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"}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0xfa7, 0x4) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000001100), 0x20040, 0x0) sendfile(r2, r0, &(0x7f0000001140)=0x2, 0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) r4 = syz_open_dev$evdev(&(0x7f0000001180), 0xfff, 0x458402) close_range(r3, r4, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) 22:06:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) 22:06:52 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 22:06:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 6) 22:06:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:06:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:06:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 1637.325505] FAULT_INJECTION: forcing a failure. [ 1637.325505] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.328061] CPU: 0 PID: 8700 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1637.329528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.331274] Call Trace: [ 1637.331839] dump_stack+0x107/0x167 [ 1637.332632] should_fail.cold+0x5/0xa [ 1637.333450] ? io_uring_setup+0x40b/0x2980 [ 1637.334357] should_failslab+0x5/0x20 [ 1637.335170] kmem_cache_alloc_trace+0x55/0x320 [ 1637.336134] ? io_uring_setup+0x39a/0x2980 [ 1637.337057] io_uring_setup+0x40b/0x2980 [ 1637.337926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.338953] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1637.340030] ? wait_for_completion_io+0x270/0x270 [ 1637.340981] FAULT_INJECTION: forcing a failure. [ 1637.340981] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.341104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1637.345053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.346146] do_syscall_64+0x33/0x40 [ 1637.346942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.348027] RIP: 0033:0x7f6ebd7dfb19 [ 1637.348815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.352660] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1637.354267] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1637.355767] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1637.357264] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1637.358755] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1637.360250] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1637.361807] CPU: 1 PID: 8695 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1637.363261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.365025] Call Trace: [ 1637.365594] dump_stack+0x107/0x167 [ 1637.366381] should_fail.cold+0x5/0xa [ 1637.367196] ? create_object.isra.0+0x3a/0xa30 [ 1637.368162] should_failslab+0x5/0x20 [ 1637.369154] kmem_cache_alloc+0x5b/0x310 [ 1637.370028] create_object.isra.0+0x3a/0xa30 [ 1637.371183] kmemleak_alloc_percpu+0xa0/0x100 [ 1637.372133] pcpu_alloc+0x4e2/0x1240 [ 1637.373130] ? io_tctx_exit_cb+0xf0/0xf0 [ 1637.374183] percpu_ref_init+0x31/0x3d0 [ 1637.375050] io_uring_setup+0x47a/0x2980 [ 1637.376103] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.377359] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1637.378656] ? wait_for_completion_io+0x270/0x270 [ 1637.379734] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1637.381089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.382421] do_syscall_64+0x33/0x40 [ 1637.383379] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.384703] RIP: 0033:0x7ff6be2aab19 [ 1637.385655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.390364] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1637.392344] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1637.394328] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1637.396217] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1637.397925] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1637.398130] FAULT_INJECTION: forcing a failure. [ 1637.398130] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.399497] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1637.403818] CPU: 0 PID: 8705 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 1637.405286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.407046] Call Trace: [ 1637.407614] dump_stack+0x107/0x167 [ 1637.408416] should_fail.cold+0x5/0xa [ 1637.409236] ? create_object.isra.0+0x3a/0xa30 [ 1637.410223] should_failslab+0x5/0x20 [ 1637.411039] kmem_cache_alloc+0x5b/0x310 [ 1637.411352] FAULT_INJECTION: forcing a failure. [ 1637.411352] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.411902] ? mark_held_locks+0x9e/0xe0 [ 1637.411934] create_object.isra.0+0x3a/0xa30 [ 1637.411959] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1637.417130] kmem_cache_alloc_bulk+0x168/0x320 [ 1637.418120] io_submit_sqes+0x6fe4/0x8610 [ 1637.419070] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1637.420129] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1637.421176] ? find_held_lock+0x2c/0x110 [ 1637.422058] ? io_submit_sqes+0x8610/0x8610 [ 1637.423000] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.424027] ? wait_for_completion_io+0x270/0x270 [ 1637.425076] ? rcu_read_lock_any_held+0x75/0xa0 [ 1637.426059] ? vfs_write+0x354/0xb10 [ 1637.426867] ? fput_many+0x2f/0x1a0 [ 1637.427644] ? ksys_write+0x1a9/0x260 [ 1637.428457] ? __ia32_sys_read+0xb0/0xb0 [ 1637.429334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1637.430445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.431557] do_syscall_64+0x33/0x40 [ 1637.432375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.433458] RIP: 0033:0x7f16333dbb19 [ 1637.434246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.438144] RSP: 002b:00007f1630951188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1637.439757] RAX: ffffffffffffffda RBX: 00007f16334eef60 RCX: 00007f16333dbb19 [ 1637.441268] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 1637.442770] RBP: 00007f16309511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.444274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.445784] R13: 00007ffcd69a130f R14: 00007f1630951300 R15: 0000000000022000 [ 1637.447347] CPU: 1 PID: 8709 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1637.449160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.451292] Call Trace: [ 1637.451990] dump_stack+0x107/0x167 [ 1637.452954] should_fail.cold+0x5/0xa [ 1637.453947] ? create_object.isra.0+0x3a/0xa30 [ 1637.455125] should_failslab+0x5/0x20 [ 1637.455921] kmem_cache_alloc+0x5b/0x310 [ 1637.456980] create_object.isra.0+0x3a/0xa30 [ 1637.457912] kmemleak_alloc_percpu+0xa0/0x100 [ 1637.458846] pcpu_alloc+0x4e2/0x1240 [ 1637.459638] ? io_tctx_exit_cb+0xf0/0xf0 [ 1637.460695] percpu_ref_init+0x31/0x3d0 [ 1637.461525] io_uring_setup+0x47a/0x2980 [ 