3449.106939] ? build_open_flags+0x690/0x690 [ 3449.108091] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3449.109151] ? wait_for_completion+0x270/0x270 [ 3449.110173] __x64_sys_openat+0x13f/0x1f0 [ 3449.111100] ? __ia32_sys_open+0x1c0/0x1c0 [ 3449.112019] ? ksys_write+0x1a9/0x260 [ 3449.112865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3449.114040] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3449.115186] do_syscall_64+0x33/0x40 [ 3449.115986] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3449.117115] RIP: 0033:0x7f6eaa02cb19 [ 3449.117930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3449.121938] RSP: 002b:00007f6ea75a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3449.123597] RAX: ffffffffffffffda RBX: 00007f6eaa13ff60 RCX: 00007f6eaa02cb19 [ 3449.125176] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3449.126723] RBP: 00007f6ea75a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3449.128293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3449.129855] R13: 00007ffcba45924f R14: 00007f6ea75a2300 R15: 0000000000022000 03:30:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:30:42 executing program 4: r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000040)=""/83, 0x53}], 0x2}}, {{&(0x7f0000000100), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/239, 0xef}, {&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000480)=""/53, 0x35}, {&(0x7f00000004c0)=""/53, 0x35}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000680)=""/226, 0xe2}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x3, 0x2000, &(0x7f00000009c0)={0x0, 0x3938700}) syz_open_procfs(r1, &(0x7f0000000a00)='sched\x00') ptrace$getsig(0x420a, r0, 0x0, 0x0) 03:30:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x4, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) 03:30:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000000)={0x0, 0x0, "be8652"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:30:42 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) (fail_nth: 71) 03:30:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@getpolicy={0x5c, 0x15, 0x1, 0x5, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@mark={0xc}]}, 0x5c}}, 0x0) [ 3449.219124] FAULT_INJECTION: forcing a failure. [ 3449.219124] name failslab, interval 1, probability 0, space 0, times 0 [ 3449.220531] CPU: 0 PID: 27585 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 3449.221472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3449.222381] Call Trace: [ 3449.222745] dump_stack+0x107/0x167 [ 3449.223231] should_fail.cold+0x5/0xa [ 3449.223738] ? create_object.isra.0+0x3a/0xa20 [ 3449.224346] should_failslab+0x5/0x20 [ 3449.224851] kmem_cache_alloc+0x5b/0x360 [ 3449.225401] create_object.isra.0+0x3a/0xa20 [ 3449.225981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3449.226657] kmem_cache_alloc_trace+0x151/0x360 [ 3449.227283] rfkill_fop_open+0x367/0x680 [ 3449.227831] ? rfkill_init_sw_state+0x150/0x150 [ 3449.228329] misc_open+0x375/0x4a0 [ 3449.228685] ? misc_devnode+0x130/0x130 [ 3449.229111] chrdev_open+0x268/0x6e0 [ 3449.229509] ? cdev_device_add+0x220/0x220 [ 3449.229971] ? security_file_open+0x20b/0x500 [ 3449.230420] do_dentry_open+0x4b7/0x1090 [ 3449.230832] ? cdev_device_add+0x220/0x220 [ 3449.231256] ? may_open+0x1e4/0x400 [ 3449.231627] path_openat+0x193d/0x26d0 [ 3449.232033] ? path_lookupat+0x860/0x860 [ 3449.232440] ? perf_trace_lock+0xac/0x490 [ 3449.232856] ? SOFTIRQ_verbose+0x10/0x10 [ 3449.233275] ? lock_acquire+0x197/0x490 [ 3449.233707] ? __lockdep_reset_lock+0x180/0x180 [ 3449.234186] do_filp_open+0x17e/0x3d0 [ 3449.234569] ? may_open_dev+0xf0/0xf0 [ 3449.234995] ? rwlock_bug.part.0+0x90/0x90 [ 3449.235435] ? _raw_spin_unlock+0x1a/0x30 [ 3449.235853] ? __alloc_fd+0x2a5/0x620 [ 3449.236280] do_sys_openat2+0x171/0x420 [ 3449.236689] ? build_open_flags+0x690/0x690 [ 3449.237166] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3449.237654] ? wait_for_completion+0x270/0x270 [ 3449.238155] __x64_sys_openat+0x13f/0x1f0 [ 3449.238600] ? __ia32_sys_open+0x1c0/0x1c0 [ 3449.239043] ? ksys_write+0x1a9/0x260 [ 3449.239445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3449.240014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3449.240571] do_syscall_64+0x33/0x40 [ 3449.240965] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3449.241502] RIP: 0033:0x7f2947304b19 [ 3449.241899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3449.243868] RSP: 002b:00007f294487a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3449.244673] RAX: ffffffffffffffda RBX: 00007f2947417f60 RCX: 00007f2947304b19 [ 3449.245431] RDX: 0000000000000140 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 3449.246184] RBP: 00007f294487a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3449.246996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3449.247798] R13: 00007ffec047a63f R14: 00007f294487a300 R15: 0000000000022000 03:30:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, &(0x7f0000000000)={0x0, 0x0, "be8652"}) 03:30:42 executing program 3: stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x30000000, 0x0, &(0x7f0000001400), 0x0, 0x0) [ 3466.553386] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 3474.814798] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88801d000d20 (size 40): comm "kworker/u4:6", pid 8425, jiffies 4297988211 (age 154.000s) hex dump (first 32 bytes): a1 02 00 1d 80 88 ff ff 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 61 06 00 00 01 00 00 00 ........a....... backtrace: [<00000000bc8c0f39>] __es_insert_extent+0x3a9/0x12f0 [<00000000e47b464e>] __es_remove_extent+0x4a9/0x15d0 [<00000000650c9d1f>] ext4_es_insert_extent+0x230/0xbb0 [<00000000839ace9e>] ext4_map_blocks+0x8e1/0x1970 [<00000000e2e917e8>] ext4_convert_unwritten_extents+0x295/0x580 [<0000000087656704>] ext4_convert_unwritten_io_end_vec+0x122/0x270 [<0000000034201a1e>] ext4_end_io_rsv_work+0x288/0x5d0 [<000000006b876cd2>] process_one_work+0x9a9/0x1590 [<00000000035ece04>] worker_thread+0x61d/0x1310 [<000000000bc43bf9>] kthread+0x38f/0x470 [<00000000b0f86567>] ret_from_fork+0x22/0x30 BUG: leak checking failed VM DIAGNOSIS: 03:31:09 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81347441 RDX=ffffffff84e322c0 RSI=ffffffff81347459 RDI=0000000000000007 RBP=0000000000000003 RSP=ffffffff84e07e10 R8 =0000000000000000 R9 =ffff88806ce2ea83 R10=7ffffffffffffffd R11=0000000000000001 R12=ffff88806ce2f48c R13=00000329317ef3a4 R14=000000000001b38d R15=dffffc0000000000 RIP=ffffffff81402f10 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdb08b2f88 CR3=0000000019114000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=3a29303420657a697328203032643030 XMM03=3532343820646970202c22363a34752f XMM04=2e2e2e2e2e2e2e2e2e2e202030302030 XMM05=20303020666620666620383820303820 XMM06=3a297365747962203233207473726966 XMM07=30302e34353120656761282031313238 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e219f0 RBX=ffff88800852b300 RCX=ffffffff83e0973c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e21db3 RBP=ffffed10010a5660 RSP=ffff88800856fe78 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85670b08 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e219fe RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f44acd3b000 CR3=000000000ce6c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000413f512800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000