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", 0x1000}, {&(0x7f00000079c0)="20432a9724e1c04033fb97ba4653bb972525a55afacf0a90082a06bd6929213130", 0x21}, {&(0x7f0000007a00)="21cb7739500684d504ae2d65978105cbcea7a0a1fc96ba2fd6b68396f65000fe6bf4ad610bf0ac3b6a47dad2ba8a15e1bc6312ec169ed948ba9ffed723849bed5264c22eebde60c2a79120556c6f977ce78bb2fcc166da7008965dcd8e9d003334ef2c824381c9e961dcb51c193d3450707af19d1bcc0ad7f02cb7737f587fb2c7c9d4b3e1bd14f26bbefc15e8ec7db3a117a82f3625677f39de82d12cb632e0ae04e5876eab45a4419eb12862e85a1adf008ad2c606e614712aed4453d0b5e139a40bfe1403957d24ad311d87563f0764daae7a3206739cd48da7674a9450185c9ba16e8e0fe65857a8f9aa5a86", 0xee}, {&(0x7f0000007b00)="2ecd3b2db05e6afd09096b3db9e70fc2decbe2d20f67ebf8b5fcfaddb99b4b0970cfe4683c030999a7efefb5f619d46de593567e294b0c196fa038f5bacc4b17cba6f8e6124142c6cb2bd4fa5eb9de081b88aa07fbb7d3b4d897b449095f093ebaa98edcc22b64f112043377f6b9c3daee759f7c80b3ca1025237010c1a760d59d4e5a9c203541f808d8a77af87ad4ceb975126e3fd3b8cda5fda1702469fd652bb0086d8ebb19a986950d", 0xab}, {&(0x7f0000007bc0)="d7693490da39b50c7ccbb1af931ca884d1aa301f5085915edae1428ee94c68e40b609fc67307fa3ad10d7aa849e78332214721445581f2aa3cc4ce990f813c219ed33ff39b22a819cd5dfe09250a692db690c2aa0d00b73444", 0x59}, {&(0x7f0000007c40)="1e0ee5e1a69c40e89e3a65021dcf849c2108b7bfd4586d687aa8139a926495adc5d5159710cdc0b4d6a76c085d8534936f57ebc479769a1817970d401d5d2991c07c1f51f02dd70bd9f37ecd8895826251fa9fb9b3ae13ac91d50eb820fcd60ac8d942f880d4b5f3f994619830131e789cb47cc1876b7b8f713636b08a80", 0x7e}], 0xa, &(0x7f0000007d80)=[{0xe8, 0x101, 0x1c4605b2, "db923190da3738e0a68bb147878e57cc7c21260b12bc6128599be7cd5163abcadc017cac2240621b30524114251513297e3d311ddcb9c1d6b262d14e7abfb7975fa82680b95486513ce24012d12bfec4ee27a26635f9ea1bd5251296e416fac1e381fbfeefc2b67b6e2ac1892752abe0d035dc3d49dbba754a18b8465b75e3df80e1076900c1a62713aea5207a7447bdc8f0f2be99f978636b7c7e3e91bf4095b2341c141dfbea7c3be7dc1a09ddeb2c9bde04a80420151808a7267d6598c557d4eb47afa1fd1efb12398a52e9ca919feda00a"}, {0x110, 0x112, 0x5, "d0e781758e01f0a49a5b35986a32d8020e2e93cd512f6dffd10d9b8142cafa21ccb0d38d5cd7ddfc7ae66d8c8b216bb4a8d5f1ea6fe353c18bad87681a3b67ef80c62a851450760bb6365e13324275affd53f83670fd2ed8baacd3f4de363a36998effd87db15610314f83068f73c8903ed9a1a155870efb64ab2114ca9ed0fb665e4b0c649b259a2442b4ceb08e9c8fcef82755d658f64655a8dfcd05f3035a74ecde610ff40bd9c6cfaa17213db871c8cc4aeb7561606c9b1aa8dff187eff007b07425dfe01abcb8ed6f287a568ed9a533703db3f03bde175d8ff6e767dbf452a647315e94e3c025095e5ac293f04476e2d128553e3d069a"}], 0x1f8}}, {{&(0x7f0000007f80)=@ethernet={0x1, @local}, 0x80, &(0x7f0000009640)=[{&(0x7f0000008000)="f9f49f923ccf5d4684bea5fd18855cc1a57a41c83ef6f0666c7265195747c7c98616681bdc9ea0f38be149cf257e8aaee9d56e643b1521a4ce06a275ab9e1df7ff5360bb3f89171171b75a082205e90669054b97f6444560ee4bb1d0b9bddb78be4af0e2837f5fcaf6505b9fbfebd234566a7c98dea71846a32270697cd98d68b48615f2a8a3226b4d1c8c695ec8c5c37f360c1005325b5878904ba44a953974269897bc05e3181c8298a50aba1ad0cabe3c971e24d7d8d4171aef4d0340fbb39d4edc2c7a0bf04cdd17a917aa1fc9fcf0e2cb83543e7417715aa13260ff696ca908d9e6b6499347ac", 0xe9}, {&(0x7f0000008100)="900c190a2ed8de4fb9d0a57271257d4cd1eafb6550b53f6d1901b776181fb3b4f1c32f6b557672dd23fb0ff3f8b8daba1a1470d8fc8c575cd11be11d024a760d1e785ddfd22d3de6817463f8c77729f871229d85c12360c14d05a6c0916e108424283097ee7ff49db5f06010e25938cf9724f68ea0c53be302281c486e1cdf7f21e92bda4acce671244d798097a624e9fc96c9ceaf3cd809240012cdee78145bd9602c4ff3620e7d0de40a11eb1347127eae3ed17ab5941f4248a80a56cc88811547c4112fd36b8c9a3b1e4fb511977e876c71e0fc0ebf9eae979f6812f1bb90a38b4e", 0xe3}, {&(0x7f0000008200)="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", 0x1000}, {&(0x7f0000009200)="6da76dd0292086cc904f84ecf8df043695f0084d20188640be02bfe5e70910a8fea799a53ff5a7d94689107770a38e4c432a55", 0x33}, {&(0x7f0000009240)="a25cfd0a23d90125681d7b2e7fe5d00bea55e40e8faefa8c1c1fb2cfc3bdb5b664aaba8e42336c222c7c4fb59074c0303054aede02b14c45fb38a9c64bebfa695c6c04a0c7ed1e2abbead4c786445495bc7713ba7fd831e959895bd502e3b89e5c002b7dd7a6365360eb036a5d8d45861c17e97fe337b24bc6d8179cfca5cdf43b3d45235f9c733f46fdb1fa", 0x8c}, {&(0x7f0000009300)="e66b3944bfa0eb1b5610b99db9103806ca3b09b6370c2c802a344b1b9aaf0a5e39229b5d6d862ee3db545ebfc204a11e898b5c563337d995d5c9c1e34777b67f4312fab3a5ddbbe90f6b8c4dd4c87e10f18931c8d04eb3b4c30d4cacf83df67a44c85f4d02aad40d03db47557f556963b44239c6b6eb38527f25e293f9e22b9ab73c1e79b0cb87d86d8eea39f1bda6b22be26ee8dc7ae48fdc1395527aebcb9b717135cad8272f60d06041", 0xab}, {&(0x7f00000093c0)="1032dd7b8e29ca795cb82bdbbae5a752bbb6f3bd1ceedc0be8b91240891fc7c1015e9a2c80cc5ff41661fe20dcb7c65bafe9c7d12f2606d819b18aaf4bf2fbf8d590c4fa9cc28dea66149143255814de401bf8a4deda26de9085d913f6574481496a2ca452f559da2b7746552e44b344e9da316c2fb0fcd08d7b3b319466c742ab69a7b4391e5ded4fe827eec061cb46d7e62e0bbaba4f2290859d80720ae26d0beee1140b0ea03b8f5c87c38ca92f3ae91fdca8049986518dcb5df8858b2e2116d487ae4b36a41afa098d3ca910e7c6fe6f3c400534bb0ab097fa68eac018fb1ba7de72f0abc2d753f36ea0fc", 0xed}, {&(0x7f00000094c0)="e6c639f872be6dc972c39413a9865ac80be422b12f3789bd0e3871795fe8efc42d06d9b6c1173941eaff46771fe53a688148584fba2711b60c0d212fbbb89ead920c49ef108f5c0eeea27e1ed3ab7b8310664d718cbd683a443cdd06ff008270b806c019a97bc43f37ac10c9edeba400d9aa7765a97fa114fdbb40c4e8bedd88d6de26a4b80d75310b15d0cfb1034797fc88363198ad87a306e1db2735ffc354883185be9db902949f9baf00055c5e7014cb216c51de19ec95d0cb9a326cc46c18f2", 0xc2}, {&(0x7f00000095c0)="cbae8c56e56d416146b96840b35ae55e3ca5b2d2b800a8131f3a38804ff6230bb8bdd3fed55eebfb6c1489e587fb9896396c95a08661bb4c3138ce7b5fb9d82696897dc1635efbeed05a26d2d7506ac0430c207d36d1e0bf", 0x58}], 0x9, &(0x7f0000009700)=[{0x28, 0x10f, 0x9, "13b8cede3e5928e149137d780371946925"}, {0xd8, 0x10d, 0x5, "6bf2988e7a9c0b69ad754460beefb7d8ed09409dcbb614704d96471f82d7833b64e4979b159c1e5c1eee93a395814e4273f520f76288caaf943e5fb6cc679354858b8acd10fbc9e3af80dee7700aa77118018b930a35ac87775ff781c45965589e86a0549090261931f799e44d2c21812ba468a930dfd4581a3b9f8b0d70004678bdaa716fe3c2f277ed0ed64597ac0fb2a6da039c3a9b86148ba342711f8a955a0c332e0de9940fda62e6a22704304169a50dbc26c41f4cc7b2ec6f1493b552e65bfd1b3d06d3c5"}, {0x28, 0x84, 0xfffffff7, "d94927eaa41e0b4345ae7f5503479499ebdb2e566ceec2da"}, {0xd0, 0x3a, 0x80000000, "c9b6a43cc964224e483982b4098ed20fe92214e30de1ab75228b43468bfd1b989e106f5b0b99b6627545b67c0432df5f9acb16a22b413407bbc522f3d00c8ffb074ce21c997d4c43657bb5df203edaa7b0eafdc0a70f1c22bb663b9898ee3fb782815c13eb30601b36cd26f02e1128095703fb705dce35e523c0d8cbdd329790279ca2af9fa466d59d466bdb15b9faccbffc1a154903721980e88dba65b134cb81d0ffc3ecfdea4fb984e3b2efd46bec9fcdac882b78a3b7381cfe13"}, {0x38, 0xff, 0x4, "e6a2e943fd45a86b26ca7caa37c6b79180e4946bd3f1cde7d8393f8a9bb7361776cc91955327fd"}], 0x230}}, {{&(0x7f0000009940)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}}}, 0x80, &(0x7f000000ab40)=[{&(0x7f00000099c0)="325c0377a5826634b2d5129f015e1c58f2d8c333389c22ed05e3c55eda45a60afee391c9bb69ed49484667e4c0775000f92c85e58daeffca1234faa864f7c6bcd1", 0x41}, {&(0x7f0000009a40)="08400dc4bbe4269957ee4a1af334527149075874e07a51f4ae1630464521f3a8499267633d9d83a961fe5cd1e2b197c79f0b725bca617b17", 0x38}, {&(0x7f0000009a80)="e734f7a45b67ba1077bc2581f364ffc42d4c84defb56bebd52a4a5304e518a6c1337444967ce8daca675883f7ee4b849c3d32892c65d51164460b0a9cab02d9872fdcdc4867e376f57c438e2109cbc02c8be172b28389edd28743b80921bd98dc96a2e4c2e735683347175e59010dbcaaf9e577a4ea0e3b2e960413d0e4edf65afecb68da099ddc4e24ed0d49d28743c7cf0b1b107be3a1b510fe02c7e8dc3394122f0d17cd78578894653a08e147f", 0xaf}, {&(0x7f0000009b40)="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", 0x1000}], 0x4, &(0x7f000000ab80)=[{0x18, 0x0, 0x3f, "30a140f218"}, {0x18, 0x13, 0x1ff, "c63ae9613d"}, {0x88, 0x107, 0x0, "8a965a1323a21cf225fb885ec2fc785db8b9aa90bf81bcaa8f36dd192c1e3ef80f68bb8c17aada27f306b13e26c778d0ff67d983cffdadccded43f94f3068798d1f1ead885156fd114291cfe4f90bbc4e3201d90d483df1adfc88757b1a415de17d3c3cea2a9baa77a6cb3db2799b8126c4a9a64f5"}, {0x40, 0x117, 0x7, "c73e0d5699b8788a8b66da51af23397a6ab605a24a1a039b0e8f080556486f81e62a3e436489d36f517a"}, {0x30, 0x88, 0x4, "63dc446e3ee24a2934865df032b9433d0b2f30c4c644adc95c143889c5"}, {0xd8, 0x0, 0x2, "e8ee5a834ceef040f735c00d6681156fb4470ef470f5822cd84d1f49135b5dc31f3c8cb18277ec961ba433818578a6709f4cdbfb9622bf5a72ffa605d36e062dc2c6ffac5e94cc54451079f1789a0a72ade993fc68194b0400fdd83c092da72622c091a886bcbef31ec872468d4aedb995866300edd7cfff3dd81132608c76e59133fe62a353df179b5dcff6f2bfe6525e09e25b868ad65784f5d450f1d3def4c012cc8a60a55791be1f050e5ee8243b81f423b85030b64978471cc6905140a26bd875776403b0"}, {0x1010, 0x112, 0x400, "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"}], 0x1210}}], 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004e80)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)=""/93, 0x5d}], 0x1, &(0x7f0000000140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000001c0), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f00000012c0)=""/223, 0xdf}, {&(0x7f00000013c0)=""/26, 0x1a}, {&(0x7f0000001400)=""/1, 0x1}, {&(0x7f0000001440)=""/186, 0xba}, {&(0x7f0000001500)=""/15, 0xf}, {&(0x7f0000001540)=""/62, 0x3e}, {&(0x7f0000001580)=""/61, 0x3d}], 0x9, &(0x7f0000001680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001780)=""/20, 0x14}, {&(0x7f00000017c0)=""/242, 0xf2}, {&(0x7f00000018c0)=""/232, 0xe8}, {&(0x7f00000019c0)=""/251, 0xfb}], 0x4, &(0x7f0000001b00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001b80), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001c00)=""/106, 0x6a}, {&(0x7f0000001c80)=""/157, 0x9d}, {&(0x7f0000001d40)=""/201, 0xc9}, {&(0x7f0000001e40)=""/107, 0x6b}, {&(0x7f0000001ec0)=""/199, 0xc7}], 0x5, &(0x7f0000002040)}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002080)=""/142, 0x8e}, {&(0x7f0000002140)=""/28, 0x1c}, {&(0x7f0000002180)=""/235, 0xeb}, {&(0x7f0000002280)=""/116, 0x74}, {&(0x7f0000002300)=""/113, 0x71}], 0x5, &(0x7f0000002400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002480), 0x6e, &(0x7f0000003600)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/196, 0xc4}], 0x2, &(0x7f0000003640)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003740)=""/247, 0xf7}, {&(0x7f0000003840)=""/162, 0xa2}, {&(0x7f0000003900)=""/116, 0x74}], 0x3, &(0x7f00000039c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000003b00)=""/92, 0x5c}], 0x1, &(0x7f0000005140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000003d00)=@abs, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000003d80)=""/4096, 0x1000}], 0x1, &(0x7f0000004dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x9, 0x1, &(0x7f00000050c0)={0x0, 0x3938700}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000005100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) 14:13:59 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x14031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_enter(r3, 0x6c3c, 0xb5bd, 0x2, &(0x7f0000000300)={[0xa60]}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x4, 0x1000, 0x1, {0x0, r7}}, 0xce) syz_io_uring_submit(r2, r5, &(0x7f00000014c0)=@IORING_OP_WRITEV={0x2, 0x6, 0x2000, @fd=r6, 0x9, &(0x7f0000001480)=[{&(0x7f0000000340)="43babc92b29749baac7039f1f935fa853bd0b47f991aeee000b8fc1aa46506e63577015af808a5541625bdc82af02ed5ab68cfcb5caddc3f363798e9f3b4f2c67ba493fc72ba0b67e2807e5227030607eacc48db2634d00d4de39ec6c5786ce42b926f710092817c8cd7b4afa1c87234af500e2ad47a0db9c12d73f51c7af2c0db9ed54855c923552254659ac3746160bf91a76e15c5689ab3cd6cb676fbd3d65cbbf23d13e444d4489b957938315ab532756193616f11c2434e878523adf99d6f", 0xc1}, {&(0x7f0000000440)="447ddd0af56cae", 0x7}, {&(0x7f0000000480)="9c7fc42af6d7ea7848162011b2105ddd69ebc00389ddafb713606a2768c5a7bce6083da6c60b7e1fe2ecddbb4eab705818898febe4d5a07c7a8ddf2d60d00717790a2ef97df1634aa8115ce7006414b56b328b4d92502ad20da274668cf6b854324d4bf29667e1995690ec8b389db0f5d20f2434e525221ab0f92ce705830b4ef0facecfdd1af079dbe45f7557c922b9a923b19ae2a1c092c38fb66af67f6c2088bfad50c2b49d9b2cae278c46940c803f512063a9726d68533d46bac154bb982b13afec62ac78001ae8b4fbc2ab5a13d63d327003cd1c70c37f09a484b8b456cf143353fb49900c4a04220ca5c4b21ae9fb2045633815d41c211625560f19f94073d4bc5458c8c1cfc078e79ff73cd63c8cdfac5b6930345ac0b1c7b587b8d0be2b0e1677df7084aec8e7250173fa55d0887d339f932ff58726b53c7401007a6d3a554bec81de2feb1e63bb4557dc4154c3478b4f5bb2ddbd75d16e090e3a2a492994642b788609198550f0b04a1cfcd1a0e165a53543b191ee794c0642b9d68f362079ff5d91c0ef5be0c43a2704bd1034b48a6290b13a338755996650ff1d3ee4f3661a7bbbaf73c348b2859be47207bd37afabbbbd43f043d3e45570853b56eab9f02f062049a88a74dfa3b409ae5ea7b842e9d4668467fc69324deaae611bc00a7a4b2a02ed7d1163a76b4a31213afaa6a3c4fbdc1188d6dbd6bc478c254e994b2f7037b3238ddd4e8a1a728a0cba1c11a904aa21ec16f115dd82636b9d36fc1d861a702e98ce0d8e1d7e2c838ca71ae701538bc3b458f7647c9e3aa5550a02fedec6010240b7ca753dc297aefa17dd816e5330febc39e08a126148b178c119ed3e623ad3faf3dd87847e66eba316092d1e41da309a6a84adb9b6570602050f47a7702454259e6fa9c8f7769ad15f1e21044f9fda0b4ecf884195413e7ec73f2d327cc5db594b906f55fd7b066a4fca3286b6444ec951e72ad4a93ef017c052afcd178c5414d3dccf0c810566584a7b1e9e155120d142d4717963af03f9a82d77965dd94e4268c772c1fc70a35784cc5aec1c0cbcc57c337b5a26d76bb9e1e84a6958629709c0b063216bc9c8cb766efcf5a1dda00760d49810dfd60ab61f690874567caa3bd5cbedd789dc7741db696c215437e1f218d7b212d6328252a0db6ee24be3980eb97b030a4051548e502b486117dcd51e61ceefcb4cdb91ef6deb99d6c61bf1ce7cb2c82a099e1eed05a0c549a7926e2ebba5a53d0c3737aacf241fa4fdb25ede6351a9ae2cb0add78b8242e63aa019db4c53ac1ecaf7f1080cb56a0d862ecfc529b28ace99728393410eca7d8e2ea398ce1dfe796438a55094e42f5dff3d4d674ea2d7db1fc53bc1b7a1b855035b3de6024d29d54e3bdcf58e6af51dfba712102c2399aca0676c142d5db7d9270e1382cabe60d811fc8de23c78337468d7bc2f89c4e600f50b4a73771998f62415a5874c9495b992f1041fb52f5f2bfbc1274992d4b33cc5e884695dd8acf248bd0112383ffd3bc2373e9202e5e4b84b56255e037c7f1e5d0854bd4c477f32de27f521e59452bf51cd76a2279b5ab999caff62fcb0580a3dd7e74b0b7f959e80e80808c092904a8e753c55e92226e0bad62b3c3b49c323698fc3dec5b6257230c167b7d5c7ce48e8d106b7d9896008e73de0d1a5c1916eb578f108e68e24bd3d85ea09a6b4c4ec174aea44ad2f4c2cb76129967656a27de050dbbb59c20371382fd8b8ecfb5b8e3326c840d0fe4929795780db55ac15214ce90c3b14af6f45bdd5b260e0b5652eeedfe534535b90349f02675f1239145e531866ddad6ffee9b8b6a10e16b4998f3fe5220ac627e7b082792a78641ca017bef84a4e9ad4ce747d1c926a1d034e16ebc8e12d96d56f0acb96ff69d9aa00f9ac658fc25e5dd200c5081ca1927fd6a6f5c9c135a597b0d7957631b5d149b6be881a99ed112491fc9739d15f3794c137e0478d07b514f3eb1a2a24ddd3ad6a1a2705b717be56447b189bc84414ed5c9a56ece264ba33987156c8cf2033d9d10e993c6056e222ea77e5bd5b429f958ddd4946685ff47f64ebd92f5367bc6edfcd8b3638efe57279f4be268fe43c1c93afb517faaae079670023970e3b0a95aa883ee0fd53c213e584c99232cd2f01cae0183df119f17ebdf5738c9bdc126a84fea1717227421dd81e62429b367c11b27896f968fbc1dcccfd27061eefb0ee8fb9557aa7daac7e7cea0bbf5f2cc68df2ef529aeed8b88ff2ca1b8f2dbf8db7b0ee7e57dd0f8a4eaf9718de19ca283a8312f53a48cc3b92d23bd88137a666787fccb1403c394e3e8dd5ed3afd7d49670249b08d394f1c70508dbdbe836334ead0861f65b1ebe061063ca81b3c5c1dd1e92c526597bafda20f8fd13dfacbc0940bbaa2aaa92fab396677984be9b5b5869923db10df88f23cdb8442e42057f3f79fcab4319174df8a1de5d3e23813fa4cb96d43c78b22120c5333caea63cb2eff3ffd3e79f6c06106ec97c28a4ee302d8de925a4597d7dd231bcdc1aa64d88fc06f80590a46d7a7153cfb7a5e954291d6579b498bb61f568f4a8f808cd9128d1f8f92c872b5c2bdc44d052dffbf0aeb0c7cc2e01dba78d9f6a7f5418c9bb4d9dcae3ed85fd6028828d5afa0cef00d75f2e69ece648c306a1b824e99803e2b043c98d72a5c17f53b397b8bf2798f4e5a0008bfb2d44b026035ee104e17b3629aea7ec141fadbd323ebe5cda95028a1678201bc4f009247c04f6bd2d3a88516071dca9591e128f617d0a2d497eedf8c4a963a018364e04fc65c10fbedc900bbfe6c44223d74fdf1ad833872be134457ecb42e801242384689d376380ff8bf0cc06467e172fadf497956876bcf932e77b98a9996e921ddb0f4fa77425f92ab82bdd4e678cfbb9b79f9c79a008a1ded036d1c9eb9c6c16a3b570c00152acdc551b170a4e2d1817b9b92cf8409b60f70162e21ce44aac31d963b25c5719c3b3ac9a09595bba2dd707d8bbe7a71887459cab5a4bcc77cca79c781451d483c3bab0278f9f18710418bce4e4339e59135b6ba3db6b52fd19358d9d20837a2911068403de9ba5d3959aef781dc1ff9d0ad4479ef8cd9d15b2fd3946315b5015dd710b658187180132c101d966fe684b1ec72ae508a2fc0cfdaae6388e90c7a55cf944604ca62ec41bf9d2f8d5431fe36eb47492201b5f5af77c41a61fd11f63141777842bc3b4ee5c42d18a890101f544c55ddddaa90b9470ab4ddec88e658a8c95eee0cc4453c41935089e95b71108e4947600856f8c288af438db6d54cdce5aa75e1fb0de752ea58364ac575f1d4f863e1bf9e6adde7aa5ca48ea7e5034ff319db9f156e1e0dbda0837e9c28bc88fcea1f3da17e28ef0039b54da0a78c3c1bec4ce98b252415d2c2a121ddbd4198a6d27e3cd9cf943a13c761e25e99d3b9716b4744dacc497da18655169e200d64a2501b534dbaab9a7af4d288ed28d161856b621d559ecbb23032325cbc38c555cf4de485a93eb63fe4a05d7b3818be8004ef1876ebe962591de7d0e99d0474fef3e51eee460d8914c08dc2fd647c658015e94de234a1c2f7ef8a4ae70647cbba4759e2dffa44788a4f770bed681462e3c7da635cfaa73f229b6f00ccad8e5c7e478855a98446c6c8a021e317e5fa575fda8e0546cd4c78363786a0f011ef470af0290261962a8dfa95229fbf1d3bad01ccb86fa223054c50e289a61de52f50d2e22191942aaf04082e9b517778146b1c1aa76ddc1288f6f7aa9cb3ae153ba8165909f0b90629deebd73dfdf92dddd36b666c242fac7eb266bc8f62f3b2e3a289c9e2817665a810f441be1c913b6491a9a0dc1abbe9e2764d78eb715d46689a5ad5df3617c21265477caafab3a2da8102917a505c7e9ac6c780706facbe72fe50b5bba9552da01833ed76c1a2f1d4a7060f5c255bd7016ac36e6f8443d98475352d5a633d6e0d731e27c31faefdbb48299157103af86bc48cb75f94a25d4e9913d03a88b3e729680ffc49d389b6b909b24ddbce5a74e73208873d50706b17f88d4a21d82847824227adfba102ee22e6784b68a1441dd17873bec23b484f2d5b014e21954c4cb4bf935a976692a5cb88f99b410f9d596feb459c7e243bd2e924f966620875320a4b7fa6ee2a698461178dc1ceeaebc7ed7cc8440e87c36e1fb1cbcf472bc39a89665cc3601d0ad9b53295a2a58197e484b5ce95c43cb9b9f8ec8d94bf1abc3a11d277872d381205d3a4b54621c9c13de62838091ecbd771e37227d40fb72a2c13d4da8ee152cd45912c6fbcfcff8421771eb9b9428c5fc3fe3949572ab07316839be4b740f7726cabe5fba19078b9db39bfa450591fdce7c311187676dcb979afaaa92c14dacdbb1cce9d02e8b1739c498386f6cc32718d2ab8fd976bc91567fefbf3954a3bb5ecd1970e7798030cca0a7a31b2f8e3a849badd2dd22e489c88965cc7ebcab0a35db11122dcb17e8ff48bd65a035b6314210249cf82f1ea94e31f378c677f950a352a49fe876ba8d5c2ab41830647df3b59cb6c08b7c430801654e711ebe3cda5ff1b207e833ee94fc8e6da48e5697d033a2a8814b73439ab46e88de369e63cb5cd24140635019b2c4531087d133adc4e4dadeafebf37dbcfea1bd200750717f8b4444fd894f83f63a8de799169f1d405b1e81bf5513d73652c326b5f78d6d3c8c354a8d92671e699568cd013d0299d3eda0605bbdbd8a83acb41803c4e4a0dc1b668c5a293c7d25a5340762a199bc0993fb96c8459ac3ddf13b47c70fcb76f24453431c75abdc7a116d1c169621a8d15396206c569dad5721a3d28a1f5d1a6e06391e36f84e26840074d231327806c0ef2f6c5e15d646566b95d9ad3a3d6e419cd2ab597aa504b5e7b1628bfcab8f001212eb793206093f05804d2ee7fa849cd5e3f44b87159084d518fc8a5d3262c1dd25a1d6ea0188b3504887934e04cfc23cfc2232356c7d1921a322e29628e210f9ff11e7a683e77ce3790b1af6c3da460b0653babcda922a2bd66e4160efccb851766101e20c0bbd9ed0e3b3cf187fcaebae37ebd9ad3d557e9e1010023b5908dc0b0e23d99402e20aa28035840093ba2117fbc4cdda49ae520f4798a5a19217ea5299099b24af1ff6d281a040c6c69062a6b28288159305f56326e36b3881732237f7d88f10a31de24b2b679a9598cf9c01f5ea855e193b1abd9e178fb14ad8da375aa5ae5619be2efb2f65027024d272ac093c7ca0fd802af3ce3919fd647714485284d037466b25c7609be09056ddcd2b93d2e2b246d5dfbd33685e6625092883c6d16e6b9f591e4ae56b37084ca89cfe37df9201ea77fc1dae27c8f43601d261891a515405bb5b252bf96a9f8985739e8f0a6e6111439797813b7f64b79fd2b1c6df26ffd2a39f7a478cffadca1cba138e4935d090f84bfc75721a66f8a36d842f835f2d47e1c4076c56be75f6a5db2d5b6183e346d7352b3a617931d578850fb7d7b83b8748401f2f4ee927212d6c3f4012492f1ad99dee7b983f6e0711bee45617a66f4be5c92c291e60d8650db87cb59a3fad7a4876af5c686a247986600c6da3a80fd1b5ff22c162fc309d664f669173d21b8bbef2265dd0fece89b8de09744ed7408eeebb62caddf490ffa8da6764c820bcb157c841ee06cd8971aa73fd97fa6090196879a23752b578d43b4246babf1f94efafdde08c17e33dc92bc7f94c5db5e858460dc5cae8653745d2e48dbb03bf6609fd6ccda11894e99fab985f07c11067a026d3d4c6793604019d7", 0x1000}], 0x3, 0x4, 0x0, {0x0, r7}}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:13:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:13:59 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:13:59 executing program 4: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(r0, 0x44) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:13:59 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x0, 0x7, 0x7f, 0x0, 0xa04f, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:13:59 executing program 6: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x1000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="38acd043dae33fa513d732f013bc0c5b6e91949487c5e652f2ebdd9b265dfb69104615b9a436c58593399a43defc07a9e50d4a36fef748179ceab54c63c6a79fd94031f50edd99af238381b1b9da4cbac8f602813f45b3534f005d8b9953cb", 0x5f}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000200)}], 0x3, 0x1, 0xb79d, 0x11) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x30, r1, 0x0) 14:13:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x440200) 14:13:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:13:59 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x7f, 0x1, 0xc0, 0x0, 0x7, 0x80a1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x4000, 0x2, 0x7, 0x4, 0x9, 0x3, 0x4, 0x0, 0x9, 0x0, 0x1d}, 0xffffffffffffffff, 0x3, r1, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x4010, r0, 0x8) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) fsetxattr$security_capability(r0, &(0x7f0000000700), &(0x7f0000000940)=@v2={0x2000000, [{0x1, 0x101}, {0x3, 0x80000000}]}, 0x14, 0x2) recvmmsg$unix(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/189, 0xbd}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/37, 0x25}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1c001a00867cd9ae5b70c10814", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}}, {{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x3, 0x41, &(0x7f00000008c0)) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2000001001020108000000000000000001000003060007400001000004000380246764d2fc36b8ca9ad001851bb0b95d45e7a661a21a2e9388adf82e2e40f1057b124283a865b57224551b87a35e60bf08ecd752baf893dca105269d74c657b6f3220ae66900e93e0f9cb5c9474a086a76607530ef8329eb1530cf2109e1de2bed26f3e3047f8efd163073a34ca0a59500fd27871b7f3dde24df2a520fdd6652bc"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x840) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r5, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x3f, 0x80, 0x2, 0x4, 0x0, 0xa2e, 0x10000, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x40220, 0xffffffffffffffc1, 0x1f, 0x2, 0x35, 0x8000, 0x5, 0x0, 0x4, 0x0, 0x8}, r3, 0x1, r5, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:14:00 executing program 2: r0 = syz_io_uring_setup(0x621f, &(0x7f0000000180)={0x0, 0x3ec5, 0x8, 0x0, 0x2c9}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) io_uring_enter(r1, 0x5acc, 0x979d, 0x0, &(0x7f0000000000)={[0x6]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) fstat(r2, &(0x7f0000000040)) 14:14:00 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/171) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x238503, 0x1) 14:14:00 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 14:14:00 executing program 7: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(r0, 0x44) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:00 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x7, 0x40, 0x20, 0x0, 0x8000, 0x10160, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x354f, 0x6db60298a0d97b66, @perf_bp={&(0x7f0000000000), 0xf}, 0x158, 0x4, 0x3, 0x0, 0xffffffffffffff7e, 0x1, 0x3ff, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x8, r0, 0x11) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:14:15 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 14:14:15 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(0xffffffffffffffff, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:15 executing program 6: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x16) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:14:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0xca, 0xfff}, {0x1, 0x2}]}, 0x14, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) r3 = fork() kcmp(0x0, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRESDEC=r6, @ANYRESOCT, @ANYBLOB="1a3d7839f65c98dc6d39cf", @ANYRES16=r7]) r8 = semget(0x2, 0x0, 0x20b) r9 = getuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r9, r6, r10, 0x0, 0x39}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r11, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=ANY=[@ANYBLOB="100000000000000001000000000000fb"], 0x10}}], 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="93d1264421e93f853da736a97282daaaf23c49312baa377d32dc4ab5eb24cdc7ca0d9f1eb1db259284ed58b576399fd4b4", 0x31}, {&(0x7f00000001c0)="3e7079a086c4b930ede9898f04162fe5c865e4d7b38dc85856de3c0c38c55bb59c4b096047a5e299cf0b39386e847a861cab03063eebe1fb8a996ae59fb1b2d3545750dc820421421b503f32b75254cde6a2203c739aa645c6bfd3d68043ca53f89a03bd355da1b4ddcd4a8ef193605fed66d110e43fd00f235e9dc0eb9c4788996ff9a638e4fc851cf50337da0e2a8555121310dc1507ac7de9d401fc273c8c40917c2dabc5ae30f2b4734d58", 0xad}], 0x2, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r6}}}, @rights={{0x18, 0x1, 0x1, [r11, r2]}}], 0x98, 0x2}, 0x4048080) 14:14:15 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:14:15 executing program 4: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(r0, 0x44) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:15 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x0, 0x7f, 0x0, 0xa04f, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:14:15 executing program 7: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(r0, 0x44) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) 14:14:15 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 14:14:15 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 14:14:15 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80620, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:14:15 executing program 2: r0 = syz_io_uring_setup(0x620b, &(0x7f0000000180)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:14:15 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 14:14:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 14:14:33 executing program 6: r0 = perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x37a1, 0x0, 0x2, 0x4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd_index=0x1, 0x3, &(0x7f0000000740)=[{&(0x7f0000000200)="d101e80547f7b25cc18b5c1054a6d3b64949d06ca9bea6d9e78895ac9e75571229923e69c0c8b0591dfa6b223aae04c5812c0b2ea39e0293a3550d3eecc6c7f4a3b41ab4629c48fed6400cbbf5943f61d6a4e3490a5b853028d13fe2f082c76c2abb45d67c20cddbe87c652b6dd3662f5c7466128031a01cdaf8d036106434d996c0a2fa9d08fd52d602c1eb87384697260ab1b0d6d09972c7f314c70dae03ce7dc473cf84353b4cbb611be9224df29759de9f84ea5c0ff0a891eeea1729ae3002620997d1558a8b61ae03f81ab2cffda1f551f141dc99cfbe015580b43f1d5bc62e9ac996944f6d4fd22af13880c364ad5f45c9db2a81641e", 0xf9}, {&(0x7f0000000300)="2044343fbce5353ff8160d4b06da9bc8feed3f059d412654021582567560eecdc7992a9d5c2f907cdffdb76ffe8d9dc839edc4380af0bca77596c5752d5dcdc9e7177f4b23afcd291853c16e75cf10bad469afbff0ea0bada3cf1280c896a3ea76bf6076a966ec028b909a38e132ede52b4d85a03a41165cdabd97aa0ba8a1ef119744167486453752c202add106d776b1de3f9b5da67fe47be5141d266c1b03bf0609b1e08053fc66c4e9ad8bc3e1452de48126f8ff3239d439107f976322e629d0b89adaa7c330c9da410dcb6e832247b141c6051ec05e727e078d554eec1221d5d89e559e", 0xe6}, {&(0x7f0000000080)="7affb41ff2f0743b6bd61512f5775ee2fa542a1398b08d8db7cf03b0d70dfe228c3dbee5795fb7bddfcb55578a32230aa9d7a1", 0x33}, {&(0x7f0000000500)="f34e6504746ceb4f3985e6c879985f5e649abf99911a93795ff201f437c56478328803b083d3aaac711195a967c2991dc29b566ae886317ba9349bf5ef4afb129a2fa36381c1d9f053a5552bd40b24a7f8904976a9c07ad296c1326982c177de8c5a835fae3378aad6258a16b5a576cadc9d165cc64380b5e9d65555a503df45c43c79d2e34f785ae181c4e4eb5e", 0x8e}, {&(0x7f00000000c0)="97ff67df55c3c95d58ecf5127ecaa5d2c8", 0x11}, {&(0x7f00000005c0)="e13ed5af5aa114f8fbfd8e90b98fff150e40ba43616af71c069ca494877c8bd787a7185e666fd0dd901739734a686cfea9064fd18accedc6a834b9fe223f3a54d985c5fb931e46108c2f81d3db7f4e29e2505bf85b317ce54fd36376e16b10ceb7612203789434384fe4ffa8a51d63a669bedd91161fb5877aeddf12a4b71a5fbfb45c10f4416e440af056b0b34b685de31873889b93fac7d1a0803e07d09527cebc7074c041e7fccae6c4", 0xab}, {&(0x7f0000000400)="a901c2e82df36927aba134f9f16e91bbe6d3d951f6b19478a1680f5f40187a1fbb6a9ff0201f6cea0044127240b2f31c61807610a9ce3c97c3cb7513991a2eec38c3cd5b25feb19344ac81011d9dd1f776114642c555eef225d6456cb0d11f4e958becf79baf6df14b20a09dec9f", 0x6e}, {&(0x7f0000000680)="749b54780d056317c923de125572c618e87d068c94447b8cf74aac1af97a54194d7ffc03b696747978898a79e6e2a36532530cbf9935a39ede73af15aaa4931928d0a58025d39c3f4854d3f6ab28223115ed78c094827f228a873cf6217e7ebcb8456578100b16d4d4796a611b7e7bcc2d5537123f0b496b81dcbb7de368824f1834f1169514d852e04030583d1ed325edb200df7b1e97e2c80258d912778be316ed1222b3d9", 0xa6}], 0x8, 0x10, 0x0, {0x1}}, 0xf9b) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0xa1, 0xc1, 0x6, 0x0, 0x20, 0x41020, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x7fffffff, 0x80000001}, 0x80, 0x9, 0x8, 0x6, 0xfffffffffffff800, 0x7, 0x6, 0x0, 0x7fffffff, 0x0, 0x9}, 0x0, 0x10, r0, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x8000000) r6 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000b00)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1, {0x0, r9}}, 0xffffffff) r10 = socket$packet(0x11, 0x3, 0x300) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000ac0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r11}}, 0x9000000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000980)={0x1, 0xffff, 0xffffffffffff8000}) syz_io_uring_setup(0x1a33, &(0x7f00000009c0)={0x0, 0x2392, 0x2, 0x1, 0x30c, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000900)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="b1d9ed002e2f66696c653000"]) accept$packet(r12, 0x0, &(0x7f0000000940)) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x3, 0x0, 0x2, 0x3, 0x0, 0x3, 0x2098, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x134, 0x42}, 0x1040, 0x9, 0x3, 0x7, 0x1ff, 0x3, 0x3, 0x0, 0xffffff7f, 0x0, 0x1}, 0x0, 0x10, r12, 0x0) 14:14:33 executing program 7: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:33 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x0, 0x7f, 0x0, 0xa04f, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:14:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0xb0442, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) dup(r0) 14:14:33 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(0xffffffffffffffff, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:33 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:33 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r4 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000040)="fce23d42757f87d05456a08c9c25285625676cdbb44e39862ec13e6df247719ba31d641cf79802c552d635ba451e379bb46e03926d06f842202e01f7c0286beff3186757c4e5bbc991e5bfe553e690e20b7c68df1c1764210d07cfcf7c58aa7cf49fe5906afcdf94be870d3c6fee018d561deba9bd7476c40fdd06ad3f1c4e221f8dcc2bc6fe0bd2612d", 0x8a, 0x400c0, 0x1, {0x0, r8}}, 0xbf6b) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r9, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) io_uring_enter(r9, 0x6791, 0x4500, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:14:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x171600, 0x98) 14:14:33 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0xa04f, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:14:33 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() r2 = fork() kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xad, 0xa3, 0x20, 0xed, 0x0, 0x5, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x8}, 0x50480, 0x4, 0xcda2, 0x4, 0x3, 0x80, 0xfff, 0x0, 0x10001, 0x0, 0x7}, r2, 0xc, r0, 0x8) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 14:14:33 executing program 0: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008bf000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x56ab9000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001080)=ANY=[@ANYBLOB="010000000100000018000000cf", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000080)={{r1}, 0x0, 0x8, @unused=[0x100000000, 0x2, 0x0, 0x1], @devid}) 14:14:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) sendfile(r1, r3, 0x0, 0x7f) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x7ff, @empty, 0x800}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="7996c1c644e6f5f7fd58f11302ac664bbab63d3923491795374afee57777d941a92e52a49ca7f43269f319f2c8245e07990df5e50d78250c45e2210c90456ba1e5523f476bc0b24d7397e2a3c39e85071f5590b197f04de30e97f48988f85c482e3257c734be335991cbed17a7a017195459b994918397ffc4d15339f7d168ec67234c60658b9a586ae4ddcaa91447c96b231709b159f8deb43d27ba5a", 0x9d}, {&(0x7f0000000200)="dab769d001516fbce8d37afdba2e2fb4a56be4d830818f5ebb7a6e4a9d1673ea873f2686d1a835c1352759f35343fdff654230daca66165992fca674c3b3af7fc0be78f527be22048c56ca24151d21124e5f2331d56d6ba3d53b10434b5ae156ce8aa5a5aa553519f5655576c9850e74bd2d72c043444a0e82fcccfab04096669032", 0x82}], 0x2, &(0x7f0000000440)=[@hoplimit={{0x14, 0x29, 0x34, 0x401}}, @dstopts={{0x28, 0x29, 0x37, {0x67, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3f}, r2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8000}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r4}}}, @hopopts={{0x128, 0x29, 0x36, {0x0, 0x21, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0xd5, [0x3, 0x7f, 0x1ff, 0x1ff]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x80, 0x11, "130c178b3b74996d0d521ebfe3a8d4072f"}, @generic={0x3, 0xbc, "1d77c6b7fa3628ca739bbfa9fcbcdf619adb07a8717a154ebd3bf7b495b6eab3cc95f8c236535d9a1803457d5d71141a32c476a249d58d47355533c74321c27d7079b4d6be8e88582297c3ce799675131e3565d1ba9565949e459caeec9f939b47f9bb176c315aed518bdaad6cbb84e0035c4758bbc62fca328308f20268a3cdc2e572342b246b59192fca08056f899796101ebb09f7cf09c8e668eda1ab9377a516e48da640ed430ba113911702b6e5f4d5bd85559d9d993f90d1bd"}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x6c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x84, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0xbd}, @calipso={0x7, 0x40, {0x0, 0xe, 0x80, 0xffff, [0x2, 0xffffffffffffff81, 0x1b1, 0x6, 0x4, 0xb8c, 0xc5]}}, @jumbo={0xc2, 0x4, 0x81}, @enc_lim={0x4, 0x1, 0x3f}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x29}}], 0x278}, 0xc000) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000700), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) 14:14:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) mmap(&(0x7f000016e000/0x3000)=nil, 0x3000, 0x3000004, 0x13, r2, 0x740ff000) fspick(r1, &(0x7f0000000080)='./file1\x00', 0x0) 14:14:34 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0xfffffffd}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:14:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xfffff000) 14:14:34 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:34 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x0, 0x7f, 0x0, 0xa04f, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:14:34 executing program 7: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:34 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x0, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:34 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='0\x00'/16]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x20010, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x54ad, 0xf65, 0x2, &(0x7f0000000000)={[0xffffffff]}, 0x8) 14:14:34 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xff, 0x5, 0x7d, 0x44, 0x0, 0x9, 0x801, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x82, 0x3, 0x81, 0x0, 0x8001, 0x3ff, 0x6, 0x0, 0x1fe0000, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x18) 14:14:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:14:49 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x0, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:49 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 1) 14:14:49 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 14:14:49 executing program 2: r0 = request_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='{:^}\\&\\\x00', 0xfffffffffffffffe) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x1962, 0x2, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000140)) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r2, &(0x7f0000000440)="11b2346f85eafbe6df826745f12756ea63a622ac71b7e867e431570c80c255213c50255c0990d6d6303ac206d7daf1f103aa4dd229a50e2b005beba99f581fa0bc5500988bbc6cf6afc65895c86a87a7f8bf2873a14699cf63972e212898098e88dd3d47574ce337a758cb85", 0x6c) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db44a5dc824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r4) add_key(&(0x7f00000003c0)='syzkaller\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r4) pread64(r3, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/38, 0x26, 0x0, &(0x7f0000000040)=""/180, 0xb4}, &(0x7f0000000240)=0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x110, r1, 0x8000000) 14:14:49 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:14:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x0, 0x0, 0xa04f, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:14:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRESDEC=r1, @ANYRESOCT, @ANYBLOB="1a3d7839f65c98dc6d39cf", @ANYRES16=r2]) r3 = semget(0x2, 0x0, 0x20b) r4 = getuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="1a3d7839f65c98dc6d39cf", @ANYRES16]) r6 = semget(0x2, 0x0, 0x20b) r7 = getuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r7, 0x0, r8, 0x0, 0x39}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0/file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r10, @ANYRESDEC=r9, @ANYRESOCT, @ANYBLOB="1a3d7839f65c98dc6d39cf", @ANYRES16=r10]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000005d40)={{0x0, 0x0, 0x0, r4, r10, 0x21, 0x6}, 0x8, 0xffc0000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}) bind$unix(0xffffffffffffffff, &(0x7f0000002680)=@abs={0x0, 0x0, 0x4e23}, 0x6e) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r4, r1, r5, 0x0, 0x39}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x6, 0x7, &(0x7f00000024c0)=[{&(0x7f00000000c0)="a7d92b53cc7ba06aca28016155d63704ac9bbce57e82ce0dfa0dce551ed355aeeba33fbe8c0fa837bb82d99ca2636a5e6c2adc23ce96aad0582ec040d735be1943957559ae9f925caed6bc0c2071ba0d70bc453922a2502ee2949472613fe3d1b33f1f1e9640537fa79acfec0df47f", 0x6f, 0x8}, {&(0x7f0000000140)="777cdceefee126a6ced670fb09086f926eca2b05edf2a968ffef68cbb6a469c133bd8fb7050d47aa6c82a5213afe64cbe493b9637dfa37a33b87ae9c7efa6cecb8fb09c705b1318cd61dbb46b4d7f9f97726fd7d9090c4f2ce3930aa8a99f83a5f9ac6fed89b1971b0f2f6b4349f1742dce25a46fb5a5d0118622f14d05a2c91f4621e0f1b1196711cb2ee793ef97d5011be47219c43550feded62d47e788d31d26f35c7b8233d11106aa928aa352072f5fa6224ce746c291fe36ee3d0f6f4c2c41092b3eda24744ae8eea582b09f062786031ca", 0xd4, 0x861}, {&(0x7f0000000240)="47e31e3e35ebb25822161800b190f83ca34e2be68add9fbce92fb10d2cf1878c80ca890999939938a1ea6f39a9a892da7e6b20775c6a1b4e085d5391ec9b81b17466ac474bc60e25cba5ba71f6138b20b69e6e7b63d079aaec054a0d9e33dd2c525b6a48d24beac997c5bfe3c89ac005cfa55c13e94af16c0afa481130026960", 0x80, 0x81c}, {&(0x7f00000002c0)="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", 0x1000, 0x2}, {&(0x7f00000012c0)="7862e82a6d9ecc02632963397e4ef76dae5df676e5935d1cf2180f1fdab2e874d123a6f8bf4eb25e6da37a1cf26e4b96612c84636f296cc0babb6db899a51b23ea4e122b399c0ecc4860031a78315eeafacd247620649f4627ac8f4b41283176c046f578579838f762fd8b24af5f052e37b76816524afab4a9e910e01b35bc5d06bfadc670133b998e401a20e47022b844979a4abb7307aea92bd97154e856bf3371adb9bd8c13eb1d0ed7f51b51ed153d4f3fda283666dc63a29156d70a3768145c6399b3cc740eb14ee5decae9916a301a81627b2fa494405f168b44", 0xdd, 0x6}, {&(0x7f00000013c0)="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", 0x1000, 0xc1}, {&(0x7f00000023c0)="d83da74ed3633e36540e2a5926c95699ab4725ad4debffc0e8a7e857622028f28301e90a001e54c7f19aec469b6bc0aa048e6bb2e08a38768c77c3e7f379be25624d58de8fce035d57b192c7c434bfaf7b2b18b710085e41307577338ac4f0a6894a11413e4819fa2b7f6210c0219bca656e45c9339b2de4061cda4fbbbfa3c91cc057acc9cb3c4d0af15a723bafec719fb6e859b39951a8bfe51be0cd7dddf9bf7d3bd48018d782745a860ffa08fc3627653e8e3d2d2afe75543cdc74f177903aece701118086eb3e71a9583738fdadb27b881b18397d10629bd58114d3464fb3c2d1", 0xe3, 0x1}], 0x14c00, &(0x7f0000002580)={[{@jqfmt_vfsv0}, {@barrier}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@noblock_validity}], [{@smackfstransmute={'smackfstransmute', 0x3d, '+/('}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0xe}}, {@fsname={'fsname', 0x3d, '{$..]