1637.462370] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.463622] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1637.464686] ? wait_for_completion_io+0x270/0x270 [ 1637.465948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1637.467038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.468373] do_syscall_64+0x33/0x40 [ 1637.469217] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.470290] RIP: 0033:0x7f89589a3b19 [ 1637.471063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.475772] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1637.477439] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1637.478902] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1637.480376] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1637.481831] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1637.483299] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:06:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) [ 1637.526274] FAULT_INJECTION: forcing a failure. [ 1637.526274] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.528714] CPU: 1 PID: 8708 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1637.530115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.531818] Call Trace: [ 1637.532386] dump_stack+0x107/0x167 [ 1637.533147] should_fail.cold+0x5/0xa [ 1637.533938] ? create_object.isra.0+0x3a/0xa30 [ 1637.534874] should_failslab+0x5/0x20 [ 1637.535670] kmem_cache_alloc+0x5b/0x310 [ 1637.536522] ? mark_held_locks+0x9e/0xe0 [ 1637.537365] create_object.isra.0+0x3a/0xa30 [ 1637.538269] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1637.539579] kmem_cache_alloc_bulk+0x168/0x320 [ 1637.540648] io_submit_sqes+0x6fe4/0x8610 [ 1637.541742] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1637.542865] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1637.543865] ? find_held_lock+0x2c/0x110 [ 1637.544732] ? io_submit_sqes+0x8610/0x8610 [ 1637.545651] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.546656] ? wait_for_completion_io+0x270/0x270 [ 1637.547651] ? rcu_read_lock_any_held+0x75/0xa0 [ 1637.548611] ? vfs_write+0x354/0xb10 [ 1637.549451] ? fput_many+0x2f/0x1a0 [ 1637.550351] ? ksys_write+0x1a9/0x260 [ 1637.551500] ? __ia32_sys_read+0xb0/0xb0 [ 1637.552518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1637.553797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.555083] do_syscall_64+0x33/0x40 [ 1637.556021] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.557565] RIP: 0033:0x7f8e4c378b19 [ 1637.558545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.563119] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1637.565023] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 22:06:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 7) [ 1637.566779] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1637.568718] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.570512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.572250] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 22:06:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:06:52 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "ae156c234ad7e8deed423dd51a4d7ca4a2ed3b1f35aa6241475278307ad3c7e7ddb240142179506b2c3912a280729b96bb028f28a5520022d3274e13e6cff160acaecb02d77f9e994fb21fae7da6407f96d1a3663726672df2d179109aa7b57510a14f1cb2d9bedb01892d33b0786e07c4d38a6165584368aaec6eb379941ebd90fb74c5bdced633d73c9d6cda53f02c6a008a7fb7fe53c1be7110a67f9d69b8489182282114684873c7c89a327071af639e31197357830fd54d0293a1782b29b73de1711884907f99b95c57cf19b2cc14ba63c26f01dd87eb935dfb9da092d14de706b1b8bba0ccb1e6f2379d1e4451c8d51136c826098820b4fbd588cedaf054fe8b67154c6ad767600768fae5ffe971ee47aca5095d112ae084b526a0106b1846603c82e42cf051c6b1e14846b2835f85f7ab2084e1d38e4548ed97feb1f7feda1fcdefd943fed054788b3155d505fd9eed74557a763300d8cd1aabb59da8ea368482c818b83b9b4d1b45d97a9aadf96e156a8542814c9cdee8c1f131b9783d8e53d946a97b2ca4e68c315a6eee2b2a2b574ac35bbd0dbf17bba4a550ad91922822235474181e4e225ea2c610c0dcaacb2e0d0326a8ecc7bb35cf01590c48566625d2bda2cb2cf2bc8e1ede492133985237b1462a507587af5fb8fa14ee7425ec2b4dd4583903a909c774cd4cc7e821194184578bf898640ebf82df429ea395666772d5c339b219add5ee8b38a18877441a674cebe929a42eb3ffa8107fbfb4c085b69a6aa457c40d412b3336fca665240c30f92303a12e6672bd7dc2236412674daf560a4988d8edbcc18d8efe7eead7a155349095e0f37717671c259c841b6ac2374c3e5864753eade867285a40962555b92d2b59008e137d9518a062775f398236e4d5aeae86ae8169348cc8747accb6f92c47cb4f54f3fa73014ccf9bdaf62e2ec962f40dc0dec6384be6cf4362368e5949bba10af0c832f94a7c85d07dfae7e1e7c202a976f4eee5486f61d11be1c78a2b010a7618607007b3fd07b12f0d17f5801d5e28b2241b390bea415875af6be24b281af875b9b0471237040f79a4426398bfd46c5f2da8f1f250f10241c77fdbc959d30f001c407666b76158c658b532ecdc6a82e3008683185bdd937a1882f4b777f190eb2209dfcbc6074a8d6bd6c5ec9af0b488219e10dbc114eb39249d16d66093693cd3c2458f677e527c753eb6a19f68fc40fadf114d1b0e0d7262176741aa508244f9f3d48877937286f661d79e5a1baac63ff5c5dccb23c1fc56e4a2bac6a93cf4ce9b1968e584c64e9a99a5d26f459ca3cc7f2bc9d652cc3ac76a83a94095f5e58df972eee98fba79e6b8577202f63d570b0d0c74e4297e3e93656d23680e9e885eb6e01701e79e5f6fbb0e33a62eaf5ca592cb75a12831dc8657db503d2b1d406dc9c189b87cd38198d2bf566446681ad35c7757d213afdaa7b2458a40ac9b2794fda94bff98486866993d7d9586c6cb8e3b1fc087ebfaaafe0afc5d3c52f23243b9809707cf0280a565574df07a9b9ab396d62b92ae2963cfef2d51e43255c247a47d527a65a952a09673da0f12ac1612c14e7d31f0f69797dd8ba28ac90c2bf4fa8822ccdbc3cdf818b1d1e60115908625270a841ef99793275bfba1fb491139fd7287ff2f362849063bad044e812ab08f28a766646f9df0efce36674f3813bb349b51655b6d37fcffb6c201a40b339376619a482925dfcfa0e582cb028451d5a125acd65b89b8c1ca4943d217954c0ac8eb6cdf75626a1568e756fff582a256199317443d03270bb5213d454bebfb06a614a759fcdf0a0ff11c7af86f37304dcca7f3dda291a9c28899078cea2390167a4519acd0b42a30f1c43e880b9f263b96ee1cc8391a08c2f38a19bc6404174d7dc46bd96045b1eb88b17f68e8f0544afaa90e30a227cea53288ed255191836b3997cd447ca770d27b5fcdad1e13c957892805df8ab64e4ccac9680d0dad0db17813e3ff6055db50eccf28c276ed379965f0ed12cfab656d5913f6ec55846baf49d9349ceb685ac660dc9b406e8b55ecf61f9025b9e1e4dca7906d9e649033f3cd81b76072ced04e6341601284e8042767fed92dbbb01b41a73e3f9d75c9c4469a7ef1d09858e09d63850fec0f0b63e82330d0f1a6c4fc03bb3a579b9b994f2282e26a6a1177cb928e5e61d23b3079f57895fd361476c6c267631f7136c6433e59408b1d5ce1250f30ac02162a728247f69246004a2f23e63f246a6c376744b9060b9045fa16a15f9d43c744d9a472e00e077de7ace1dd84abdf15c6d002c3b1c1527b21e07dcf80ebbcc899c1782680148496668de40d0a0ff8f45374eaa204774ab0f1da35b559482806bbff3ff0c631101ab302e0fb41a73ac0a35e10a0ce6f91839c3b327b559aabf8294117cc0f2c9c5399463d09f03a3aecaeed849d173b7451811b5078c2674a1b36ab8f852d7bf04e922340c6e8ff35276228156f2a4e7283f7275243429da2df3be78702c1b9227e2007c1a2e6d810895e6e39bbf311ca97356043b5ecd1f2a2a7d4ae5583bdd347c5d74873cb49516005dd6fc4ef5612dd275cf44566a8e92f21f6879ce4630617e7a714a2ef58