\xc0-\''}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}'}}]}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) [ 2077.142057] FAULT_INJECTION: forcing a failure. [ 2077.142057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.143592] CPU: 0 PID: 15304 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2077.144466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.145516] Call Trace: [ 2077.145873] dump_stack+0x107/0x167 [ 2077.146338] should_fail.cold+0x5/0xa [ 2077.146839] _copy_from_user+0x2e/0x1b0 [ 2077.147349] io_uring_setup+0x9b/0x2980 [ 2077.147852] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2077.148458] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2077.149102] ? wait_for_completion_io+0x270/0x270 [ 2077.149716] ? rcu_read_lock_any_held+0x75/0xa0 [ 2077.150298] ? vfs_write+0x354/0xb10 [ 2077.150793] ? fput_many+0x2f/0x1a0 [ 2077.151261] ? ksys_write+0x1a9/0x260 [ 2077.151747] ? __ia32_sys_read+0xb0/0xb0 [ 2077.152269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2077.152946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.153602] do_syscall_64+0x33/0x40 [ 2077.154076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2077.154717] RIP: 0033:0x7f71612cbb19 [ 2077.155184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.157487] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2077.158437] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2077.159333] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2077.160225] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2077.161119] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2077.162079] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:14:49 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10543db11dc2e2f5f6ffffffffffff009ada2b0fb4628d1508486cd9c4663c2bfdb35e01f8715c749fc7948e3c95f289900885dd6b0c0000dec64e43a50e2d9ad53a2e28c39cb3ee275b9b371117050000008e6a7cf952a159d8746376f4b170145e8a6b14614f6f737d27ad2ca71f"], 0x10}}], 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x80010, r1, 0x8000000) syz_io_uring_setup(0x2a4, &(0x7f0000000500)={0x0, 0x7e21, 0x4, 0x1, 0x1f7, 0x0, r1}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400)=0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @dev}, &(0x7f00000005c0)=0x1c, 0x800) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000680)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x101, 0x4, 0x0, {0x0, r5}}, 0x4) r6 = perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x1, 0x0, 0x7f, 0xff, 0x0, 0x158, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f00000006c0), 0x1a}, 0x1, 0x7ff, 0x2, 0x4, 0x4, 0xcd9d, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffff32f}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) fcntl$setflags(r6, 0x2, 0x0) [ 2077.206515] FAULT_INJECTION: forcing a failure. [ 2077.206515] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.208330] CPU: 0 PID: 15302 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2077.209199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.210245] Call Trace: [ 2077.210586] dump_stack+0x107/0x167 [ 2077.211071] should_fail.cold+0x5/0xa [ 2077.211561] should_failslab+0x5/0x20 [ 2077.212050] kmem_cache_alloc_bulk+0x4b/0x320 [ 2077.212630] io_submit_sqes+0x6fe7/0x8610 [ 2077.213183] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2077.213817] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2077.214439] ? find_held_lock+0x2c/0x110 [ 2077.214966] ? io_submit_sqes+0x8610/0x8610 [ 2077.215522] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2077.216116] ? wait_for_completion_io+0x270/0x270 [ 2077.216735] ? rcu_read_lock_any_held+0x75/0xa0 [ 2077.217331] ? vfs_write+0x354/0xb10 [ 2077.217809] ? fput_many+0x2f/0x1a0 [ 2077.218276] ? ksys_write+0x1a9/0x260 [ 2077.218759] ? __ia32_sys_read+0xb0/0xb0 [ 2077.219283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2077.219970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.220633] do_syscall_64+0x33/0x40 [ 2077.221114] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2077.221741] RIP: 0033:0x7f25e7457b19 [ 2077.222214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.224551] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2077.225508] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2077.226429] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2077.227331] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2077.228229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2077.229144] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:14:49 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 2) 14:14:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:14:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x40001) fallocate(r1, 0x12, 0x4, 0xef1) mmap(&(0x7f00002f4000/0x2000)=nil, 0x2000, 0x1, 0x40010, r2, 0xb2e52000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r3, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) openat(r3, &(0x7f0000000100)='./file0\x00', 0x101400, 0x1cd) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=ANY=[@ANYBLOB="10000d70000000000000000000000008"], 0x10}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 14:14:49 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000), 0x800) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x40000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r3, 0x8000000) 14:14:49 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2077.423591] FAULT_INJECTION: forcing a failure. [ 2077.423591] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.426223] CPU: 1 PID: 15421 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2077.427706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.429472] Call Trace: [ 2077.430061] dump_stack+0x107/0x167 [ 2077.430838] should_fail.cold+0x5/0xa [ 2077.431649] ? io_uring_setup+0x258/0x2980 [ 2077.432608] should_failslab+0x5/0x20 [ 2077.433423] kmem_cache_alloc_trace+0x55/0x320 [ 2077.434399] io_uring_setup+0x258/0x2980 [ 2077.435284] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2077.436338] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2077.437417] ? wait_for_completion_io+0x270/0x270 [ 2077.438498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2077.439611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.440747] do_syscall_64+0x33/0x40 [ 2077.441583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2077.442668] RIP: 0033:0x7f71612cbb19 [ 2077.443458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.447420] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2077.449043] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2077.450591] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2077.452128] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2077.453640] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2077.455188] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2077.510492] FAULT_INJECTION: forcing a failure. [ 2077.510492] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.513414] CPU: 1 PID: 15417 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2077.514883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.516650] Call Trace: [ 2077.517213] dump_stack+0x107/0x167 [ 2077.517989] should_fail.cold+0x5/0xa [ 2077.518871] ? create_object.isra.0+0x3a/0xa30 [ 2077.519877] should_failslab+0x5/0x20 [ 2077.520705] kmem_cache_alloc+0x5b/0x310 [ 2077.521577] create_object.isra.0+0x3a/0xa30 [ 2077.522580] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2077.523670] kmem_cache_alloc_bulk+0x168/0x320 [ 2077.524663] io_submit_sqes+0x6fe7/0x8610 [ 2077.525570] ? __mutex_lock+0x4fe/0x10b0 [ 2077.526443] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2077.527502] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2077.528536] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2077.529491] ? _raw_spin_unlock_irq+0x27/0x30 [ 2077.530443] ? io_submit_sqes+0x8610/0x8610 [ 2077.531451] ? finish_task_switch+0x126/0x5d0 [ 2077.532400] ? finish_task_switch+0xef/0x5d0 [ 2077.533345] ? __switch_to+0x572/0xf70 [ 2077.534238] ? __switch_to_asm+0x3a/0x60 [ 2077.535100] ? __switch_to_asm+0x34/0x60 [ 2077.535966] ? __schedule+0x82c/0x1ea0 [ 2077.536895] ? io_schedule_timeout+0x140/0x140 [ 2077.537875] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2077.538897] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2077.540078] ? ksys_write+0x1a9/0x260 [ 2077.540923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2077.542106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.543220] do_syscall_64+0x33/0x40 [ 2077.544014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2077.545190] RIP: 0033:0x7f25e7457b19 [ 2077.545980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.550302] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2077.551946] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2077.553718] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2077.555311] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2077.556840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2077.558360] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:14:49 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x4010, r0, 0x0) syz_io_uring_setup(0x2331, &(0x7f0000000000)={0x0, 0x3a5f, 0x20, 0x1, 0x109, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r3, &(0x7f0000000240)=0x80, &(0x7f0000000280)=@sco={0x1f, @none}, 0x0, 0x800, 0x1}, 0x100) 14:15:04 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 3) 14:15:04 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x0, 0x0, 0xa04f, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:15:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 14:15:04 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x39e}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x374a, &(0x7f0000000200)={0x0, 0xd489, 0x1, 0x3, 0x37b}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0, 0x100010, r0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00009a6000/0x2000)=nil, 0x2000, 0x1000008, 0x2010, r0, 0x10000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r8, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001440)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2007, @fd=r8, 0x6, 0x0, 0x0, 0x16, 0x1, {0x2}}, 0xc812) syz_io_uring_submit(r1, r4, &(0x7f0000001400)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd_index=0x5, 0x7ff, &(0x7f00000013c0)=[{&(0x7f0000000300)="a75cbb04997c772b0e0417d9c947118f296f5b13c84cbb", 0x17}, {&(0x7f0000000340)="81dc4530fe42773661b90e126f792cc04dfd50cef3e6f4a970e931686a986c3534c6f7af29ab5461c5d8a4ec193a6e1d9ff569b6b267d5ffc865046fd932663170ddd9cf492cccfa687f371d617dd454b221f9568151075d4759957b1b7a8e90e4892248ecbe0a571900b60e75df0421", 0x70}, {&(0x7f00000003c0)="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", 0x1000}], 0x3, 0xc, 0x1}, 0x3f) io_uring_enter(r2, 0x7734, 0x3fb5, 0x1, &(0x7f0000001480)={[0x40]}, 0x8) syz_io_uring_setup(0x3f0c, &(0x7f0000000000)={0x0, 0x58fd, 0x0, 0x2, 0x3e6, 0x0, r0}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 14:15:04 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x0, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:15:04 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:04 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2092.629229] FAULT_INJECTION: forcing a failure. [ 2092.629229] name failslab, interval 1, probability 0, space 0, times 0 [ 2092.631748] CPU: 0 PID: 15658 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2092.633270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2092.635065] Call Trace: [ 2092.635649] dump_stack+0x107/0x167 [ 2092.636450] should_fail.cold+0x5/0xa [ 2092.637309] ? create_object.isra.0+0x3a/0xa30 [ 2092.638303] should_failslab+0x5/0x20 [ 2092.639127] kmem_cache_alloc+0x5b/0x310 [ 2092.640023] create_object.isra.0+0x3a/0xa30 [ 2092.640980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2092.642101] kmem_cache_alloc_trace+0x151/0x320 [ 2092.643125] io_uring_setup+0x258/0x2980 [ 2092.644029] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2092.645093] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2092.646191] ? wait_for_completion_io+0x270/0x270 [ 2092.647286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2092.648430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2092.649578] do_syscall_64+0x33/0x40 [ 2092.650396] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2092.651516] RIP: 0033:0x7f71612cbb19 [ 2092.652328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2092.656368] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2092.658158] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2092.659709] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2092.661270] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2092.662814] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2092.664367] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2092.676122] FAULT_INJECTION: forcing a failure. [ 2092.676122] name failslab, interval 1, probability 0, space 0, times 0 [ 2092.678670] CPU: 1 PID: 15655 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2092.680135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2092.681912] Call Trace: [ 2092.682478] dump_stack+0x107/0x167 [ 2092.683255] should_fail.cold+0x5/0xa [ 2092.684079] ? create_object.isra.0+0x3a/0xa30 14:15:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc04000, 0x58) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) [ 2092.685066] should_failslab+0x5/0x20 [ 2092.686072] kmem_cache_alloc+0x5b/0x310 [ 2092.686945] create_object.isra.0+0x3a/0xa30 [ 2092.687883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2092.688978] kmem_cache_alloc_bulk+0x168/0x320 [ 2092.689961] io_submit_sqes+0x6fe7/0x8610 [ 2092.690887] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2092.691951] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2092.692996] ? find_held_lock+0x2c/0x110 [ 2092.693867] ? io_submit_sqes+0x8610/0x8610 [ 2092.694798] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2092.695818] ? wait_for_completion_io+0x270/0x270 [ 2092.696849] ? rcu_read_lock_any_held+0x75/0xa0 [ 2092.697842] ? vfs_write+0x354/0xb10 [ 2092.698636] ? fput_many+0x2f/0x1a0 [ 2092.699409] ? ksys_write+0x1a9/0x260 [ 2092.700225] ? __ia32_sys_read+0xb0/0xb0 [ 2092.701108] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2092.702218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2092.703323] do_syscall_64+0x33/0x40 [ 2092.704118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2092.705213] RIP: 0033:0x7f25e7457b19 [ 2092.706015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2092.709936] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2092.711540] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2092.713060] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2092.714576] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2092.716102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2092.717620] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:15:04 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 4) 14:15:04 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r1, 0xc) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7, 0x4, 0x40, 0x6, 0x0, 0x7, 0x49420, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8208, 0xffffffffffffffe1, 0xa4e, 0x1, 0x3000000000000, 0x5b, 0x7, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xe, r1, 0x4) 14:15:04 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:05 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0x10010, r0, 0xbd738000) [ 2092.950773] FAULT_INJECTION: forcing a failure. [ 2092.950773] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2092.953482] CPU: 0 PID: 15775 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2092.954994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2092.956803] Call Trace: [ 2092.957396] dump_stack+0x107/0x167 [ 2092.958196] should_fail.cold+0x5/0xa [ 2092.959051] __alloc_pages_nodemask+0x182/0x600 [ 2092.960074] ? lock_release+0x680/0x680 [ 2092.960953] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2092.962278] ? lock_downgrade+0x6d0/0x6d0 [ 2092.963217] alloc_pages_current+0x187/0x280 [ 2092.964187] kmalloc_order+0x35/0x160 [ 2092.965044] kmalloc_order_trace+0x14/0xa0 [ 2092.965968] io_uring_setup+0x33c/0x2980 [ 2092.966870] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2092.967942] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2092.969050] ? wait_for_completion_io+0x270/0x270 [ 2092.970150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2092.971293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2092.972421] do_syscall_64+0x33/0x40 [ 2092.973244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2092.974369] RIP: 0033:0x7f71612cbb19 [ 2092.975187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2092.979180] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2092.980826] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2092.982377] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2092.983923] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2092.985474] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2092.987027] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:15:05 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:15:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000bae000/0x1000)=nil, 0x1000, 0xb, 0x80010, r0, 0x515f000) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x13f}, &(0x7f00003bc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r10}}, 0x4a) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r11, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in=@empty}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) [ 2093.353675] FAULT_INJECTION: forcing a failure. [ 2093.353675] name failslab, interval 1, probability 0, space 0, times 0 [ 2093.356438] CPU: 0 PID: 15866 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2093.358000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2093.359781] Call Trace: [ 2093.360356] dump_stack+0x107/0x167 [ 2093.361156] should_fail.cold+0x5/0xa [ 2093.361989] ? create_object.isra.0+0x3a/0xa30 [ 2093.362968] should_failslab+0x5/0x20 [ 2093.363779] kmem_cache_alloc+0x5b/0x310 [ 2093.364639] ? mark_held_locks+0x9e/0xe0 [ 2093.365538] create_object.isra.0+0x3a/0xa30 [ 2093.366467] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2093.367557] kmem_cache_alloc_bulk+0x168/0x320 [ 2093.368531] io_submit_sqes+0x6fe7/0x8610 [ 2093.369472] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2093.370548] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2093.371590] ? find_held_lock+0x2c/0x110 [ 2093.372477] ? io_submit_sqes+0x8610/0x8610 [ 2093.373417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2093.374458] ? wait_for_completion_io+0x270/0x270 [ 2093.375499] ? rcu_read_lock_any_held+0x75/0xa0 [ 2093.376484] ? vfs_write+0x354/0xb10 [ 2093.377288] ? fput_many+0x2f/0x1a0 [ 2093.378068] ? ksys_write+0x1a9/0x260 [ 2093.378878] ? __ia32_sys_read+0xb0/0xb0 [ 2093.379753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2093.380881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2093.382002] do_syscall_64+0x33/0x40 [ 2093.382801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2093.383934] RIP: 0033:0x7f25e7457b19 [ 2093.384734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2093.388663] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2093.390315] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2093.391847] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2093.393381] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2093.394910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2093.396442] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:15:21 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x0) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:21 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:15:21 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x0, 0x0, 0xa04f, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:15:21 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) signalfd4(r0, &(0x7f0000000240)={[0xc95]}, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/hci\x00') io_uring_enter(r1, 0x243c, 0x3348, 0x1, &(0x7f0000000040)={[0x7fffffff]}, 0x8) r2 = accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x800) sendfile(r2, r1, &(0x7f0000000200), 0x0) 14:15:21 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 5) 14:15:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x10, 0x100, 0x1}, 0x20000) 14:15:21 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, 0x216}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_setup(0x669a, &(0x7f0000001600)={0x0, 0x58e8, 0x2, 0x2, 0x328}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000001680)) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r7, &(0x7f00000015c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)="201e6ff4e50e45d466c7c1a95142ddc8b2ed5eab574045eb3063fe4a01785ec325ef56560db67e7553ea262c891f55d454bdbf0210dc22933ceb2de2567f24372300bc665777253414ad8830561c583e2edc7e84f7d48e450c88f804843969476fed42b46533662a1dbe308ccd434ab8099f8063884f77455a6a2873bfbefd315a2ca62a6d459b8f1fd3cc52666e406ced7393811a7098644ff6f3d06a79a175", 0xa0}, {&(0x7f0000000200)="aafa5cbdcb3a38c7f6ceb71a09c71d482c575485fc9826ee37f472e1a3c55e85be4c92d3256f0fc23f7b56f45a4d135dfd317db97b5d4cf92b851b9a1534d96d43", 0x41}, {&(0x7f0000000280)="4ffe7106cf1830c8c37505041185786716ce682becc7fe3f4f09f43e09471f3824cb334259a44c434057cfd680c7ef6847f2dfb448390675b938897219f2d982ac006be7e90d8861bcd770c42ee30b25e35d2041181326a7d98f3ef85efca7556bc83a4bd881beabe29bfc5502bec8c6fe7f69571501f204fe83a481684e77d4fc4cd1aba9a2ddf2e33c20a7bdf5e8bc851cbecbc97471e1f7c28bb09395662ed424a9ed15bb384870415a65552dfa3af0ef26c122c3bab9691a0ca5b176", 0xbe}, {&(0x7f0000000340)="ea42e4d0d41cf27199b9b3721fc447659cca5069205ba9e054b42d9f744fdba26db7e532b1e08b2f5e44bcce2577960aec465c9b9f7227577ab8dfc0151a67005ad85029287a0f9290", 0x49}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="8dff6fec05bff87e873bda602d0256af87e8a8be2b76668f2302d504d250519bbc5e56c4bfe37702fb901c680068ec5393435ff655c50e1aed46eab9169f0eb1fe70927cdfcec6804a84b2dd586b80c8eb50cb177786779942bc231cf6d8fb34e9a87a4d", 0x64}, {&(0x7f0000001440)="1ed29c7bfe12d8bbfc52265ed5000a1ec094d5b4525d76682bc4d4b54c9d1491ac6df5777066ba4e7e98c455834201b9c4936530a5490588f0e733f9648c13207972e6f57f764d4bd280ca0ed622b5e456a842192521dbab34d7421f8e21ef0c51ccda90ca14fe4094dfd3a91a48d466801c86b5dbfa3ad11ba2dab63364b271e76ace764cbfa1a2b7fc4b12e084ab5b0ee4bfb0aa351cd0aa6361ffeac7336088c91a58f9c1678ec77765fb9d60dce0696d221da5ea2775c9c79745837d", 0xbe}, {&(0x7f00000000c0)}], 0x8}, 0x0, 0x4000000}, 0x80000001) [ 2109.463322] FAULT_INJECTION: forcing a failure. [ 2109.463322] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.466486] CPU: 0 PID: 15907 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2109.468356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2109.469047] FAULT_INJECTION: forcing a failure. [ 2109.469047] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.470497] Call Trace: [ 2109.470530] dump_stack+0x107/0x167 [ 2109.470574] should_fail.cold+0x5/0xa [ 2109.475266] ? create_object.isra.0+0x3a/0xa30 [ 2109.476425] should_failslab+0x5/0x20 [ 2109.477412] kmem_cache_alloc+0x5b/0x310 [ 2109.478476] create_object.isra.0+0x3a/0xa30 [ 2109.479586] ? kasan_unpoison_shadow+0x33/0x50 [ 2109.480744] kmalloc_order+0xfe/0x160 [ 2109.481738] kmalloc_order_trace+0x14/0xa0 [ 2109.482819] io_uring_setup+0x33c/0x2980 [ 2109.483850] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2109.485049] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2109.486291] ? wait_for_completion_io+0x270/0x270 [ 2109.487562] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.488928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2109.490244] do_syscall_64+0x33/0x40 [ 2109.491194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2109.492482] RIP: 0033:0x7f71612cbb19 [ 2109.493447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2109.498044] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2109.499953] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2109.501775] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2109.503511] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2109.505286] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2109.507066] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2109.508907] CPU: 1 PID: 15902 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2109.510329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2109.512037] Call Trace: [ 2109.512586] dump_stack+0x107/0x167 [ 2109.513355] should_fail.cold+0x5/0xa [ 2109.514132] ? create_object.isra.0+0x3a/0xa30 [ 2109.515057] should_failslab+0x5/0x20 [ 2109.515823] kmem_cache_alloc+0x5b/0x310 [ 2109.516659] ? mark_held_locks+0x9e/0xe0 [ 2109.517496] create_object.isra.0+0x3a/0xa30 [ 2109.518412] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2109.519471] kmem_cache_alloc_bulk+0x168/0x320 [ 2109.520599] io_submit_sqes+0x6fe7/0x8610 [ 2109.521508] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2109.522719] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2109.523717] ? find_held_lock+0x2c/0x110 [ 2109.524549] ? io_submit_sqes+0x8610/0x8610 [ 2109.525451] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2109.526438] ? wait_for_completion_io+0x270/0x270 [ 2109.527414] ? rcu_read_lock_any_held+0x75/0xa0 [ 2109.528347] ? vfs_write+0x354/0xb10 [ 2109.529258] ? fput_many+0x2f/0x1a0 [ 2109.530011] ? ksys_write+0x1a9/0x260 [ 2109.530792] ? __ia32_sys_read+0xb0/0xb0 [ 2109.531612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.532657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2109.533723] do_syscall_64+0x33/0x40 [ 2109.534474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2109.535513] RIP: 0033:0x7f25e7457b19 [ 2109.536274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2109.539944] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2109.541463] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2109.542886] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2109.544308] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2109.545758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.547193] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:15:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0xd0, 0x1, 0x0, "c521c859926a44f7f0a809ea294dedec6fc6d5808944728363c1e00409c55acbc4a534af6a40abbdeb5d15d2cfa25742e1c8902fb841c11ec1898fe9b2d3b1c5da13ff1b568b1f5204c7a271c364284d561f58a3ca8a2e5ae4268f9fa543829b4e14b100bfce8cc6d529f88dbf765233fe15972af762aef997317261e87c15f5522127f0315d28dfb7a418165c60c42745c6f5c4002dabf67b1b10bbbec0342f7652b6283edb75f4161e0c6dca9871572142e089456ef8328ed64fe1a7bc34"}], 0xd0}}], 0x2, 0x0) signalfd(r1, &(0x7f0000000040)={[0x7]}, 0x8) 14:15:21 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x40, 0x7f, 0x80, 0x0, 0x7, 0x280, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x4, 0xfffffffffffffffe}, 0x4820, 0x5, 0x7fff, 0x4, 0x8, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:15:21 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 6) 14:15:21 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2109.863574] FAULT_INJECTION: forcing a failure. [ 2109.863574] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.866816] CPU: 0 PID: 16029 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2109.868671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2109.870804] Call Trace: [ 2109.871486] dump_stack+0x107/0x167 [ 2109.872439] should_fail.cold+0x5/0xa [ 2109.873423] ? io_uring_setup+0x40b/0x2980 [ 2109.874508] should_failslab+0x5/0x20 [ 2109.875469] kmem_cache_alloc_trace+0x55/0x320 [ 2109.876647] io_uring_setup+0x40b/0x2980 [ 2109.877701] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2109.878927] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2109.880197] ? wait_for_completion_io+0x270/0x270 [ 2109.881498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.882833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2109.884150] do_syscall_64+0x33/0x40 [ 2109.885105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2109.886394] RIP: 0033:0x7f71612cbb19 [ 2109.887340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2109.892025] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2109.893923] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2109.895699] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2109.897490] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2109.899262] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2109.901057] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:15:22 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) syz_io_uring_submit(r2, r1, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x4002}, 0x1}, 0x9) sendmmsg(r3, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2000}}, 0x7ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 14:15:22 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2110.034599] FAULT_INJECTION: forcing a failure. [ 2110.034599] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.037486] CPU: 0 PID: 16032 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2110.039116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.040976] Call Trace: [ 2110.041572] dump_stack+0x107/0x167 [ 2110.042389] should_fail.cold+0x5/0xa [ 2110.043250] ? create_object.isra.0+0x3a/0xa30 [ 2110.044258] should_failslab+0x5/0x20 [ 2110.045112] kmem_cache_alloc+0x5b/0x310 [ 2110.046013] ? mark_held_locks+0x9e/0xe0 [ 2110.046920] create_object.isra.0+0x3a/0xa30 [ 2110.047892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2110.049035] kmem_cache_alloc_bulk+0x168/0x320 [ 2110.050032] io_submit_sqes+0x6fe7/0x8610 [ 2110.050993] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2110.052096] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2110.053178] ? find_held_lock+0x2c/0x110 [ 2110.054086] ? io_submit_sqes+0x8610/0x8610 [ 2110.055053] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2110.056126] ? wait_for_completion_io+0x270/0x270 [ 2110.057204] ? rcu_read_lock_any_held+0x75/0xa0 [ 2110.058222] ? vfs_write+0x354/0xb10 [ 2110.059041] ? fput_many+0x2f/0x1a0 [ 2110.059857] ? ksys_write+0x1a9/0x260 [ 2110.060703] ? __ia32_sys_read+0xb0/0xb0 [ 2110.061609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.062764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.063903] do_syscall_64+0x33/0x40 [ 2110.064724] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2110.065860] RIP: 0033:0x7f25e7457b19 [ 2110.066677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2110.070716] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2110.072382] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2110.073943] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2110.075495] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2110.077043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2110.078595] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:15:22 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0x2a, 0xff, 0x7f, 0x0, 0x1, 0x188, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x6, @perf_config_ext={0x100, 0x61}, 0x24, 0x1, 0xffff0, 0x9, 0xffffffff, 0x9, 0x6, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) io_uring_enter(r2, 0x68de, 0x4ecf, 0x5e82170898d89dec, &(0x7f00000000c0)={[0x3]}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x8010, r1, 0x8000000) 14:15:38 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 7) 14:15:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:15:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:15:38 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = io_uring_setup(0x3dc2, &(0x7f0000000040)={0x0, 0x54c4, 0x4, 0x0, 0x3e4, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x2010, r4, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x9ba7f5b619e2113, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}, 0x4) 14:15:38 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xd8901, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0xa8642, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0xffffc000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x80000, 0x68b3) dup2(r0, r2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2, 0xff, 0x8, 0x80, 0x0, 0x203, 0x200, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x80, 0x2, 0xd0, 0x3, 0x4, 0x6b, 0x3, 0x0, 0x4, 0x0, 0x8}, r3, 0x0, r0, 0x1) 14:15:38 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') io_uring_enter(r1, 0x62cc, 0xeb70, 0x2, &(0x7f0000000040)={[0x1000]}, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x1010, r0, 0x8000000) 14:15:38 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x0) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2126.086002] FAULT_INJECTION: forcing a failure. [ 2126.086002] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.087493] CPU: 0 PID: 16163 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2126.088368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.089424] Call Trace: [ 2126.089763] dump_stack+0x107/0x167 [ 2126.090229] should_fail.cold+0x5/0xa [ 2126.090714] ? create_object.isra.0+0x3a/0xa30 [ 2126.091289] should_failslab+0x5/0x20 [ 2126.091771] kmem_cache_alloc+0x5b/0x310 [ 2126.092296] create_object.isra.0+0x3a/0xa30 [ 2126.092851] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2126.093508] kmem_cache_alloc_trace+0x151/0x320 [ 2126.094109] io_uring_setup+0x40b/0x2980 [ 2126.094626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2126.095240] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2126.095883] ? wait_for_completion_io+0x270/0x270 [ 2126.096520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.097192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.097854] do_syscall_64+0x33/0x40 [ 2126.098328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2126.098979] RIP: 0033:0x7f71612cbb19 [ 2126.099450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.101771] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2126.102724] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2126.103618] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2126.104509] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2126.105415] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2126.106310] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:15:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000080)=[r7], 0x1, 0x0, 0x0, {0x0, r8}}, 0xffffffff) [ 2126.154334] FAULT_INJECTION: forcing a failure. [ 2126.154334] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.157867] CPU: 1 PID: 16161 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2126.159548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.161638] Call Trace: [ 2126.162302] dump_stack+0x107/0x167 [ 2126.163213] should_fail.cold+0x5/0xa [ 2126.164162] ? create_object.isra.0+0x3a/0xa30 [ 2126.165303] should_failslab+0x5/0x20 [ 2126.166240] kmem_cache_alloc+0x5b/0x310 [ 2126.167247] ? mark_held_locks+0x9e/0xe0 [ 2126.168238] create_object.isra.0+0x3a/0xa30 [ 2126.169329] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2126.170567] kmem_cache_alloc_bulk+0x168/0x320 [ 2126.171708] io_submit_sqes+0x6fe7/0x8610 [ 2126.172757] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2126.174003] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2126.175184] ? find_held_lock+0x2c/0x110 [ 2126.176196] ? io_submit_sqes+0x8610/0x8610 [ 2126.177270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2126.178465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.179725] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2126.181090] ? trace_hardirqs_on+0x5b/0x180 [ 2126.182140] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2126.183472] ? __io_uring_cancel+0x20/0x20 [ 2126.184495] do_syscall_64+0x33/0x40 [ 2126.185416] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2126.186643] RIP: 0033:0x7f25e7457b19 [ 2126.187551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.191963] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2126.193807] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2126.195514] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2126.197207] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2126.198881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.200575] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:15:38 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:38 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1111}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3f, 0x7, 0x1, 0xba, 0x0, 0xffffffffffffffc1, 0x8020, 0x19, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ff, 0x4}, 0x40800, 0x80000000, 0x4, 0x3, 0xffff, 0x1, 0xff, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xc, r0, 0x9) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:15:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:15:38 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:15:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:15:38 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 8) 14:15:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x802, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x40, 0x6) 14:15:38 executing program 2: r0 = syz_io_uring_setup(0x106210, &(0x7f0000000180)={0x0, 0xfffffffe, 0x22, 0x80000, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x80010, r0, 0x0) 14:15:38 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2126.648520] FAULT_INJECTION: forcing a failure. [ 2126.648520] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.653157] CPU: 1 PID: 16290 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2126.654920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.657037] Call Trace: [ 2126.657676] dump_stack+0x107/0x167 [ 2126.658524] should_fail.cold+0x5/0xa [ 2126.659411] ? create_object.isra.0+0x3a/0xa30 [ 2126.660467] should_failslab+0x5/0x20 [ 2126.661356] kmem_cache_alloc+0x5b/0x310 [ 2126.662301] ? mark_held_locks+0x9e/0xe0 [ 2126.663223] create_object.isra.0+0x3a/0xa30 [ 2126.664234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2126.665423] kmem_cache_alloc_bulk+0x168/0x320 [ 2126.666493] io_submit_sqes+0x6fe7/0x8610 [ 2126.667491] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2126.668642] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2126.669779] ? find_held_lock+0x2c/0x110 [ 2126.670724] ? io_submit_sqes+0x8610/0x8610 [ 2126.671744] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2126.672863] ? wait_for_completion_io+0x270/0x270 [ 2126.673986] ? rcu_read_lock_any_held+0x75/0xa0 [ 2126.675059] ? vfs_write+0x354/0xb10 [ 2126.675909] ? fput_many+0x2f/0x1a0 [ 2126.676764] ? ksys_write+0x1a9/0x260 [ 2126.677643] ? __ia32_sys_read+0xb0/0xb0 [ 2126.678586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.679773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.680970] do_syscall_64+0x33/0x40 [ 2126.681822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2126.683007] RIP: 0033:0x7f25e7457b19 [ 2126.683854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.688106] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2126.690123] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2126.691859] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2126.693658] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2126.695340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.696960] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 [ 2126.717907] FAULT_INJECTION: forcing a failure. [ 2126.717907] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.720909] CPU: 1 PID: 16304 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2126.722672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.724921] Call Trace: [ 2126.725608] dump_stack+0x107/0x167 [ 2126.726667] should_fail.cold+0x5/0xa [ 2126.727709] ? create_object.isra.0+0x3a/0xa30 [ 2126.728875] should_failslab+0x5/0x20 [ 2126.729955] kmem_cache_alloc+0x5b/0x310 [ 2126.731027] create_object.isra.0+0x3a/0xa30 [ 2126.732212] kmemleak_alloc_percpu+0xa0/0x100 [ 2126.733498] pcpu_alloc+0x4e2/0x1240 [ 2126.734499] ? io_tctx_exit_cb+0xf0/0xf0 [ 2126.735598] percpu_ref_init+0x31/0x3d0 [ 2126.736645] io_uring_setup+0x47a/0x2980 [ 2126.737734] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2126.738984] ? vfs_write+0x7f8/0xb10 [ 2126.739886] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2126.741264] ? wait_for_completion_io+0x270/0x270 [ 2126.742450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.743664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.744863] do_syscall_64+0x33/0x40 [ 2126.745736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2126.746922] RIP: 0033:0x7f71612cbb19 14:15:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x882c2, 0x41) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xda, 0x100000000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0x2000, 0x4) [ 2126.747876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.752566] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2126.754312] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2126.755933] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2126.757563] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2126.759196] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2126.760814] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:15:38 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x110, r1, 0x0) r4 = fork() r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x6, 0x5, 0x3f, 0x4, 0x0, 0x101, 0x8040, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000003c0), 0xd}, 0x10004, 0xfffffffffffffffb, 0xffffffff, 0x5, 0x6, 0xb4, 0x7f, 0x0, 0x0, 0x0, 0x800}, r5, 0xf, r0, 0x9) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000400), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:15:38 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r3, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x100010, r3, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x0, 0x1, {0x0, r4}}, 0xffff0001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:15:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x0, 0x0, 0xa04f, 0x80, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2126.974217] cgroup: fork rejected by pids controller in /syz6 14:15:39 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:39 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 9) 14:15:39 executing program 2: syz_io_uring_setup(0x6cb7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x1010, r0, 0x0) [ 2127.230166] FAULT_INJECTION: forcing a failure. [ 2127.230166] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.232454] CPU: 1 PID: 16537 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2127.233824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2127.235445] Call Trace: [ 2127.235974] dump_stack+0x107/0x167 [ 2127.236694] should_fail.cold+0x5/0xa [ 2127.237453] ? create_object.isra.0+0x3a/0xa30 [ 2127.238353] should_failslab+0x5/0x20 [ 2127.239105] kmem_cache_alloc+0x5b/0x310 [ 2127.239908] create_object.isra.0+0x3a/0xa30 [ 2127.240784] kmemleak_alloc_percpu+0xa0/0x100 [ 2127.241679] pcpu_alloc+0x4e2/0x1240 [ 2127.242424] ? io_tctx_exit_cb+0xf0/0xf0 [ 2127.243233] percpu_ref_init+0x31/0x3d0 [ 2127.244020] io_uring_setup+0x47a/0x2980 [ 2127.244823] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2127.245781] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2127.246774] ? wait_for_completion_io+0x270/0x270 [ 2127.247744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2127.248775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2127.249796] do_syscall_64+0x33/0x40 [ 2127.250528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2127.251530] RIP: 0033:0x7f71612cbb19 [ 2127.252266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2127.255870] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2127.257362] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2127.258769] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2127.260177] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2127.261575] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2127.262968] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:15:59 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:59 executing program 6: getrandom(&(0x7f0000000000)=""/203, 0xcb, 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:15:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 10) 14:15:59 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x0) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:59 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:15:59 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:59 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4083, 0xff3, 0x5) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0xf92a, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:15:59 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2147.027058] FAULT_INJECTION: forcing a failure. [ 2147.027058] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.029139] CPU: 1 PID: 16651 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2147.029976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2147.030959] Call Trace: [ 2147.031281] dump_stack+0x107/0x167 [ 2147.031716] should_fail.cold+0x5/0xa [ 2147.032174] ? percpu_ref_init+0xd8/0x3d0 [ 2147.032668] should_failslab+0x5/0x20 [ 2147.033123] kmem_cache_alloc_trace+0x55/0x320 [ 2147.033679] ? io_tctx_exit_cb+0xf0/0xf0 [ 2147.034164] percpu_ref_init+0xd8/0x3d0 [ 2147.034644] io_uring_setup+0x47a/0x2980 [ 2147.035131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2147.035708] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2147.036309] ? wait_for_completion_io+0x270/0x270 [ 2147.036900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2147.037534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2147.038149] do_syscall_64+0x33/0x40 [ 2147.038591] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2147.039202] RIP: 0033:0x7f71612cbb19 [ 2147.039647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2147.041829] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2147.042731] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2147.043586] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2147.044423] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2147.045291] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2147.046134] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:15:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 11) [ 2147.143363] FAULT_INJECTION: forcing a failure. [ 2147.143363] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.146153] CPU: 0 PID: 16721 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2147.147677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2147.149582] Call Trace: [ 2147.150163] dump_stack+0x107/0x167 [ 2147.150965] should_fail.cold+0x5/0xa [ 2147.151855] ? create_object.isra.0+0x3a/0xa30 [ 2147.152885] should_failslab+0x5/0x20 [ 2147.153730] kmem_cache_alloc+0x5b/0x310 [ 2147.154626] ? mark_held_locks+0x9e/0xe0 [ 2147.155528] create_object.isra.0+0x3a/0xa30 [ 2147.156492] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2147.157649] kmem_cache_alloc_bulk+0x168/0x320 [ 2147.158699] io_submit_sqes+0x6fe7/0x8610 [ 2147.159709] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2147.160864] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2147.161942] ? find_held_lock+0x2c/0x110 [ 2147.162849] ? io_submit_sqes+0x8610/0x8610 [ 2147.163855] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2147.164939] ? wait_for_completion_io+0x270/0x270 [ 2147.166004] ? rcu_read_lock_any_held+0x75/0xa0 [ 2147.167062] ? vfs_write+0x354/0xb10 [ 2147.167922] ? fput_many+0x2f/0x1a0 [ 2147.168732] ? ksys_write+0x1a9/0x260 [ 2147.169576] ? __ia32_sys_read+0xb0/0xb0 [ 2147.170481] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2147.171658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2147.172785] do_syscall_64+0x33/0x40 [ 2147.173609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2147.174790] RIP: 0033:0x7f25e7457b19 [ 2147.175617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2147.179667] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2147.181348] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2147.182912] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2147.184841] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2147.186518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2147.188087] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:15:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc0100001a0001000000000000000000fe8000000000000000000000000000aaac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x1bc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffc60) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048800}, 0x4010) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000300)=0xfffffffd, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e23, 0x7, @private1, 0x5}, 0x1c) io_setup(0x5, &(0x7f0000000700)) signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x40) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x0, r2}, &(0x7f0000000280)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000400)=0xc) r4 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) fchmod(r0, 0x6) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080480800864b245e0f3f9be149f8000000"], 0x30}}, 0x0) [ 2147.314057] FAULT_INJECTION: forcing a failure. [ 2147.314057] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.316899] CPU: 0 PID: 16769 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2147.318519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2147.320322] Call Trace: [ 2147.320918] dump_stack+0x107/0x167 [ 2147.321741] should_fail.cold+0x5/0xa [ 2147.322591] ? create_object.isra.0+0x3a/0xa30 [ 2147.323606] should_failslab+0x5/0x20 [ 2147.324449] kmem_cache_alloc+0x5b/0x310 [ 2147.325368] create_object.isra.0+0x3a/0xa30 [ 2147.326340] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2147.327490] kmem_cache_alloc_trace+0x151/0x320 [ 2147.328549] ? io_tctx_exit_cb+0xf0/0xf0 [ 2147.329455] percpu_ref_init+0xd8/0x3d0 [ 2147.330350] io_uring_setup+0x47a/0x2980 [ 2147.331306] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2147.332411] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2147.333542] ? wait_for_completion_io+0x270/0x270 [ 2147.334659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2147.335831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2147.336979] do_syscall_64+0x33/0x40 [ 2147.337819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2147.338938] RIP: 0033:0x7f71612cbb19 [ 2147.339779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2147.343825] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2147.345502] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2147.347099] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2147.348673] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2147.350244] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2147.351822] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:15:59 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:15:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 1) 14:15:59 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(0x0, 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2147.446936] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 14:16:16 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(0x0, 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:16:16 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x18df, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:16:16 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 12) 14:16:16 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x60400, 0x0, 0x0, 0x5}, 0x0, 0x2000000000, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x810, r0, 0x0) 14:16:16 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:16:16 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:16:16 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:16:16 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2164.314778] FAULT_INJECTION: forcing a failure. [ 2164.314778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2164.318119] CPU: 1 PID: 16896 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2164.320106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2164.322210] Call Trace: [ 2164.322875] dump_stack+0x107/0x167 [ 2164.323796] should_fail.cold+0x5/0xa [ 2164.324773] __alloc_pages_nodemask+0x182/0x600 [ 2164.326122] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2164.327774] ? cap_capable+0x1cd/0x230 [ 2164.329037] alloc_pages_current+0x187/0x280 [ 2164.330176] __get_free_pages+0xc/0xa0 [ 2164.331320] io_uring_setup+0xe27/0x2980 [ 2164.332583] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2164.333955] ? wait_for_completion_io+0x270/0x270 [ 2164.335217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2164.336548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2164.337882] do_syscall_64+0x33/0x40 [ 2164.338690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2164.339761] RIP: 0033:0x7f71612cbb19 [ 2164.340550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2164.344410] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2164.346003] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2164.347479] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2164.348975] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2164.350460] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2164.351948] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2164.410404] FAULT_INJECTION: forcing a failure. [ 2164.410404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2164.413028] CPU: 1 PID: 16905 Comm: syz-executor.7 Not tainted 5.10.244 #1 14:16:16 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x4010, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x6, 0x7, 0xe7, 0x8000, 0x5, 0x0, {0x1, r3}}, 0xa2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, 0x12, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) io_uring_enter(r4, 0x24ea, 0x320b, 0x3, &(0x7f0000000080)={[0x1]}, 0x8) [ 2164.414490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2164.416434] Call Trace: [ 2164.417007] dump_stack+0x107/0x167 [ 2164.417783] should_fail.cold+0x5/0xa [ 2164.418610] _copy_from_user+0x2e/0x1b0 [ 2164.419478] __copy_msghdr_from_user+0x91/0x4b0 [ 2164.420480] ? __ia32_sys_shutdown+0x80/0x80 [ 2164.421440] ? SOFTIRQ_verbose+0x10/0x10 [ 2164.422325] ? __lockdep_reset_lock+0x180/0x180 [ 2164.423346] sendmsg_copy_msghdr+0xa1/0x160 [ 2164.424280] ? do_recvmmsg+0x6d0/0x6d0 [ 2164.425122] ? lock_chain_count+0x20/0x20 [ 2164.426038] ? __is_insn_slot_addr+0x123/0x290 [ 2164.427030] ? lock_downgrade+0x6d0/0x6d0 [ 2164.427933] ? unwind_next_frame+0x13ef/0x1a90 [ 2164.428932] io_sendmsg+0x62c/0x830 [ 2164.429734] ? io_setup_async_msg+0x2d0/0x2d0 [ 2164.430718] ? mark_lock+0xf5/0x2df0 [ 2164.431535] ? lock_chain_count+0x20/0x20 [ 2164.432437] ? lock_chain_count+0x20/0x20 [ 2164.433339] ? stack_trace_save+0x8c/0xc0 [ 2164.434249] ? __lockdep_reset_lock+0x180/0x180 [ 2164.435270] ? lock_acquire+0x197/0x470 [ 2164.436141] ? __lock_acquire+0xbb1/0x5b00 [ 2164.437064] io_issue_sqe+0x3b3/0x77d0 [ 2164.438029] ? perf_trace_lock+0xac/0x490 [ 2164.438966] ? SOFTIRQ_verbose+0x10/0x10 [ 2164.439843] ? lock_chain_count+0x20/0x20 [ 2164.440745] ? io_connect+0x610/0x610 [ 2164.441587] ? lock_acquire+0x197/0x470 [ 2164.442451] ? find_held_lock+0x2c/0x110 [ 2164.443342] ? __fget_files+0x2cf/0x520 [ 2164.444205] ? lock_downgrade+0x6d0/0x6d0 [ 2164.445110] __io_queue_sqe+0x90/0x9d0 [ 2164.445967] ? io_issue_sqe+0x77d0/0x77d0 [ 2164.446861] ? __fget_files+0x2f8/0x520 [ 2164.447736] io_submit_sqes+0x44ab/0x8610 [ 2164.448668] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2164.449748] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2164.450792] ? find_held_lock+0x2c/0x110 [ 2164.451680] ? io_submit_sqes+0x8610/0x8610 [ 2164.452619] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2164.453670] ? wait_for_completion_io+0x270/0x270 [ 2164.454716] ? rcu_read_lock_any_held+0x75/0xa0 [ 2164.455718] ? vfs_write+0x354/0xb10 [ 2164.456523] ? fput_many+0x2f/0x1a0 [ 2164.457310] ? ksys_write+0x1a9/0x260 [ 2164.458142] ? __ia32_sys_read+0xb0/0xb0 [ 2164.459027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2164.460162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2164.461285] do_syscall_64+0x33/0x40 [ 2164.462096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2164.463205] RIP: 0033:0x7f25e7457b19 [ 2164.464008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2164.467967] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2164.469607] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2164.471185] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2164.472715] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2164.474260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2164.475791] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:16:16 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 13) 14:16:16 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x100000e, 0x13, r0, 0x0) 14:16:16 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2164.670536] FAULT_INJECTION: forcing a failure. [ 2164.670536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2164.673545] CPU: 1 PID: 16954 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2164.675035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2164.676814] Call Trace: [ 2164.677385] dump_stack+0x107/0x167 [ 2164.678180] should_fail.cold+0x5/0xa [ 2164.679008] __alloc_pages_nodemask+0x182/0x600 [ 2164.680011] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2164.681311] ? cap_capable+0x1cd/0x230 [ 2164.682169] alloc_pages_current+0x187/0x280 [ 2164.683113] __get_free_pages+0xc/0xa0 [ 2164.683955] io_uring_setup+0xf9a/0x2980 [ 2164.684843] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2164.685942] ? wait_for_completion_io+0x270/0x270 [ 2164.687009] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2164.688142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2164.689259] do_syscall_64+0x33/0x40 [ 2164.690069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2164.691178] RIP: 0033:0x7f71612cbb19 [ 2164.691979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2164.695942] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2164.697623] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2164.699156] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2164.700690] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2164.702235] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2164.703778] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:16:31 executing program 6: mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc40, &(0x7f0000000080)={[{@release_agent={'release_agent', 0x3d, './file0'}}], [{@fowner_gt={'fowner>', 0xee00}}, {@euid_lt}]}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:16:31 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(0x0, 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:16:31 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:16:31 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) flistxattr(r0, &(0x7f0000000200)=""/208, 0xd0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x100010, r0, 0x0) 14:16:31 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 14) 14:16:31 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:16:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x100000e, 0x13, r0, 0x0) 14:16:31 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2179.138681] FAULT_INJECTION: forcing a failure. [ 2179.138681] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.140254] CPU: 1 PID: 17039 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2179.141149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2179.142242] Call Trace: [ 2179.142592] dump_stack+0x107/0x167 [ 2179.143072] should_fail.cold+0x5/0xa [ 2179.143567] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2179.144300] should_failslab+0x5/0x20 [ 2179.144798] kmem_cache_alloc_trace+0x55/0x320 [ 2179.145401] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2179.146117] io_uring_setup+0x14f6/0x2980 [ 2179.146669] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2179.147336] ? wait_for_completion_io+0x270/0x270 [ 2179.147989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2179.148678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2179.149360] do_syscall_64+0x33/0x40 [ 2179.149857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2179.150523] RIP: 0033:0x7f71612cbb19 [ 2179.151018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2179.153402] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2179.154405] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2179.155338] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2179.156257] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2179.157181] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2179.158138] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2179.211548] FAULT_INJECTION: forcing a failure. [ 2179.211548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2179.213421] CPU: 0 PID: 17047 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2179.214414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2179.215601] Call Trace: [ 2179.215974] dump_stack+0x107/0x167 [ 2179.216499] should_fail.cold+0x5/0xa [ 2179.217049] _copy_from_user+0x2e/0x1b0 [ 2179.217810] __copy_msghdr_from_user+0x91/0x4b0 [ 2179.218474] ? __ia32_sys_shutdown+0x80/0x80 [ 2179.219104] ? ieee802154_sock_release+0xb0/0xb0 [ 2179.219778] ? __sock_sendmsg+0x55/0x190 [ 2179.220359] ? ____sys_sendmsg+0x426/0x870 [ 2179.220965] sendmsg_copy_msghdr+0xa1/0x160 [ 2179.221587] ? do_recvmmsg+0x6d0/0x6d0 [ 2179.222146] ? lock_chain_count+0x20/0x20 [ 2179.222738] ? lock_downgrade+0x6d0/0x6d0 [ 2179.223341] io_sendmsg+0x62c/0x830 [ 2179.223859] ? io_setup_async_msg+0x2d0/0x2d0 [ 2179.224502] ? mark_lock+0xf5/0x2df0 [ 2179.225035] ? lock_chain_count+0x20/0x20 [ 2179.225637] ? __lockdep_reset_lock+0x180/0x180 [ 2179.226303] ? lock_acquire+0x197/0x470 [ 2179.226872] ? __lock_acquire+0xbb1/0x5b00 [ 2179.227474] io_issue_sqe+0x3b3/0x77d0 [ 2179.228035] ? perf_trace_lock+0xac/0x490 [ 2179.228622] ? SOFTIRQ_verbose+0x10/0x10 [ 2179.229200] ? lock_chain_count+0x20/0x20 [ 2179.229800] ? io_connect+0x610/0x610 [ 2179.230348] ? lock_acquire+0x197/0x470 [ 2179.230911] ? find_held_lock+0x2c/0x110 [ 2179.231492] ? __fget_files+0x2cf/0x520 [ 2179.232052] ? lock_downgrade+0x6d0/0x6d0 [ 2179.232638] __io_queue_sqe+0x90/0x9d0 [ 2179.233192] ? io_issue_sqe+0x77d0/0x77d0 [ 2179.233781] ? __fget_files+0x2f8/0x520 [ 2179.234353] io_submit_sqes+0x44ab/0x8610 [ 2179.234960] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2179.235657] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2179.236335] ? find_held_lock+0x2c/0x110 [ 2179.236909] ? io_submit_sqes+0x8610/0x8610 [ 2179.237520] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2179.238215] ? wait_for_completion_io+0x270/0x270 [ 2179.238902] ? rcu_read_lock_any_held+0x75/0xa0 [ 2179.239555] ? vfs_write+0x354/0xb10 [ 2179.240083] ? fput_many+0x2f/0x1a0 [ 2179.240599] ? ksys_write+0x1a9/0x260 [ 2179.241139] ? __ia32_sys_read+0xb0/0xb0 [ 2179.241725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2179.242496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2179.243257] do_syscall_64+0x33/0x40 [ 2179.243806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2179.244556] RIP: 0033:0x7f25e7457b19 [ 2179.245106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2179.247810] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2179.248918] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2179.249971] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2179.251012] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2179.252047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2179.253084] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:16:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x100000e, 0x13, r0, 0x0) 14:16:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x200, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x40000, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xfa0b814b36ff2441, 0x4000010, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:16:31 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:16:31 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:16:31 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4b5d, &(0x7f0000000000)={0x0, 0xf14, 0x10, 0x3, 0x1d8, 0x0, r1}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:16:31 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 15) [ 2179.521533] FAULT_INJECTION: forcing a failure. [ 2179.521533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2179.524986] CPU: 1 PID: 17168 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2179.526728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2179.528764] Call Trace: 14:16:31 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x100000e, 0x13, r0, 0x0) [ 2179.529607] dump_stack+0x107/0x167 [ 2179.530806] should_fail.cold+0x5/0xa [ 2179.531864] _copy_from_user+0x2e/0x1b0 [ 2179.532954] __copy_msghdr_from_user+0x91/0x4b0 [ 2179.534232] ? __ia32_sys_shutdown+0x80/0x80 [ 2179.535429] ? ieee802154_sock_release+0xb0/0xb0 [ 2179.536687] ? __sock_sendmsg+0x55/0x190 [ 2179.537768] ? ____sys_sendmsg+0x426/0x870 [ 2179.538887] sendmsg_copy_msghdr+0xa1/0x160 [ 2179.539929] ? do_recvmmsg+0x6d0/0x6d0 [ 2179.540771] ? lock_chain_count+0x20/0x20 [ 2179.541700] ? lock_downgrade+0x6d0/0x6d0 [ 2179.542816] io_sendmsg+0x62c/0x830 [ 2179.543697] ? io_setup_async_msg+0x2d0/0x2d0 [ 2179.544682] ? mark_lock+0xf5/0x2df0 [ 2179.545486] ? lock_chain_count+0x20/0x20 [ 2179.546390] ? __lockdep_reset_lock+0x180/0x180 [ 2179.547389] ? lock_acquire+0x197/0x470 [ 2179.548241] ? __lock_acquire+0xbb1/0x5b00 [ 2179.549149] io_issue_sqe+0x3b3/0x77d0 [ 2179.549990] ? perf_trace_lock+0xac/0x490 [ 2179.550866] ? SOFTIRQ_verbose+0x10/0x10 [ 2179.551728] ? lock_chain_count+0x20/0x20 [ 2179.552723] ? io_connect+0x610/0x610 [ 2179.553752] ? lock_acquire+0x197/0x470 [ 2179.554626] ? find_held_lock+0x2c/0x110 [ 2179.555758] ? __fget_files+0x2cf/0x520 [ 2179.556688] ? lock_downgrade+0x6d0/0x6d0 [ 2179.557796] __io_queue_sqe+0x90/0x9d0 [ 2179.558851] ? io_issue_sqe+0x77d0/0x77d0 [ 2179.559850] ? __fget_files+0x2f8/0x520 [ 2179.560917] io_submit_sqes+0x44ab/0x8610 [ 2179.561987] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2179.563230] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2179.564466] ? find_held_lock+0x2c/0x110 [ 2179.565540] ? io_submit_sqes+0x8610/0x8610 [ 2179.566624] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2179.567834] ? wait_for_completion_io+0x270/0x270 [ 2179.569104] ? rcu_read_lock_any_held+0x75/0xa0 [ 2179.570219] ? vfs_write+0x354/0xb10 [ 2179.571223] ? fput_many+0x2f/0x1a0 [ 2179.572094] ? ksys_write+0x1a9/0x260 [ 2179.573080] ? __ia32_sys_read+0xb0/0xb0 [ 2179.573981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2179.575350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2179.576442] do_syscall_64+0x33/0x40 14:16:31 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2179.577236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2179.578472] RIP: 0033:0x7f25e7457b19 [ 2179.579260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2179.583169] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2179.584785] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2179.586308] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2179.587820] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2179.589329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2179.590853] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 [ 2179.597501] FAULT_INJECTION: forcing a failure. [ 2179.597501] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.599950] CPU: 1 PID: 17173 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2179.601417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2179.603185] Call Trace: [ 2179.603746] dump_stack+0x107/0x167 [ 2179.604522] should_fail.cold+0x5/0xa [ 2179.605349] ? create_object.isra.0+0x3a/0xa30 [ 2179.606325] should_failslab+0x5/0x20 [ 2179.607197] kmem_cache_alloc+0x5b/0x310 [ 2179.608265] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2179.609936] create_object.isra.0+0x3a/0xa30 [ 2179.611084] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2179.612300] kmem_cache_alloc_trace+0x151/0x320 [ 2179.613308] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2179.614506] io_uring_setup+0x14f6/0x2980 [ 2179.615435] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2179.616518] ? wait_for_completion_io+0x270/0x270 [ 2179.617600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2179.618704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2179.619813] do_syscall_64+0x33/0x40 [ 2179.620588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2179.621690] RIP: 0033:0x7f71612cbb19 [ 2179.622622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2179.626551] RSP: 002b:00007f715e820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2179.628221] RAX: ffffffffffffffda RBX: 00007f71613df020 RCX: 00007f71612cbb19 [ 2179.629755] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2179.631305] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2179.632837] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2179.634390] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:16:31 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:16:48 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x0) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:16:48 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000009c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000500)="dd88e01ff73f0d50e7a03394054a1e6676d9ac26601eb05ab2e29bfb66959b77302003b1cef15cd1d4f4ccba18c0614640062a63a741735e82035343b459a238f2853f81a90f685933cffefb64a3e1a7f0af52017b51ac3c36f6d18c463d38c99d479f977317df7b3913e864890ad3f176f7246400f6c026672cc6f1c65beb7befbe56085a4ec84c41713bf2f2b7fd447b9450bfa7bad8b4e137b8debe94304716d24c12ae144e4e334f847576e3c77ce5651a77", 0xb4}, {&(0x7f0000000080)="cf283842e3a7fa655f7fb8ec41e4bc28e795cd20280297a8cd61e4f020875a7fd3560e35fe420b953d56c410151bad1f25bd74f96cf89741b4b62ebbf481557968611f471b4fda4ba9961980e1030501ee71975a1d3c0efdf85e2dc850d6db1b844930cb", 0x64}, {&(0x7f00000005c0)="d7d53376c38b50fbf96cc60b53b57e4c4788c4838fbf8d3284d30e59affce19d6e06535f9c7b731a1143eabb61bba546a2182b5a410c19ef98fc235426d1882ff3891e223520edc883c18810ef276df08415f70dc5e9ad1b55b120fb29399a5165222d8fdfa9b044366fbaff69156f9954fe2e7a3755f27dd6f65e7a5d69e265cf030394b4dbb2ba62b7c8b9f1beb053993979d5cf1d283df42ceeb8c2b4e811cc2b975151458f29d82a6fb326848c1e8fc2a3f1ef8cca8e713ef93748aafc821b5a1109", 0xc4}, {&(0x7f00000006c0)="6cff0f5b0c5533f3f7ebf84e55e5b07b123533d5023b9ff76aac1d46ef5fb124eddb6ba3d93cf772bb3de43764244b1cccf05a8717d3f8391f4693913cdd8fb3c0808d41bdd7f0208b51f2f0cc7b693fad5e4d1f8e06d5", 0x57}, {&(0x7f0000000740)="54e262c5d39534040024fc7f7b0f928ff033937ecf84942dafeeb5e7717b8ffa7fa10b79384b263f809d57e82c1ca6956a62ca48953e9d2336a3240b55bc0967b535fbbe93db0aed2aa6edb641f9fc97a52958f286ea23a3b9730d431e6f12d146846efbe0655bd609c65c76c10dc30cbfb255962f2d5ff798ad9a4637fbe91c3680196c433408b92d40d71c4bbebc034223bbb5513b4f50405636a5eddf789a7e81faf94ada93dbb3af35293b61fac797ef61c88e463021e14713eb13c7243e02ca9b6794c4c96068835a78b182bee79183606787e388bd04a3e5bce4f1d71abc9c23a5080745b38628a73fd68fe1eda778815c", 0xf4}, {&(0x7f0000000400)="93d79c77bb1afcb5c9a8b601e197165ed21bc218fafe6d2115aa829e5646290e9c661f6b18ce555a3c2609b47582d585829f", 0x32}, {&(0x7f0000000840)="2380798758ac695b4f1467aa88b068d9b0f1f37cc9e026569990380aea41f7d989a203922c38c5ba4cc660ddfb8355e997de6802eb05c5d366a1fc678d74d5c8e864112afda1c57a15cffd57fa5eec2efef1014d2ae2e87683f8b02080a89dc1b32880fe144445031a5e8abad9296910b79d23df31d20264659672bf0a3fbf4b15873377c9f9b850ebc7b189392e0c9f0ba031fdca2ca33c7b49a9e7e99a38d29b67615db7d79ab890d2b9f54f21450e61c34fe97ee3d4a6f6b1bcb22cb8ca694902809abeae8baf70967983adbd70523b58ab", 0xd3}], 0x7, 0x0, 0x0, 0x30}, 0x1) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 14:16:48 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:16:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:16:48 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 16) 14:16:48 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4005, 0x100000e, 0x13, r0, 0x0) 14:16:48 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:16:48 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4c4f, &(0x7f0000000200)={0x0, 0xbd83, 0x0, 0x0, 0x27f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2196.905183] FAULT_INJECTION: forcing a failure. [ 2196.905183] name failslab, interval 1, probability 0, space 0, times 0 [ 2196.907730] CPU: 1 PID: 17303 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2196.909204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2196.910997] Call Trace: [ 2196.911564] dump_stack+0x107/0x167 [ 2196.912343] should_fail.cold+0x5/0xa [ 2196.913156] ? create_object.isra.0+0x3a/0xa30 [ 2196.914135] should_failslab+0x5/0x20 [ 2196.914940] kmem_cache_alloc+0x5b/0x310 [ 2196.915801] create_object.isra.0+0x3a/0xa30 [ 2196.916750] kmemleak_alloc_percpu+0xa0/0x100 [ 2196.917702] pcpu_alloc+0x4e2/0x1240 [ 2196.918532] ? io_async_queue_proc+0x80/0x80 [ 2196.919467] percpu_ref_init+0x31/0x3d0 [ 2196.920320] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2196.921453] io_uring_setup+0x14f6/0x2980 [ 2196.922351] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2196.923404] ? wait_for_completion_io+0x270/0x270 [ 2196.924465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2196.925583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2196.926698] do_syscall_64+0x33/0x40 [ 2196.927483] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2196.928568] RIP: 0033:0x7f71612cbb19 [ 2196.929344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2196.933308] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2196.934949] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2196.936485] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2196.938066] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2196.939949] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2196.941499] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:16:49 executing program 4: creat(0x0, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2196.968136] FAULT_INJECTION: forcing a failure. [ 2196.968136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2196.970476] CPU: 0 PID: 17306 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2196.971851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2196.973367] Call Trace: [ 2196.973872] dump_stack+0x107/0x167 [ 2196.974545] should_fail.cold+0x5/0xa [ 2196.975249] _copy_from_user+0x2e/0x1b0 [ 2196.975971] __copy_msghdr_from_user+0x91/0x4b0 [ 2196.976826] ? __ia32_sys_shutdown+0x80/0x80 [ 2196.977518] ? ieee802154_sock_release+0xb0/0xb0 [ 2196.978390] ? __sock_sendmsg+0x55/0x190 [ 2196.979131] ? ____sys_sendmsg+0x426/0x870 [ 2196.979912] sendmsg_copy_msghdr+0xa1/0x160 [ 2196.980698] ? do_recvmmsg+0x6d0/0x6d0 [ 2196.981400] ? lock_chain_count+0x20/0x20 [ 2196.982168] ? lock_downgrade+0x6d0/0x6d0 [ 2196.982933] io_sendmsg+0x62c/0x830 [ 2196.983586] ? io_setup_async_msg+0x2d0/0x2d0 [ 2196.984404] ? mark_lock+0xf5/0x2df0 [ 2196.985079] ? lock_chain_count+0x20/0x20 [ 2196.985838] ? __lockdep_reset_lock+0x180/0x180 [ 2196.986684] ? lock_acquire+0x197/0x470 [ 2196.987399] ? __lock_acquire+0xbb1/0x5b00 [ 2196.988170] io_issue_sqe+0x3b3/0x77d0 [ 2196.988881] ? perf_trace_lock+0xac/0x490 [ 2196.989620] ? SOFTIRQ_verbose+0x10/0x10 [ 2196.990316] ? lock_chain_count+0x20/0x20 [ 2196.991003] ? io_connect+0x610/0x610 [ 2196.991587] ? lock_acquire+0x197/0x470 [ 2196.992257] ? find_held_lock+0x2c/0x110 [ 2196.992962] ? __fget_files+0x2cf/0x520 [ 2196.993552] ? lock_downgrade+0x6d0/0x6d0 [ 2196.994248] __io_queue_sqe+0x90/0x9d0 [ 2196.994908] ? io_issue_sqe+0x77d0/0x77d0 [ 2196.995589] ? __fget_files+0x2f8/0x520 [ 2196.996226] io_submit_sqes+0x44ab/0x8610 [ 2196.996882] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2196.997725] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2196.998544] ? find_held_lock+0x2c/0x110 [ 2196.999251] ? io_submit_sqes+0x8610/0x8610 [ 2196.999986] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2197.000769] ? wait_for_completion_io+0x270/0x270 [ 2197.001522] ? rcu_read_lock_any_held+0x75/0xa0 [ 2197.002321] ? vfs_write+0x354/0xb10 [ 2197.002942] ? fput_many+0x2f/0x1a0 [ 2197.003534] ? ksys_write+0x1a9/0x260 [ 2197.004109] ? __ia32_sys_read+0xb0/0xb0 [ 2197.004702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2197.005500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2197.006332] do_syscall_64+0x33/0x40 [ 2197.006937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2197.007797] RIP: 0033:0x7f25e7457b19 [ 2197.008413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2197.011319] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2197.012456] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2197.013518] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2197.014628] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2197.015805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2197.017013] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:16:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4006, 0x100000e, 0x13, r0, 0x0) 14:16:49 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c65300080cb6102f802d1f8296e58367f839557facfac56425c4644775e91cc081bfdc63b0e7df45146194aa5866baff52b7db5201be6c4a4b4f37dbd8f35340f02d9de254cb460c6e0aa0ab334c908392c331782debb27597afb37f498b5479ebb0000000000"]) bind(r0, &(0x7f0000000200)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80) r1 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x2975}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:16:49 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 17) 14:16:49 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r2) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, r2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:16:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:16:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2197.375119] FAULT_INJECTION: forcing a failure. [ 2197.375119] name failslab, interval 1, probability 0, space 0, times 0 [ 2197.377580] CPU: 1 PID: 17440 Comm: syz-executor.3 Not tainted 5.10.244 #1 14:16:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x100000e, 0x13, r0, 0x0) [ 2197.379100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2197.380964] Call Trace: [ 2197.381518] dump_stack+0x107/0x167 [ 2197.382299] should_fail.cold+0x5/0xa [ 2197.383102] ? create_object.isra.0+0x3a/0xa30 [ 2197.384055] should_failslab+0x5/0x20 [ 2197.384843] kmem_cache_alloc+0x5b/0x310 [ 2197.385696] create_object.isra.0+0x3a/0xa30 [ 2197.386631] kmemleak_alloc_percpu+0xa0/0x100 [ 2197.387572] pcpu_alloc+0x4e2/0x1240 [ 2197.388362] ? io_async_queue_proc+0x80/0x80 [ 2197.389281] percpu_ref_init+0x31/0x3d0 [ 2197.390128] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2197.391255] io_uring_setup+0x14f6/0x2980 [ 2197.392123] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2197.393175] ? wait_for_completion_io+0x270/0x270 [ 2197.394245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2197.395337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2197.396419] do_syscall_64+0x33/0x40 [ 2197.397197] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2197.398283] RIP: 0033:0x7f71612cbb19 [ 2197.399076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2197.402913] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2197.404511] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2197.406005] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2197.407489] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2197.408971] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2197.410481] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2197.476488] FAULT_INJECTION: forcing a failure. [ 2197.476488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2197.478192] CPU: 0 PID: 17506 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2197.479260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2197.480453] Call Trace: [ 2197.480856] dump_stack+0x107/0x167 [ 2197.481396] should_fail.cold+0x5/0xa [ 2197.481974] _copy_from_user+0x2e/0x1b0 [ 2197.482569] __copy_msghdr_from_user+0x91/0x4b0 [ 2197.483258] ? __ia32_sys_shutdown+0x80/0x80 [ 2197.483900] ? ieee802154_sock_release+0xb0/0xb0 [ 2197.484591] ? __sock_sendmsg+0x55/0x190 [ 2197.485187] ? ____sys_sendmsg+0x426/0x870 [ 2197.485807] sendmsg_copy_msghdr+0xa1/0x160 [ 2197.486420] ? do_recvmmsg+0x6d0/0x6d0 [ 2197.486979] ? lock_chain_count+0x20/0x20 [ 2197.487580] ? lock_downgrade+0x6d0/0x6d0 [ 2197.488185] io_sendmsg+0x62c/0x830 [ 2197.488708] ? io_setup_async_msg+0x2d0/0x2d0 [ 2197.489341] ? mark_lock+0xf5/0x2df0 [ 2197.489896] ? mark_lock+0xf5/0x2df0 [ 2197.490430] ? lock_chain_count+0x20/0x20 [ 2197.491032] ? __lockdep_reset_lock+0x180/0x180 [ 2197.491708] ? lock_acquire+0x197/0x470 [ 2197.492282] ? __lock_acquire+0xbb1/0x5b00 [ 2197.492895] io_issue_sqe+0x3b3/0x77d0 [ 2197.493460] ? perf_trace_lock+0xac/0x490 [ 2197.494062] ? SOFTIRQ_verbose+0x10/0x10 [ 2197.494644] ? lock_chain_count+0x20/0x20 [ 2197.495246] ? io_connect+0x610/0x610 [ 2197.495794] ? lock_acquire+0x197/0x470 [ 2197.496359] ? find_held_lock+0x2c/0x110 [ 2197.496944] ? __fget_files+0x2cf/0x520 [ 2197.497513] ? lock_downgrade+0x6d0/0x6d0 [ 2197.498115] __io_queue_sqe+0x90/0x9d0 [ 2197.498682] ? io_issue_sqe+0x77d0/0x77d0 [ 2197.499271] ? __fget_files+0x2f8/0x520 [ 2197.499848] io_submit_sqes+0x44ab/0x8610 [ 2197.500466] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2197.501177] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2197.501888] ? find_held_lock+0x2c/0x110 [ 2197.502475] ? io_submit_sqes+0x8610/0x8610 [ 2197.503104] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2197.503796] ? wait_for_completion_io+0x270/0x270 [ 2197.504488] ? rcu_read_lock_any_held+0x75/0xa0 [ 2197.505158] ? vfs_write+0x354/0xb10 [ 2197.505693] ? fput_many+0x2f/0x1a0 [ 2197.506126] ? ksys_write+0x1a9/0x260 [ 2197.506555] ? __ia32_sys_read+0xb0/0xb0 [ 2197.507021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2197.507613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2197.508194] do_syscall_64+0x33/0x40 [ 2197.508623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2197.509201] RIP: 0033:0x7f25e7457b19 [ 2197.509620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2197.511703] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2197.512555] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2197.513353] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2197.514165] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2197.514960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2197.515765] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:17:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:17:05 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:17:05 executing program 6: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @private=0xa010102}, 0x4, 0x4, 0x0, 0x3}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)="58cb744367ca205c5d7ffb4584206d69236c83e53c20cc7fbd21372994f59a73bd977858afe5bbc60fb7227245e5322a1807f84bce837b88b30e993db3b08cbc464ecd642d60c503d1475c52249ed3887f25ca7c45c117a0d287c693d45662a3643dbfa75e6da8af52dfbb9e6168a1f390eadfa8c2047d31e0fbfed3c8c71f2e24e6d96bca285c1a0b32fc2ab2dfdb44b351b44f75fa4e979bd8ec", 0x9b}], 0x1, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0xffff7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9927}}, @mark={{0x14, 0x1, 0x24, 0x566}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}}, {{&(0x7f0000000400)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000005c0)="349aadef542954358672c0712845dec306911e00091ff31190a0c30dbac5b744fd4465fb70db22c43f9f5fc68a54431597cac1bf8f6301e15f8104d258b888c536aa8e3658fb44cea49990f330bcdd2b153b3254d4f390f0d5509b572bc055f720bb5800fb51c17e7732d5aee4d8794ae73c975dc7908066042e69ce63aaacf6cf4538c0310ddab2f8b9d02f4b5654c56aa0222a3b058c088d64677cbee33328d0f677486ad658ec131759fc3e702af6940aedf4855b7dc759b86b8699aa5466", 0xc0}], 0x1, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}}, {{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x4, @multicast, 'syzkaller0\x00'}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000006c0)="cabe6215d30c9063d4c0f2767b3d240ad266fcc358b1bcb2f16cca34a10f8f7131c7a10b447073b0b8a444a659af32555cddbdfe29d31aeb87c131", 0x3b}, {&(0x7f0000000880)="43792182ff5b99a6904e2a13344d5ed7fad277ee0431ab663011b5a2d5064b6daf0e99621574e28ae23a0e2211a79be2e88c75c7484d55f415d9168b6bc3bfd8d9dab286c1646fadaf4f0a18a60f72f5ab8324fa432fba2820c285e253ce3c37ca8556e36a33b59204c3cecf4ec62ce3a6f27bf0b2a1e49d90c0ee198550", 0x7e}, {&(0x7f0000000900)="7d5a603b95e7d27de4b772202d8c7505a56eb528a16172cea3bb9693e1af4d0967aa4497a93bd329e2f5b97d6e57e107a68ad07e371d0a0ff9b2713d7b48cda41bc2c38e1d048bc48ca28acd11755303959d335f56a5bdeb3926d83e2356773bf7d29a862be73e8a287d19c9e43fd30bb92410a3e5bf9525c225b2f2db42329b18505545c926cbca60dabc181375", 0x8e}, {&(0x7f00000009c0)="64ca0264178bcd3a4f5d20bead0e545b375b7d7c7609f32ac6cb4d1aa6b6ead708f38b", 0x23}, {&(0x7f0000000a00)="3bcbd18c5c238f51a21c2723b79d77a9299c4bd7fd93089d9bdf6cd186ca8462bf40f0cd2560d5293aa8c789f6b30addec6062e4a9dd227f4d614f18a2f997b7736445d2a1a67eb5a9dd9c0a260a9d296c355a7f0cb60cc999a3b98db5108977c2533553c94beee16d2561c6b524f222f046d6904578ba2898f0a342a15e3abb3a2e105f87e11804d7d6ebc391b044f8bc08b283a088d19d930ebce4edc922909451f00a078cf5a87cd38b147cc92cfeaaff5180d47d94816dd002c08e0b876506e4e0e8a0638f943a3e64d3ae882b3b02d5e7002938b9ca1f0843caf494ce0a0fe8853cdf8b5b6ca472e2c6e0d671a8eea2fb41d4", 0xf5}], 0x5, &(0x7f0000000b80)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xfe}}, @mark={{0x14, 0x1, 0x24, 0xffffff00}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x78}}], 0x3, 0x20004000) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x21d3, 0x2, 0x4}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000d40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=ANY=[@ANYBLOB="1000000001000000000000"], 0x10}}], 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000d00)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000cc0)={0x2008}, r4, 0x1, 0x0, 0x1}, 0x27c) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) syz_io_uring_submit(r7, r6, 0xfffffffffffffffe, 0xfe4ce81) 14:17:05 executing program 4: creat(0x0, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:17:05 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 18) 14:17:05 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x10001, 0x0, 0x1, 0x1, 0x1}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:17:05 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x100000e, 0x13, r0, 0x0) 14:17:05 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x0) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2213.303312] FAULT_INJECTION: forcing a failure. [ 2213.303312] name failslab, interval 1, probability 0, space 0, times 0 [ 2213.305751] CPU: 1 PID: 17561 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2213.307352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2213.309409] Call Trace: [ 2213.309991] dump_stack+0x107/0x167 [ 2213.310760] should_fail.cold+0x5/0xa [ 2213.311567] ? percpu_ref_init+0xd8/0x3d0 [ 2213.312431] should_failslab+0x5/0x20 [ 2213.313233] kmem_cache_alloc_trace+0x55/0x320 [ 2213.314209] ? io_async_queue_proc+0x80/0x80 [ 2213.315134] percpu_ref_init+0xd8/0x3d0 [ 2213.315959] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2213.317108] io_uring_setup+0x14f6/0x2980 [ 2213.318036] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2213.319104] ? wait_for_completion_io+0x270/0x270 [ 2213.320334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2213.321677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2213.322788] do_syscall_64+0x33/0x40 [ 2213.323572] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2213.324793] RIP: 0033:0x7f71612cbb19 [ 2213.325815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2213.329808] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2213.331448] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2213.332966] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2213.334479] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2213.335985] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2213.337476] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2213.363114] FAULT_INJECTION: forcing