737e19ab777c4a326372bc62b4458bce952360efdabe5d4c1e50cd4921215680da891330d5ab19f4b66079c6b7f1cfa126d884fd014f9059b5301db3893f581af349b3bd528fa1c52e30661ab814ffce4d8000f29b2638f39412e90be2f7a8e362e46abf168d6d8a9ce97bf8b4cc84f227a2a894b25b9b777ec225c40ad8addd87d149bbc58206a6fae1cf40b60f845007e80ac1b6dc27404154db386a9d438cd05728e3b840fd415eefaee8ff90b3b828f89d4f5faed41a3c8452a38dbf9d56938f34c053364b9aedbf6989618802c37351f7e9c425b213a1f0501645205d7c3f91073708a222057534ba93a797d70caa64e5eee2962bee2f4099d77835eca5e887a4eabbce366355d6af4087b1067568608d240f5fa07a035418815fb701c62531bff93efc4140b788614414b4b0b4e2adc444aaca24aef2ed75ef8d795833c0980e4b403fa8d1e4d38cfed8986f041d0973263f9985340c2e7a953e9e532339bab86837542c4383da0cffad4295ecaba7bd0f32f69b740884965cd639776307ed73ab57641cedf2a0a2a2948ac46aa62192c2e245978a3c606eb34ec01f7d455b5cf563bb5471f0322f10edc3e56b928b5668d47e720e5b12f28fe44038ed79cc56aef02d1d669dd9c0851ee25a484ebdd04c8d6262e7ed8705a79251c23caf213e7c87db602764220ca18f0788a798763c96bd361d12540857fa5990960c330c8cfa5d0ce59e722668eb1bbad38f84246f2cec7d8759e176dd71e26e8a17ffc6cec7e003706a1138b45c374b89f369cc056e4fc2b915887c60aab8dffd0115e78b33089a20368c19496935f3224262e28e96e725a3aee9cc7aa1a1c8f1e38337b5eaa289cbe8a6c9912fdbc96ce94799a9922694a14b9450232e2103c36f75bed793bb4ceb52d5814b4d4da5da9e3c8cea75fae8bdd21e10532ce2eca5b7b35adee451830ac5bba37b27c84e8f6dfe454df71b9baee884d93d120895a7474ffd4b6df541090ef7d60aa65b68325f8f216009098ba49c29c39eca5eccc0e119977895cf93095dc8bdc8bcb717a2c924bae2f559ae1ba17c3f5a763ed39358ffc15af4d7ba777c0202f0568b0c49bf04d15ceca832272222c5c9f5abb811671eb9e4c262381874184bff3ff9e532fd68f7af93ec9316125a624ff97c94c8c88470040e1071c82f49421008418feca766fad66eca3489507725f0c19e21990aca07cd4a641e88f985990c0253a73d5943115cc44a4304ce3dbf4af1e7dc90921a0693e88e67d558d4f59538e2d1b8a51d3902825ddffadd3f4a71d8c7a6d99b364bd72bb4a3baa2a5aa0f2cc552f1c2c027801e7ed7b817f43638b9c51c71c827b6ad844b48df31c391d9eb549d8152ee0d0d7d6491b612928d33e1dfd3cc3a4d03ccb86e2679973ccb65325522366703ab5a5adb661e46bd3770177dd694e72481af46b0ad200cd4ab50473a243e25e356292e7349c8d38ef492d497c3fac28b5b7f4c19c699c5fbe34be8d805005f24ef067125c52006fc1ef29290bb22e11ea674376f4dbb7a356603df00043c613ec106c1442d841c37a03c6a99d89b1fb4f3f4337aafd2fb76e0110b7c72b01d2e3933bac7ec786a6f630aef70ddbe3d1f12d83cc7baad1507f11b813c70d0f95e2075e2ab487d5dd534a04d18e0d3ce8da86d0b1d7e1687f689b3a6cce9e83b7ec5e1be505852a36f204cb0f4b73674f9761223a749c05fe0866514833205b962d149d419ed937382e6c0faef170df610c6a0c8ca4fe38b94dddb8187ba7108c63878c7a02cf997a78ff8481efadaeac1e290abdee62cd9e9385e38650c43922d7278cbe15e96a5e612bd58dde16c8e222ec31f707d58c0a9999bed3dc9238ae4eb6489d7be62c2889aada9b498e719f79c85d5052e22e8c3c5daaaa93385469c019bcde68bef37ba8fdd42b3945c3c2298b5de7cbbaa861f27f7c877e297a0f110df9d66a2d1f5c040d5bcc38dd9ced713fc95f2e06191b56ea203d4a2db2634cfa5c5d0decc087857ea981605395569632e85547377c69fe53ce2dd04883ac86316373fa6ce8dace74b52c865f3b2424b1046ddd951d83c7c229f5732107985553a5c66ac18fd1e2b774df013c420c0f6b9d73cee456769171ea2cca8bc2a301349fda7c42d23d605b6a2276056a8539d632d6b5bce9e42b7bbbd9b0fbd9b1141000e8397fd201022f22455d7d56b49dbf7c413c18f5936c0fd12f55e335a9b2fac28b0268feb4edd7a7ac10903718db1a4d2b051569e8dedcc03ccebffebc551f7603c2375e02033dc57803d1aaac74c474c7a0697c3e20bd71866f1b940924cc72927458f387bb1fc8e8b71a523fb705df963ff67cdd80b28adc2c4edfdbedd85215b12e65dafa80133bff684f9cda80614138b59016f7c36eb9c53667816702573b2d890ae67dc50d5ba79233c2dbd9791e612a1446ebef2c7c4798322ec7606d8325543c13b476b927d1670308b5e92021613c21fee3aadb4bec10d234035d96420b94c1a9b096536839f764ad29d1e667cbd4b24ac8aac828b109bd46d355cb386bdfe3ebe8e67b074d184b7112364a85843f6dda6763675565a90383c92af11b1a6341240f6bbec29025544213cf8767794b223c9295e01343211c9a9067945fea9e8fd2e8636eafda7d5c1cd56fcd64668fc5e187f6c4163c4d0481c401729aa11ab7dd6a063b5fad280dc6f566b37a67f0538d1169f3a58affc890e60fa35b7c6c1ef6786b5dc46a9dee49a43b38a507efbaa228952aa66453d21fb6975ed9f02c213914dbee980f98f8911cc4ea12f5d5eafd65ea4c7b85119144d0d5afd33b8076284437ab6559e485a35e80cf9b893e6f92fdd4b4035583da4ff312363e0e31c3a77d9d2c3b9f71677866fba2dd89880eb00d8eb433b0bd93eade9d55e0c4a4bf80bf7dd75e77fc3de207d7b398cd8953bbae12dbfe3854a0a0d4c80cb54704014081ec327881b7a512ef569ec00f60d9e2a5f998794e62d86576a3a9f3ba5b789297fcc86618adb65670c33e4a0cd482ab4ea44d1fabb42e702ce657f6d43890c810aa3c119392f192314042beb3a6ae23dd3b259142e2d1c0c1c7e1c5e366b54164c9060435c20893bb332ab860d644fdd348982c74694a43592a3efad"}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0xfa7, 0x4) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000001100), 0x20040, 0x0) sendfile(r2, r0, &(0x7f0000001140)=0x2, 0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) r4 = syz_open_dev$evdev(&(0x7f0000001180), 0xfff, 0x458402) close_range(r3, r4, 0x0) 22:06:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) [ 1637.660154] FAULT_INJECTION: forcing a failure. [ 1637.660154] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.662905] CPU: 0 PID: 8719 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1637.664533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.666486] Call Trace: [ 1637.667115] dump_stack+0x107/0x167 [ 1637.667991] should_fail.cold+0x5/0xa [ 1637.668910] ? create_object.isra.0+0x3a/0xa30 [ 1637.670002] should_failslab+0x5/0x20 [ 1637.670919] kmem_cache_alloc+0x5b/0x310 [ 1637.671902] create_object.isra.0+0x3a/0xa30 [ 1637.672965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1637.674185] kmem_cache_alloc_trace+0x151/0x320 [ 1637.675309] io_uring_setup+0x40b/0x2980 [ 1637.676282] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.677443] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1637.678644] ? wait_for_completion_io+0x270/0x270 [ 1637.679836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1637.681092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.682325] do_syscall_64+0x33/0x40 [ 1637.683213] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.684435] RIP: 0033:0x7f6ebd7dfb19 [ 1637.685321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.689672] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1637.691479] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1637.693185] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1637.694876] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1637.696575] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1637.698265] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:05 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 22:07:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 8) 22:07:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) 22:07:05 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "ae156c234ad7e8deed423dd51a4d7ca4a2ed3b1f35aa6241475278307ad3c7e7ddb240142179506b2c3912a280729b96bb028f28a5520022d3274e13e6cff160acaecb02d77f9e994fb21fae7da6407f96d1a3663726672df2d179109aa7b57510a14f1cb2d9bedb01892d33b0786e07c4d38a6165584368aaec6eb379941ebd90fb74c5bdced633d73c9d6cda53f02c6a008a7fb7fe53c1be7110a67f9d69b8489182282114684873c7c89a327071af639e31197357830fd54d0293a1782b29b73de1711884907f99b95c57cf19b2cc14ba63c26f01dd87eb935dfb9da092d14de706b1b8bba0ccb1e6f2379d1e4451c8d51136c826098820b4fbd588cedaf054fe8b67154c6ad767600768fae5ffe971ee47aca5095d112ae084b526a0106b1846603c82e42cf051c6b1e14846b2835f85f7ab2084e1d38e4548ed97feb1f7feda1fcdefd943fed054788b3155d505fd9eed74557a763300d8cd1aabb59da8ea368482c818b83b9b4d1b45d97a9aadf96e156a8542814c9cdee8c1f131b9783d8e53d946a97b2ca4e68c315a6eee2b2a2b574ac35bbd0dbf17bba4a550ad91922822235474181e4e225ea2c610c0dcaacb2e0d0326a8ecc7bb35cf01590c48566625d2bda2cb2cf2bc8e1ede492133985237b1462a507587af5fb8fa14ee7425ec2b4dd4583903a909c774cd4cc7e821194184578bf898640ebf82df429ea395666772d5c339b219add5ee8b38a18877441a674cebe929a42eb3ffa8107fbfb4c085b69a6aa457c40d412b3336fca665240c30f92303a12e6672bd7dc2236412674daf560a4988d8edbcc18d8efe7eead7a155349095e0f37717671c259c841b6ac2374c3e5864753eade867285a40962555b92d2b59008e137d9518a062775f398236e4d5aeae86ae8169348cc8747accb6f92c47cb4f54f3fa73014ccf9bdaf62e2ec962f40dc0dec6384be6cf4362368e5949bba10af0c832f94a7c85d07dfae7e1e7c202a976f4eee5486f61d11be1c78a2b010a7618607007b3fd07b12f0d17f5801d5e28b2241b390bea415875af6be24b281af875b9b0471237040f79a4426398bfd46c5f2da8f1f250f10241c77fdbc959d30f001c407666b76158c658b532ecdc6a82e3008683185bdd937a1882f4b777f190eb2209dfcbc6074a8d6bd6c5ec9af0b488219e10dbc114eb39249d16d66093693cd3c2458f677e527c753eb6a19f68fc40fadf114d1b0e0d7262176741aa508244f9f3d48877937286f661d79e5a1baac63ff5c5dccb23c1fc56e4a2bac6a93cf4ce9b1968e584c64e9a99a5d26f459ca3cc7f2bc9d652cc3ac76a83a94095f5e58df972eee98fba79e6b8577202f63d570b0d0c74e4297e3e93656d23680e9e885eb6e01701e79e5f6fbb0e33a62eaf5ca592cb75a12831dc8657db503d2b1d406dc9c189b87cd38198d2bf566446681ad35c7757d213afdaa7b2458a40ac9b2794fda94bff98486866993d7d9586c6cb8e3b1fc087ebfaaafe0afc5d3c52f23243b9809707cf0280a565574df07a9b9ab396d62b92ae2963cfef2d51e43255c247a47d527a65a952a09673da0f12ac1612c14e7d31f0f69797dd8ba28ac90c2bf4fa8822ccdbc3cdf818b1d1e60115908625270a841ef99793275bfba1fb491139fd7287ff2f362849063bad044e812ab08f28a766646f9df0efce36674f3813bb349b51655b6d37fcffb6c201a40b339376619a482925dfcfa0e582cb028451d5a125acd65b89b8c1ca4943d217954c0ac8eb6cdf75626a1568e756fff582a256199317443d03270bb5213d454bebfb06a614a759fcdf0a0ff11c7af86f37304dcca7f3dda291a9c28899078cea2390167a4519acd0b42a30f1c43e880b9f263b96ee1cc8391a08c2f38a19bc6404174d7dc46bd96045b1eb88b17f68e8f0544afaa90e30a227cea53288ed255191836b3997cd447ca770d27b5fcdad1e13c957892805df8ab64e4ccac9680d0dad0db17813e3ff6055db50eccf28c276ed379965f0ed12cfab656d5913f6ec55846baf49d9349ceb685ac660dc9b406e8b55ecf61f9025b9e1e4dca7906d9e649033f3cd81b76072ced04e6341601284e8042767fed92dbbb01b41a73e3f9d75c9c4469a7ef1d09858e09d63850fec0f0b63e82330d0f1a6c4fc03bb3a579b9b994f2282e26a6a1177cb928e5e61d23b3079f57895fd361476c6c267631f7136c6433e59408b1d5ce1250f30ac02162a728247f69246004a2f23e63f246a6c376744b9060b9045fa16a15f9d43c744d9a472e00e077de7ace1dd84abdf15c6d002c3b1c1527b21e07dcf80ebbcc899c1782680148496668de40d0a0ff8f45374eaa204774ab0f1da35b559482806bbff3ff0c631101ab302e0fb41a73ac0a35e10a0ce6f91839c3b327b559aabf8294117cc0f2c9c5399463d09f03a3aecaeed849d173b7451811b5078c2674a1b36ab8f852d7bf04e922340c6e8ff35276228156f2a4e7283f7275243429da2df3be78702c1b9227e2007c1a2e6d810895e6e39bbf311ca97356043b5ecd1f2a2a7d4ae5583bdd347c5d74873cb49516005dd6fc4ef5612dd275cf44566a8e92f21f6879ce4630617e7a714a2ef58737e19ab777c4a326372bc62b4458bce952360efdabe5d4c1e50cd4921215680da891330d5ab19f4b66079c6b7f1cfa126d884fd014f9059b5301db3893f581af349b3bd528fa1c52e30661ab814ffce4d8000f29b2638f39412e90be2f7a8e362e46abf168d6d8a9ce97bf8b4cc84f227a2a894b25b9b777ec225c40ad8addd87d149bbc58206a6fae1cf40b60f845007e80ac1b6dc27404154db386a9d438cd05728e3b840fd415eefaee8ff90b3b828f89d4f5faed41a3c8452a38dbf9d56938f34c053364b9aedbf6989618802c37351f7e9c425b213a1f0501645205d7c3f91073708a222057534ba93a797d70caa64e5eee2962bee2f4099d77835eca5e887a4eabbce366355d6af4087b1067568608d240f5fa07a035418815fb701c62531bff93efc4140b788614414b4b0b4e2adc444aaca24aef2ed75ef8d795833c0980e4b403fa8d1e4d38cfed8986f041d0973263f9985340c2e7a953e9e532339bab86837542c4383da0cffad4295ecaba7bd0f32f69b740884965cd639776307ed73ab57641cedf2a0a2a2948ac46aa62192c2e245978a3c606eb34ec01f7d455b5cf563bb5471f0322f10edc3e56b928b5668d47e720e5b12f28fe44038ed79cc56aef02d1d669dd9c0851ee25a484ebdd04c8d6262e7ed8705a79251c23caf213e7c87db602764220ca18f0788a798763c96bd361d12540857fa5990960c330c8cfa5d0ce59e722668eb1bbad38f84246f2cec7d8759e176dd71e26e8a17ffc6cec7e003706a1138b45c374b89f369cc056e4fc2b915887c60aab8dffd0115e78b33089a20368c19496935f3224262e28e96e725a3aee9cc7aa1a1c8f1e38337b5eaa289cbe8a6c9912fdbc96ce94799a9922694a14b9450232e2103c36f75bed793bb4ceb52d5814b4d4da5da9e3c8cea75fae8bdd21e10532ce2eca5b7b35adee451830ac5bba37b27c84e8f6dfe454df71b9baee884d93d120895a7474ffd4b6df541090ef7d60aa65b68325f8f216009098ba49c29c39eca5eccc0e119977895cf93095dc8bdc8bcb717a2c924bae2f559ae1ba17c3f5a763ed39358ffc15af4d7ba777c0202f0568b0c49bf04d15ceca832272222c5c9f5abb811671eb9e4c262381874184bff3ff9e532fd68f7af93ec9316125a624ff97c94c8c88470040e1071c82f49421008418feca766fad66eca3489507725f0c19e21990aca07cd4a641e88f985990c0253a73d5943115cc44a4304ce3dbf4af1e7dc90921a0693e88e67d558d4f59538e2d1b8a51d3902825ddffadd3f4a71d8c7a6d99b364bd72bb4a3baa2a5aa0f2cc552f1c2c027801e7ed7b817f43638b9c51c71c827b6ad844b48df31c391d9eb549d8152ee0d0d7d6491b612928d33e1dfd3cc3a4d03ccb86e2679973ccb65325522366703ab5a5adb661e46bd3770177dd694e72481af46b0ad200cd4ab50473a243e25e356292e7349c8d38ef492d497c3fac28b5b7f4c19c699c5fbe34be8d805005f24ef067125c52006fc1ef29290bb22e11ea674376f4dbb7a356603df00043c613ec106c1442d841c37a03c6a99d89b1fb4f3f4337aafd2fb76e0110b7c72b01d2e3933bac7ec786a6f630aef70ddbe3d1f12d83cc7baad1507f11b813c70d0f95e2075e2ab487d5dd534a04d18e0d3ce8da86d0b1d7e1687f689b3a6cce9e83b7ec5e1be505852a36f204cb0f4b73674f9761223a749c05fe0866514833205b962d149d419ed937382e6c0faef170df610c6a0c8ca4fe38b94dddb8187ba7108c63878c7a02cf997a78ff8481efadaeac1e290abdee62cd9e9385e38650c43922d7278cbe15e96a5e612bd58dde16c8e222ec31f707d58c0a9999bed3dc9238ae4eb6489d7be62c2889aada9b498e719f79c85d5052e22e8c3c5daaaa93385469c019bcde68bef37ba8fdd42b3945c3c2298b5de7cbbaa861f27f7c877e297a0f110df9d66a2d1f5c040d5bcc38dd9ced713fc95f2e06191b56ea203d4a2db2634cfa5c5d0decc087857ea981605395569632e85547377c69fe53ce2dd04883ac86316373fa6ce8dace74b52c865f3b2424b1046ddd951d83c7c229f5732107985553a5c66ac18fd1e2b774df013c420c0f6b9d73cee456769171ea2cca8bc2a301349fda7c42d23d605b6a2276056a8539d632d6b5bce9e42b7bbbd9b0fbd9b1141000e8397fd201022f22455d7d56b49dbf7c413c18f5936c0fd12f55e335a9b2fac