a failure. [ 2213.363114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2213.365572] CPU: 0 PID: 17563 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2213.366978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2213.368639] Call Trace: [ 2213.369179] dump_stack+0x107/0x167 [ 2213.369926] should_fail.cold+0x5/0xa [ 2213.370722] _copy_from_user+0x2e/0x1b0 [ 2213.371547] __copy_msghdr_from_user+0x91/0x4b0 [ 2213.372501] ? __ia32_sys_shutdown+0x80/0x80 [ 2213.373408] ? ieee802154_sock_release+0xb0/0xb0 [ 2213.374383] ? __sock_sendmsg+0x55/0x190 [ 2213.375208] ? ____sys_sendmsg+0x426/0x870 [ 2213.376087] sendmsg_copy_msghdr+0xa1/0x160 [ 2213.376965] ? do_recvmmsg+0x6d0/0x6d0 [ 2213.377755] ? lock_chain_count+0x20/0x20 [ 2213.378611] ? lock_downgrade+0x6d0/0x6d0 [ 2213.379477] io_sendmsg+0x62c/0x830 [ 2213.380219] ? io_setup_async_msg+0x2d0/0x2d0 [ 2213.381149] ? mark_lock+0xf5/0x2df0 [ 2213.381933] ? lock_chain_count+0x20/0x20 [ 2213.382797] ? __lockdep_reset_lock+0x180/0x180 [ 2213.383744] ? lock_acquire+0x197/0x470 [ 2213.384557] ? __lock_acquire+0xbb1/0x5b00 [ 2213.385431] io_issue_sqe+0x3b3/0x77d0 [ 2213.386239] ? perf_trace_lock+0xac/0x490 [ 2213.387085] ? SOFTIRQ_verbose+0x10/0x10 [ 2213.387915] ? lock_chain_count+0x20/0x20 [ 2213.388771] ? io_connect+0x610/0x610 [ 2213.389577] ? lock_acquire+0x197/0x470 [ 2213.390412] ? find_held_lock+0x2c/0x110 [ 2213.391254] ? __fget_files+0x2cf/0x520 [ 2213.392068] ? lock_downgrade+0x6d0/0x6d0 [ 2213.392943] __io_queue_sqe+0x90/0x9d0 [ 2213.393763] ? io_issue_sqe+0x77d0/0x77d0 [ 2213.394628] ? __fget_files+0x2f8/0x520 [ 2213.395468] io_submit_sqes+0x44ab/0x8610 [ 2213.396359] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2213.397383] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2213.398399] ? __mutex_unlock_slowpath+0x8d/0x600 [ 2213.399396] ? io_submit_sqes+0x8610/0x8610 [ 2213.400272] ? check_memory_region+0x198/0x1f0 [ 2213.401228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2213.402234] ? vfs_write+0x603/0xb10 [ 2213.403012] ? wait_for_completion_io+0x270/0x270 [ 2213.404024] ? rcu_read_lock_any_held+0x75/0xa0 [ 2213.404991] ? vfs_write+0x354/0xb10 [ 2213.405755] ? fput_many+0x2f/0x1a0 [ 2213.406598] ? ksys_write+0x1a9/0x260 [ 2213.407542] ? __ia32_sys_read+0xb0/0xb0 [ 2213.408654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2213.409771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2213.410884] do_syscall_64+0x33/0x40 [ 2213.411674] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2213.412766] RIP: 0033:0x7f25e7457b19 [ 2213.413555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2213.417464] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2213.419072] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2213.420584] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2213.422097] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2213.423602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2213.425104] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:17:05 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getdents64(0xffffffffffffff9c, &(0x7f0000000500)=""/4096, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:17:05 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x100000e, 0x13, r0, 0x0) 14:17:05 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 19) 14:17:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x2010, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) [ 2213.700241] FAULT_INJECTION: forcing a failure. [ 2213.700241] name failslab, interval 1, probability 0, space 0, times 0 [ 2213.702590] CPU: 1 PID: 17688 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2213.704017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2213.705702] Call Trace: [ 2213.706259] dump_stack+0x107/0x167 [ 2213.706995] should_fail.cold+0x5/0xa [ 2213.707771] ? create_object.isra.0+0x3a/0xa30 [ 2213.708700] should_failslab+0x5/0x20 [ 2213.709476] kmem_cache_alloc+0x5b/0x310 [ 2213.710308] create_object.isra.0+0x3a/0xa30 [ 2213.711209] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2213.712264] kmem_cache_alloc_trace+0x151/0x320 [ 2213.713223] ? io_async_queue_proc+0x80/0x80 [ 2213.714269] percpu_ref_init+0xd8/0x3d0 [ 2213.715283] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2213.716461] io_uring_setup+0x14f6/0x2980 [ 2213.717471] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2213.718818] ? wait_for_completion_io+0x270/0x270 [ 2213.719834] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2213.721186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2213.722468] do_syscall_64+0x33/0x40 [ 2213.723234] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2213.724273] RIP: 0033:0x7f71612cbb19 [ 2213.725177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2213.729208] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2213.730787] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2213.732235] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2213.733715] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2213.735182] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2213.736651] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:17:21 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x100000e, 0x13, r0, 0x0) 14:17:21 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2dd7, &(0x7f0000000000)={0x0, 0x7bcd, 0x1, 0x2, 0x26f, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd_index=0x8, 0x2, &(0x7f0000000400)=[{&(0x7f0000000200)="529946dc4be46ca30ef241d5ded122", 0xf}, {&(0x7f0000000240)="d57fa1c4863e293965a13fd4f68e6b29286efb5501d5418c774e60b3be65", 0x1e}, {&(0x7f0000000280)="fe9d5156622bb9cd04667b79bf71ce0c6979f60d41350ab841d018a14efdca5b86e2410411e50258e79179f1f5f6b8427f2c9d83663e0f59003adbfeea5f77c6923a0b924cdff45db0c4e72b79aee297a1535efa73979bc346c1805e11a7422de5d43012c90c3fad594f", 0x6a}, {&(0x7f0000000300)="b9354a5a0897dfa41eea895d192eea178cbd9ba21075623184251325eadc107b799126e27fe66c2ab663e20b38910c8355c63ab66bcc765780f9ba7b1a615a0955083d77083c0fffe0ed07de5d0b7767479ae0dd2c6ce889d3c965022a55b45d7377b59d02e27cce82f353fe3467ea353302aa4aee1d7a00c15cea2a9a4f9fde5a9127230585a6fcbceff2a9ba67af0b32ef28081cdc5241bf724724de8db20e842e67e4d2d8193290e0f263b675c20397261264f958920ecb79770cacbea97fb3e9c050029f9288751114fbd99720adc8daad83b4911a9855b647", 0xdb}, {&(0x7f0000000500)="9774f890231e73f3c92deefc71ac56a3e1b573c08e6b088ccf29018f0b4ff36301ce1a70813f981cd4b138451211a4bd7b7040aceeb30a3fc545d10c3ecd1e4edf13f0af610a6b5815d98d88b35bd2cdc4da78c9050aef3fd4621df082ef2e72c79e005cb007fffe49892aa73bab0cc4c8e2206b4af1d1018b128cdea5ee12a35f2b5e3ff87930c1028be387b63785d3444023abb886593356458e8c08a867d0584612fb0eb4744be22d52c006a84ccb20515a506afa909cf2235f92169737f9d090a5385f4937afdf7a427a69587dcdb197db98cdcacead5364302477", 0xdd}], 0x5, 0x6, 0x0, {0x1, r7}}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:17:21 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x0) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:17:21 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:17:21 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x110, r0, 0x0) r3 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x1e, 0x103300, 0x23456, {0x0, r7}}, 0x5) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r8, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r8, 0x1ff) 14:17:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 20) 14:17:21 executing program 4: creat(0x0, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:17:21 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:17:21 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) [ 2229.476182] FAULT_INJECTION: forcing a failure. [ 2229.476182] name failslab, interval 1, probability 0, space 0, times 0 [ 2229.479216] CPU: 1 PID: 17813 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2229.480947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2229.483009] Call Trace: [ 2229.483664] dump_stack+0x107/0x167 [ 2229.484566] should_fail.cold+0x5/0xa [ 2229.485505] ? percpu_ref_init+0xd8/0x3d0 [ 2229.486542] should_failslab+0x5/0x20 [ 2229.487480] kmem_cache_alloc_trace+0x55/0x320 [ 2229.488605] ? io_async_queue_proc+0x80/0x80 [ 2229.489678] percpu_ref_init+0xd8/0x3d0 [ 2229.490666] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2229.491912] FAULT_INJECTION: forcing a failure. [ 2229.491912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2229.491989] io_uring_setup+0x14f6/0x2980 [ 2229.494937] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2229.496172] ? wait_for_completion_io+0x270/0x270 [ 2229.497392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2229.498694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2229.499962] do_syscall_64+0x33/0x40 [ 2229.500873] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2229.502145] RIP: 0033:0x7f71612cbb19 [ 2229.503054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2229.507568] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2229.509443] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2229.511200] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2229.512950] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2229.514715] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2229.516446] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2229.518264] CPU: 0 PID: 17811 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2229.519537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2229.520937] Call Trace: [ 2229.521387] dump_stack+0x107/0x167 [ 2229.522012] should_fail.cold+0x5/0xa [ 2229.522675] _copy_from_user+0x2e/0x1b0 [ 2229.523352] __copy_msghdr_from_user+0x91/0x4b0 [ 2229.524131] ? __ia32_sys_shutdown+0x80/0x80 [ 2229.524878] ? ieee802154_sock_release+0xb0/0xb0 [ 2229.525679] ? __sock_sendmsg+0x55/0x190 [ 2229.526369] ? ____sys_sendmsg+0x426/0x870 [ 2229.527087] sendmsg_copy_msghdr+0xa1/0x160 [ 2229.527814] ? do_recvmmsg+0x6d0/0x6d0 [ 2229.528473] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2229.529603] io_sendmsg+0x62c/0x830 [ 2229.530246] ? io_setup_async_msg+0x2d0/0x2d0 [ 2229.531153] ? lock_chain_count+0x20/0x20 [ 2229.531864] ? mark_lock+0xf5/0x2df0 [ 2229.532610] ? lock_chain_count+0x20/0x20 [ 2229.533331] ? mark_held_locks+0x9e/0xe0 [ 2229.534030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2229.534940] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2229.535853] ? trace_hardirqs_on+0x5b/0x180 [ 2229.536595] ? __lock_acquire+0xbb1/0x5b00 [ 2229.537322] io_issue_sqe+0x3b3/0x77d0 [ 2229.537995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2229.538897] ? perf_trace_lock+0xac/0x490 [ 2229.539602] ? SOFTIRQ_verbose+0x10/0x10 [ 2229.540301] ? io_connect+0x610/0x610 [ 2229.540944] ? lock_acquire+0x197/0x470 [ 2229.541723] ? find_held_lock+0x2c/0x110 [ 2229.542471] ? __fget_files+0x2cf/0x520 [ 2229.543257] ? lock_downgrade+0x6d0/0x6d0 [ 2229.543949] __io_queue_sqe+0x90/0x9d0 [ 2229.544728] ? io_issue_sqe+0x77d0/0x77d0 [ 2229.545418] ? __fget_files+0x2f8/0x520 [ 2229.546111] io_submit_sqes+0x44ab/0x8610 [ 2229.546853] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2229.547680] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2229.548486] ? find_held_lock+0x2c/0x110 [ 2229.549176] ? io_submit_sqes+0x8610/0x8610 [ 2229.549898] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2229.551052] ? wait_for_completion_io+0x270/0x270 [ 2229.552108] ? rcu_read_lock_any_held+0x75/0xa0 [ 2229.553126] ? vfs_write+0x354/0xb10 [ 2229.553956] ? fput_many+0x2f/0x1a0 [ 2229.554812] ? ksys_write+0x1a9/0x260 [ 2229.555681] ? __ia32_sys_read+0xb0/0xb0 [ 2229.556604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2229.557788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2229.559029] do_syscall_64+0x33/0x40 [ 2229.559866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2229.561029] RIP: 0033:0x7f25e7457b19 [ 2229.561864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2229.565959] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2229.567641] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2229.569222] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2229.570796] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2229.572364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2229.573948] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:17:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 21) [ 2229.768597] FAULT_INJECTION: forcing a failure. [ 2229.768597] name failslab, interval 1, probability 0, space 0, times 0 [ 2229.771178] CPU: 0 PID: 17958 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2229.772665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2229.774440] Call Trace: [ 2229.775015] dump_stack+0x107/0x167 [ 2229.775814] should_fail.cold+0x5/0xa [ 2229.776638] ? __d_alloc+0x2a/0x990 [ 2229.777426] should_failslab+0x5/0x20 [ 2229.778258] kmem_cache_alloc+0x5b/0x310 [ 2229.779154] __d_alloc+0x2a/0x990 [ 2229.779902] ? find_held_lock+0x2c/0x110 [ 2229.780785] d_alloc_pseudo+0x19/0x70 [ 2229.781607] alloc_file_pseudo+0xce/0x250 [ 2229.782504] ? trace_hardirqs_on+0x5b/0x180 [ 2229.783428] ? alloc_file+0x5a0/0x5a0 [ 2229.784285] anon_inode_getfile+0xc8/0x1f0 [ 2229.785203] io_uring_setup+0x138b/0x2980 [ 2229.786133] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2229.787221] ? wait_for_completion_io+0x270/0x270 [ 2229.788304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2229.789498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2229.790822] do_syscall_64+0x33/0x40 [ 2229.791623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2229.792735] RIP: 0033:0x7f71612cbb19 [ 2229.793540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2229.797489] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2229.799194] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2229.800723] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2229.802259] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2229.803799] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2229.805334] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:17:22 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 22) 14:17:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:17:22 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2) 14:17:22 executing program 2: r0 = syz_io_uring_setup(0x6210, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:17:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x80, 0x0, 0x2, 0x0, 0x0, 0x8000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x10000, 0x200, 0x2, 0x7, 0x2, 0x123800, 0xfffb, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2230.109351] FAULT_INJECTION: forcing a failure. [ 2230.109351] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.111772] CPU: 1 PID: 18035 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2230.113233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.114989] Call Trace: [ 2230.115551] dump_stack+0x107/0x167 [ 2230.116324] should_fail.cold+0x5/0xa [ 2230.117145] ? create_object.isra.0+0x3a/0xa30 [ 2230.118210] should_failslab+0x5/0x20 [ 2230.119092] kmem_cache_alloc+0x5b/0x310 [ 2230.120041] create_object.isra.0+0x3a/0xa30 [ 2230.121057] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2230.122247] kmem_cache_alloc+0x159/0x310 [ 2230.123250] __d_alloc+0x2a/0x990 [ 2230.124270] ? find_held_lock+0x2c/0x110 [ 2230.125290] d_alloc_pseudo+0x19/0x70 [ 2230.126304] alloc_file_pseudo+0xce/0x250 [ 2230.127262] ? trace_hardirqs_on+0x5b/0x180 [ 2230.128260] ? alloc_file+0x5a0/0x5a0 [ 2230.129165] anon_inode_getfile+0xc8/0x1f0 [ 2230.130201] io_uring_setup+0x138b/0x2980 [ 2230.131357] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2230.132530] ? wait_for_completion_io+0x270/0x270 [ 2230.133676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2230.134903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2230.136305] do_syscall_64+0x33/0x40 [ 2230.137341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2230.138542] RIP: 0033:0x7f71612cbb19 [ 2230.139437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.143486] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2230.145029] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2230.146478] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2230.147957] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2230.149504] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2230.151307] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2230.272271] FAULT_INJECTION: forcing a failure. [ 2230.272271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2230.275769] CPU: 1 PID: 18038 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2230.277714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.279718] Call Trace: [ 2230.280416] dump_stack+0x107/0x167 [ 2230.281380] should_fail.cold+0x5/0xa [ 2230.282521] _copy_from_user+0x2e/0x1b0 [ 2230.283548] __copy_msghdr_from_user+0x91/0x4b0 [ 2230.284676] ? __ia32_sys_shutdown+0x80/0x80 [ 2230.285894] ? ieee802154_sock_release+0xb0/0xb0 [ 2230.287279] ? __sock_sendmsg+0x55/0x190 [ 2230.288263] ? ____sys_sendmsg+0x426/0x870 [ 2230.289303] sendmsg_copy_msghdr+0xa1/0x160 [ 2230.290408] ? do_recvmmsg+0x6d0/0x6d0 [ 2230.291353] ? __is_insn_slot_addr+0x123/0x290 [ 2230.292459] ? lock_downgrade+0x6d0/0x6d0 [ 2230.293479] io_sendmsg+0x62c/0x830 [ 2230.294367] ? io_setup_async_msg+0x2d0/0x2d0 [ 2230.295478] ? __is_insn_slot_addr+0x14c/0x290 [ 2230.296592] ? lock_chain_count+0x20/0x20 [ 2230.297600] ? mark_lock+0xf5/0x2df0 [ 2230.298505] ? register_lock_class+0xbb/0x17b0 [ 2230.299589] ? arch_stack_walk+0x99/0xf0 [ 2230.300578] ? lock_chain_count+0x20/0x20 [ 2230.301604] ? __lock_acquire+0x1657/0x5b00 [ 2230.302680] ? __lock_acquire+0xbb1/0x5b00 [ 2230.303726] io_issue_sqe+0x3b3/0x77d0 [ 2230.304686] ? perf_trace_lock+0xac/0x490 [ 2230.305679] ? SOFTIRQ_verbose+0x10/0x10 [ 2230.306675] ? lock_chain_count+0x20/0x20 [ 2230.307681] ? io_connect+0x610/0x610 [ 2230.308605] ? lock_acquire+0x197/0x470 [ 2230.309559] ? find_held_lock+0x2c/0x110 [ 2230.310542] ? __fget_files+0x2cf/0x520 [ 2230.311489] ? lock_downgrade+0x6d0/0x6d0 [ 2230.312496] __io_queue_sqe+0x90/0x9d0 [ 2230.313431] ? io_issue_sqe+0x77d0/0x77d0 [ 2230.314447] ? __fget_files+0x2f8/0x520 [ 2230.315415] io_submit_sqes+0x44ab/0x8610 [ 2230.316447] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2230.317636] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2230.318813] ? io_submit_sqes+0x8610/0x8610 [ 2230.319857] ? recalibrate_cpu_khz+0x10/0x10 [ 2230.320916] ? ktime_get+0x158/0x1f0 [ 2230.321819] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2230.322858] ? clockevents_program_event+0x131/0x360 [ 2230.324084] ? tick_program_event+0xa8/0x140 [ 2230.325143] ? hrtimer_interrupt+0x771/0x9b0 [ 2230.326227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2230.327487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2230.328719] do_syscall_64+0x33/0x40 [ 2230.329616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2230.330853] RIP: 0033:0x7f25e7457b19 [ 2230.331743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.336129] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2230.337920] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2230.339605] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2230.341291] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.342990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2230.344669] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:17:22 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:17:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8b5}}, './file0\x00'}) io_uring_enter(r1, 0x5f8a, 0xb167, 0x3, &(0x7f0000000040)={[0x62]}, 0x8) 14:17:37 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3) 14:17:37 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:17:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:17:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:17:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 23) 14:17:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:17:37 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000040)=@l2={0x1f, 0x3, @any, 0x9}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x4}, 0x80) [ 2245.483356] FAULT_INJECTION: forcing a failure. [ 2245.483356] name failslab, interval 1, probability 0, space 0, times 0 [ 2245.485990] CPU: 1 PID: 18067 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2245.487547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2245.489293] Call Trace: [ 2245.489856] dump_stack+0x107/0x167 [ 2245.490637] should_fail.cold+0x5/0xa [ 2245.491440] ? __alloc_file+0x21/0x320 [ 2245.492261] should_failslab+0x5/0x20 [ 2245.493069] kmem_cache_alloc+0x5b/0x310 [ 2245.493938] __alloc_file+0x21/0x320 [ 2245.494730] alloc_empty_file+0x6d/0x170 [ 2245.495588] alloc_file+0x5e/0x5a0 [ 2245.496335] alloc_file_pseudo+0x16a/0x250 [ 2245.497225] ? alloc_file+0x5a0/0x5a0 [ 2245.498047] anon_inode_getfile+0xc8/0x1f0 [ 2245.498950] io_uring_setup+0x138b/0x2980 [ 2245.499828] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2245.500882] ? wait_for_completion_io+0x270/0x270 [ 2245.501919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2245.503031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2245.504120] do_syscall_64+0x33/0x40 [ 2245.504904] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2245.505973] RIP: 0033:0x7f71612cbb19 [ 2245.506761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2245.510600] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2245.512199] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2245.513681] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2245.515188] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2245.516671] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2245.518170] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2245.562595] FAULT_INJECTION: forcing a failure. [ 2245.562595] name failslab, interval 1, probability 0, space 0, times 0 [ 2245.565651] CPU: 1 PID: 18068 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2245.567333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2245.569301] Call Trace: [ 2245.569928] dump_stack+0x107/0x167 [ 2245.570803] should_fail.cold+0x5/0xa [ 2245.571717] should_failslab+0x5/0x20 [ 2245.572615] kmem_cache_alloc_bulk+0x4b/0x320 [ 2245.573693] io_submit_sqes+0x6fe7/0x8610 [ 2245.574731] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2245.575921] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2245.577072] ? find_held_lock+0x2c/0x110 [ 2245.578040] ? io_submit_sqes+0x8610/0x8610 [ 2245.579085] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2245.580229] ? wait_for_completion_io+0x270/0x270 [ 2245.581376] ? rcu_read_lock_any_held+0x75/0xa0 [ 2245.582489] ? vfs_write+0x354/0xb10 [ 2245.583368] ? fput_many+0x2f/0x1a0 [ 2245.584243] ? ksys_write+0x1a9/0x260 [ 2245.585143] ? __ia32_sys_read+0xb0/0xb0 [ 2245.586104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2245.587342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2245.588575] do_syscall_64+0x33/0x40 [ 2245.589453] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2245.590753] RIP: 0033:0x7f25e7457b19 [ 2245.591640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2245.595984] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2245.597788] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2245.599475] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2245.601165] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2245.602856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2245.604533] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:17:37 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4) 14:17:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 24) 14:17:37 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:17:37 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, @perf_config_ext, 0x40024, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0xeafe, 0x3}) sendfile(r1, r0, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) [ 2245.894817] FAULT_INJECTION: forcing a failure. [ 2245.894817] name failslab, interval 1, probability 0, space 0, times 0 [ 2245.897462] CPU: 1 PID: 18190 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2245.899070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2245.900967] Call Trace: [ 2245.901571] dump_stack+0x107/0x167 [ 2245.902423] should_fail.cold+0x5/0xa [ 2245.903298] ? create_object.isra.0+0x3a/0xa30 [ 2245.904346] should_failslab+0x5/0x20 [ 2245.905219] kmem_cache_alloc+0x5b/0x310 [ 2245.906162] create_object.isra.0+0x3a/0xa30 [ 2245.907186] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2245.908366] kmem_cache_alloc+0x159/0x310 [ 2245.909322] __alloc_file+0x21/0x320 [ 2245.910177] alloc_empty_file+0x6d/0x170 [ 2245.911115] alloc_file+0x5e/0x5a0 [ 2245.911934] alloc_file_pseudo+0x16a/0x250 [ 2245.912898] ? alloc_file+0x5a0/0x5a0 [ 2245.913780] anon_inode_getfile+0xc8/0x1f0 [ 2245.914756] io_uring_setup+0x138b/0x2980 [ 2245.915715] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2245.916866] ? wait_for_completion_io+0x270/0x270 [ 2245.917991] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2245.919191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2245.920374] do_syscall_64+0x33/0x40 [ 2245.921223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2245.922393] RIP: 0033:0x7f71612cbb19 [ 2245.923244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2245.927430] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2245.929150] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2245.930775] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2245.932384] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2245.933993] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2245.935602] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:17:38 executing program 2: r0 = syz_io_uring_setup(0x133b, &(0x7f0000000040)={0x0, 0xde1f, 0x4, 0x2, 0x90}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r6, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r6, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r0, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) 14:17:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5) 14:17:38 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r0, 0x10000000) 14:17:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:17:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2246.192050] FAULT_INJECTION: forcing a failure. [ 2246.192050] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.194630] CPU: 1 PID: 18209 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 2246.196055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.197771] Call Trace: [ 2246.198465] dump_stack+0x107/0x167 [ 2246.199219] should_fail.cold+0x5/0xa [ 2246.200013] ? create_object.isra.0+0x3a/0xa30 [ 2246.200945] should_failslab+0x5/0x20 [ 2246.201737] kmem_cache_alloc+0x5b/0x310 [ 2246.202595] create_object.isra.0+0x3a/0xa30 [ 2246.203495] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.204549] kmem_cache_alloc_bulk+0x168/0x320 [ 2246.205499] io_submit_sqes+0x6fe7/0x8610 [ 2246.206388] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2246.207404] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2246.208393] ? find_held_lock+0x2c/0x110 [ 2246.209226] ? io_submit_sqes+0x8610/0x8610 [ 2246.210117] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.211104] ? wait_for_completion_io+0x270/0x270 [ 2246.212087] ? rcu_read_lock_any_held+0x75/0xa0 [ 2246.213025] ? vfs_write+0x354/0xb10 [ 2246.213778] ? fput_many+0x2f/0x1a0 [ 2246.214530] ? ksys_write+0x1a9/0x260 [ 2246.215313] ? __ia32_sys_read+0xb0/0xb0 [ 2246.216159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.217223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.218301] do_syscall_64+0x33/0x40 [ 2246.219080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2246.220128] RIP: 0033:0x7f25e7457b19 [ 2246.220891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.224624] RSP: 002b:00007f25e49cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2246.226168] RAX: ffffffffffffffda RBX: 00007f25e756af60 RCX: 00007f25e7457b19 [ 2246.227688] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2246.229146] RBP: 00007f25e49cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.230606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.232074] R13: 00007ffdc8db2b2f R14: 00007f25e49cd300 R15: 0000000000022000 14:17:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6) 14:17:38 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 25) [ 2246.418985] FAULT_INJECTION: forcing a failure. [ 2246.418985] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.420770] CPU: 0 PID: 18315 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2246.421654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.422612] Call Trace: [ 2246.422930] dump_stack+0x107/0x167 [ 2246.423352] should_fail.cold+0x5/0xa [ 2246.423801] ? security_file_alloc+0x34/0x170 [ 2246.424320] should_failslab+0x5/0x20 [ 2246.424761] kmem_cache_alloc+0x5b/0x310 [ 2246.425237] security_file_alloc+0x34/0x170 [ 2246.425741] __alloc_file+0xb7/0x320 [ 2246.426176] alloc_empty_file+0x6d/0x170 [ 2246.426655] alloc_file+0x5e/0x5a0 [ 2246.427077] alloc_file_pseudo+0x16a/0x250 [ 2246.427566] ? alloc_file+0x5a0/0x5a0 [ 2246.428026] anon_inode_getfile+0xc8/0x1f0 [ 2246.428625] io_uring_setup+0x138b/0x2980 [ 2246.429243] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2246.429982] ? wait_for_completion_io+0x270/0x270 [ 2246.430611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.431240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.431842] do_syscall_64+0x33/0x40 [ 2246.432294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2246.432898] RIP: 0033:0x7f71612cbb19 [ 2246.433326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.435490] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2246.436371] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2246.437187] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2246.438006] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2246.438828] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2246.439641] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:17:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:17:56 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:17:56 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:17:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:17:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x420e, &(0x7f0000000180)={0x0, 0xfffffffd, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000006, 0x4000010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x3, 0x6000, @fd_index=0x8, 0x3f, &(0x7f0000000500)="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", 0x1000, 0x10}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x16a) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) io_uring_enter(r3, 0x708d, 0x7746, 0x3, &(0x7f0000000080)={[0x200]}, 0x8) 14:17:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:17:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7) 14:17:56 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 26) [ 2264.342950] FAULT_INJECTION: forcing a failure. [ 2264.342950] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.345515] CPU: 0 PID: 18339 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2264.347076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2264.348928] Call Trace: [ 2264.349525] dump_stack+0x107/0x167 [ 2264.350347] should_fail.cold+0x5/0xa [ 2264.351226] ? create_object.isra.0+0x3a/0xa30 [ 2264.352256] should_failslab+0x5/0x20 [ 2264.353102] kmem_cache_alloc+0x5b/0x310 [ 2264.354007] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2264.355253] create_object.isra.0+0x3a/0xa30 [ 2264.356226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2264.357368] kmem_cache_alloc+0x159/0x310 [ 2264.358306] security_file_alloc+0x34/0x170 [ 2264.359283] __alloc_file+0xb7/0x320 [ 2264.360108] alloc_empty_file+0x6d/0x170 [ 2264.361018] alloc_file+0x5e/0x5a0 [ 2264.361823] alloc_file_pseudo+0x16a/0x250 [ 2264.362778] ? alloc_file+0x5a0/0x5a0 [ 2264.363662] anon_inode_getfile+0xc8/0x1f0 [ 2264.364612] io_uring_setup+0x138b/0x2980 [ 2264.365545] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2264.366670] ? wait_for_completion_io+0x270/0x270 [ 2264.367782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2264.368946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.370106] do_syscall_64+0x33/0x40 [ 2264.370947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2264.372089] RIP: 0033:0x7f71612cbb19 [ 2264.372920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.377007] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2264.378703] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2264.380288] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2264.381863] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2264.383458] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2264.385026] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:17:56 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2, 0x8010, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x6, 0x7f, &(0x7f0000000000)="cc6f5b52dd5ae3816594dec644b7bf3ab931807118c8b3604ba109850a5d99eee9d00a46b1b87f82ea0fcf2c0bab171c11747226fb7bf442f90159e2181137f95415e236ab32e0147b431f75f292fafad69a2c2eb5e1c03c876a7613c7b784b4cd8eb20867db577ead03e74febea372968a5badec88bb6048c39937965ded146d82228410327a3cea81e84db150b23210afc5825d47519fcb31da99091eebf070663aa14e99804e905060e8d031baa3d1b6101f1ba188896f1b1ed37", 0xbc}, 0x2000000) 14:17:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x4, 0x2, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0x40010, r1, 0x0) 14:17:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:17:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8) 14:17:56 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 27) [ 2264.754927] FAULT_INJECTION: forcing a failure. [ 2264.754927] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.757031] CPU: 0 PID: 18459 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2264.758280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2264.759787] Call Trace: [ 2264.760273] dump_stack+0x107/0x167 [ 2264.760980] should_fail.cold+0x5/0xa [ 2264.761716] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2264.762701] should_failslab+0x5/0x20 [ 2264.763426] kmem_cache_alloc_trace+0x55/0x320 [ 2264.764306] io_uring_alloc_task_context+0x99/0x6a0 [ 2264.765266] ? io_import_iovec+0x1120/0x1120 [ 2264.766109] ? lock_downgrade+0x6d0/0x6d0 [ 2264.766910] ? do_raw_spin_lock+0x121/0x260 [ 2264.767736] ? rwlock_bug.part.0+0x90/0x90 [ 2264.768554] __io_uring_add_tctx_node+0x2c6/0x520 [ 2264.769479] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2264.770477] ? alloc_fd+0x2e7/0x670 [ 2264.771195] io_uring_setup+0x1fbb/0x2980 [ 2264.772002] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2264.772966] ? wait_for_completion_io+0x270/0x270 [ 2264.773928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2264.774935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.775921] do_syscall_64+0x33/0x40 [ 2264.776633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2264.777603] RIP: 0033:0x7f71612cbb19 [ 2264.778313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.781795] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2264.783253] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2264.784604] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2264.785959] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2264.787304] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2264.788655] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:18:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10) 14:18:12 executing program 6: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000001) r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x3b, 0x6, 0x7, 0x1000, 0x0, 0x7}}, 0x20000) r1 = syz_io_uring_setup(0x620e, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x10, 0x2, 0x3da}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:18:12 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:18:12 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:18:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000200)=0x3, 0x7) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbb38d37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) 14:18:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c08, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:18:12 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 28) 14:18:12 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2280.836440] FAULT_INJECTION: forcing a failure. [ 2280.836440] name failslab, interval 1, probability 0, space 0, times 0 [ 2280.839193] CPU: 1 PID: 18480 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2280.841007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2280.843085] Call Trace: [ 2280.843709] dump_stack+0x107/0x167 [ 2280.844550] should_fail.cold+0x5/0xa [ 2280.845432] ? create_object.isra.0+0x3a/0xa30 [ 2280.846508] should_failslab+0x5/0x20 14:18:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60) [ 2280.847401] kmem_cache_alloc+0x5b/0x310 [ 2280.848463] create_object.isra.0+0x3a/0xa30 [ 2280.849494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2280.850727] kmem_cache_alloc_trace+0x151/0x320 [ 2280.851840] io_uring_alloc_task_context+0x99/0x6a0 [ 2280.853214] ? io_import_iovec+0x1120/0x1120 [ 2280.854401] ? lock_downgrade+0x6d0/0x6d0 [ 2280.855664] ? do_raw_spin_lock+0x121/0x260 [ 2280.856777] ? rwlock_bug.part.0+0x90/0x90 [ 2280.857989] __io_uring_add_tctx_node+0x2c6/0x520 [ 2280.859255] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2280.860661] ? alloc_fd+0x2e7/0x670 [ 2280.861692] io_uring_setup+0x1fbb/0x2980 [ 2280.862824] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2280.864241] ? wait_for_completion_io+0x270/0x270 [ 2280.865465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2280.866825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2280.868037] do_syscall_64+0x33/0x40 [ 2280.869010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2280.870313] RIP: 0033:0x7f71612cbb19 [ 2280.871197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2280.875796] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2280.877569] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2280.879247] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2280.881218] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2280.882897] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2280.884549] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:18:13 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xff, 0x0, 0x5, 0x5, 0x0, 0x7, 0x8c891, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x9}, 0x60, 0x3, 0xdb2, 0x3, 0x60, 0x1d55, 0x0, 0x0, 0x7, 0x0, 0x5}, r1, 0xb, r0, 0x9) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r2, 0x0) 14:18:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:18:13 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 29) 14:18:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x300) 14:18:13 executing program 2: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 2281.303335] FAULT_INJECTION: forcing a failure. [ 2281.303335] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.304718] CPU: 0 PID: 18606 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2281.305528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2281.306492] Call Trace: [ 2281.306812] dump_stack+0x107/0x167 [ 2281.307237] should_fail.cold+0x5/0xa [ 2281.307693] ? create_object.isra.0+0x3a/0xa30 [ 2281.308222] should_failslab+0x5/0x20 [ 2281.308669] kmem_cache_alloc+0x5b/0x310 [ 2281.309143] create_object.isra.0+0x3a/0xa30 [ 2281.309668] kmemleak_alloc_percpu+0xa0/0x100 [ 2281.310192] pcpu_alloc+0x4e2/0x1240 [ 2281.310665] __percpu_counter_init+0x10d/0x2d0 [ 2281.311210] io_uring_alloc_task_context+0xcc/0x6a0 [ 2281.311805] ? io_import_iovec+0x1120/0x1120 [ 2281.312317] ? lock_downgrade+0x6d0/0x6d0 [ 2281.312802] ? do_raw_spin_lock+0x121/0x260 [ 2281.313297] ? rwlock_bug.part.0+0x90/0x90 [ 2281.313798] __io_uring_add_tctx_node+0x2c6/0x520 [ 2281.314361] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2281.314986] ? alloc_fd+0x2e7/0x670 [ 2281.315430] io_uring_setup+0x1fbb/0x2980 [ 2281.315931] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2281.316553] ? wait_for_completion_io+0x270/0x270 [ 2281.317151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2281.317761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2281.318380] do_syscall_64+0x33/0x40 [ 2281.318828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2281.319425] RIP: 0033:0x7f71612cbb19 [ 2281.319856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2281.321963] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2281.322856] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2281.323681] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2281.324503] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2281.325323] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2281.326147] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:18:13 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 30) 14:18:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x43fe5a182336a959, r0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3186, &(0x7f0000000780)={0x0, 0xa91b, 0x12, 0x1, 0xba, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000800), &(0x7f0000000840)=0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000008c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r8, 0x0, &(0x7f0000000880), 0x0, 0x2000, 0x1, {0x0, r9}}, 0x8) r10 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000200)="69a7f1e991e59af064337075eebd3f47b213f9e41b37ededfee84943615238c5b8e589d966831b27cb4c823f3ea170c61a0f4e0eef4b6f9bd962b1356d1fec875a0969e0fdddbf218dabfdc2e13d1b208c3ca35c6a290a9f0dd022881b2d67e90c6f66eb8aea0a2c3e72b8f1499ea6a2f50e6cf03e4fe2864e9b33e922e4f9c802c6b084ac1688a3ee", 0x89, 0x8}, {&(0x7f00000002c0)="880525839510d886dbcc2615088cd88fb6371446a277f734be39e95239d6df8923ae2e6dd3cc4e7e6666120c32eda0e6d575421d9f4a79bac69e404a7c7cbdff610e1f0b6d14ea6079e01a30996500afcb91fbb4deea3e24c7270ff75fb20db88f54ab252679496bbd182e4d0773b367f21a08d8eb2c2926b9b74f54cbfb4daf80e86e48f795386e", 0x88, 0x4}, {&(0x7f0000000080)="fe3d1392725b740a35962a7be5cfde6cde9a557a841f04c6be296dba14ee5ecc4871bb19e997e5c89d1ad37bbf8b3ac4ec9b33976e4ac3fb6bab7e521589d4f0b5160e309384a4e79a478a66eaa32b998c9652c12ae032c5485231c2b70d4e8b8504e6", 0x63, 0x3}, {&(0x7f0000000380)="c86de6d680ced08b6e92a49795706b5a6d7549943a7c585d0b4ed4809ef5143160840d14628e81bd4a19ee8921344a1379b1c29c9c6af9f1e73fac6323d9dcc05e5f8820b8119cdcc57235373f246269b1757691011feb1c1ab6a62f8420672f45168e76d3feda8f9db04f0a64cd8c6e84af8135961a8ca669d89cee8d3af947a48c38aff3453c1d847535f8c4733c69f3a0000b5c9ab76e400dcb18cb10dd68dceec42e43aa174e58861aa9cecc22a06416ee77eead", 0xb6, 0x6}, {&(0x7f0000000500)="3169c94b472f356394eefc5e0ba893976f3c36e195ba3301c42e938d1c2853e5b45f9f1bf441d3c91ba2c910f24cca7291e58290cdc73ddbf05171202c27adfc5a9095d47100597e15a59553f5f7848777a1bb67fedb05c30729d9f54e908157b6fd1658305787af5a08950068b9fd8b3e02e553e9a03a7c4b9bf12435a3d8944e73bdcc6bfa60433f60075ed87efc46aa2777f347816c1a8013638d491f4cc0e312990c036bbeee89a8f1419d4bb7080bfc33565a1e1a4f", 0xb8, 0x3}], 0x4, &(0x7f0000000640)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}, {@size={'size', 0x3d, [0x2d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x30, 0x25, 0x74, 0x67, 0x25, 0x65, 0x65, 0x30, 0x6d]}}, {@gid}, {@huge_always}, {@nr_blocks}, {@huge_advise}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x38, 0x35]}}}}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) syz_io_uring_submit(r2, r1, &(0x7f0000000740)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r10, &(0x7f0000000440)={0x10202, 0x102, 0x10}, &(0x7f0000000700)='./file0\x00', 0x18, 0x0, 0x23456}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2281.483410] FAULT_INJECTION: forcing a failure. [ 2281.483410] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.486096] CPU: 1 PID: 18616 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2281.487673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2281.489559] Call Trace: [ 2281.490158] dump_stack+0x107/0x167 [ 2281.490990] should_fail.cold+0x5/0xa [ 2281.491825] ? create_object.isra.0+0x3a/0xa30 [ 2281.492815] should_failslab+0x5/0x20 [ 2281.493648] kmem_cache_alloc+0x5b/0x310 [ 2281.494564] create_object.isra.0+0x3a/0xa30 [ 2281.495572] kmemleak_alloc_percpu+0xa0/0x100 [ 2281.496600] pcpu_alloc+0x4e2/0x1240 [ 2281.497465] __percpu_counter_init+0x10d/0x2d0 [ 2281.498501] io_uring_alloc_task_context+0xcc/0x6a0 [ 2281.499632] ? io_import_iovec+0x1120/0x1120 [ 2281.500618] ? lock_downgrade+0x6d0/0x6d0 [ 2281.501552] ? do_raw_spin_lock+0x121/0x260 [ 2281.502531] ? rwlock_bug.part.0+0x90/0x90 [ 2281.503499] __io_uring_add_tctx_node+0x2c6/0x520 [ 2281.504581] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2281.505757] ? alloc_fd+0x2e7/0x670 [ 2281.506588] io_uring_setup+0x1fbb/0x2980 [ 2281.507540] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2281.508670] ? wait_for_completion_io+0x270/0x270 [ 2281.509797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2281.510977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2281.512161] do_syscall_64+0x33/0x40 [ 2281.513000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2281.514152] RIP: 0033:0x7f71612cbb19 [ 2281.514994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2281.519130] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2281.520836] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2281.522442] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2281.524057] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2281.525661] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2281.527256] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2281.573338] tmpfs: Bad value for 'mpol' 14:18:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x500) 14:18:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:18:27 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x244c, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2000000, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:18:27 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:18:27 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 31) 14:18:27 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:18:27 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:18:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x4, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2295.906066] FAULT_INJECTION: forcing a failure. [ 2295.906066] name failslab, interval 1, probability 0, space 0, times 0 [ 2295.908940] CPU: 1 PID: 18734 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2295.910694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2295.912797] Call Trace: [ 2295.913470] dump_stack+0x107/0x167 [ 2295.914399] should_fail.cold+0x5/0xa [ 2295.915385] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2295.916722] should_failslab+0x5/0x20 [ 2295.917694] kmem_cache_alloc_trace+0x55/0x320 [ 2295.918873] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2295.920172] ? io_import_iovec+0x1120/0x1120 [ 2295.921294] ? lock_downgrade+0x6d0/0x6d0 [ 2295.922343] ? do_raw_spin_lock+0x121/0x260 [ 2295.923444] ? rwlock_bug.part.0+0x90/0x90 [ 2295.924526] __io_uring_add_tctx_node+0x2c6/0x520 [ 2295.925762] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2295.927106] ? alloc_fd+0x2e7/0x670 [ 2295.928049] io_uring_setup+0x1fbb/0x2980 [ 2295.929116] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2295.930440] ? wait_for_completion_io+0x270/0x270 [ 2295.931857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2295.933016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2295.934118] do_syscall_64+0x33/0x40 [ 2295.934913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2295.936123] RIP: 0033:0x7f71612cbb19 [ 2295.937161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2295.941406] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2295.943290] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2295.945138] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2295.946638] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2295.948466] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2295.950302] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:18:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) io_uring_enter(r1, 0x3028, 0x57c7, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) 14:18:28 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600) 14:18:28 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:18:28 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 32) 14:18:28 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0xfe}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x50, r0, 0x0) r1 = dup(r0) io_uring_enter(r1, 0x6233, 0x34eb, 0x3, &(0x7f0000000000), 0x8) 14:18:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x40002}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:18:28 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x700) 14:18:28 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x2000, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2296.421518] FAULT_INJECTION: forcing a failure. [ 2296.421518] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.422954] CPU: 0 PID: 18956 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2296.423904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.424873] Call Trace: [ 2296.425194] dump_stack+0x107/0x167 [ 2296.425633] should_fail.cold+0x5/0xa [ 2296.426089] ? create_object.isra.0+0x3a/0xa30 [ 2296.426628] should_failslab+0x5/0x20 [ 2296.427086] kmem_cache_alloc+0x5b/0x310 [ 2296.427569] create_object.isra.0+0x3a/0xa30 [ 2296.428087] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2296.428689] kmem_cache_alloc_trace+0x151/0x320 [ 2296.429247] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2296.429847] ? io_import_iovec+0x1120/0x1120 [ 2296.430365] ? lock_downgrade+0x6d0/0x6d0 [ 2296.430859] ? do_raw_spin_lock+0x121/0x260 [ 2296.431367] ? rwlock_bug.part.0+0x90/0x90 [ 2296.431870] __io_uring_add_tctx_node+0x2c6/0x520 [ 2296.432434] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2296.433045] ? alloc_fd+0x2e7/0x670 [ 2296.433490] io_uring_setup+0x1fbb/0x2980 [ 2296.433988] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2296.434584] ? wait_for_completion_io+0x270/0x270 [ 2296.435192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2296.435810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2296.436426] do_syscall_64+0x33/0x40 [ 2296.436863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.437466] RIP: 0033:0x7f71612cbb19 [ 2296.437903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.440058] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2296.440946] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2296.441774] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2296.442604] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2296.443440] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2296.444271] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:18:44 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 33) 14:18:44 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:18:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:18:44 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000) 14:18:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x104}], 0x10}}], 0x2, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000009c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x6774, &(0x7f00000003c0)={0x0, 0x4f55, 0x0, 0x0, 0xffffffff, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000680)) syz_io_uring_setup(0x76b2, &(0x7f0000000800)={0x0, 0xbb80, 0x8, 0x2, 0x194, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000880)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000900)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)='./file0\x00', 0x100, 0x40, 0x12345}, 0x6) r8 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r11 = socket$packet(0x11, 0x3, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x18100, &(0x7f0000000980)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000480)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x400800, 0x0) preadv(r13, &(0x7f0000000440)=[{&(0x7f0000000000)=""/198, 0xc6}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f0000000600)=""/109, 0x6d}], 0x4, 0x0, 0x0) r14 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r14, 0x0) 14:18:44 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x7f00, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:18:44 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:18:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7b59, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x1fe}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202000) signalfd(r1, &(0x7f0000000040)={[0xfffffffffffffffe]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2312.787368] FAULT_INJECTION: forcing a failure. [ 2312.787368] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.790244] CPU: 1 PID: 18983 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2312.791716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2312.793469] Call Trace: [ 2312.794029] dump_stack+0x107/0x167 [ 2312.794803] should_fail.cold+0x5/0xa [ 2312.795688] ? io_wq_create+0xeb/0xc00 [ 2312.796656] should_failslab+0x5/0x20 [ 2312.797658] __kmalloc+0x72/0x390 [ 2312.798401] io_wq_create+0xeb/0xc00 [ 2312.799214] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2312.800301] ? io_import_iovec+0x1120/0x1120 [ 2312.801231] ? io_apoll_task_func+0x2d0/0x2d0 [ 2312.802187] ? __io_req_find_next+0x300/0x300 [ 2312.803152] ? do_raw_spin_lock+0x121/0x260 [ 2312.804058] ? rwlock_bug.part.0+0x90/0x90 [ 2312.804956] __io_uring_add_tctx_node+0x2c6/0x520 [ 2312.805969] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2312.807075] ? alloc_fd+0x2e7/0x670 [ 2312.807855] io_uring_setup+0x1fbb/0x2980 [ 2312.808740] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2312.809822] ? wait_for_completion_io+0x270/0x270 [ 2312.810873] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2312.811993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2312.813085] do_syscall_64+0x33/0x40 [ 2312.813867] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2312.814959] RIP: 0033:0x7f71612cbb19 [ 2312.815750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2312.819664] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2312.821279] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2312.822787] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2312.824316] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2312.825830] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2312.827343] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:18:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000000)=""/183, 0xb7}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000001500)=""/232, 0xe8}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000001600)=""/113, 0x71}], 0x8) 14:18:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000) 14:18:45 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 34) 14:18:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x40000, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:18:45 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0, r2, r3, r0], 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2313.237310] FAULT_INJECTION: forcing a failure. [ 2313.237310] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.239899] CPU: 0 PID: 19109 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2313.241396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2313.243225] Call Trace: [ 2313.243808] dump_stack+0x107/0x167 [ 2313.244608] should_fail.cold+0x5/0xa [ 2313.245437] ? create_object.isra.0+0x3a/0xa30 [ 2313.246436] should_failslab+0x5/0x20 [ 2313.247301] kmem_cache_alloc+0x5b/0x310 [ 2313.248194] create_object.isra.0+0x3a/0xa30 [ 2313.249141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2313.250251] __kmalloc+0x16e/0x390 [ 2313.251067] io_wq_create+0xeb/0xc00 [ 2313.251897] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2313.253012] ? io_import_iovec+0x1120/0x1120 [ 2313.253974] ? io_apoll_task_func+0x2d0/0x2d0 [ 2313.254965] ? __io_req_find_next+0x300/0x300 [ 2313.255950] ? do_raw_spin_lock+0x121/0x260 [ 2313.256884] ? rwlock_bug.part.0+0x90/0x90 [ 2313.257814] __io_uring_add_tctx_node+0x2c6/0x520 [ 2313.258857] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2313.260018] ? alloc_fd+0x2e7/0x670 [ 2313.260832] io_uring_setup+0x1fbb/0x2980 [ 2313.261752] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2313.262845] ? wait_for_completion_io+0x270/0x270 [ 2313.263964] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2313.265104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2313.266239] do_syscall_64+0x33/0x40 [ 2313.267078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2313.268188] RIP: 0033:0x7f71612cbb19 [ 2313.268994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.273005] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2313.274656] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2313.276241] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2313.277790] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2313.279519] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2313.281066] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:18:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000) 14:18:45 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) sendfile(r3, r0, &(0x7f0000000200)=0x9, 0xcd6) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) syz_io_uring_setup(0x3ad7, &(0x7f0000000000)={0x0, 0xc089, 0x4, 0x0, 0x20a, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 14:18:45 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:18:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x800000, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:19:06 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000) 14:19:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:19:06 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) io_uring_enter(r0, 0x4d58, 0x150c, 0x0, &(0x7f0000000200)={[0x3]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00'}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="b57f9fe9cbf3442650a69a192d9275f31da5217368e3055a5aa61e85412fac9bfdfe0b6f3cb1b280a09fefc2888334112cdf3769ca126a2d09902807e83b4bfa74acdf9170007e0f010717271ba4729acce3388b7b1f8e1ff0eb2b040e0577a962ab4015b92f4f04c1b67221a271d7a077e4c1d38059bf2072e807037c112fbe25be548fdf56314b5c198842f6a8208129e98141fa04e7ae5efa77b31ca8172975322b5e851714fda10e5b95a7ecfc7cc67d7935e3b70573f6d3c97049683afa5547b48f4e4294cf6f15bbfedcdf2069c83af5322e2b2275b025dd07ad5d187bd41ff4ec3cc754e3bad17a4cd90c64f4f2ede878", 0xf4, 0x0, 0x0, {0x0, r2}}, 0x4) 14:19:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x20000000, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:19:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:19:06 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:19:06 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="76ff0c0f39c398ea648f87d39480b34e2146bf28a98d00d65d928f7521f4ed77abf145ae43a8d05443c948ebebf2f7b830c8cda64f246c9530efcb67e95cdbd91f226473fa2a7c514875fcb4b5d1e6840cd6179f8a8ee8693c9cebca7479db1610807af09f9731cad2448c9aa1e0f3eaa51f42e5fa877adc8791e9eb8564b41aac6c88bdd58115384b9707c1dff62b9359a30211fb885d84fe67d97d8942418b9f55a391be52e4d3d18ec73b6036ebf49f6c4c2c66a50938b74c4302d4905de6e684f6406e51dfd91f476f0bb1ec7f739f3a04321d7422654a338bb5ff766d7bff", @ANYRES16=0x0, @ANYBLOB="020028bd7000fedbdf25740000000c009900040000003a000000"], 0x20}, 0x1, 0x0, 0x0, 0xd}, 0x4008800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) 14:19:06 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 35) [ 2334.217303] FAULT_INJECTION: forcing a failure. [ 2334.217303] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.220117] CPU: 0 PID: 19419 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2334.221799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.223821] Call Trace: [ 2334.224467] dump_stack+0x107/0x167 [ 2334.225366] should_fail.cold+0x5/0xa [ 2334.226300] ? io_wq_create+0x6ef/0xc00 [ 2334.227274] should_failslab+0x5/0x20 [ 2334.228206] kmem_cache_alloc_node_trace+0x59/0x340 [ 2334.229456] io_wq_create+0x6ef/0xc00 [ 2334.230417] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2334.231676] ? io_import_iovec+0x1120/0x1120 [ 2334.232783] ? io_apoll_task_func+0x2d0/0x2d0 [ 2334.233888] ? __io_req_find_next+0x300/0x300 [ 2334.234985] ? do_raw_spin_lock+0x121/0x260 [ 2334.236058] ? rwlock_bug.part.0+0x90/0x90 [ 2334.237121] __io_uring_add_tctx_node+0x2c6/0x520 [ 2334.238314] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2334.239613] ? alloc_fd+0x2e7/0x670 [ 2334.240539] io_uring_setup+0x1fbb/0x2980 [ 2334.241580] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.242824] ? wait_for_completion_io+0x270/0x270 [ 2334.244077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.245366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.246649] do_syscall_64+0x33/0x40 [ 2334.247575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.248838] RIP: 0033:0x7f71612cbb19 [ 2334.249756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.254292] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.256172] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2334.257927] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2334.259694] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2334.261455] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2334.263215] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:19:06 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000) 14:19:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat$zero(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:19:06 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 36) 14:19:06 executing program 6: r0 = semget(0x3, 0x4, 0x200) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget(0x0, 0x0, 0x200) semctl$SEM_INFO(r1, 0x5, 0x13, &(0x7f0000000000)=""/217) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000200)) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:19:06 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff) 14:19:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x7f000000, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2334.609574] FAULT_INJECTION: forcing a failure. [ 2334.609574] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.612007] CPU: 1 PID: 19474 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2334.613454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.615201] Call Trace: [ 2334.615759] dump_stack+0x107/0x167 [ 2334.616527] should_fail.cold+0x5/0xa [ 2334.617332] ? create_object.isra.0+0x3a/0xa30 [ 2334.618305] should_failslab+0x5/0x20 [ 2334.619134] kmem_cache_alloc+0x5b/0x310 [ 2334.620026] ? io_wq_create+0x114/0xc00 [ 2334.620897] create_object.isra.0+0x3a/0xa30 [ 2334.621855] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2334.622964] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2334.624083] io_wq_create+0x6ef/0xc00 [ 2334.624922] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2334.626026] ? io_import_iovec+0x1120/0x1120 [ 2334.626982] ? io_apoll_task_func+0x2d0/0x2d0 [ 2334.627962] ? __io_req_find_next+0x300/0x300 [ 2334.628935] ? do_raw_spin_lock+0x121/0x260 [ 2334.629875] ? rwlock_bug.part.0+0x90/0x90 [ 2334.630806] __io_uring_add_tctx_node+0x2c6/0x520 [ 2334.631864] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2334.633008] ? alloc_fd+0x2e7/0x670 [ 2334.633814] io_uring_setup+0x1fbb/0x2980 [ 2334.634725] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.635842] ? wait_for_completion_io+0x270/0x270 [ 2334.636918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.638063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.639197] do_syscall_64+0x33/0x40 [ 2334.640006] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.641115] RIP: 0033:0x7f71612cbb19 [ 2334.641920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.645927] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.647596] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2334.649156] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2334.650710] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2334.652271] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2334.653817] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:19:06 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 37) [ 2335.029606] FAULT_INJECTION: forcing a failure. [ 2335.029606] name failslab, interval 1, probability 0, space 0, times 0 [ 2335.032209] CPU: 1 PID: 19587 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2335.033706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2335.035517] Call Trace: [ 2335.036094] dump_stack+0x107/0x167 [ 2335.036883] should_fail.cold+0x5/0xa [ 2335.037716] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2335.038798] should_failslab+0x5/0x20 [ 2335.039650] kmem_cache_alloc_trace+0x55/0x320 [ 2335.040652] __io_uring_add_tctx_node+0x15c/0x520 [ 2335.041698] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2335.042839] ? alloc_fd+0x2e7/0x670 [ 2335.043669] io_uring_setup+0x1fbb/0x2980 [ 2335.044584] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2335.045679] ? wait_for_completion_io+0x270/0x270 [ 2335.046754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2335.047914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2335.049036] do_syscall_64+0x33/0x40 [ 2335.049848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2335.050960] RIP: 0033:0x7f71612cbb19 [ 2335.051792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.055807] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2335.057455] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2335.058984] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2335.060543] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2335.062089] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2335.063649] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:19:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 38) 14:19:23 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:19:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0xeffdffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:19:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xe4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:19:23 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000) 14:19:23 executing program 2: r0 = syz_io_uring_setup(0x5c55, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:19:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:19:23 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2351.400320] FAULT_INJECTION: forcing a failure. [ 2351.400320] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.403570] CPU: 1 PID: 19601 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2351.405374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.407832] Call Trace: [ 2351.408505] dump_stack+0x107/0x167 [ 2351.409454] should_fail.cold+0x5/0xa [ 2351.410446] ? create_object.isra.0+0x3a/0xa30 [ 2351.411620] should_failslab+0x5/0x20 [ 2351.412612] kmem_cache_alloc+0x5b/0x310 [ 2351.413683] create_object.isra.0+0x3a/0xa30 [ 2351.414820] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2351.416124] kmem_cache_alloc_trace+0x151/0x320 [ 2351.417344] __io_uring_add_tctx_node+0x15c/0x520 [ 2351.418577] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2351.419927] ? alloc_fd+0x2e7/0x670 [ 2351.420893] io_uring_setup+0x1fbb/0x2980 [ 2351.421982] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2351.423257] ? wait_for_completion_io+0x270/0x270 [ 2351.424366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2351.425500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2351.426592] do_syscall_64+0x33/0x40 [ 2351.427381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2351.428473] RIP: 0033:0x7f71612cbb19 [ 2351.429291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.433269] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2351.434930] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2351.436455] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2351.437984] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2351.439562] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2351.441105] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:19:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0xfffffdef, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:19:23 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2000000) 14:19:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x78ba, &(0x7f0000000000)={0x0, 0xe10, 0x10, 0x3, 0x1d0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 14:19:23 executing program 2: r0 = syz_io_uring_setup(0x3d24, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:19:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:19:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 39) 14:19:23 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2351.798007] FAULT_INJECTION: forcing a failure. [ 2351.798007] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.800842] CPU: 1 PID: 19728 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2351.802359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.804118] Call Trace: [ 2351.804701] dump_stack+0x107/0x167 [ 2351.805500] should_fail.cold+0x5/0xa [ 2351.806332] ? xas_alloc+0x336/0x440 [ 2351.807149] should_failslab+0x5/0x20 [ 2351.807992] kmem_cache_alloc+0x5b/0x310 [ 2351.808882] ? stack_trace_consume_entry+0x160/0x160 [ 2351.809995] xas_alloc+0x336/0x440 [ 2351.810777] xas_create+0x34a/0x10d0 [ 2351.811621] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2351.812771] xas_store+0x8c/0x1c40 [ 2351.813556] __xa_store+0x164/0x2d0 [ 2351.814356] ? xa_delete_node+0x280/0x280 [ 2351.815272] ? trace_hardirqs_on+0x5b/0x180 [ 2351.816234] xa_store+0x31/0x50 [ 2351.816962] __io_uring_add_tctx_node+0x1cf/0x520 [ 2351.818021] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2351.819121] ? alloc_fd+0x2e7/0x670 [ 2351.819909] io_uring_setup+0x1fbb/0x2980 [ 2351.820799] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2351.821909] ? wait_for_completion_io+0x270/0x270 [ 2351.822992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2351.824146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2351.825264] do_syscall_64+0x33/0x40 [ 2351.826079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2351.827164] RIP: 0033:0x7f71612cbb19 [ 2351.827964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.832006] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2351.833650] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2351.835158] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2351.836756] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2351.838296] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2351.839810] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:19:23 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3000000) 14:19:24 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0xffffff7f, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:19:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) dup2(r1, r0) 14:19:24 executing program 2: syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:19:24 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 40) 14:19:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000) 14:19:24 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:19:24 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x4, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2352.295437] FAULT_INJECTION: forcing a failure. [ 2352.295437] name failslab, interval 1, probability 0, space 0, times 0 [ 2352.296847] CPU: 0 PID: 19759 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2352.297678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2352.298670] Call Trace: [ 2352.298996] dump_stack+0x107/0x167 [ 2352.299449] should_fail.cold+0x5/0xa [ 2352.299912] ? create_object.isra.0+0x3a/0xa30 [ 2352.300474] should_failslab+0x5/0x20 [ 2352.300933] kmem_cache_alloc+0x5b/0x310 [ 2352.301432] create_object.isra.0+0x3a/0xa30 [ 2352.301976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2352.302598] kmem_cache_alloc+0x159/0x310 [ 2352.303111] xas_alloc+0x336/0x440 [ 2352.303545] xas_create+0x34a/0x10d0 [ 2352.304006] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2352.304641] xas_store+0x8c/0x1c40 [ 2352.305095] __xa_store+0x164/0x2d0 [ 2352.305533] ? xa_delete_node+0x280/0x280 [ 2352.306051] ? trace_hardirqs_on+0x5b/0x180 [ 2352.306587] xa_store+0x31/0x50 [ 2352.306993] __io_uring_add_tctx_node+0x1cf/0x520 [ 2352.307591] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2352.308223] ? alloc_fd+0x2e7/0x670 [ 2352.308680] io_uring_setup+0x1fbb/0x2980 [ 2352.309187] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2352.309795] ? wait_for_completion_io+0x270/0x270 [ 2352.310404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2352.311037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2352.311676] do_syscall_64+0x33/0x40 [ 2352.312137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2352.312746] RIP: 0033:0x7f71612cbb19 [ 2352.313195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2352.315410] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2352.316336] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2352.317187] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2352.318038] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2352.318898] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2352.319751] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:19:24 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8, 0x6, 0x8}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:19:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5000000) 14:19:39 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:19:39 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:19:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000000) 14:19:39 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x2000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:19:39 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_io_uring_setup(0x5427, &(0x7f0000000000)={0x0, 0x44b3, 0x8, 0x3, 0x1ff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r2, 0x1ddf, 0xde53, 0x2, &(0x7f0000000340)={[0x86]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x20010, r2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x4, 0x6000, @fd_index=0xa, 0xb598, &(0x7f0000000200)="03c65e7383baf55d9dfc64a51a9a32106b995c8a268c689b466898be48b80f4893f3f68263df56bdbd6e8ad549f00018a17836c98a915307764fdf2fa2f034fd47bfd241f11878e17e6326a78777f13fc7676db4d89298", 0x57, 0x12}, 0x50) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x1010, r0, 0x8000000) 14:19:39 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 41) 14:19:39 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x2000000}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000140)) r2 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x8, &(0x7f0000000600)=[{&(0x7f0000000080)="6656103d1739d5cdd0cf9af4170e6c40dd27213ea4ad6afa7f8ed313728637382de6efbb82d600349997184fa2fe0be91d4db793cc893da2ab05bfca2d6c167088915b616cba0e423d4564c4c48f1e7204acbd53e8e9d5b213fa4830f60edc790c", 0x61, 0xd498}, {&(0x7f0000000200)="2b41dd27f98d172f63aa06204d1925824366996639ab03b7f7a7c6a6526f65bdfdcdbb06d0a10e47d6996093e0d3e3a215e1ed97f93fb4a532105d193b86c9137159f5de6992c180c7b3db9fdfee6acab0e227cc29a17d87a6a469d6e9904bcf6cb214a7a0aaa884", 0x68, 0x4000000000000000}, {&(0x7f0000000280)="c6f63424e33cdb5ae3b0a521e47b0358fc47250c80", 0x15, 0x6}, {&(0x7f00000002c0)="5e1f0b2e0e84ecd3e112854c50d97049b24c0cdca9675801dcf9631ee778f59dd48be67e962c88764afa3fe957b9cabc861f603b0640a452c82fe076f83d717fae4b6bca42c82ac7898e5d9e8241b10a67ab794e6f31e4c574434da2d897971833c781080fcb084e11fb00233551c53d0ab7f7b2c1ce098c03793be816a5d1c0907dd96d756309b6a744e38a0f1f46bc8e0d5f1b717f511c09d306331dd308fd59ed695c74", 0xa5, 0x1}, {&(0x7f0000000380), 0x0, 0x8}, {&(0x7f00000003c0)="c29e3a6ed9011d3bbf1ee20b15d05f4460f3277c763fd4fab157da56f2f8761ff67bc4b5d38f22828d246f3fb3775abb5e0b67fca6be2e8cf3501b0ee8ac745e75acfd291a70fe6cc443198df561581ed91b611c8711314ee06fdd28f14f9aab2fa170cc5f615305492c314168f56563be849bb05ef60b59bb1970d220329f05f2a90ab639a811babe", 0x89, 0x6}, {&(0x7f0000000500)="e63cfd68f46ece93384c49d341f0ba1181bc7b5ab5edd37423e9f173d271", 0x1e, 0x3f}, {&(0x7f0000000540)="5b8778a66767b327df8f7550a8306f50a0ae8e2fd053111e297eeafafcf07bbffc11e84b3f68d8df20d8785f81566e3a116dc7b1ca4c7c583bcb32e108e2776b3fc1415f104d621db2f97ae6899c23f185a7d78b1977e355ec979f1746733a50f535ecb7061601388b853d1a20098d6f37a5b7782770187bb98590e2fe60d6471a2953cbc2ae183458881911379db405052554e4fce1cc4f893f6343f669ce15317d215c5414bf74c977cff9caae4892f802", 0xb2, 0x7}], 0x400, &(0x7f00000006c0)={[{@nodots}]}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000740)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1ff, &(0x7f0000000700)=[r2, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x80000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:19:39 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2367.818326] FAULT_INJECTION: forcing a failure. [ 2367.818326] name failslab, interval 1, probability 0, space 0, times 0 [ 2367.820956] CPU: 0 PID: 19791 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2367.822466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2367.824278] Call Trace: [ 2367.824861] dump_stack+0x107/0x167 [ 2367.825662] should_fail.cold+0x5/0xa [ 2367.826533] ? xas_alloc+0x336/0x440 [ 2367.827354] should_failslab+0x5/0x20 [ 2367.828192] kmem_cache_alloc+0x5b/0x310 [ 2367.829097] xas_alloc+0x336/0x440 [ 2367.829885] xas_create+0x34a/0x10d0 [ 2367.830726] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2367.831884] xas_store+0x8c/0x1c40 [ 2367.832698] __xa_store+0x164/0x2d0 [ 2367.833502] ? xa_delete_node+0x280/0x280 [ 2367.834428] ? trace_hardirqs_on+0x5b/0x180 [ 2367.835388] xa_store+0x31/0x50 [ 2367.836130] __io_uring_add_tctx_node+0x1cf/0x520 [ 2367.837187] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2367.838324] ? alloc_fd+0x2e7/0x670 [ 2367.839148] io_uring_setup+0x1fbb/0x2980 [ 2367.840076] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2367.841179] ? wait_for_completion_io+0x270/0x270 [ 2367.842281] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2367.843423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2367.844529] do_syscall_64+0x33/0x40 [ 2367.845342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2367.846461] RIP: 0033:0x7f71612cbb19 [ 2367.847268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2367.851250] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2367.852912] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2367.854460] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2367.856020] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2367.857569] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2367.859111] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:19:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7000000) [ 2367.904017] loop6: detected capacity change from 0 to 2097152 [ 2367.967918] FAT-fs (loop6): invalid media value (0x6f) [ 2367.969101] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2368.121587] loop6: detected capacity change from 0 to 2097152 [ 2368.171058] FAT-fs (loop6): invalid media value (0x6f) [ 2368.172469] FAT-fs (loop6): Can't find a valid FAT filesystem 14:19:57 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x4010, r0, 0x8000000) 14:19:57 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:19:57 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x7f00, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:19:57 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:19:57 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:19:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:19:57 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8000000) 14:19:57 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 42) [ 2385.143116] FAULT_INJECTION: forcing a failure. [ 2385.143116] name failslab, interval 1, probability 0, space 0, times 0 [ 2385.144883] CPU: 0 PID: 19950 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2385.145920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2385.147167] Call Trace: [ 2385.147574] dump_stack+0x107/0x167 [ 2385.148131] should_fail.cold+0x5/0xa [ 2385.148696] ? ___slab_alloc+0x155/0x700 [ 2385.149302] ? create_object.isra.0+0x3a/0xa30 [ 2385.149984] should_failslab+0x5/0x20 [ 2385.150554] kmem_cache_alloc+0x5b/0x310 [ 2385.151171] create_object.isra.0+0x3a/0xa30 [ 2385.151836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2385.152597] kmem_cache_alloc+0x159/0x310 [ 2385.153274] xas_alloc+0x336/0x440 [ 2385.153845] xas_create+0x34a/0x10d0 [ 2385.154457] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2385.155256] xas_store+0x8c/0x1c40 [ 2385.155844] __xa_store+0x164/0x2d0 [ 2385.156412] ? xa_delete_node+0x280/0x280 [ 2385.157065] ? trace_hardirqs_on+0x5b/0x180 [ 2385.157718] xa_store+0x31/0x50 [ 2385.158222] __io_uring_add_tctx_node+0x1cf/0x520 [ 2385.158963] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2385.159779] ? alloc_fd+0x2e7/0x670 [ 2385.160345] io_uring_setup+0x1fbb/0x2980 [ 2385.161009] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2385.161780] ? wait_for_completion_io+0x270/0x270 [ 2385.162581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2385.163378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2385.164176] do_syscall_64+0x33/0x40 [ 2385.164739] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2385.165509] RIP: 0033:0x7f71612cbb19 [ 2385.166071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2385.168839] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2385.169984] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2385.171032] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2385.172112] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2385.173176] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2385.174229] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:19:57 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000004, 0x20010, r0, 0x0) 14:19:57 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000) 14:19:57 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x40000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:19:57 executing program 6: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:19:57 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 43) 14:19:57 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000) [ 2385.536596] FAULT_INJECTION: forcing a failure. [ 2385.536596] name failslab, interval 1, probability 0, space 0, times 0 [ 2385.538054] CPU: 0 PID: 20159 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2385.538920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2385.539970] Call Trace: [ 2385.540309] dump_stack+0x107/0x167 [ 2385.540773] should_fail.cold+0x5/0xa [ 2385.541263] ? create_object.isra.0+0x3a/0xa30 [ 2385.541841] should_failslab+0x5/0x20 [ 2385.542326] kmem_cache_alloc+0x5b/0x310 [ 2385.542839] ? mark_held_locks+0x9e/0xe0 [ 2385.543357] create_object.isra.0+0x3a/0xa30 [ 2385.543915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2385.544564] kmem_cache_alloc+0x159/0x310 [ 2385.545095] xas_alloc+0x336/0x440 [ 2385.545549] xas_create+0x34a/0x10d0 [ 2385.546026] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2385.546653] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2385.547310] xas_store+0x8c/0x1c40 [ 2385.547782] __xa_store+0x164/0x2d0 [ 2385.548237] ? xa_delete_node+0x280/0x280 [ 2385.548769] ? trace_hardirqs_on+0x5b/0x180 [ 2385.549317] xa_store+0x31/0x50 [ 2385.549744] __io_uring_add_tctx_node+0x1cf/0x520 [ 2385.550345] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2385.551001] ? alloc_fd+0x2e7/0x670 [ 2385.551469] io_uring_setup+0x1fbb/0x2980 [ 2385.552017] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2385.552650] ? wait_for_completion_io+0x270/0x270 [ 2385.553283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2385.553938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2385.554586] do_syscall_64+0x33/0x40 [ 2385.555054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2385.555702] RIP: 0033:0x7f71612cbb19 [ 2385.556170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2385.558448] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2385.559391] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2385.560295] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2385.561182] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2385.562065] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2385.562946] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:19:57 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x1, 0x3, &(0x7f0000000240)="8e461b3c080a5cd810df694d9b5fa40b8f098797bb06f091f0bf91239b0db6c6ef985515aed8fd9292f35f13c16e9c59952760f6c63cdf00e3447a32b9b50938a3b0b30be59cc2a8456624d857b09b720e46a4e8aa97f7cfad88b2af340fcbea7d617be13543292ba178243ed37b626e965c475be0fded161ecc7997c183cc94da0b2afb88f87d88cf2a3b0e9925da1f", 0xebe, 0x0, 0x1, {0x3, r4}}, 0x1) sendmmsg(r3, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r3, 0x8, 0x0, 0x7f, 0x1, 0x1}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:20:13 executing program 6: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:20:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x800000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:20:13 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:20:13 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 44) 14:20:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:20:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x54203fff) 14:20:13 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000200)=""/181, 0xb5}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000002380)=@IORING_OP_STATX={0x15, 