28b0268feb4edd7a7ac10903718db1a4d2b051569e8dedcc03ccebffebc551f7603c2375e02033dc57803d1aaac74c474c7a0697c3e20bd71866f1b940924cc72927458f387bb1fc8e8b71a523fb705df963ff67cdd80b28adc2c4edfdbedd85215b12e65dafa80133bff684f9cda80614138b59016f7c36eb9c53667816702573b2d890ae67dc50d5ba79233c2dbd9791e612a1446ebef2c7c4798322ec7606d8325543c13b476b927d1670308b5e92021613c21fee3aadb4bec10d234035d96420b94c1a9b096536839f764ad29d1e667cbd4b24ac8aac828b109bd46d355cb386bdfe3ebe8e67b074d184b7112364a85843f6dda6763675565a90383c92af11b1a6341240f6bbec29025544213cf8767794b223c9295e01343211c9a9067945fea9e8fd2e8636eafda7d5c1cd56fcd64668fc5e187f6c4163c4d0481c401729aa11ab7dd6a063b5fad280dc6f566b37a67f0538d1169f3a58affc890e60fa35b7c6c1ef6786b5dc46a9dee49a43b38a507efbaa228952aa66453d21fb6975ed9f02c213914dbee980f98f8911cc4ea12f5d5eafd65ea4c7b85119144d0d5afd33b8076284437ab6559e485a35e80cf9b893e6f92fdd4b4035583da4ff312363e0e31c3a77d9d2c3b9f71677866fba2dd89880eb00d8eb433b0bd93eade9d55e0c4a4bf80bf7dd75e77fc3de207d7b398cd8953bbae12dbfe3854a0a0d4c80cb54704014081ec327881b7a512ef569ec00f60d9e2a5f998794e62d86576a3a9f3ba5b789297fcc86618adb65670c33e4a0cd482ab4ea44d1fabb42e702ce657f6d43890c810aa3c119392f192314042beb3a6ae23dd3b259142e2d1c0c1c7e1c5e366b54164c9060435c20893bb332ab860d644fdd348982c74694a43592a3efad"}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0xfa7, 0x4) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000001100), 0x20040, 0x0) sendfile(r2, r0, &(0x7f0000001140)=0x2, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x6) syz_open_dev$evdev(&(0x7f0000001180), 0xfff, 0x458402) 22:07:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 9) [ 1650.242718] FAULT_INJECTION: forcing a failure. [ 1650.242718] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.245489] CPU: 0 PID: 8735 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1650.247048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.248945] Call Trace: [ 1650.249560] dump_stack+0x107/0x167 [ 1650.250409] should_fail.cold+0x5/0xa [ 1650.251281] ? create_object.isra.0+0x3a/0xa30 [ 1650.252316] should_failslab+0x5/0x20 [ 1650.253197] kmem_cache_alloc+0x5b/0x310 [ 1650.254133] create_object.isra.0+0x3a/0xa30 [ 1650.255149] kmemleak_alloc_percpu+0xa0/0x100 [ 1650.256185] pcpu_alloc+0x4e2/0x1240 [ 1650.257069] ? io_tctx_exit_cb+0xf0/0xf0 [ 1650.257993] percpu_ref_init+0x31/0x3d0 [ 1650.258913] io_uring_setup+0x47a/0x2980 [ 1650.259751] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1650.260718] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1650.261727] ? wait_for_completion_io+0x270/0x270 [ 1650.262732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.263774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.264820] do_syscall_64+0x33/0x40 [ 1650.265564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.266595] RIP: 0033:0x7f6ebd7dfb19 [ 1650.267316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.270973] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1650.272497] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1650.273919] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1650.275332] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1650.276732] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1650.278150] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 22:07:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1650.288186] FAULT_INJECTION: forcing a failure. [ 1650.288186] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.291797] CPU: 1 PID: 8743 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1650.292951] FAULT_INJECTION: forcing a failure. [ 1650.292951] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.293376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.293388] Call Trace: [ 1650.298081] dump_stack+0x107/0x167 [ 1650.298911] should_fail.cold+0x5/0xa [ 1650.299782] ? create_object.isra.0+0x3a/0xa30 [ 1650.300844] should_failslab+0x5/0x20 [ 1650.301708] kmem_cache_alloc+0x5b/0x310 [ 1650.302627] create_object.isra.0+0x3a/0xa30 [ 1650.303642] kmemleak_alloc_percpu+0xa0/0x100 [ 1650.304681] pcpu_alloc+0x4e2/0x1240 [ 1650.305549] ? io_tctx_exit_cb+0xf0/0xf0 [ 1650.306471] percpu_ref_init+0x31/0x3d0 [ 1650.307391] io_uring_setup+0x47a/0x2980 [ 1650.308324] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1650.309433] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1650.310599] ? wait_for_completion_io+0x270/0x270 [ 1650.311732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.313019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.314502] do_syscall_64+0x33/0x40 [ 1650.315378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.316571] RIP: 0033:0x7f89589a3b19 [ 1650.317441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.321732] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1650.323503] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1650.325180] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1650.326855] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1650.328532] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1650.330205] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1650.331914] CPU: 0 PID: 8740 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1650.333570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.335466] Call Trace: [ 1650.336086] dump_stack+0x107/0x167 [ 1650.336945] should_fail.cold+0x5/0xa [ 1650.337830] ? create_object.isra.0+0x3a/0xa30 [ 1650.338885] should_failslab+0x5/0x20 [ 1650.339775] kmem_cache_alloc+0x5b/0x310 [ 1650.340732] create_object.isra.0+0x3a/0xa30 [ 1650.341779] kmemleak_alloc_percpu+0xa0/0x100 [ 1650.342819] pcpu_alloc+0x4e2/0x1240 [ 1650.343726] ? io_tctx_exit_cb+0xf0/0xf0 [ 1650.344685] percpu_ref_init+0x31/0x3d0 [ 1650.345637] io_uring_setup+0x47a/0x2980 [ 1650.346598] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1650.347738] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1650.348924] ? wait_for_completion_io+0x270/0x270 [ 1650.349263] FAULT_INJECTION: forcing a failure. [ 1650.349263] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.350085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.350110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.350144] do_syscall_64+0x33/0x40 [ 1650.355967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.357158] RIP: 0033:0x7ff6be2aab19 [ 1650.358020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.362267] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1650.364041] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1650.365714] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1650.367379] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1650.369048] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1650.370692] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1650.372384] CPU: 1 PID: 8744 