0x5, 0x0, r2, &(0x7f0000002240), &(0x7f0000002340)='./file0\x00', 0x2, 0x800, 0x0, {0x0, r4}}, 0xcd) sendmmsg(r3, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x500000a, 0x8010, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = openat$cgroup_ro(r2, &(0x7f0000002200)='pids.current\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r10, 0x8000000) syz_io_uring_submit(r1, r7, &(0x7f0000002180)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r2, 0x0, &(0x7f00000020c0)="39efe5534c5593043f7f1eb00c4fa5a1b174ff60e0af73f8a53dc009332d9db2d70082aac3de1c24fa2ec3cc4cab6697805be3024380c5cfcb0a3ca6d8bf6dd3622016d45dd32e2307f32a83e9f046b5eb8c7b5fe3d5122b8c631f21ea4e7249cd7d0fdf95410b78a01a93532f2e0d4bd8dfb82149237842e7213d63324bd6e3f8733ed6614938b6158659bab46034f93387ef0483d3c7b36477", 0x9a, 0x0, 0x1}, 0x9dfa) fcntl$getflags(r3, 0xb) 14:20:13 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2401.328910] FAULT_INJECTION: forcing a failure. [ 2401.328910] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.331402] CPU: 1 PID: 20279 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2401.332921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2401.334728] Call Trace: [ 2401.335304] dump_stack+0x107/0x167 [ 2401.336105] should_fail.cold+0x5/0xa [ 2401.336933] ? create_object.isra.0+0x3a/0xa30 [ 2401.337926] should_failslab+0x5/0x20 [ 2401.338745] kmem_cache_alloc+0x5b/0x310 [ 2401.339629] ? mark_held_locks+0x9e/0xe0 [ 2401.340522] create_object.isra.0+0x3a/0xa30 [ 2401.341470] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2401.342574] kmem_cache_alloc+0x159/0x310 [ 2401.343480] xas_alloc+0x336/0x440 [ 2401.344264] xas_create+0x34a/0x10d0 [ 2401.345085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2401.346225] xas_store+0x8c/0x1c40 [ 2401.347013] __xa_store+0x164/0x2d0 [ 2401.347905] ? xa_delete_node+0x280/0x280 [ 2401.348965] ? trace_hardirqs_on+0x5b/0x180 [ 2401.350055] xa_store+0x31/0x50 [ 2401.350756] __io_uring_add_tctx_node+0x1cf/0x520 [ 2401.351774] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2401.352886] ? alloc_fd+0x2e7/0x670 [ 2401.353672] io_uring_setup+0x1fbb/0x2980 [ 2401.354558] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2401.355623] ? wait_for_completion_io+0x270/0x270 [ 2401.356691] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2401.357818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2401.358951] do_syscall_64+0x33/0x40 [ 2401.359844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2401.361234] RIP: 0033:0x7f71612cbb19 [ 2401.362023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2401.365921] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2401.367521] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2401.369036] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2401.370535] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2401.372045] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2401.373555] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:20:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x55a00fff) 14:20:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x20000000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:20:13 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 45) 14:20:13 executing program 2: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x100, 0x70bd26, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040860) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x5, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000c0) 14:20:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x55a03fff) [ 2401.828349] FAULT_INJECTION: forcing a failure. [ 2401.828349] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.830911] CPU: 1 PID: 20423 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2401.832352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2401.834069] Call Trace: [ 2401.834630] dump_stack+0x107/0x167 [ 2401.835401] should_fail.cold+0x5/0xa [ 2401.836218] ? xas_alloc+0x336/0x440 [ 2401.837023] should_failslab+0x5/0x20 [ 2401.837838] kmem_cache_alloc+0x5b/0x310 [ 2401.838723] xas_alloc+0x336/0x440 [ 2401.839491] xas_create+0x34a/0x10d0 [ 2401.840313] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2401.841440] xas_store+0x8c/0x1c40 [ 2401.842220] __xa_store+0x164/0x2d0 [ 2401.843007] ? xa_delete_node+0x280/0x280 [ 2401.843917] ? trace_hardirqs_on+0x5b/0x180 [ 2401.844858] xa_store+0x31/0x50 [ 2401.845573] __io_uring_add_tctx_node+0x1cf/0x520 [ 2401.846612] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2401.847739] ? alloc_fd+0x2e7/0x670 [ 2401.848554] io_uring_setup+0x1fbb/0x2980 [ 2401.849460] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2401.850537] ? wait_for_completion_io+0x270/0x270 [ 2401.851591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2401.852727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2401.853828] do_syscall_64+0x33/0x40 14:20:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0fa055) [ 2401.854620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2401.855890] RIP: 0033:0x7f71612cbb19 [ 2401.856685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2401.860963] RSP: 002b:00007f715e820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2401.862757] RAX: ffffffffffffffda RBX: 00007f71613df020 RCX: 00007f71612cbb19 [ 2401.864551] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2401.866356] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2401.868035] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2401.869793] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:20:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x7f000000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:20:14 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 46) [ 2402.235439] FAULT_INJECTION: forcing a failure. [ 2402.235439] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.237607] CPU: 1 PID: 20522 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2402.238804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2402.240243] Call Trace: [ 2402.240713] dump_stack+0x107/0x167 [ 2402.241352] should_fail.cold+0x5/0xa [ 2402.242012] ? create_object.isra.0+0x3a/0xa30 [ 2402.242794] should_failslab+0x5/0x20 [ 2402.243443] kmem_cache_alloc+0x5b/0x310 [ 2402.244150] ? mark_held_locks+0x9e/0xe0 [ 2402.244847] create_object.isra.0+0x3a/0xa30 [ 2402.245599] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2402.246483] kmem_cache_alloc+0x159/0x310 [ 2402.247203] xas_alloc+0x336/0x440 [ 2402.247818] xas_create+0x34a/0x10d0 [ 2402.248485] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2402.249387] xas_store+0x8c/0x1c40 [ 2402.250017] __xa_store+0x164/0x2d0 [ 2402.250643] ? xa_delete_node+0x280/0x280 [ 2402.251361] ? trace_hardirqs_on+0x5b/0x180 [ 2402.252116] xa_store+0x31/0x50 [ 2402.252696] __io_uring_add_tctx_node+0x1cf/0x520 [ 2402.253521] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2402.254420] ? alloc_fd+0x2e7/0x670 [ 2402.255059] io_uring_setup+0x1fbb/0x2980 [ 2402.255787] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2402.256663] ? wait_for_completion_io+0x270/0x270 [ 2402.257520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2402.258426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2402.259315] do_syscall_64+0x33/0x40 [ 2402.259959] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2402.260829] RIP: 0033:0x7f71612cbb19 [ 2402.261460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2402.264632] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2402.265927] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2402.267154] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2402.268383] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2402.269603] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2402.270818] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:20:29 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) 14:20:29 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 14:20:29 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:20:29 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:20:29 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 47) 14:20:29 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:20:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0xeffdffff, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:20:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f2054) [ 2417.904762] FAULT_INJECTION: forcing a failure. [ 2417.904762] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.907624] CPU: 1 PID: 20534 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2417.909373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.911686] Call Trace: [ 2417.912595] dump_stack+0x107/0x167 [ 2417.913516] should_fail.cold+0x5/0xa [ 2417.914471] ? xas_alloc+0x336/0x440 [ 2417.915407] should_failslab+0x5/0x20 [ 2417.916373] kmem_cache_alloc+0x5b/0x310 [ 2417.917417] xas_alloc+0x336/0x440 [ 2417.918318] xas_create+0x34a/0x10d0 [ 2417.919276] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2417.920757] xas_store+0x8c/0x1c40 [ 2417.921934] __xa_store+0x164/0x2d0 [ 2417.922854] ? xa_delete_node+0x280/0x280 [ 2417.923912] ? trace_hardirqs_on+0x5b/0x180 [ 2417.925019] xa_store+0x31/0x50 [ 2417.925851] __io_uring_add_tctx_node+0x1cf/0x520 [ 2417.927068] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2417.928386] ? alloc_fd+0x2e7/0x670 [ 2417.929317] io_uring_setup+0x1fbb/0x2980 [ 2417.930367] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2417.931636] ? wait_for_completion_io+0x270/0x270 [ 2417.932908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2417.934230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2417.935540] do_syscall_64+0x33/0x40 [ 2417.936490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.937789] RIP: 0033:0x7f71612cbb19 [ 2417.938727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.943105] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2417.945086] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2417.946581] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2417.948536] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2417.950034] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2417.951526] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:20:30 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) 14:20:30 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 48) 14:20:30 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3fa055) 14:20:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x3, 0x7f, 0x40, 0x0, 0x8, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0x8}, 0x10010, 0x0, 0x15900, 0x5, 0xed, 0x1, 0xfff, 0x0, 0x10001}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xa) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:20:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0xfffffdef, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2418.210996] FAULT_INJECTION: forcing a failure. [ 2418.210996] name failslab, interval 1, probability 0, space 0, times 0 [ 2418.212597] CPU: 0 PID: 20655 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2418.213486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2418.214527] Call Trace: [ 2418.214865] dump_stack+0x107/0x167 [ 2418.215325] should_fail.cold+0x5/0xa [ 2418.215806] ? ___slab_alloc+0x155/0x700 [ 2418.216331] ? create_object.isra.0+0x3a/0xa30 [ 2418.216904] should_failslab+0x5/0x20 [ 2418.217379] kmem_cache_alloc+0x5b/0x310 [ 2418.217892] create_object.isra.0+0x3a/0xa30 [ 2418.218442] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2418.219083] kmem_cache_alloc+0x159/0x310 [ 2418.219619] xas_alloc+0x336/0x440 [ 2418.220084] xas_create+0x34a/0x10d0 [ 2418.220563] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2418.221228] xas_store+0x8c/0x1c40 [ 2418.221686] __xa_store+0x164/0x2d0 [ 2418.222147] ? xa_delete_node+0x280/0x280 [ 2418.222681] ? trace_hardirqs_on+0x5b/0x180 [ 2418.223236] xa_store+0x31/0x50 [ 2418.223658] __io_uring_add_tctx_node+0x1cf/0x520 [ 2418.224279] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2418.224935] ? alloc_fd+0x2e7/0x670 [ 2418.225407] io_uring_setup+0x1fbb/0x2980 [ 2418.225935] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2418.226569] ? wait_for_completion_io+0x270/0x270 [ 2418.227198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2418.227865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2418.228523] do_syscall_64+0x33/0x40 [ 2418.228997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2418.229665] RIP: 0033:0x7f71612cbb19 [ 2418.230145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2418.232418] RSP: 002b:00007f715e820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2418.233364] RAX: ffffffffffffffda RBX: 00007f71613df020 RCX: 00007f71612cbb19 [ 2418.234250] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2418.235148] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2418.236040] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2418.236919] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:20:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0xeffdffff, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:20:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0xffffff7f, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:20:30 executing program 6: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:20:30 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffff8000) 14:20:30 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000000) 14:20:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x10000000000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:20:45 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 49) 14:20:45 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:20:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000000) 14:20:45 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r2) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, r2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:20:45 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:20:45 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:20:45 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, r6, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd_index=0x5, 0x3, 0x0, 0x0, 0x8, 0x1, {0x2}}, 0x3) [ 2433.746150] FAULT_INJECTION: forcing a failure. [ 2433.746150] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.749780] CPU: 1 PID: 20797 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2433.751269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.753089] Call Trace: [ 2433.753672] dump_stack+0x107/0x167 [ 2433.754440] should_fail.cold+0x5/0xa [ 2433.755243] ? xas_alloc+0x336/0x440 [ 2433.756031] should_failslab+0x5/0x20 [ 2433.756858] kmem_cache_alloc+0x5b/0x310 [ 2433.757720] xas_alloc+0x336/0x440 [ 2433.758471] xas_create+0x34a/0x10d0 [ 2433.759274] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2433.760407] xas_store+0x8c/0x1c40 [ 2433.761173] __xa_store+0x164/0x2d0 [ 2433.761954] ? xa_delete_node+0x280/0x280 [ 2433.762830] ? trace_hardirqs_on+0x5b/0x180 [ 2433.763756] xa_store+0x31/0x50 [ 2433.764503] __io_uring_add_tctx_node+0x1cf/0x520 [ 2433.765540] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2433.766657] ? alloc_fd+0x2e7/0x670 [ 2433.767453] io_uring_setup+0x1fbb/0x2980 [ 2433.768363] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2433.769451] ? wait_for_completion_io+0x270/0x270 [ 2433.770538] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.771658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.772789] do_syscall_64+0x33/0x40 [ 2433.773575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2433.774703] RIP: 0033:0x7f71612cbb19 [ 2433.775507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.779398] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2433.781007] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2433.782516] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2433.784004] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2433.785510] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2433.786999] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:20:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000000) 14:20:45 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r2) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, r2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:20:46 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xf40edbf3fd7e1aa, 0x8030, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x100}, 0x1, {0x0, r3}}, 0x8) 14:20:46 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 50) 14:20:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffffffffffffb) [ 2434.321206] FAULT_INJECTION: forcing a failure. [ 2434.321206] name failslab, interval 1, probability 0, space 0, times 0 [ 2434.323823] CPU: 0 PID: 20976 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2434.325339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2434.327130] Call Trace: [ 2434.327707] dump_stack+0x107/0x167 [ 2434.328514] should_fail.cold+0x5/0xa [ 2434.329344] ? create_object.isra.0+0x3a/0xa30 [ 2434.330335] should_failslab+0x5/0x20 [ 2434.331163] kmem_cache_alloc+0x5b/0x310 [ 2434.332045] ? mark_held_locks+0x9e/0xe0 [ 2434.332954] create_object.isra.0+0x3a/0xa30 [ 2434.333902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2434.335021] kmem_cache_alloc+0x159/0x310 [ 2434.335940] xas_alloc+0x336/0x440 [ 2434.336733] xas_create+0x34a/0x10d0 [ 2434.337565] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2434.338709] xas_store+0x8c/0x1c40 [ 2434.339524] __xa_store+0x164/0x2d0 [ 2434.340332] ? xa_delete_node+0x280/0x280 [ 2434.341253] ? trace_hardirqs_on+0x5b/0x180 [ 2434.342210] xa_store+0x31/0x50 [ 2434.342934] __io_uring_add_tctx_node+0x1cf/0x520 [ 2434.343989] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2434.345133] ? alloc_fd+0x2e7/0x670 [ 2434.345951] io_uring_setup+0x1fbb/0x2980 [ 2434.346872] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2434.347973] ? wait_for_completion_io+0x270/0x270 [ 2434.349107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2434.350290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2434.351462] do_syscall_64+0x33/0x40 [ 2434.352317] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2434.353475] RIP: 0033:0x7f71612cbb19 [ 2434.354308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2434.358436] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2434.360135] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2434.361740] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2434.363343] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2434.364943] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2434.366547] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2439.324771] Bluetooth: hci6: command 0x0409 tx timeout [ 2441.372823] Bluetooth: hci6: command 0x041b tx timeout [ 2443.420768] Bluetooth: hci6: command 0x040f tx timeout [ 2445.468782] Bluetooth: hci6: command 0x0419 tx timeout [ 2445.876011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2445.878512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2445.881526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2445.938523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2445.940357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2445.943240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:21:12 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r2) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, r2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:21:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x4000000000000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:12 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:21:12 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 51) 14:21:12 executing program 2: r0 = syz_io_uring_setup(0x1cd5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x26b}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:21:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000000000) 14:21:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:21:12 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2460.899966] FAULT_INJECTION: forcing a failure. [ 2460.899966] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.901657] CPU: 1 PID: 21496 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2460.902671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2460.903922] Call Trace: [ 2460.904311] dump_stack+0x107/0x167 [ 2460.904857] should_fail.cold+0x5/0xa [ 2460.905419] ? xas_alloc+0x336/0x440 [ 2460.905961] should_failslab+0x5/0x20 [ 2460.906521] kmem_cache_alloc+0x5b/0x310 [ 2460.907119] xas_alloc+0x336/0x440 [ 2460.907644] xas_create+0x34a/0x10d0 [ 2460.908209] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2460.908989] xas_store+0x8c/0x1c40 [ 2460.909529] __xa_store+0x164/0x2d0 [ 2460.910063] ? xa_delete_node+0x280/0x280 [ 2460.910689] xa_store+0x31/0x50 [ 2460.911175] __io_uring_add_tctx_node+0x1cf/0x520 [ 2460.911879] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2460.912652] ? alloc_fd+0x2e7/0x670 [ 2460.913196] io_uring_setup+0x1fbb/0x2980 [ 2460.913812] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2460.914550] ? wait_for_completion_io+0x270/0x270 [ 2460.915276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2460.916040] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2460.916797] do_syscall_64+0x33/0x40 [ 2460.917340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2460.918084] RIP: 0033:0x7f71612cbb19 [ 2460.918627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2460.921296] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2460.922404] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2460.923443] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2460.924478] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2460.925505] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2460.926528] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:21:13 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:21:13 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 52) 14:21:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60000000000000) 14:21:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:21:13 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r1) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, r1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, r0) 14:21:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x80000000000000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:13 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000080)={0x0, 0x800}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2461.236221] FAULT_INJECTION: forcing a failure. [ 2461.236221] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.238731] CPU: 0 PID: 21515 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2461.240220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2461.242012] Call Trace: [ 2461.242584] dump_stack+0x107/0x167 [ 2461.243387] should_fail.cold+0x5/0xa [ 2461.244222] ? create_object.isra.0+0x3a/0xa30 [ 2461.245227] should_failslab+0x5/0x20 [ 2461.246052] kmem_cache_alloc+0x5b/0x310 [ 2461.246924] ? mark_held_locks+0x9e/0xe0 [ 2461.247807] create_object.isra.0+0x3a/0xa30 [ 2461.248756] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2461.249869] kmem_cache_alloc+0x159/0x310 [ 2461.250781] xas_alloc+0x336/0x440 [ 2461.251553] xas_create+0x34a/0x10d0 [ 2461.252385] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2461.253530] xas_store+0x8c/0x1c40 [ 2461.254334] __xa_store+0x164/0x2d0 [ 2461.255127] ? xa_delete_node+0x280/0x280 [ 2461.256035] ? trace_hardirqs_on+0x5b/0x180 [ 2461.257002] xa_store+0x31/0x50 [ 2461.257734] __io_uring_add_tctx_node+0x1cf/0x520 [ 2461.258785] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2461.259908] ? alloc_fd+0x2e7/0x670 [ 2461.260721] io_uring_setup+0x1fbb/0x2980 [ 2461.261629] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2461.262709] ? wait_for_completion_io+0x270/0x270 [ 2461.263804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2461.264937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2461.266049] do_syscall_64+0x33/0x40 [ 2461.266850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2461.267945] RIP: 0033:0x7f71612cbb19 [ 2461.268750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.272688] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2461.274328] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 14:21:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80000000000000) [ 2461.275849] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2461.277540] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2461.279076] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2461.280625] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:21:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff00000000) 14:21:13 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:21:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x100000000000000) 14:21:32 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r1) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, r1) 14:21:32 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) 14:21:32 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:21:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:21:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x2000000000000000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 53) 14:21:32 executing program 2: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x30, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2010, r0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r2, 0x0, &(0x7f0000000200)="71d474cbe943ee84157e9d73ca12fe8bb43bddf958727c4456f8bf8132d91ae5088e40a689525de14d9a68846f427569b835b8f7cd4617b1e8bf70d37dbc80918b3af3ad2613f27a2b3e46d6262d3c0c5480bf50f4486d9f50eca530465d4f5569ac72f2bdd273204d88c08ae060d9e6cfbbd95fc7a16efc8dddd773f42183ff673a0ec732068bd09b7064d34e3f5c82bab49166832c09", 0x97, 0x20008081, 0x0, {0x0, r3}}, 0xffffffff) [ 2480.143411] FAULT_INJECTION: forcing a failure. [ 2480.143411] name failslab, interval 1, probability 0, space 0, times 0 [ 2480.145950] CPU: 0 PID: 21556 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2480.147622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2480.149423] Call Trace: [ 2480.150006] dump_stack+0x107/0x167 [ 2480.150805] should_fail.cold+0x5/0xa [ 2480.151629] ? xas_alloc+0x336/0x440 [ 2480.152428] should_failslab+0x5/0x20 [ 2480.153259] kmem_cache_alloc+0x5b/0x310 [ 2480.154153] xas_alloc+0x336/0x440 [ 2480.154930] xas_create+0x34a/0x10d0 [ 2480.155761] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2480.156914] xas_store+0x8c/0x1c40 [ 2480.157719] __xa_store+0x164/0x2d0 [ 2480.158511] ? xa_delete_node+0x280/0x280 [ 2480.159420] ? trace_hardirqs_on+0x5b/0x180 [ 2480.160373] xa_store+0x31/0x50 [ 2480.161103] __io_uring_add_tctx_node+0x1cf/0x520 [ 2480.162146] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2480.163272] ? alloc_fd+0x2e7/0x670 [ 2480.164087] io_uring_setup+0x1fbb/0x2980 [ 2480.165002] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2480.166095] ? wait_for_completion_io+0x270/0x270 [ 2480.167184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2480.168308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2480.169433] do_syscall_64+0x33/0x40 [ 2480.170236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2480.171327] RIP: 0033:0x7f71612cbb19 [ 2480.172122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2480.176036] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2480.177670] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2480.179188] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2480.180727] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2480.182261] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2480.183793] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:21:32 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r1) 14:21:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:21:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x200000000000000) 14:21:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:21:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 54) 14:21:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x7f00000000000000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:32 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) [ 2480.670261] FAULT_INJECTION: forcing a failure. [ 2480.670261] name failslab, interval 1, probability 0, space 0, times 0 [ 2480.673422] CPU: 1 PID: 21583 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2480.675405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2480.677673] Call Trace: [ 2480.678406] dump_stack+0x107/0x167 [ 2480.679399] should_fail.cold+0x5/0xa [ 2480.680494] ? ___slab_alloc+0x360/0x700 [ 2480.681547] ? create_object.isra.0+0x3a/0xa30 [ 2480.682740] should_failslab+0x5/0x20 [ 2480.683855] kmem_cache_alloc+0x5b/0x310 [ 2480.684868] create_object.isra.0+0x3a/0xa30 [ 2480.686066] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2480.687515] kmem_cache_alloc+0x159/0x310 [ 2480.688474] xas_alloc+0x336/0x440 [ 2480.689309] xas_create+0x34a/0x10d0 [ 2480.690324] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2480.691889] xas_store+0x8c/0x1c40 [ 2480.692745] __xa_store+0x164/0x2d0 [ 2480.693583] ? xa_delete_node+0x280/0x280 [ 2480.694542] ? trace_hardirqs_on+0x5b/0x180 [ 2480.695531] xa_store+0x31/0x50 [ 2480.696284] __io_uring_add_tctx_node+0x1cf/0x520 [ 2480.697390] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2480.698576] ? alloc_fd+0x2e7/0x670 [ 2480.699412] io_uring_setup+0x1fbb/0x2980 [ 2480.700353] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2480.701510] ? wait_for_completion_io+0x270/0x270 [ 2480.702605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2480.703779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2480.704949] do_syscall_64+0x33/0x40 [ 2480.705762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2480.706921] RIP: 0033:0x7f71612cbb19 [ 2480.707738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2480.711880] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2480.713609] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2480.715229] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2480.716851] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2480.718455] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2480.720245] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:21:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x300000000000000) 14:21:47 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pkey_alloc(0x0, 0x2) 14:21:47 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) 14:21:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:21:47 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:21:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0xeffdffff00000000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 55) 14:21:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2495.499023] FAULT_INJECTION: forcing a failure. [ 2495.499023] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.501025] CPU: 0 PID: 21605 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2495.502125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2495.503339] Call Trace: [ 2495.503735] dump_stack+0x107/0x167 [ 2495.504280] should_fail.cold+0x5/0xa [ 2495.504851] ? xas_alloc+0x336/0x440 [ 2495.505401] should_failslab+0x5/0x20 [ 2495.505956] kmem_cache_alloc+0x5b/0x310 [ 2495.506559] xas_alloc+0x336/0x440 [ 2495.507083] xas_create+0x34a/0x10d0 [ 2495.507638] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2495.508395] xas_store+0x8c/0x1c40 [ 2495.508937] __xa_store+0x164/0x2d0 [ 2495.509463] ? xa_delete_node+0x280/0x280 [ 2495.510068] ? trace_hardirqs_on+0x5b/0x180 [ 2495.510704] xa_store+0x31/0x50 [ 2495.511184] __io_uring_add_tctx_node+0x1cf/0x520 [ 2495.511875] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2495.512620] ? alloc_fd+0x2e7/0x670 [ 2495.513160] io_uring_setup+0x1fbb/0x2980 [ 2495.513771] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2495.514506] ? wait_for_completion_io+0x270/0x270 [ 2495.515232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2495.515991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2495.516734] do_syscall_64+0x33/0x40 [ 2495.517272] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2495.517997] RIP: 0033:0x7f71612cbb19 [ 2495.518527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2495.521134] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2495.522193] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2495.523181] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2495.524169] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2495.525164] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2495.526152] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:21:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000000000000) 14:21:47 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) syz_io_uring_setup(0x620e, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:21:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:21:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 56) 14:21:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:21:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0xffffff7f00000000, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:47 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, r0) 14:21:47 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x500000000000000) [ 2495.811166] FAULT_INJECTION: forcing a failure. [ 2495.811166] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.814027] CPU: 1 PID: 21628 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2495.815491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2495.817310] Call Trace: [ 2495.817933] dump_stack+0x107/0x167 [ 2495.818894] should_fail.cold+0x5/0xa [ 2495.819765] ? create_object.isra.0+0x3a/0xa30 [ 2495.820727] should_failslab+0x5/0x20 [ 2495.821549] kmem_cache_alloc+0x5b/0x310 [ 2495.822408] ? mark_held_locks+0x9e/0xe0 [ 2495.823269] create_object.isra.0+0x3a/0xa30 [ 2495.824452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2495.825616] kmem_cache_alloc+0x159/0x310 [ 2495.826497] xas_alloc+0x336/0x440 [ 2495.827245] xas_create+0x34a/0x10d0 [ 2495.828046] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2495.829281] xas_store+0x8c/0x1c40 [ 2495.830256] __xa_store+0x164/0x2d0 [ 2495.831032] ? xa_delete_node+0x280/0x280 [ 2495.831917] ? trace_hardirqs_on+0x5b/0x180 [ 2495.832846] xa_store+0x31/0x50 [ 2495.833555] __io_uring_add_tctx_node+0x1cf/0x520 [ 2495.834569] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2495.835676] ? alloc_fd+0x2e7/0x670 [ 2495.836458] io_uring_setup+0x1fbb/0x2980 [ 2495.837345] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2495.838408] ? wait_for_completion_io+0x270/0x270 [ 2495.839443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2495.840548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2495.841653] do_syscall_64+0x33/0x40 [ 2495.842444] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2495.843695] RIP: 0033:0x7f71612cbb19 [ 2495.844647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2495.849247] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2495.851119] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2495.852711] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2495.854244] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2495.855755] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2495.857277] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:21:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:21:48 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, r0) 14:22:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 57) 14:22:03 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x4) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000000000000) 14:22:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:22:03 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) 14:22:03 executing program 6: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) 14:22:03 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:22:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2511.041977] FAULT_INJECTION: forcing a failure. [ 2511.041977] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.044825] CPU: 0 PID: 21765 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2511.046553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.048601] Call Trace: [ 2511.049270] dump_stack+0x107/0x167 [ 2511.050199] should_fail.cold+0x5/0xa [ 2511.051146] ? xas_alloc+0x336/0x440 [ 2511.052080] should_failslab+0x5/0x20 [ 2511.053039] kmem_cache_alloc+0x5b/0x310 [ 2511.054066] xas_alloc+0x336/0x440 [ 2511.054959] xas_create+0x34a/0x10d0 [ 2511.055907] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2511.057198] xas_store+0x8c/0x1c40 [ 2511.058109] __xa_store+0x164/0x2d0 [ 2511.059004] ? xa_delete_node+0x280/0x280 [ 2511.060041] ? trace_hardirqs_on+0x5b/0x180 [ 2511.061129] xa_store+0x31/0x50 [ 2511.061948] __io_uring_add_tctx_node+0x1cf/0x520 [ 2511.063148] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2511.064436] ? alloc_fd+0x2e7/0x670 [ 2511.065395] io_uring_setup+0x1fbb/0x2980 [ 2511.066442] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2511.067690] ? wait_for_completion_io+0x270/0x270 [ 2511.068914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2511.070210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.071473] do_syscall_64+0x33/0x40 [ 2511.072375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2511.073620] RIP: 0033:0x7f71612cbb19 [ 2511.074517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.078907] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2511.080733] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2511.082471] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2511.084209] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2511.085940] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2511.087661] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:22:03 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x2000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x700000000000000) 14:22:03 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) 14:22:03 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:22:03 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 14:22:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) [ 2511.581496] FAULT_INJECTION: forcing a failure. [ 2511.581496] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.584595] CPU: 0 PID: 21798 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 2511.586206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.588120] Call Trace: [ 2511.588733] dump_stack+0x107/0x167 [ 2511.589591] should_fail.cold+0x5/0xa [ 2511.590476] should_failslab+0x5/0x20 [ 2511.591355] kmem_cache_alloc_bulk+0x4b/0x320 [ 2511.592401] io_submit_sqes+0x6fe7/0x8610 [ 2511.593405] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2511.594554] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2511.595672] ? find_held_lock+0x2c/0x110 [ 2511.596615] ? io_submit_sqes+0x8610/0x8610 [ 2511.597626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2511.598745] ? wait_for_completion_io+0x270/0x270 [ 2511.599856] ? rcu_read_lock_any_held+0x75/0xa0 [ 2511.600952] ? vfs_write+0x354/0xb10 [ 2511.601804] ? fput_many+0x2f/0x1a0 [ 2511.602666] ? ksys_write+0x1a9/0x260 [ 2511.603534] ? __ia32_sys_read+0xb0/0xb0 [ 2511.604488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2511.605699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.606911] do_syscall_64+0x33/0x40 [ 2511.607764] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2511.608979] RIP: 0033:0x7f3474e07b19 [ 2511.609829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.614157] RSP: 002b:00007f347237d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2511.615898] RAX: ffffffffffffffda RBX: 00007f3474f1af60 RCX: 00007f3474e07b19 [ 2511.617561] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2511.619227] RBP: 00007f347237d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.620889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2511.622558] R13: 00007ffe7236b56f R14: 00007f347237d300 R15: 0000000000022000 14:22:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:22:18 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), 0x0) 14:22:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x7f00) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000000000000) 14:22:18 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 58) 14:22:18 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 1) 14:22:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:22:18 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2526.200283] FAULT_INJECTION: forcing a failure. [ 2526.200283] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.202705] CPU: 1 PID: 21912 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 2526.204421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.206181] Call Trace: [ 2526.206729] dump_stack+0x107/0x167 [ 2526.207501] should_fail.cold+0x5/0xa [ 2526.208298] ? vm_area_dup+0x78/0x290 [ 2526.209117] should_failslab+0x5/0x20 [ 2526.210022] kmem_cache_alloc+0x5b/0x310 [ 2526.211101] vm_area_dup+0x78/0x290 [ 2526.211899] ? lock_chain_count+0x20/0x20 [ 2526.212789] ? mark_lock+0xf5/0x2df0 [ 2526.213594] ? perf_trace_lock+0xac/0x490 [ 2526.214466] ? SOFTIRQ_verbose+0x10/0x10 [ 2526.215335] ? __lockdep_reset_lock+0x180/0x180 [ 2526.216337] ? __lock_acquire+0x1657/0x5b00 [ 2526.217268] ? vm_area_alloc+0x110/0x110 [ 2526.218139] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.219247] ? SOFTIRQ_verbose+0x10/0x10 [ 2526.220107] ? perf_trace_lock+0xac/0x490 [ 2526.220993] ? lock_acquire+0x197/0x470 [ 2526.221843] ? do_mprotect_pkey+0x1c8/0x940 [ 2526.222760] __split_vma+0xa8/0x4e0 [ 2526.223607] split_vma+0x99/0xe0 [ 2526.224432] mprotect_fixup+0x669/0x8c0 [ 2526.225447] ? change_protection+0x1ad0/0x1ad0 [ 2526.226415] ? down_write_killable_nested+0x180/0x180 [ 2526.227530] ? vmacache_find+0x55/0x2a0 [ 2526.228389] do_mprotect_pkey+0x518/0x940 [ 2526.229280] ? mprotect_fixup+0x8c0/0x8c0 [ 2526.230163] ? __ia32_sys_read+0xb0/0xb0 [ 2526.231030] __x64_sys_pkey_mprotect+0x93/0x100 [ 2526.232019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.233120] do_syscall_64+0x33/0x40 [ 2526.233918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2526.234998] RIP: 0033:0x7f5a5cf9eb19 [ 2526.235792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2526.239673] RSP: 002b:00007f5a5a514188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2526.241280] RAX: ffffffffffffffda RBX: 00007f5a5d0b1f60 RCX: 00007f5a5cf9eb19 [ 2526.242815] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ff1000 [ 2526.244319] RBP: 00007f5a5a5141d0 R08: 0000000000000000 R09: 0000000000000000 [ 2526.245837] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2526.247353] R13: 00007fffeae5fd8f R14: 00007f5a5a514300 R15: 0000000000022000 [ 2526.261427] FAULT_INJECTION: forcing a failure. [ 2526.261427] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.263826] CPU: 1 PID: 21914 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2526.265392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.267477] Call Trace: [ 2526.268138] dump_stack+0x107/0x167 [ 2526.268992] should_fail.cold+0x5/0xa [ 2526.269969] ? create_object.isra.0+0x3a/0xa30 [ 2526.271135] should_failslab+0x5/0x20 [ 2526.272151] kmem_cache_alloc+0x5b/0x310 [ 2526.273117] ? mark_held_locks+0x9e/0xe0 [ 2526.274207] create_object.isra.0+0x3a/0xa30 [ 2526.275240] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2526.276501] kmem_cache_alloc+0x159/0x310 [ 2526.277617] xas_alloc+0x336/0x440 [ 2526.278522] xas_create+0x34a/0x10d0 [ 2526.279543] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.280802] xas_store+0x8c/0x1c40 [ 2526.281842] __xa_store+0x164/0x2d0 [ 2526.282619] ? xa_delete_node+0x280/0x280 [ 2526.283737] ? trace_hardirqs_on+0x5b/0x180 [ 2526.284715] xa_store+0x31/0x50 [ 2526.285552] __io_uring_add_tctx_node+0x1cf/0x520 [ 2526.286816] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2526.287923] ? alloc_fd+0x2e7/0x670 [ 2526.288708] io_uring_setup+0x1fbb/0x2980 [ 2526.289626] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2526.290698] ? wait_for_completion_io+0x270/0x270 [ 2526.291747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.292859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.293962] do_syscall_64+0x33/0x40 [ 2526.294748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2526.295830] RIP: 0033:0x7f71612cbb19 [ 2526.296612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2526.300500] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 14:22:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xfbffffffffff0f00) [ 2526.302126] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2526.303794] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2526.305421] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2526.307186] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2526.308887] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:22:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c08, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:22:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:22:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x40000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:18 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 2) 14:22:18 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 59) 14:22:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0fa05500000000) 14:22:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:22:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2526.669418] FAULT_INJECTION: forcing a failure. [ 2526.669418] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.670739] CPU: 0 PID: 22046 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2526.671537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.672496] Call Trace: [ 2526.672806] dump_stack+0x107/0x167 [ 2526.673239] should_fail.cold+0x5/0xa [ 2526.673681] ? ___slab_alloc+0x470/0x700 [ 2526.674146] ? create_object.isra.0+0x3a/0xa30 [ 2526.674668] should_failslab+0x5/0x20 [ 2526.675102] kmem_cache_alloc+0x5b/0x310 [ 2526.675570] create_object.isra.0+0x3a/0xa30 [ 2526.676071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2526.676652] kmem_cache_alloc+0x159/0x310 [ 2526.677150] xas_alloc+0x336/0x440 [ 2526.677561] xas_create+0x34a/0x10d0 [ 2526.678002] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.678607] xas_store+0x8c/0x1c40 [ 2526.679028] __xa_store+0x164/0x2d0 [ 2526.679454] ? xa_delete_node+0x280/0x280 [ 2526.679943] ? trace_hardirqs_on+0x5b/0x180 [ 2526.680442] xa_store+0x31/0x50 [ 2526.680824] __io_uring_add_tctx_node+0x1cf/0x520 [ 2526.681385] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2526.681987] ? alloc_fd+0x2e7/0x670 [ 2526.682415] io_uring_setup+0x1fbb/0x2980 [ 2526.682897] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2526.683476] ? wait_for_completion_io+0x270/0x270 [ 2526.684046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.684647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.685254] do_syscall_64+0x33/0x40 [ 2526.685688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2526.686280] RIP: 0033:0x7f71612cbb19 [ 2526.686706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2526.688813] RSP: 002b:00007f715e820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2526.689698] RAX: ffffffffffffffda RBX: 00007f71613df020 RCX: 00007f71612cbb19 [ 2526.690518] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2526.691346] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2526.692167] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2526.692987] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:22:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f205400000000) [ 2526.732210] FAULT_INJECTION: forcing a failure. [ 2526.732210] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.733621] CPU: 0 PID: 22052 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 2526.734421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.735375] Call Trace: [ 2526.735684] dump_stack+0x107/0x167 [ 2526.736107] should_fail.cold+0x5/0xa [ 2526.736576] ? create_object.isra.0+0x3a/0xa30 [ 2526.737209] should_failslab+0x5/0x20 [ 2526.737653] kmem_cache_alloc+0x5b/0x310 [ 2526.738129] create_object.isra.0+0x3a/0xa30 [ 2526.738634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2526.739225] kmem_cache_alloc+0x159/0x310 [ 2526.739707] vm_area_dup+0x78/0x290 [ 2526.740128] ? lock_chain_count+0x20/0x20 [ 2526.740610] ? mark_lock+0xf5/0x2df0 [ 2526.741046] ? perf_trace_lock+0xac/0x490 [ 2526.741530] ? SOFTIRQ_verbose+0x10/0x10 [ 2526.741999] ? __lockdep_reset_lock+0x180/0x180 [ 2526.742545] ? __lock_acquire+0x1657/0x5b00 [ 2526.743050] ? vm_area_alloc+0x110/0x110 [ 2526.743522] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.744121] ? SOFTIRQ_verbose+0x10/0x10 [ 2526.744586] ? perf_trace_lock+0xac/0x490 [ 2526.745084] ? lock_acquire+0x197/0x470 [ 2526.745542] ? do_mprotect_pkey+0x1c8/0x940 [ 2526.746041] __split_vma+0xa8/0x4e0 [ 2526.746465] split_vma+0x99/0xe0 [ 2526.746861] mprotect_fixup+0x669/0x8c0 [ 2526.747323] ? change_protection+0x1ad0/0x1ad0 [ 2526.747855] ? down_write_killable_nested+0x180/0x180 [ 2526.748446] ? vmacache_find+0x55/0x2a0 [ 2526.748911] do_mprotect_pkey+0x518/0x940 [ 2526.749400] ? mprotect_fixup+0x8c0/0x8c0 [ 2526.749886] ? __ia32_sys_read+0xb0/0xb0 [ 2526.750355] __x64_sys_pkey_mprotect+0x93/0x100 [ 2526.750893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.751482] do_syscall_64+0x33/0x40 [ 2526.751911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2526.752502] RIP: 0033:0x7f5a5cf9eb19 [ 2526.752934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2526.755056] RSP: 002b:00007f5a5a514188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2526.755930] RAX: ffffffffffffffda RBX: 00007f5a5d0b1f60 RCX: 00007f5a5cf9eb19 [ 2526.756752] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ff1000 [ 2526.757577] RBP: 00007f5a5a5141d0 R08: 0000000000000000 R09: 0000000000000000 [ 2526.758390] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2526.759210] R13: 00007fffeae5fd8f R14: 00007f5a5a514300 R15: 0000000000022000 14:22:35 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:22:35 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), 0x0) 14:22:35 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x4, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:22:35 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3fa05500000000) 14:22:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x800000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:35 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 3) 14:22:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 60) 14:22:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2543.864483] FAULT_INJECTION: forcing a failure. [ 2543.864483] name failslab, interval 1, probability 0, space 0, times 0 [ 2543.867042] CPU: 1 PID: 22171 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 2543.868566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2543.870445] Call Trace: [ 2543.871035] dump_stack+0x107/0x167 [ 2543.871871] should_fail.cold+0x5/0xa [ 2543.872703] ? vm_area_dup+0x78/0x290 [ 2543.873564] should_failslab+0x5/0x20 [ 2543.874398] kmem_cache_alloc+0x5b/0x310 [ 2543.875526] vm_area_dup+0x78/0x290 [ 2543.876621] ? vm_area_alloc+0x110/0x110 [ 2543.877630] ? __vma_adjust+0xbb8/0x2510 [ 2543.878573] __split_vma+0xa8/0x4e0 [ 2543.879374] split_vma+0x99/0xe0 [ 2543.880123] mprotect_fixup+0x6f5/0x8c0 [ 2543.881018] ? change_protection+0x1ad0/0x1ad0 [ 2543.882044] ? down_write_killable_nested+0x180/0x180 [ 2543.883350] ? vmacache_find+0x55/0x2a0 [ 2543.884497] do_mprotect_pkey+0x518/0x940 [ 2543.885509] ? mprotect_fixup+0x8c0/0x8c0 [ 2543.886418] ? __ia32_sys_read+0xb0/0xb0 [ 2543.887355] __x64_sys_pkey_mprotect+0x93/0x100 [ 2543.888399] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2543.889407] FAULT_INJECTION: forcing a failure. [ 2543.889407] name failslab, interval 1, probability 0, space 0, times 0 [ 2543.889548] do_syscall_64+0x33/0x40 [ 2543.892692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2543.893874] RIP: 0033:0x7f5a5cf9eb19 [ 2543.894676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2543.898763] RSP: 002b:00007f5a5a514188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2543.900483] RAX: ffffffffffffffda RBX: 00007f5a5d0b1f60 RCX: 00007f5a5cf9eb19 [ 2543.902095] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ff1000 [ 2543.903700] RBP: 00007f5a5a5141d0 R08: 0000000000000000 R09: 0000000000000000 [ 2543.905314] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2543.906921] R13: 00007fffeae5fd8f R14: 00007f5a5a514300 R15: 0000000000022000 [ 2543.908566] CPU: 0 PID: 22172 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2543.910115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2543.911899] Call Trace: [ 2543.912485] dump_stack+0x107/0x167 [ 2543.913280] should_fail.cold+0x5/0xa [ 2543.914098] ? create_object.isra.0+0x3a/0xa30 [ 2543.915077] should_failslab+0x5/0x20 [ 2543.915899] kmem_cache_alloc+0x5b/0x310 [ 2543.916764] ? mark_held_locks+0x9e/0xe0 [ 2543.917667] create_object.isra.0+0x3a/0xa30 [ 2543.918596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2543.919742] kmem_cache_alloc+0x159/0x310 [ 2543.920668] xas_alloc+0x336/0x440 [ 2543.921475] xas_create+0x34a/0x10d0 [ 2543.922288] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2543.923419] xas_store+0x8c/0x1c40 [ 2543.924216] __xa_store+0x164/0x2d0 [ 2543.924998] ? xa_delete_node+0x280/0x280 [ 2543.925909] ? trace_hardirqs_on+0x5b/0x180 [ 2543.926848] xa_store+0x31/0x50 [ 2543.927560] __io_uring_add_tctx_node+0x1cf/0x520 [ 2543.928584] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2543.929704] ? alloc_fd+0x2e7/0x670 [ 2543.930527] io_uring_setup+0x1fbb/0x2980 [ 2543.931425] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2543.932491] ? wait_for_completion_io+0x270/0x270 [ 2543.933574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2543.934701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2543.935818] do_syscall_64+0x33/0x40 [ 2543.936616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2543.937722] RIP: 0033:0x7f71612cbb19 [ 2543.938512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2543.942426] RSP: 002b:00007f715e841108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2543.944044] RAX: ffffffffffffffda RBX: 00007f71613def60 RCX: 00007f71612cbb19 [ 2543.945577] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 2543.947081] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 2543.948599] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 2543.950140] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:22:36 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 4) 14:22:36 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:22:36 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 61) 14:22:36 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffffffff00000000) [ 2544.148213] FAULT_INJECTION: forcing a failure. [ 2544.148213] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.151015] CPU: 1 PID: 22220 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 2544.152550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.154632] Call Trace: [ 2544.155283] dump_stack+0x107/0x167 [ 2544.156107] should_fail.cold+0x5/0xa [ 2544.157011] ? create_object.isra.0+0x3a/0xa30 [ 2544.158181] should_failslab+0x5/0x20 [ 2544.159026] kmem_cache_alloc+0x5b/0x310 [ 2544.159982] create_object.isra.0+0x3a/0xa30 [ 2544.161015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2544.162202] kmem_cache_alloc+0x159/0x310 [ 2544.163243] vm_area_dup+0x78/0x290 [ 2544.164205] ? vm_area_alloc+0x110/0x110 [ 2544.165031] ? __vma_adjust+0xbb8/0x2510 [ 2544.166040] __split_vma+0xa8/0x4e0 [ 2544.167033] split_vma+0x99/0xe0 [ 2544.167769] mprotect_fixup+0x6f5/0x8c0 [ 2544.168708] ? change_protection+0x1ad0/0x1ad0 [ 2544.169757] ? down_write_killable_nested+0x180/0x180 [ 2544.171023] ? vmacache_find+0x55/0x2a0 [ 2544.171947] do_mprotect_pkey+0x518/0x940 [ 2544.172800] ? mprotect_fixup+0x8c0/0x8c0 [ 2544.173808] ? __ia32_sys_read+0xb0/0xb0 [ 2544.174744] __x64_sys_pkey_mprotect+0x93/0x100 [ 2544.175882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.176938] do_syscall_64+0x33/0x40 [ 2544.177707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2544.178773] RIP: 0033:0x7f5a5cf9eb19 [ 2544.179530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.183266] RSP: 002b:00007f5a5a514188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2544.184858] RAX: ffffffffffffffda RBX: 00007f5a5d0b1f60 RCX: 00007f5a5cf9eb19 [ 2544.186361] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ff1000 [ 2544.187840] RBP: 00007f5a5a5141d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.189326] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2544.190797] R13: 00007fffeae5fd8f R14: 00007f5a5a514300 R15: 0000000000022000 [ 2544.297501] FAULT_INJECTION: forcing a failure. [ 2544.297501] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.299888] CPU: 1 PID: 22294 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2544.301326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.303017] Call Trace: [ 2544.303595] dump_stack+0x107/0x167 [ 2544.304354] should_fail.cold+0x5/0xa [ 2544.305141] ? vm_area_dup+0x78/0x290 [ 2544.306001] should_failslab+0x5/0x20 [ 2544.306855] kmem_cache_alloc+0x5b/0x310 [ 2544.307774] vm_area_dup+0x78/0x290 [ 2544.308611] ? mark_lock+0xf5/0x2df0 [ 2544.309477] ? lock_chain_count+0x20/0x20 [ 2544.310427] ? mark_lock+0xf5/0x2df0 [ 2544.311261] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2544.312442] ? lock_chain_count+0x20/0x20 [ 2544.313395] ? mark_lock+0xf5/0x2df0 [ 2544.314220] ? vm_area_alloc+0x110/0x110 [ 2544.315133] ? __lock_acquire+0x1657/0x5b00 [ 2544.316133] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2544.317316] ? SOFTIRQ_verbose+0x10/0x10 [ 2544.318237] ? vmacache_find+0x55/0x2a0 [ 2544.319146] __split_vma+0xa8/0x4e0 [ 2544.319955] __do_munmap+0x365/0x1260 [ 2544.320838] ? arch_get_unmapped_area+0x450/0x450 [ 2544.321936] mmap_region+0x7cc/0x1500 [ 2544.322787] do_mmap+0x868/0x1370 [ 2544.323583] vm_mmap_pgoff+0x198/0x1f0 [ 2544.324465] ? randomize_page+0xb0/0xb0 [ 2544.325353] ksys_mmap_pgoff+0x41c/0x560 [ 2544.326268] ? find_mergeable_anon_vma+0x250/0x250 [ 2544.327431] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2544.328637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.329819] do_syscall_64+0x33/0x40 [ 2544.330687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2544.331839] RIP: 0033:0x7f71612cbb62 [ 2544.332707] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2544.337455] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2544.339567] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2544.341553] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2544.343523] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2544.345520] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2544.347481] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:22:36 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 5) 14:22:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x20000000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:36 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = fork() r2 = fork() kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) ptrace(0x4219, r2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xdff3, 0x6}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x36, 0x8, 0x5, 0x9, 0x0, 0xcf2, 0x480, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x2, 0x9}, 0x20, 0x1, 0xfffffff8, 0x8, 0x1, 0x7f, 0x101, 0x0, 0x6, 0x0, 0x40}, r1, 0x10, r3, 0x8) 14:22:36 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x2000, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) [ 2544.518996] FAULT_INJECTION: forcing a failure. [ 2544.518996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2544.522501] CPU: 1 PID: 22299 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 2544.524241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.526378] Call Trace: [ 2544.527100] dump_stack+0x107/0x167 [ 2544.528264] should_fail.cold+0x5/0xa [ 2544.529522] _copy_to_user+0x2e/0x180 [ 2544.530506] simple_read_from_buffer+0xcc/0x160 [ 2544.531705] proc_fail_nth_read+0x198/0x230 [ 2544.532809] ? proc_sessionid_read+0x230/0x230 [ 2544.533990] ? security_file_permission+0xb1/0xe0 [ 2544.535487] ? proc_sessionid_read+0x230/0x230 [ 2544.536864] vfs_read+0x228/0x620 [ 2544.537915] ksys_read+0x12d/0x260 [ 2544.539147] ? vfs_write+0xb10/0xb10 [ 2544.540157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2544.541731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.543110] do_syscall_64+0x33/0x40 [ 2544.544255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2544.545735] RIP: 0033:0x7f5a5cf5169c [ 2544.546781] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2544.552221] RSP: 002b:00007f5a5a514170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2544.554504] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5a5cf5169c [ 2544.556451] RDX: 000000000000000f RSI: 00007f5a5a5141e0 RDI: 0000000000000003 [ 2544.558612] RBP: 00007f5a5a5141d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.560537] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2544.562443] R13: 00007fffeae5fd8f R14: 00007f5a5a514300 R15: 0000000000022000 14:22:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:22:52 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:22:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x7f000000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:22:52 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 62) 14:22:52 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 14:22:52 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), 0x0) 14:22:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x7f00, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) [ 2560.326857] FAULT_INJECTION: forcing a failure. [ 2560.326857] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.329789] CPU: 1 PID: 22426 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2560.331539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2560.333627] Call Trace: [ 2560.334295] dump_stack+0x107/0x167 [ 2560.335236] should_fail.cold+0x5/0xa [ 2560.336465] ? create_object.isra.0+0x3a/0xa30 [ 2560.337702] should_failslab+0x5/0x20 [ 2560.338664] kmem_cache_alloc+0x5b/0x310 [ 2560.339695] create_object.isra.0+0x3a/0xa30 [ 2560.340916] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2560.342425] kmem_cache_alloc+0x159/0x310 [ 2560.343470] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2560.344798] vm_area_dup+0x78/0x290 [ 2560.345744] ? mark_lock+0xf5/0x2df0 [ 2560.346692] ? lock_chain_count+0x20/0x20 [ 2560.347734] ? mark_lock+0xf5/0x2df0 [ 2560.348679] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2560.350010] ? lock_chain_count+0x20/0x20 [ 2560.351054] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2560.352179] ? trace_hardirqs_on+0x5b/0x180 [ 2560.353274] ? mark_lock+0xf5/0x2df0 [ 2560.354228] ? vm_area_alloc+0x110/0x110 [ 2560.355252] ? __lock_acquire+0x1657/0x5b00 [ 2560.356379] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2560.357708] ? SOFTIRQ_verbose+0x10/0x10 [ 2560.358745] ? vmacache_find+0x55/0x2a0 [ 2560.359750] __split_vma+0xa8/0x4e0 [ 2560.360687] __do_munmap+0x365/0x1260 [ 2560.361661] ? arch_get_unmapped_area+0x450/0x450 [ 2560.362848] mmap_region+0x7cc/0x1500 [ 2560.363666] do_mmap+0x868/0x1370 [ 2560.364418] vm_mmap_pgoff+0x198/0x1f0 [ 2560.365250] ? randomize_page+0xb0/0xb0 [ 2560.366110] ksys_mmap_pgoff+0x41c/0x560 [ 2560.366968] ? find_mergeable_anon_vma+0x250/0x250 [ 2560.368002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2560.369098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2560.370191] do_syscall_64+0x33/0x40 [ 2560.370966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2560.372038] RIP: 0033:0x7f71612cbb62 [ 2560.372817] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2560.376983] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2560.378898] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2560.380743] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2560.382686] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2560.384521] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2560.386672] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:22:52 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1002, 0x0, 0xffffffffffffffff) 14:22:52 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 63) 14:22:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0xeffdffff) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:52 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:22:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x174, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000006, 0x40010, r0, 0x8000000) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000004c0)={0x0, 0x87eb}) 14:22:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2560.582397] FAULT_INJECTION: forcing a failure. [ 2560.582397] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.583903] CPU: 0 PID: 22545 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2560.584711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2560.585684] Call Trace: [ 2560.585999] dump_stack+0x107/0x167 [ 2560.586434] should_fail.cold+0x5/0xa [ 2560.586947] ? anon_vma_clone+0xdc/0x590 [ 2560.587428] should_failslab+0x5/0x20 [ 2560.587872] kmem_cache_alloc+0x5b/0x310 [ 2560.588355] anon_vma_clone+0xdc/0x590 [ 2560.588824] __split_vma+0x17c/0x4e0 [ 2560.589268] __do_munmap+0x365/0x1260 [ 2560.589896] ? arch_get_unmapped_area+0x450/0x450 [ 2560.590465] mmap_region+0x7cc/0x1500 [ 2560.590935] do_mmap+0x868/0x1370 [ 2560.591356] vm_mmap_pgoff+0x198/0x1f0 [ 2560.591817] ? randomize_page+0xb0/0xb0 [ 2560.592302] ksys_mmap_pgoff+0x41c/0x560 [ 2560.592785] ? find_mergeable_anon_vma+0x250/0x250 [ 2560.593368] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2560.593995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2560.594599] do_syscall_64+0x33/0x40 [ 2560.595037] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2560.595637] RIP: 0033:0x7f71612cbb62 [ 2560.596070] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2560.598212] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2560.599096] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2560.599925] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2560.600753] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2560.601590] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2560.602424] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:22:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x40000, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:22:52 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1004, 0x0, 0xffffffffffffffff) 14:22:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0xfffffdef) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x71, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000040), 0xb}, 0x14021, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x29a}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x62) 14:22:52 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2563.292768] Bluetooth: hci6: command 0x0406 tx timeout 14:23:17 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 64) 14:23:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:23:17 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:23:17 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:23:17 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_setup(0x4308, &(0x7f0000000000)={0x0, 0xa65d, 0x10, 0x1, 0xf4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000000, 0x10010, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0xb8c368cd17b218e8, @fd=r0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x3}, 0xfffffffb) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x2000, @fd_index=0x9, 0x4, &(0x7f0000000380)="c4fbd532694c128618b4cba235ec907f78e0a513826fedf7b7ff86b1240f075909cbb5fd4ab7a4641800a7e02b8b17819d01d4d9df55f37807350e8b9d093daf8ab0d9a751088243fc7b7c41ba200ebd3eb1dc25881f2fae19d36b1d6e3d11ec1a386be262", 0x0, 0x9, 0x1}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r12 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r15 = socket$packet(0x11, 0x3, 0x300) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r16}}, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r16}}, 0x5) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r10, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x3, 0x3, 0x0, 0x7f}, 0x3f) 14:23:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0xffffff7f) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x800000, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:23:17 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x100a, 0x0, 0xffffffffffffffff) [ 2585.433161] FAULT_INJECTION: forcing a failure. [ 2585.433161] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.435811] CPU: 0 PID: 22687 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2585.437305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.439220] Call Trace: [ 2585.439798] dump_stack+0x107/0x167 [ 2585.440591] should_fail.cold+0x5/0xa [ 2585.441423] ? create_object.isra.0+0x3a/0xa30 [ 2585.442435] should_failslab+0x5/0x20 [ 2585.443255] kmem_cache_alloc+0x5b/0x310 [ 2585.444157] create_object.isra.0+0x3a/0xa30 [ 2585.445103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2585.446240] kmem_cache_alloc+0x159/0x310 [ 2585.447178] anon_vma_clone+0xdc/0x590 [ 2585.448063] __split_vma+0x17c/0x4e0 [ 2585.448891] __do_munmap+0x365/0x1260 [ 2585.449751] ? arch_get_unmapped_area+0x450/0x450 [ 2585.450885] mmap_region+0x7cc/0x1500 [ 2585.451762] do_mmap+0x868/0x1370 [ 2585.452555] vm_mmap_pgoff+0x198/0x1f0 [ 2585.453431] ? randomize_page+0xb0/0xb0 [ 2585.454392] ksys_mmap_pgoff+0x41c/0x560 [ 2585.455303] ? find_mergeable_anon_vma+0x250/0x250 [ 2585.456396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2585.457548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2585.458695] do_syscall_64+0x33/0x40 [ 2585.459522] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.460659] RIP: 0033:0x7f71612cbb62 [ 2585.461477] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2585.465536] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2585.467210] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2585.468725] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2585.470247] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2585.471757] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2585.473276] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:23:17 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x100c, 0x0, 0xffffffffffffffff) 14:23:17 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 65) 14:23:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:23:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x80010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x10000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000000040000010000000000000020adc99f51af7eaea7401a052b2c04967dccfcaebca602814747a47da208fc9f9fb0075b059d01c29cf469c1095ea0ace4afd3e0dc89eca40dd02f64bd1bd4c54cf47072782ffd54"], 0x10}}], 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r4}, 0x4000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r5, r1, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={r7, r8+10000000}, 0x1, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 14:23:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x10000000000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2585.784113] FAULT_INJECTION: forcing a failure. [ 2585.784113] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.786975] CPU: 1 PID: 22810 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2585.788379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.790074] Call Trace: [ 2585.790618] dump_stack+0x107/0x167 [ 2585.791359] should_fail.cold+0x5/0xa [ 2585.792210] ? vm_area_dup+0x78/0x290 [ 2585.793265] should_failslab+0x5/0x20 [ 2585.794121] kmem_cache_alloc+0x5b/0x310 [ 2585.795121] ? __lockdep_reset_lock+0x180/0x180 [ 2585.796380] vm_area_dup+0x78/0x290 [ 2585.797270] ? find_held_lock+0x2c/0x110 [ 2585.798387] ? __vma_adjust+0x66e/0x2510 [ 2585.799280] ? lock_downgrade+0x6d0/0x6d0 [ 2585.800384] ? up_write+0x191/0x550 [ 2585.801271] ? downgrade_write+0x3a0/0x3a0 [ 2585.802562] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2585.803826] ? vm_area_alloc+0x110/0x110 [ 2585.804788] ? __vma_adjust+0xbb8/0x2510 [ 2585.805937] ? vmacache_find+0x55/0x2a0 [ 2585.806750] __split_vma+0xa8/0x4e0 [ 2585.807631] __do_munmap+0xf40/0x1260 [ 2585.808656] ? arch_get_unmapped_area+0x450/0x450 [ 2585.809690] mmap_region+0x7cc/0x1500 [ 2585.810591] do_mmap+0x868/0x1370 [ 2585.811408] vm_mmap_pgoff+0x198/0x1f0 [ 2585.812287] ? randomize_page+0xb0/0xb0 [ 2585.813232] ksys_mmap_pgoff+0x41c/0x560 [ 2585.814082] ? find_mergeable_anon_vma+0x250/0x250 [ 2585.815200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2585.816485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2585.817752] do_syscall_64+0x33/0x40 [ 2585.818628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.819917] RIP: 0033:0x7f71612cbb62 [ 2585.820798] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2585.824978] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2585.826684] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2585.828193] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2585.829689] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2585.831256] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2585.832747] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:23:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x20000000, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:23:32 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) (fail_nth: 1) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:23:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:23:32 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 14:23:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r1 = syz_io_uring_setup(0x3c08, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, r5, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x420201, 0x23456}, 0x401) 14:23:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x4000000000000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 66) 14:23:32 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2600.613513] FAULT_INJECTION: forcing a failure. [ 2600.613513] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.616863] CPU: 1 PID: 22840 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2600.618755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.620998] Call Trace: [ 2600.621716] dump_stack+0x107/0x167 [ 2600.621981] FAULT_INJECTION: forcing a failure. [ 2600.621981] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.622711] should_fail.cold+0x5/0xa [ 2600.622741] ? create_object.isra.0+0x3a/0xa30 [ 2600.626989] should_failslab+0x5/0x20 [ 2600.628031] kmem_cache_alloc+0x5b/0x310 [ 2600.629137] create_object.isra.0+0x3a/0xa30 [ 2600.630336] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2600.631686] kmem_cache_alloc+0x159/0x310 [ 2600.632810] vm_area_dup+0x78/0x290 [ 2600.633790] ? find_held_lock+0x2c/0x110 [ 2600.634824] ? __vma_adjust+0x66e/0x2510 [ 2600.635747] ? lock_downgrade+0x6d0/0x6d0 [ 2600.636716] ? up_write+0x191/0x550 [ 2600.637554] ? downgrade_write+0x3a0/0x3a0 [ 2600.638527] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2600.639738] ? vm_area_alloc+0x110/0x110 [ 2600.640651] ? __vma_adjust+0xbb8/0x2510 [ 2600.641596] ? vmacache_find+0x55/0x2a0 [ 2600.642510] __split_vma+0xa8/0x4e0 [ 2600.643334] __do_munmap+0xf40/0x1260 [ 2600.644190] ? arch_get_unmapped_area+0x450/0x450 [ 2600.645287] mmap_region+0x7cc/0x1500 [ 2600.646176] do_mmap+0x868/0x1370 [ 2600.646970] vm_mmap_pgoff+0x198/0x1f0 [ 2600.647870] ? randomize_page+0xb0/0xb0 [ 2600.648785] ksys_mmap_pgoff+0x41c/0x560 [ 2600.649719] ? find_mergeable_anon_vma+0x250/0x250 [ 2600.650842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.652037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.653224] do_syscall_64+0x33/0x40 [ 2600.654083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2600.655258] RIP: 0033:0x7f71612cbb62 [ 2600.656083] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2600.660164] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2600.661909] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2600.663495] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2600.665077] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2600.666693] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2600.668304] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2600.669964] CPU: 0 PID: 22836 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 2600.671047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.672310] Call Trace: [ 2600.672724] dump_stack+0x107/0x167 [ 2600.673288] should_fail.cold+0x5/0xa [ 2600.673889] should_failslab+0x5/0x20 [ 2600.674479] kmem_cache_alloc_bulk+0x4b/0x320 [ 2600.675175] io_submit_sqes+0x6fe7/0x8610 [ 2600.675849] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2600.676618] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2600.677357] ? find_held_lock+0x2c/0x110 [ 2600.677995] ? io_submit_sqes+0x8610/0x8610 [ 2600.678648] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2600.679411] ? wait_for_completion_io+0x270/0x270 [ 2600.680140] ? rcu_read_lock_any_held+0x75/0xa0 [ 2600.680840] ? vfs_write+0x354/0xb10 [ 2600.681407] ? fput_many+0x2f/0x1a0 [ 2600.681961] ? ksys_write+0x1a9/0x260 [ 2600.682532] ? __ia32_sys_read+0xb0/0xb0 [ 2600.683145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2600.683941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.684746] do_syscall_64+0x33/0x40 [ 2600.685330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2600.686140] RIP: 0033:0x7f08dd7ebb19 [ 2600.686707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.689509] RSP: 002b:00007f08dad61188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2600.690685] RAX: ffffffffffffffda RBX: 00007f08dd8fef60 RCX: 00007f08dd7ebb19 [ 2600.691760] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000004 [ 2600.692843] RBP: 00007f08dad611d0 R08: 0000000020000300 R09: 0000000000000008 [ 2600.693939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2600.695014] R13: 00007ffd0c20a81f R14: 00007f08dad61300 R15: 0000000000022000 14:23:32 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3, 0xffffffffffffffff) 14:23:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x4, 0xc0, 0x0, 0x0, 0x1, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x100000000, 0x8}, 0xc08, 0x8, 0x6550, 0x8, 0x101, 0x2c, 0x0, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x6) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x42f, &(0x7f0000000080)={0x0, 0xa45f, 0x1, 0x2, 0x26b}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0xffffda69, 0x4, 0x1}, 0x7) 14:23:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x80000000000000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x7f000000, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:23:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:23:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 67) 14:23:33 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 14:23:33 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2601.104510] FAULT_INJECTION: forcing a failure. [ 2601.104510] name failslab, interval 1, probability 0, space 0, times 0 [ 2601.107613] CPU: 1 PID: 23067 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2601.109446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2601.111690] Call Trace: [ 2601.112447] dump_stack+0x107/0x167 [ 2601.113374] should_fail.cold+0x5/0xa [ 2601.114427] ? anon_vma_clone+0xdc/0x590 [ 2601.115538] should_failslab+0x5/0x20 [ 2601.116487] kmem_cache_alloc+0x5b/0x310 [ 2601.117601] anon_vma_clone+0xdc/0x590 [ 2601.118676] __split_vma+0x17c/0x4e0 [ 2601.119708] __do_munmap+0xf40/0x1260 [ 2601.120635] ? arch_get_unmapped_area+0x450/0x450 [ 2601.121956] mmap_region+0x7cc/0x1500 [ 2601.122879] do_mmap+0x868/0x1370 [ 2601.123718] vm_mmap_pgoff+0x198/0x1f0 [ 2601.124644] ? randomize_page+0xb0/0xb0 [ 2601.125606] ksys_mmap_pgoff+0x41c/0x560 [ 2601.126579] ? find_mergeable_anon_vma+0x250/0x250 [ 2601.127744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2601.128983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2601.130221] do_syscall_64+0x33/0x40 [ 2601.131095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2601.132297] RIP: 0033:0x7f71612cbb62 [ 2601.133195] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2601.137720] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2601.139696] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2601.141490] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2601.143343] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2601.145223] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2601.146906] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:23:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x2000000000000000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0xeffdffff, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:23:47 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000000)=""/209, 0xd1}) 14:23:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:23:47 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:23:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:23:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 68) 14:23:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x7f00000000000000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:47 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff) 14:23:47 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) [ 2615.853346] FAULT_INJECTION: forcing a failure. [ 2615.853346] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.856139] CPU: 0 PID: 23098 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2615.857809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2615.859808] Call Trace: [ 2615.860460] dump_stack+0x107/0x167 [ 2615.861358] should_fail.cold+0x5/0xa [ 2615.862365] ? create_object.isra.0+0x3a/0xa30 [ 2615.863488] should_failslab+0x5/0x20 [ 2615.864416] kmem_cache_alloc+0x5b/0x310 [ 2615.865420] create_object.isra.0+0x3a/0xa30 [ 2615.866494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2615.867742] kmem_cache_alloc+0x159/0x310 [ 2615.868763] anon_vma_clone+0xdc/0x590 [ 2615.869731] __split_vma+0x17c/0x4e0 [ 2615.870682] __do_munmap+0xf40/0x1260 [ 2615.871622] ? arch_get_unmapped_area+0x450/0x450 [ 2615.872803] mmap_region+0x7cc/0x1500 [ 2615.873760] do_mmap+0x868/0x1370 [ 2615.874644] vm_mmap_pgoff+0x198/0x1f0 [ 2615.875610] ? randomize_page+0xb0/0xb0 [ 2615.876612] ksys_mmap_pgoff+0x41c/0x560 [ 2615.877589] ? find_mergeable_anon_vma+0x250/0x250 [ 2615.878782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2615.880069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2615.881332] do_syscall_64+0x33/0x40 [ 2615.882244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2615.883512] RIP: 0033:0x7f71612cbb62 [ 2615.884417] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2615.888787] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2615.890612] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2615.892337] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2615.894031] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2615.895698] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2615.897378] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:23:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0xeffdffff00000000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:23:48 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0xfffffdef, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:23:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="100000400000f132a151fcb1a2dc69be44e569b496ccb075566aedd15538870300000d00000000010000009fda3b5319d5d016a868d420eaff00000000cc7908c940d9cf019709baf5fa6e7f727725bcda4574a18e01"], 0x10}}], 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x8000) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000000)={0x8, 0x80, 0x101}) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xffffffffffff0001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r3, &(0x7f0000000080)={&(0x7f0000000000)=@caif, 0x80, &(0x7f00000015c0), 0x0, &(0x7f00000000c0)=""/84, 0x54}, 0x41) r4 = creat(&(0x7f0000001740)='./file0\x00', 0xc0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x1010, r4, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000001800)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r4, &(0x7f0000001780)={0x5010c0, 0x0, 0x15}, &(0x7f00000017c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) syz_io_uring_setup(0x6805, &(0x7f0000001840)={0x0, 0x299, 0x8, 0x2, 0x62, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001940)=@IORING_OP_NOP={0x0, 0x3}, 0x4) io_uring_enter(r4, 0x2606, 0x95d9, 0x2, &(0x7f0000001980)={[0x6]}, 0x8) syz_io_uring_submit(0x0, r6, &(0x7f0000001a80)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f00000019c0)="c26def0c77e48dca1b55c0e809d7f169619ec97fe283bc60d78964123b4df7ba560e1ead15e07351110076cd1acac5bcea2c9259a522fd2b78f9852ba65ad8197991877f79f27e7dc49fa0e1ba1cd4a75c0bb143ff6f19e4d7cc6d29cec25cdf5935b3500e49c6fb18685e03f71fa7a1d53dc8845e12f71643a8bc3ac3068bc6a0d92568b913c64f141227dd8d0568957863f8567d213238596107b4865d146dfff083e3ccee22809b", 0xa9, 0x40055}, 0x5) fchmodat(r4, &(0x7f0000001ac0)='./file0\x00', 0x40) mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x200000c, 0x2813, r4, 0x10000000) 14:23:48 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 69) [ 2616.223377] FAULT_INJECTION: forcing a failure. [ 2616.223377] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.225563] CPU: 1 PID: 23220 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2616.226368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2616.227307] Call Trace: [ 2616.227614] dump_stack+0x107/0x167 [ 2616.228027] should_fail.cold+0x5/0xa [ 2616.228468] ? create_object.isra.0+0x3a/0xa30 [ 2616.228996] should_failslab+0x5/0x20 [ 2616.229428] kmem_cache_alloc+0x5b/0x310 [ 2616.229893] create_object.isra.0+0x3a/0xa30 [ 2616.230401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2616.230996] kmem_cache_alloc+0x159/0x310 [ 2616.231474] anon_vma_clone+0xdc/0x590 [ 2616.231918] __split_vma+0x17c/0x4e0 [ 2616.232342] __do_munmap+0xf40/0x1260 [ 2616.232780] ? arch_get_unmapped_area+0x450/0x450 [ 2616.233331] mmap_region+0x7cc/0x1500 [ 2616.233769] do_mmap+0x868/0x1370 [ 2616.234189] vm_mmap_pgoff+0x198/0x1f0 [ 2616.234638] ? randomize_page+0xb0/0xb0 [ 2616.235104] ksys_mmap_pgoff+0x41c/0x560 [ 2616.235566] ? find_mergeable_anon_vma+0x250/0x250 [ 2616.236134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2616.236730] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2616.237311] do_syscall_64+0x33/0x40 [ 2616.237733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2616.238328] RIP: 0033:0x7f71612cbb62 [ 2616.238752] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2616.240856] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2616.241722] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2616.242540] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2616.243347] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2616.244169] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2616.244978] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:24:05 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482c", 0x15}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:05 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0xa00, 0xffffffffffffffff) 14:24:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:24:05 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c08, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:05 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0xffffff7f00000000) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:24:05 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200182, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000180)={'veth1_to_bridge\x00'}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x80, 0xff, 0xa3, 0x0, 0x99fd, 0x20c08, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_config_ext={0x99, 0x9}, 0x1000, 0x23da3e3f, 0x7, 0x3, 0xfffffffffffffff8, 0xc32, 0x5, 0x0, 0x6243, 0x0, 0x8}, r4, 0x3, r0, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xdbf8af40067a9602, 0x13, r3, 0x0) r6 = accept4$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c, 0x80000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00'}) 14:24:05 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0xffffff7f, 0x0, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:24:05 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 70) [ 2633.803428] FAULT_INJECTION: forcing a failure. [ 2633.803428] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.805970] CPU: 0 PID: 23345 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2633.807471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2633.809261] Call Trace: [ 2633.809913] dump_stack+0x107/0x167 [ 2633.810737] should_fail.cold+0x5/0xa [ 2633.811571] ? create_object.isra.0+0x3a/0xa30 [ 2633.812574] should_failslab+0x5/0x20 [ 2633.813398] kmem_cache_alloc+0x5b/0x310 [ 2633.814314] create_object.isra.0+0x3a/0xa30 [ 2633.815261] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2633.816374] kmem_cache_alloc+0x159/0x310 [ 2633.817305] vm_area_alloc+0x1c/0x110 [ 2633.818139] mmap_region+0x982/0x1500 [ 2633.819018] do_mmap+0x868/0x1370 [ 2633.819803] vm_mmap_pgoff+0x198/0x1f0 [ 2633.820670] ? randomize_page+0xb0/0xb0 [ 2633.821582] ksys_mmap_pgoff+0x41c/0x560 [ 2633.822484] ? find_mergeable_anon_vma+0x250/0x250 [ 2633.823573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2633.824721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2633.825866] do_syscall_64+0x33/0x40 [ 2633.826700] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2633.827822] RIP: 0033:0x7f71612cbb62 [ 2633.828634] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2633.832659] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2633.834329] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2633.835884] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2633.837430] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2633.838985] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2633.840531] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:24:05 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0xc00, 0xffffffffffffffff) 14:24:06 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 71) 14:24:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r3, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) io_uring_enter(r3, 0x3be3, 0x33b6, 0x2, &(0x7f0000000040)={[0x2]}, 0x8) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_setup(0x6e68, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) sendto(r7, &(0x7f0000000300)="2c91d0d8eec52b6a3f4e05b270fcbe5763016e88dfbb1bf67d80b47586ba40abd44770fa9df6cbeedbd90fcb0522ed81743ff1a8041d963307dabf30b7693ace5a2ea55733f8dd8925ba3973ba9683bb7093deeb8df531c08a214dffcb999169565f6bfc3c21bd93d4398dbd4c4f076b7c43751c5aef2da8da20bc32c00fafbd756c070d91e7bfa9bde7377551b217e36ba0ca0531fee0b9dc7be1b955af25f0bf07193f9d10ea20b931ddf98599c21ef8bc2a8836fbd8d9cea4856b43557b2d06b816f71fda1048e77a3b4a9206326d344bb94c9852e986892f", 0xda, 0x40, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r8 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r8]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:24:06 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12810}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_setup(0x106b, &(0x7f0000000000)={0x0, 0xb93e, 0x2, 0x2, 0x3e0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xfffffff7, 0x0, &(0x7f0000000340)="89ebd505db99a703d528d5b8738f56660008ab4a6853ab9c0c16792d019fe69d02ab19cb7850985abcddcf3cc11244f3eb1babfcb453bbea15468ecba7aa43358c56b839be0460fda18772109e11cc89bf09a624269184a1de9a4cdd7a27d44ec1bbbd2532b0a0c12631347400eb75bdd3edde30e267ff144ff5757bc8402d1c2af41a42705c9a", 0xffffff81, 0x0, 0x1}, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x9) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10, r1, 0x8000000) 14:24:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:06 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) 14:24:06 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x4, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) [ 2634.217155] FAULT_INJECTION: forcing a failure. [ 2634.217155] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.219777] CPU: 0 PID: 23467 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2634.221286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2634.223098] Call Trace: [ 2634.223680] dump_stack+0x107/0x167 [ 2634.224486] should_fail.cold+0x5/0xa [ 2634.225324] ? create_object.isra.0+0x3a/0xa30 [ 2634.226337] should_failslab+0x5/0x20 [ 2634.227165] kmem_cache_alloc+0x5b/0x310 [ 2634.228072] create_object.isra.0+0x3a/0xa30 [ 2634.229035] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2634.230150] kmem_cache_alloc+0x159/0x310 [ 2634.231090] anon_vma_clone+0xdc/0x590 [ 2634.231966] __split_vma+0x17c/0x4e0 [ 2634.232781] __do_munmap+0xf40/0x1260 [ 2634.233622] ? arch_get_unmapped_area+0x450/0x450 [ 2634.234701] mmap_region+0x7cc/0x1500 [ 2634.235567] do_mmap+0x868/0x1370 [ 2634.236349] vm_mmap_pgoff+0x198/0x1f0 [ 2634.237216] ? randomize_page+0xb0/0xb0 [ 2634.238187] ksys_mmap_pgoff+0x41c/0x560 [ 2634.239089] ? find_mergeable_anon_vma+0x250/0x250 [ 2634.240175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2634.241321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2634.242475] do_syscall_64+0x33/0x40 [ 2634.243292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2634.244414] RIP: 0033:0x7f71612cbb62 [ 2634.245225] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2634.249247] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2634.250918] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2634.252505] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2634.254060] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2634.255619] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2634.257176] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2634.329084] cgroup: fork rejected by pids controller in /syz0 14:24:06 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 72) [ 2634.565397] FAULT_INJECTION: forcing a failure. [ 2634.565397] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.568123] CPU: 1 PID: 23553 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2634.569650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2634.571411] Call Trace: [ 2634.571972] dump_stack+0x107/0x167 [ 2634.572917] should_fail.cold+0x5/0xa [ 2634.573949] ? create_object.isra.0+0x3a/0xa30 [ 2634.575022] should_failslab+0x5/0x20 [ 2634.575950] kmem_cache_alloc+0x5b/0x310 [ 2634.577105] create_object.isra.0+0x3a/0xa30 [ 2634.578090] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2634.579491] kmem_cache_alloc_trace+0x151/0x320 [ 2634.580594] perf_event_mmap+0x51a/0xd90 [ 2634.581625] ? perf_event_namespaces+0x50/0x50 [ 2634.582829] ? vma_link+0x619/0x820 [ 2634.583697] mmap_region+0x3a6/0x1500 [ 2634.584540] do_mmap+0x868/0x1370 [ 2634.585452] vm_mmap_pgoff+0x198/0x1f0 [ 2634.586389] ? randomize_page+0xb0/0xb0 [ 2634.587483] ksys_mmap_pgoff+0x41c/0x560 [ 2634.588372] ? find_mergeable_anon_vma+0x250/0x250 [ 2634.589447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2634.590599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2634.591728] do_syscall_64+0x33/0x40 [ 2634.592539] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2634.593650] RIP: 0033:0x7f71612cbb62 [ 2634.594477] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2634.598466] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2634.600125] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2634.601680] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020001000 [ 2634.603245] RBP: 0000000020001000 R08: 0000000000000005 R09: 0000000000000000 [ 2634.604851] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2634.606401] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:24:22 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x3000000, 0xffffffffffffffff) 14:24:22 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 73) 14:24:22 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c10, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:22 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x40010, r0, 0xe3998000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:24:22 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x2000, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:24:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:24:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r8 = fork() r9 = fork() kcmp(r8, r9, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="524240c96de9a614ef6bf7", @ANYRES32=r6]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2650.053024] FAULT_INJECTION: forcing a failure. [ 2650.053024] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.055841] CPU: 0 PID: 23617 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2650.057487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2650.059375] Call Trace: [ 2650.059969] dump_stack+0x107/0x167 [ 2650.060801] should_fail.cold+0x5/0xa [ 2650.061664] ? vm_area_dup+0x78/0x290 [ 2650.062525] should_failslab+0x5/0x20 [ 2650.063375] kmem_cache_alloc+0x5b/0x310 [ 2650.064295] vm_area_dup+0x78/0x290 [ 2650.065209] ? mark_lock+0xf5/0x2df0 [ 2650.066056] ? tracing_generic_entry_update+0x1ed/0x270 [ 2650.067272] ? lock_chain_count+0x20/0x20 [ 2650.068198] ? perf_tp_event+0x5ce/0xc00 [ 2650.069106] ? mark_held_locks+0x9e/0xe0 [ 2650.070041] ? perf_event_switch_output+0x7d0/0x7d0 [ 2650.071176] ? mark_lock+0xf5/0x2df0 [ 2650.072015] ? vm_area_alloc+0x110/0x110 [ 2650.072936] ? __lock_acquire+0x1657/0x5b00 [ 2650.073935] ? lock_acquire+0x197/0x470 [ 2650.074887] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2650.076064] ? SOFTIRQ_verbose+0x10/0x10 [ 2650.076973] ? vmacache_find+0x55/0x2a0 [ 2650.077873] __split_vma+0xa8/0x4e0 [ 2650.078706] __do_munmap+0x365/0x1260 [ 2650.079574] ? arch_get_unmapped_area+0x450/0x450 [ 2650.080667] ? lock_release+0x680/0x680 [ 2650.081576] mmap_region+0x7cc/0x1500 [ 2650.082472] do_mmap+0x868/0x1370 [ 2650.083277] vm_mmap_pgoff+0x198/0x1f0 [ 2650.084175] ? randomize_page+0xb0/0xb0 [ 2650.085109] ksys_mmap_pgoff+0x41c/0x560 [ 2650.086026] ? find_mergeable_anon_vma+0x250/0x250 [ 2650.087146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2650.088328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2650.089504] do_syscall_64+0x33/0x40 [ 2650.090379] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2650.091534] RIP: 0033:0x7f71612cbb62 [ 2650.092366] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2650.096544] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2650.098257] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2650.099878] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2650.101485] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2650.103069] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2650.104605] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:24:22 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x4000000, 0xffffffffffffffff) 14:24:22 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:24:22 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 74) 14:24:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:24:22 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:22 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x7f00, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:24:22 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0xa000000, 0xffffffffffffffff) 14:24:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:22 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7a40, &(0x7f0000000000)={0x0, 0x7a6e, 0x1, 0x0, 0x29f, 0x0, r0}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2650.467836] FAULT_INJECTION: forcing a failure. [ 2650.467836] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.470365] CPU: 1 PID: 23739 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2650.471784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2650.473493] Call Trace: [ 2650.474038] dump_stack+0x107/0x167 [ 2650.474813] should_fail.cold+0x5/0xa [ 2650.475593] ? create_object.isra.0+0x3a/0xa30 [ 2650.476525] should_failslab+0x5/0x20 [ 2650.477311] kmem_cache_alloc+0x5b/0x310 [ 2650.478158] create_object.isra.0+0x3a/0xa30 [ 2650.479066] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2650.480117] kmem_cache_alloc+0x159/0x310 [ 2650.480962] ? mark_lock+0xf5/0x2df0 [ 2650.481738] vm_area_dup+0x78/0x290 [ 2650.482490] ? lock_chain_count+0x20/0x20 [ 2650.483346] ? mark_lock+0xf5/0x2df0 [ 2650.484112] ? lock_chain_count+0x20/0x20 [ 2650.484961] ? mark_held_locks+0x9e/0xe0 [ 2650.485797] ? __lock_acquire+0x1657/0x5b00 [ 2650.486696] ? mark_lock+0xf5/0x2df0 [ 2650.487458] ? vm_area_alloc+0x110/0x110 [ 2650.488292] ? __lock_acquire+0x1657/0x5b00 [ 2650.489193] ? lock_acquire+0x197/0x470 [ 2650.490007] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2650.491076] ? SOFTIRQ_verbose+0x10/0x10 [ 2650.491899] ? vmacache_find+0x55/0x2a0 [ 2650.492713] __split_vma+0xa8/0x4e0 [ 2650.493456] __do_munmap+0x365/0x1260 [ 2650.494225] ? arch_get_unmapped_area+0x450/0x450 [ 2650.495217] ? lock_release+0x680/0x680 [ 2650.496031] mmap_region+0x7cc/0x1500 [ 2650.496820] do_mmap+0x868/0x1370 [ 2650.497541] vm_mmap_pgoff+0x198/0x1f0 [ 2650.498346] ? randomize_page+0xb0/0xb0 [ 2650.499166] ksys_mmap_pgoff+0x41c/0x560 [ 2650.500000] ? find_mergeable_anon_vma+0x250/0x250 [ 2650.501009] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2650.502078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2650.503139] do_syscall_64+0x33/0x40 [ 2650.503900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2650.504929] RIP: 0033:0x7f71612cbb62 [ 2650.505685] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2650.509418] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2650.510975] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2650.512413] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2650.513856] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2650.515355] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2650.516796] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:24:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="931f6fb85ff7688bab33000086ec83a21ba87acdda6466b58af1", @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:24:22 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0xc000000, 0xffffffffffffffff) 14:24:38 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 75) 14:24:38 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x2, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:24:38 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x300000000, 0xffffffffffffffff) 14:24:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 14:24:38 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x40000, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:24:38 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r5, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x8, 0x6, 0x6, 0x0, 0x0, 0x81, 0xc000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x4c450, 0x4, 0x5, 0x6, 0x7, 0x900, 0x4, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xe, r0, 0x3) io_uring_enter(r5, 0x7009, 0xbc64, 0x3, &(0x7f0000000040)={[0x401]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffd3b, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="100000000000000001000000000000000cc51618679bb02b46c43f9de6906d0471cdd86f8f0867f88088c74865d1785ee361f464e4b22c6aa205da5cb0a79bed3f9dc0c778828b8c6db793893f8f628ad292ceb71ec1f5d6d3a18c538c3acde0597e8d3cb3857ca3ad7acc6c54a0839233b2dafcc1ac7531dc086e76b8cc460a6baf7e9f660498195f8db917ae328b50b99b547a435a40ebc6"], 0x10}}], 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000020c0)={{r7}, "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"}) io_uring_enter(r1, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r8 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000500)=ANY=[@ANYBLOB="57d107c59dce7ddc65d900f21e4c81642b89b3867390f95366e2f762a584a573636be1f80dbe069d820d16cfa900127408a4fb00626ba964954f6e6317c7971c0579ad376a299bd83922493c8e851c6dfb7f2399d79d818445e1ffe8c98cf4dfd329cac419b68119511850392d0ff694e5d3563f0a4305cfc6a5c6d01f4d698bee88d25919f55799c2414dc23cad34d678d52e07d933489fdd3c6cb580b91afcd3241080aeabf960281056a9535abaf41703ce28cbae", @ANYRES32=r8]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2666.152213] FAULT_INJECTION: forcing a failure. [ 2666.152213] name failslab, interval 1, probability 0, space 0, times 0 [ 2666.154825] CPU: 1 PID: 23895 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2666.156338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2666.158164] Call Trace: [ 2666.158760] dump_stack+0x107/0x167 [ 2666.159624] should_fail.cold+0x5/0xa [ 2666.160542] ? anon_vma_clone+0xdc/0x590 [ 2666.161434] should_failslab+0x5/0x20 [ 2666.162274] kmem_cache_alloc+0x5b/0x310 [ 2666.163184] anon_vma_clone+0xdc/0x590 [ 2666.164051] __split_vma+0x17c/0x4e0 [ 2666.164877] __do_munmap+0x365/0x1260 [ 2666.165718] ? arch_get_unmapped_area+0x450/0x450 [ 2666.166787] ? lock_release+0x680/0x680 [ 2666.167662] mmap_region+0x7cc/0x1500 [ 2666.168516] do_mmap+0x868/0x1370 [ 2666.169291] vm_mmap_pgoff+0x198/0x1f0 [ 2666.170152] ? randomize_page+0xb0/0xb0 [ 2666.171044] ksys_mmap_pgoff+0x41c/0x560 [ 2666.171937] ? find_mergeable_anon_vma+0x250/0x250 [ 2666.173013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2666.174158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2666.175295] do_syscall_64+0x33/0x40 [ 2666.176111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2666.177227] RIP: 0033:0x7f71612cbb62 [ 2666.178039] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2666.182038] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2666.183725] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2666.185289] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2666.186853] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2666.188627] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2666.190353] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:24:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 14:24:38 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x200000000000000, 0xffffffffffffffff) 14:24:38 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:38 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 76) 14:24:38 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x400000000000000, 0xffffffffffffffff) 14:24:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x800000, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:24:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r5, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) syz_io_uring_setup(0x77a9, &(0x7f0000000040)={0x0, 0x34f9, 0x2, 0x3, 0x3e0, 0x0, r5}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, r1, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4000, @fd_index=0x6, 0x4, 0x7, 0xfff, 0x1, 0x0, {0x1}}, 0x7f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 2666.475331] FAULT_INJECTION: forcing a failure. [ 2666.475331] name failslab, interval 1, probability 0, space 0, times 0 [ 2666.478090] CPU: 1 PID: 24009 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2666.479809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2666.481882] Call Trace: [ 2666.482453] dump_stack+0x107/0x167 [ 2666.483399] should_fail.cold+0x5/0xa [ 2666.484330] ? create_object.isra.0+0x3a/0xa30 [ 2666.485524] should_failslab+0x5/0x20 [ 2666.486360] kmem_cache_alloc+0x5b/0x310 [ 2666.487426] create_object.isra.0+0x3a/0xa30 [ 2666.488454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2666.489669] kmem_cache_alloc+0x159/0x310 [ 2666.490690] anon_vma_clone+0xdc/0x590 [ 2666.491600] __split_vma+0x17c/0x4e0 [ 2666.492389] __do_munmap+0x365/0x1260 [ 2666.493202] ? arch_get_unmapped_area+0x450/0x450 [ 2666.494212] ? lock_release+0x680/0x680 [ 2666.495062] mmap_region+0x7cc/0x1500 [ 2666.495884] do_mmap+0x868/0x1370 [ 2666.496629] vm_mmap_pgoff+0x198/0x1f0 [ 2666.497450] ? randomize_page+0xb0/0xb0 [ 2666.498301] ksys_mmap_pgoff+0x41c/0x560 [ 2666.499173] ? find_mergeable_anon_vma+0x250/0x250 [ 2666.500202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2666.501305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2666.502389] do_syscall_64+0x33/0x40 [ 2666.503181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2666.504257] RIP: 0033:0x7f71612cbb62 [ 2666.505036] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2666.508900] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2666.510505] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2666.512137] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2666.513623] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2666.515122] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2666.516611] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:24:54 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0xa00000000000000, 0xffffffffffffffff) 14:24:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_io_uring_setup(0x620e, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x0, 0x1000000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xff5a, 0x0, 0xfcda}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) syz_io_uring_setup(0xed0, &(0x7f0000000080)={0x0, 0xabd7, 0x0, 0x0, 0xffffffff, 0x0, r5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r6 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="b646a02d0a4a0fad25ec62f1bd1e026dc39a0ee156d43493c7bcd3e502faced5a956c136a3c95eef14f4ef4d85b21c301897683c3a6a0cb70a07393320e78c3840e0741c427a44e1b70f4727a287b15c6b0a29178c3dc33a48f3160e66080c81d387564bc5dba9aca91a35402dea6cef09644b08e635818d703c753b996838768cb8057449", @ANYRES32=r6]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:24:54 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 77) 14:24:54 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:54 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x2, 0x8000000}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:24:54 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:24:54 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x20000000, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:24:54 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x4, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2682.826642] FAULT_INJECTION: forcing a failure. [ 2682.826642] name failslab, interval 1, probability 0, space 0, times 0 [ 2682.829560] CPU: 1 PID: 24140 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2682.831265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2682.833294] Call Trace: [ 2682.833951] dump_stack+0x107/0x167 [ 2682.834976] should_fail.cold+0x5/0xa [ 2682.835987] ? vm_area_alloc+0x1c/0x110 [ 2682.836961] should_failslab+0x5/0x20 [ 2682.837884] kmem_cache_alloc+0x5b/0x310 [ 2682.838900] vm_area_alloc+0x1c/0x110 [ 2682.839827] mmap_region+0x982/0x1500 [ 2682.840784] do_mmap+0x868/0x1370 [ 2682.841645] vm_mmap_pgoff+0x198/0x1f0 [ 2682.842603] ? randomize_page+0xb0/0xb0 [ 2682.843599] ksys_mmap_pgoff+0x41c/0x560 [ 2682.844594] ? find_mergeable_anon_vma+0x250/0x250 [ 2682.845799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2682.847087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2682.848352] do_syscall_64+0x33/0x40 [ 2682.849263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2682.850517] RIP: 0033:0x7f71612cbb62 [ 2682.851439] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2682.855929] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2682.857777] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2682.859505] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2682.861225] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2682.862956] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2682.864675] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:24:54 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0xc00000000000000, 0xffffffffffffffff) 14:24:55 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x5, 0x1f, 0x8, 0x7fff, 0x3, 0x3, 0x800, 0x30b, 0x40, 0x343, 0x85e, 0x1, 0x38, 0x1, 0x4826, 0x3f, 0x400}, [{0x60000000, 0x1f, 0x700000, 0x10000, 0xff, 0x6, 0x4da, 0x7fffffff}], "887cd304900b5211aa8d4c4231cf1883de2af3b22fee9ecc9ceacb685483a98d01588126e3edee588f8e42690c16ff2041e6ba05b20c09a948d418db0c9ca3f1865155487feea5e3bae47e01206dd6a10109c6c1b08aa6d0ff6ca881637f0fb11d208e29d9b703290706d0347b05a139e725b4166107c812e0699e18f609c2b586a9cf6a740b05", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ff) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe0, 0x4, 0xa6, 0x20, 0x0, 0x100, 0x600, 0x12, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x1, @perf_config_ext={0x0, 0x2}, 0x1400, 0x9, 0x0, 0x3, 0x7, 0x3, 0xffff, 0x0, 0x8000, 0x0, 0x81}, 0x0, 0x7, r0, 0x9a63cb10db5a4490) r1 = syz_io_uring_setup(0x629, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x20ac, &(0x7f0000000080)={0x0, 0xac09, 0x2, 0x3, 0xcf}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd=r1, 0x1f, 0x0, 0x0, 0xc, 0x1, {0x1, r4}}, 0x81) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:24:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0x7f000000, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:24:55 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:24:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @tfcpad={0x8, 0x16, 0x3}]}, 0x150}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280)=0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r7, 0x7fff, 0x0, 0x80000001, 0x0, 0x1, {0x0, r8}}, 0x1) r9 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="e06027911ef45fedf8c19af66f7c610a2c5252510e48d8421a4be62719ca0d1e73c5f0c89d21a77873185c766e05f2dd0b2beba7f5b873e587e26bb48f5960be391a6c828840abd48c64c1f8b43ea18d8317e5964fcaf2c70faa79af7e25814dffb9347a21269d550039c6149faa92e0c3ccc55224baa437e784d1167321bac4dd2f9d966119867f40", @ANYRES32=r9]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:25:11 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 78) 14:25:11 executing program 6: pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x8, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000003, r1) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x8, r1) 14:25:11 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd", 0x16}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x5, 0x0, &(0x7f0000000300), 0x8) lseek(r0, 0x4, 0x1) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x22cc, 0x0, 0x0, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:25:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:25:11 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0xeffdffff, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) 14:25:11 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3dc7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x346d, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xa3, 0x8, 0x7, 0x7f, 0x0, 0x0, 0x80, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1fe000, 0x6, @perf_bp={&(0x7f0000000180), 0xc}, 0x446, 0x6, 0x80000000, 0x1, 0x5, 0x6, 0xfff, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r3, 0xb) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:11 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x7f, 0x4, 0xe9, 0x0, 0x5, 0xa000, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x10000, 0x1, 0x4, 0x5, 0x7, 0x1, 0x6a8, 0x0, 0x9}, 0xffffffffffffffff, 0xa, r0, 0x9) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x28002, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x12, 0x0, 0x9, 0x1, 0x0, 0x6, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x343098917829b066, 0x6, 0xebd, 0x4, 0xffffffff, 0x4, 0x9, 0x0, 0x4, 0x0, 0x1f}, 0x0, 0x2, r2, 0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r3, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) io_uring_enter(r3, 0x67e3, 0x1860, 0x0, &(0x7f0000000000)={[0x7]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="9c940000000000002e2f66696c65300030cc13bbdb97f8832b2794e372e84d196beaecaddd8c6649960e55335f53cfd5bff18f8077939763b2204e0d33fee15319e4f5fad331366726928c2aedc9f2fd1db61ac0328faedb6ad0f88e0b65fd37591b08e4fd8f08bb0f48a629353b40c1fc0b19d3a1020aacd9a40a83ee092bf123c8fac7f3ccf213ed37578f25da2e6ffb5b8b4bc95384ebfc2212e6e4d3"]) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) 14:25:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r4, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) bind$802154_raw(r4, &(0x7f0000000040)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14) syz_io_uring_setup(0x2f75, &(0x7f0000000300)={0x0, 0x9150, 0x1, 0x0, 0x87, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r2, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r7 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000500)=ANY=[@ANYBLOB="77bd68c0ba9fa9b2cae6005fee8bea678186518afd6e5a0d3db300e9a1abf20eeec591235dc5dc12d93c129a753d61f5e24c54f3193a29a5fdd43f6b97b8c43ecdfb06146cff15162456396032936568f556529acde85ed20e2f0b3d2d93e46a84085258e67cd387dedf4ea30119fdb726db28fc17ead9bbe33401990dc259b64090958656c7ce13ba3c003308cf3bd85ce66bb034696354ff", @ANYRES32=r7]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2699.193467] FAULT_INJECTION: forcing a failure. [ 2699.193467] name failslab, interval 1, probability 0, space 0, times 0 [ 2699.195253] CPU: 0 PID: 24397 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2699.196295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2699.197538] Call Trace: [ 2699.197941] dump_stack+0x107/0x167 [ 2699.198491] should_fail.cold+0x5/0xa [ 2699.199075] ? create_object.isra.0+0x3a/0xa30 [ 2699.199765] should_failslab+0x5/0x20 [ 2699.200366] kmem_cache_alloc+0x5b/0x310 [ 2699.200980] create_object.isra.0+0x3a/0xa30 [ 2699.201636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2699.202401] kmem_cache_alloc+0x159/0x310 [ 2699.203039] vm_area_alloc+0x1c/0x110 [ 2699.203603] mmap_region+0x982/0x1500 [ 2699.204196] do_mmap+0x868/0x1370 [ 2699.204733] vm_mmap_pgoff+0x198/0x1f0 [ 2699.205332] ? randomize_page+0xb0/0xb0 [ 2699.205954] ksys_mmap_pgoff+0x41c/0x560 [ 2699.206562] ? find_mergeable_anon_vma+0x250/0x250 [ 2699.207317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2699.208104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2699.208873] do_syscall_64+0x33/0x40 [ 2699.209448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2699.210202] RIP: 0033:0x7f71612cbb62 [ 2699.210756] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2699.213484] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2699.214643] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2699.215742] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2699.216802] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2699.217855] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2699.218927] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 14:25:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) creat(&(0x7f0000000640)='./file0\x00', 0x13b) syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 14:25:11 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 79) 14:25:11 executing program 6: pkey_alloc(0x0, 0x3) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, r0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4, r0) 14:25:11 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_notify_exec_t:s0\x00', 0x2b, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000001053493c7701442bf278cbacccc005cf8bdde00315a5c7b1a341bfb34c98ae9e6072417012ad27f621c889543aee5c262cd2a163e21cf68d3b7cbed79cb66e2c9f713ad689"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x2010, r3, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xcb}, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) pread64(r5, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) io_uring_enter(r5, 0x6ea0, 0x9ccc, 0x2, &(0x7f0000000040)={[0x7]}, 0x8) r6 = signalfd4(r4, &(0x7f0000000080), 0x8, 0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pread64(r7, &(0x7f0000000340)=""/212, 0xd4, 0x100000000) 14:25:11 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x44) io_uring_enter(r0, 0x4c07, 0x0, 0xfffffdef, 0x0, 0x0) lseek(r0, 0x4, 0x0) creat(0x0, 0x13b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) [ 2699.461103] FAULT_INJECTION: forcing a failure. [ 2699.461103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2699.462934] CPU: 0 PID: 24516 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2699.463903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2699.465021] Call Trace: [ 2699.465389] dump_stack+0x107/0x167 [ 2699.465889] should_fail.cold+0x5/0xa [ 2699.466409] __alloc_pages_nodemask+0x182/0x600 [ 2699.467050] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2699.467861] ? walk_mem_res+0x170/0x170 [ 2699.468402] alloc_pages_current+0x187/0x280 [ 2699.468993] pte_alloc_one+0x16/0x1a0 [ 2699.469516] __pte_alloc+0x1d/0x330 [ 2699.470006] remap_pfn_range_internal+0x9a3/0xf60 [ 2699.470660] ? lookup_memtype+0x5b/0x200 [ 2699.471255] ? apply_to_existing_page_range+0x40/0x40 [ 2699.471962] remap_pfn_range+0xcd/0x160 [ 2699.472496] ? remap_pfn_range_notrack+0x70/0x70 [ 2699.473133] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2699.473833] io_uring_mmap+0x398/0x530 [ 2699.474362] mmap_file+0x5e/0xe0 [ 2699.474816] mmap_region+0xc4d/0x1500 [ 2699.475364] do_mmap+0x868/0x1370 [ 2699.475844] vm_mmap_pgoff+0x198/0x1f0 [ 2699.476367] ? randomize_page+0xb0/0xb0 [ 2699.476912] ksys_mmap_pgoff+0x41c/0x560 [ 2699.477453] ? find_mergeable_anon_vma+0x250/0x250 [ 2699.478114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2699.478804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2699.479494] do_syscall_64+0x33/0x40 [ 2699.479998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2699.480678] RIP: 0033:0x7f71612cbb62 [ 2699.481168] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2699.483611] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2699.484607] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2699.485551] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2699.486499] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2699.487445] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2699.488382] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2699.507744] audit: type=1400 audit(1758637511.608:267): avc: denied { relabelto } for pid=24514 comm="syz-executor.0" name="UNIX" dev="sockfs" ino=45478 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:systemd_notify_exec_t:s0 tclass=unix_stream_socket permissive=1 14:25:11 executing program 6: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r0, 0x20000080) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 14:25:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe41a, 0x5, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ftruncate(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), 0x0) r5 = syz_io_uring_setup(0x67be, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="756cb3c4fb612899b9683227f349d7e5be4f3531631cfe94aea058d745b39939d40a90b3e8eddb0eacaf627be7a26dd8063f49324423457a429504bbbee9502c9aaeecbd95b77590dc31e60fce1616f6a6c8027c2ad1f247e463306fa737536105e3cca17fe52614ba424bd3cc1ccddb95b5da76324cbc844018cd813e9041cb4a55a5227949854b01b4e57a09ac1df7af458c85307932e579d15e793e4f3600d06dd15bea7ba5be3641ff10b46ea7d864bf8fd08e6cede4f65bd2c63813c67bb4c6690de08cc63ef2", @ANYRES32=r5]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f000000c500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000040)=[r6, r5], 0x2) [ 2699.736397] ------------[ cut here ]------------ [ 2699.737040] WARNING: CPU: 0 PID: 24516 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2699.738150] Modules linked in: [ 2699.738540] CPU: 0 PID: 24516 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2699.739391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2699.740415] RIP: 0010:get_pat_info+0x216/0x270 [ 2699.740977] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 51 8e 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 3a 8e 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 55 a5 5a 00 e9 [ 2699.743173] RSP: 0018:ffff888047197890 EFLAGS: 00010216 [ 2699.743822] RAX: 0000000000020594 RBX: ffff88804ee86800 RCX: ffffc900043f9000 [ 2699.744682] RDX: 0000000000040000 RSI: ffffffff811243f6 RDI: 0000000000000007 [ 2699.745519] RBP: ffff888047197948 R08: 0000000000000000 R09: ffff888047197818 [ 2699.746378] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2699.747255] R13: 1ffff11008e32f12 R14: 0000000000000000 R15: ffff88804ee86850 [ 2699.748124] FS: 00007f715e841700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2699.749106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2699.749815] CR2: 00007ffe72368f40 CR3: 000000004fea0000 CR4: 0000000000350ef0 [ 2699.750684] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2699.751538] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2699.752467] Call Trace: [ 2699.752807] ? pgprot_writethrough+0xc0/0xc0 [ 2699.753888] ? finish_task_switch+0x126/0x5d0 [ 2699.756119] ? finish_task_switch+0xef/0x5d0 [ 2699.758553] untrack_pfn+0xdc/0x240 [ 2699.759549] ? track_pfn_insert+0x150/0x150 [ 2699.760082] ? lock_downgrade+0x6d0/0x6d0 [ 2699.760566] ? uprobe_munmap+0x95/0x560 [ 2699.761067] unmap_single_vma+0x1bc/0x300 [ 2699.761568] zap_page_range_single+0x2ce/0x450 [ 2699.762129] ? unmap_single_vma+0x300/0x300 [ 2699.762637] ? remap_pfn_range_internal+0xc56/0xf60 [ 2699.763262] ? lookup_memtype+0x5b/0x200 [ 2699.763780] ? apply_to_existing_page_range+0x40/0x40 [ 2699.764400] remap_pfn_range+0x139/0x160 [ 2699.764904] ? remap_pfn_range_notrack+0x70/0x70 [ 2699.765470] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2699.766103] io_uring_mmap+0x398/0x530 [ 2699.766567] mmap_file+0x5e/0xe0 [ 2699.767005] mmap_region+0xc4d/0x1500 [ 2699.767470] do_mmap+0x868/0x1370 [ 2699.767917] vm_mmap_pgoff+0x198/0x1f0 [ 2699.768383] ? randomize_page+0xb0/0xb0 [ 2699.768889] ksys_mmap_pgoff+0x41c/0x560 [ 2699.769369] ? find_mergeable_anon_vma+0x250/0x250 [ 2699.769970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2699.770588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2699.771226] do_syscall_64+0x33/0x40 [ 2699.771689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2699.772286] RIP: 0033:0x7f71612cbb62 [ 2699.772748] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2699.774915] RSP: 002b:00007f715e8410f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2699.775822] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f71612cbb62 [ 2699.776649] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2699.777506] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2699.778352] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2699.779204] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020001000 [ 2699.780076] irq event stamp: 1391 [ 2699.780485] hardirqs last enabled at (1399): [] console_unlock+0x92d/0xb40 [ 2699.781506] hardirqs last disabled at (1408): [] console_unlock+0x839/0xb40 [ 2699.782521] softirqs last enabled at (1034): [] asm_call_irq_on_stack+0x12/0x20 [ 2699.783584] softirqs last disabled at (983): [] asm_call_irq_on_stack+0x12/0x20 [ 2699.784618] ---[ end trace 0d2f7d280b21b3be ]--- VM DIAGNOSIS: 14:25:11 Registers: info registers vcpu 0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e3e01 RDI=ffffffff879f71c0 RBP=ffffffff879f7180 RSP=ffff888047197238 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000039 R13=0000000000000039 R14=ffffffff879f7180 R15=dffffc0000000000 RIP=ffffffff822e3e58 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f715e841700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe72368f40 CR3=000000004fea0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8147414d RDX=ffff88800cc73480 RSI=ffffffff8147416e RDI=0000000000000005 RBP=ffffffff83e88f9d RSP=ffff888016d87b48 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88806cf3b2c0 R13=ffff88800cc73480 R14=000000000003b2c0 R15=0000000000092cc0 RIP=ffffffff8140d234 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff9b8c5c8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ad438b7928 CR3=0000000009bea000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=7269762f736563697665642f7379732f XMM01=6c622f6c6175747269762f7365636976 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055ad4386e210000055ad4386ef70 XMM06=0000000000000000ffffffff00000003 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000