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 1650.373983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.376005] Call Trace: [ 1650.376626] dump_stack+0x107/0x167 [ 1650.377477] should_fail.cold+0x5/0xa [ 1650.378371] ? create_object.isra.0+0x3a/0xa30 [ 1650.379360] should_failslab+0x5/0x20 [ 1650.380245] kmem_cache_alloc+0x5b/0x310 [ 1650.381185] ? mark_held_locks+0x9e/0xe0 [ 1650.382071] create_object.isra.0+0x3a/0xa30 [ 1650.383073] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1650.384267] kmem_cache_alloc_bulk+0x168/0x320 [ 1650.385270] io_submit_sqes+0x6fe4/0x8610 [ 1650.386265] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1650.387427] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1650.388496] ? find_held_lock+0x2c/0x110 [ 1650.389436] ? io_submit_sqes+0x8610/0x8610 [ 1650.390445] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1650.391495] ? wait_for_completion_io+0x270/0x270 [ 1650.392608] ? rcu_read_lock_any_held+0x75/0xa0 [ 1650.393688] ? vfs_write+0x354/0xb10 [ 1650.394555] ? fput_many+0x2f/0x1a0 [ 1650.395317] ? ksys_write+0x1a9/0x260 [ 1650.396203] ? __ia32_sys_read+0xb0/0xb0 [ 1650.397175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.398378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.399497] do_syscall_64+0x33/0x40 [ 1650.400430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.401777] RIP: 0033:0x7f16333dbb19 [ 1650.402585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.406834] RSP: 002b:00007f1630951188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1650.408521] RAX: ffffffffffffffda RBX: 00007f16334eef60 RCX: 00007f16333dbb19 [ 1650.410199] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 1650.411787] RBP: 00007f16309511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.413467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.415079] R13: 00007ffcd69a130f R14: 00007f1630951300 R15: 0000000000022000 [ 1650.426324] FAULT_INJECTION: forcing a failure. [ 1650.426324] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.429303] CPU: 1 PID: 8737 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1650.430950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.432818] Call Trace: [ 1650.433454] dump_stack+0x107/0x167 [ 1650.434312] should_fail.cold+0x5/0xa [ 1650.435218] ? create_object.isra.0+0x3a/0xa30 [ 1650.436204] should_failslab+0x5/0x20 [ 1650.437100] kmem_cache_alloc+0x5b/0x310 [ 1650.438046] ? mark_held_locks+0x9e/0xe0 22:07:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) [ 1650.439024] create_object.isra.0+0x3a/0xa30 [ 1650.440243] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1650.441468] kmem_cache_alloc_bulk+0x168/0x320 [ 1650.442562] io_submit_sqes+0x6fe4/0x8610 [ 1650.443480] ? percpu_ref_tryget_many+0x16b/0x2d0 [ 1650.444655] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1650.445795] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1650.446899] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1650.447963] ? _raw_spin_unlock_irq+0x27/0x30 [ 1650.449004] ? io_submit_sqes+0x8610/0x8610 [ 1650.449977] ? finish_task_switch+0x126/0x5d0 [ 1650.451053] ? finish_task_switch+0xef/0x5d0 [ 1650.452121] ? __switch_to+0x572/0xf70 [ 1650.452984] ? __switch_to_asm+0x3a/0x60 [ 1650.453897] ? __switch_to_asm+0x34/0x60 [ 1650.454859] ? __schedule+0x82c/0x1ea0 [ 1650.455789] ? io_schedule_timeout+0x140/0x140 [ 1650.456823] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1650.457941] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1650.459154] ? ksys_write+0x1a9/0x260 [ 1650.460053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.461317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.462577] do_syscall_64+0x33/0x40 [ 1650.463363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.464605] RIP: 0033:0x7f8e4c378b19 [ 1650.465492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.469796] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1650.471536] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1650.473179] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1650.474813] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.476324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.477863] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 22:07:05 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "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"}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0xfa7, 0x4) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000001100), 0x20040, 0x0) sendfile(r2, r0, &(0x7f0000001140)=0x2, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x6) 22:07:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) 22:07:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:07:05 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "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"}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0xfa7, 0x4) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000001100), 0x20040, 0x0) sendfile(r2, r0, &(0x7f0000001140)=0x2, 0xffffffffffffffff) 22:07:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 9) [ 1650.665297] FAULT_INJECTION: forcing a failure. [ 1650.665297] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.667890] CPU: 0 PID: 8759 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1650.669483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.671406] Call Trace: [ 1650.672032] dump_stack+0x107/0x167 [ 1650.672900] should_fail.cold+0x5/0xa [ 1650.673791] ? percpu_ref_init+0xd8/0x3d0 [ 1650.674750] should_failslab+0x5/0x20 [ 1650.675648] kmem_cache_alloc_trace+0x55/0x320 [ 1650.676721] ? io_tctx_exit_cb+0xf0/0xf0 [ 1650.677665] percpu_ref_init+0xd8/0x3d0 [ 1650.678599] io_uring_setup+0x47a/0x2980 [ 1650.679499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1650.680616] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1650.681789] ? wait_for_completion_io+0x270/0x270 [ 1650.682958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.684093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.685317] do_syscall_64+0x33/0x40 [ 1650.686185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.687366] RIP: 0033:0x7f89589a3b19 [ 1650.688179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.692402] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1650.694193] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1650.695826] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1650.697549] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1650.699236] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1650.700877] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) [ 1650.743066] FAULT_INJECTION: forcing a failure. [ 1650.743066] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.745757] CPU: 0 PID: 8764 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1650.747246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.748995] Call Trace: [ 1650.749556] dump_stack+0x107/0x167 [ 1650.750352] should_fail.cold+0x5/0xa [ 1650.751164] ? create_object.isra.0+0x3a/0xa30 [ 1650.752150] should_failslab+0x5/0x20 [ 1650.752960] kmem_cache_alloc+0x5b/0x310 [ 1650.753840] create_object.isra.0+0x3a/0xa30 [ 1650.754785] kmemleak_alloc_percpu+0xa0/0x100 [ 1650.755759] pcpu_alloc+0x4e2/0x1240 [ 1650.756585] ? io_tctx_exit_cb+0xf0/0xf0 [ 1650.757453] percpu_ref_init+0x31/0x3d0 [ 1650.758314] io_uring_setup+0x47a/0x2980 [ 1650.759194] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1650.760230] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1650.761325] ? wait_for_completion_io+0x270/0x270 [ 1650.762395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.763521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.764637] do_syscall_64+0x33/0x40 [ 1650.765435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.766537] RIP: 0033:0x7f6ebd7dfb19 [ 1650.767330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.771328] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1650.773012] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1650.774583] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1650.776160] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1650.777753] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1650.779337] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:05 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 22:07:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 10) 22:07:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) 22:07:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) [ 1650.839573] FAULT_INJECTION: forcing a failure. [ 1650.839573] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.841531] FAULT_INJECTION: forcing a failure. [ 1650.841531] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.842550] CPU: 0 PID: 8765 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 1650.846269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.848202] Call Trace: [ 1650.848834] dump_stack+0x107/0x167 [ 1650.849692] should_fail.cold+0x5/0xa [ 1650.850563] ? create_object.isra.0+0x3a/0xa30 [ 1650.851539] should_failslab+0x5/0x20 [ 1650.852351] kmem_cache_alloc+0x5b/0x310 [ 1650.853242] ? mark_held_locks+0x9e/0xe0 [ 1650.854122] create_object.isra.0+0x3a/0xa30 [ 1650.855061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1650.856161] kmem_cache_alloc_bulk+0x168/0x320 [ 1650.857165] io_submit_sqes+0x6fe4/0x8610 [ 1650.858114] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1650.859178] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1650.860218] ? find_held_lock+0x2c/0x110 [ 1650.861118] ? io_submit_sqes+0x8610/0x8610 [ 1650.862059] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1650.863103] ? wait_for_completion_io+0x270/0x270 [ 1650.864141] ? rcu_read_lock_any_held+0x75/0xa0 [ 1650.865140] ? vfs_write+0x354/0xb10 [ 1650.865947] ? fput_many+0x2f/0x1a0 [ 1650.866726] ? ksys_write+0x1a9/0x260 [ 1650.867540] ? __ia32_sys_read+0xb0/0xb0 [ 1650.868425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.869554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.870682] do_syscall_64+0x33/0x40 [ 1650.871484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.872594] RIP: 0033:0x7f16333dbb19 [ 1650.873390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.877320] RSP: 002b:00007f1630951188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1650.878945] RAX: ffffffffffffffda RBX: 00007f16334eef60 RCX: 00007f16333dbb19 [ 1650.880460] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 1650.881984] RBP: 00007f16309511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.883510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.885038] R13: 00007ffcd69a130f R14: 00007f1630951300 R15: 0000000000022000 [ 1650.886613] CPU: 1 PID: 8767 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1650.888120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.889895] Call Trace: [ 1650.890469] dump_stack+0x107/0x167 [ 1650.891249] should_fail.cold+0x5/0xa [ 1650.892065] ? create_object.isra.0+0x3a/0xa30 [ 1650.893045] should_failslab+0x5/0x20 [ 1650.893860] kmem_cache_alloc+0x5b/0x310 [ 1650.894729] ? mark_held_locks+0x9e/0xe0 [ 1650.895600] create_object.isra.0+0x3a/0xa30 [ 1650.896529] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1650.897055] FAULT_INJECTION: forcing a failure. [ 1650.897055] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1650.897612] kmem_cache_alloc_bulk+0x168/0x320 [ 1650.901052] io_submit_sqes+0x6fe4/0x8610 [ 1650.901974] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1650.903034] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1650.904046] ? find_held_lock+0x2c/0x110 [ 1650.904919] ? io_submit_sqes+0x8610/0x8610 [ 1650.905846] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1650.906862] ? wait_for_completion_io+0x270/0x270 [ 1650.907894] ? rcu_read_lock_any_held+0x75/0xa0 [ 1650.908886] ? vfs_write+0x354/0xb10 [ 1650.909684] ? fput_many+0x2f/0x1a0 [ 1650.910442] ? ksys_write+0x1a9/0x260 [ 1650.911245] ? __ia32_sys_read+0xb0/0xb0 [ 1650.912117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.913244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.914347] do_syscall_64+0x33/0x40 [ 1650.915133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.916232] RIP: 0033:0x7f8e4c378b19 [ 1650.917024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.920952] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1650.922583] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1650.924094] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1650.925614] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.927122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.928645] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 [ 1650.930188] CPU: 0 PID: 8775 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1650.931665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.933430] Call Trace: [ 1650.933997] dump_stack+0x107/0x167 [ 1650.934777] should_fail.cold+0x5/0xa [ 1650.935595] __alloc_pages_nodemask+0x182/0x600 [ 1650.936598] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1650.937882] ? kmem_cache_alloc+0x301/0x310 [ 1650.938813] alloc_pages_current+0x187/0x280 [ 1650.939764] allocate_slab+0x26f/0x380 [ 1650.940598] ___slab_alloc+0x470/0x700 [ 1650.941430] ? create_object.isra.0+0x3a/0xa30 [ 1650.942400] ? lock_release+0x680/0x680 [ 1650.943252] ? create_object.isra.0+0x3a/0xa30 [ 1650.944225] ? kmem_cache_alloc+0x301/0x310 [ 1650.945140] ? create_object.isra.0+0x3a/0xa30 [ 1650.946112] kmem_cache_alloc+0x301/0x310 [ 1650.946993] create_object.isra.0+0x3a/0xa30 [ 1650.947937] kmemleak_alloc_percpu+0xa0/0x100 [ 1650.948905] pcpu_alloc+0x4e2/0x1240 [ 1650.949707] ? io_tctx_exit_cb+0xf0/0xf0 [ 1650.950563] percpu_ref_init+0x31/0x3d0 [ 1650.951410] io_uring_setup+0x47a/0x2980 [ 1650.952263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1650.953297] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1650.954370] ? wait_for_completion_io+0x270/0x270 [ 1650.955433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1650.956548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.957644] do_syscall_64+0x33/0x40 [ 1650.958437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1650.959522] RIP: 0033:0x7ff6be2aab19 [ 1650.960324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.964213] RSP: 002b:00007ff6bb7ff108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1650.965825] RAX: ffffffffffffffda RBX: 00007ff6be3be020 RCX: 00007ff6be2aab19 [ 1650.967329] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1650.968842] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1650.970356] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1650.971859] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:17 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 22:07:17 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "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"}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0xfa7, 0x4) openat$random(0xffffffffffffff9c, &(0x7f0000001100), 0x20040, 0x0) 22:07:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 22:07:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) 22:07:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 11) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:07:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 10) 22:07:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 11) [ 1662.593670] FAULT_INJECTION: forcing a failure. [ 1662.593670] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.596779] CPU: 0 PID: 8784 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1662.598678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1662.600984] Call Trace: [ 1662.601740] dump_stack+0x107/0x167 [ 1662.602743] should_fail.cold+0x5/0xa [ 1662.603803] ? create_object.isra.0+0x3a/0xa30 [ 1662.605097] should_failslab+0x5/0x20 [ 1662.606123] kmem_cache_alloc+0x5b/0x310 [ 1662.606681] FAULT_INJECTION: forcing a failure. [ 1662.606681] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.607252] create_object.isra.0+0x3a/0xa30 [ 1662.607275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1662.607315] kmem_cache_alloc_trace+0x151/0x320 [ 1662.607356] ? io_tctx_exit_cb+0xf0/0xf0 [ 1662.614564] percpu_ref_init+0xd8/0x3d0 [ 1662.615652] io_uring_setup+0x47a/0x2980 [ 1662.616770] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1662.618068] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1662.619415] ? wait_for_completion_io+0x270/0x270 [ 1662.620830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1662.622087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1662.623229] do_syscall_64+0x33/0x40 [ 1662.624107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1662.625265] RIP: 0033:0x7f89589a3b19 [ 1662.626111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.630232] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1662.631943] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1662.633515] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1662.635109] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1662.636724] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1662.638353] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1662.640021] CPU: 1 PID: 8788 Comm: syz-executor.0 Not tainted 5.10.252 #1 [ 1662.641497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1662.643240] Call Trace: [ 1662.643272] FAULT_INJECTION: forcing a failure. [ 1662.643272] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.643807] dump_stack+0x107/0x167 [ 1662.643833] should_fail.cold+0x5/0xa [ 1662.647868] ? create_object.isra.0+0x3a/0xa30 [ 1662.648840] should_failslab+0x5/0x20 [ 1662.649632] kmem_cache_alloc+0x5b/0x310 [ 1662.650484] ? mark_held_locks+0x9e/0xe0 [ 1662.651344] create_object.isra.0+0x3a/0xa30 [ 1662.652257] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1662.653341] kmem_cache_alloc_bulk+0x168/0x320 [ 1662.654315] io_submit_sqes+0x6fe4/0x8610 [ 1662.655227] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1662.656264] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1662.657313] ? find_held_lock+0x2c/0x110 [ 1662.658284] ? io_submit_sqes+0x8610/0x8610 [ 1662.659422] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1662.660687] ? wait_for_completion_io+0x270/0x270 [ 1662.661822] ? rcu_read_lock_any_held+0x75/0xa0 [ 1662.662790] ? vfs_write+0x354/0xb10 [ 1662.663548] ? fput_many+0x2f/0x1a0 [ 1662.664308] ? ksys_write+0x1a9/0x260 [ 1662.665116] ? __ia32_sys_read+0xb0/0xb0 [ 1662.665966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1662.667053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1662.668230] do_syscall_64+0x33/0x40 [ 1662.669099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1662.670169] RIP: 0033:0x7f16333dbb19 [ 1662.670941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.674769] RSP: 002b:00007f1630951188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1662.676351] RAX: ffffffffffffffda RBX: 00007f16334eef60 RCX: 00007f16333dbb19 [ 1662.677848] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 1662.679316] RBP: 00007f16309511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1662.680828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.682370] R13: 00007ffcd69a130f R14: 00007f1630951300 R15: 0000000000022000 [ 1662.683889] CPU: 0 PID: 8793 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1662.685395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1662.687161] Call Trace: [ 1662.687725] dump_stack+0x107/0x167 [ 1662.688503] should_fail.cold+0x5/0xa [ 1662.689323] ? create_object.isra.0+0x3a/0xa30 [ 1662.690292] should_failslab+0x5/0x20 [ 1662.691104] kmem_cache_alloc+0x5b/0x310 [ 1662.691976] create_object.isra.0+0x3a/0xa30 [ 1662.692921] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1662.694009] kmem_cache_alloc_trace+0x151/0x320 [ 1662.694999] ? io_tctx_exit_cb+0xf0/0xf0 [ 1662.695864] percpu_ref_init+0xd8/0x3d0 [ 1662.696723] io_uring_setup+0x47a/0x2980 [ 1662.697588] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1662.698615] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1662.699689] ? wait_for_completion_io+0x270/0x270 [ 1662.700747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1662.701858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1662.702962] do_syscall_64+0x33/0x40 [ 1662.703754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1662.704849] RIP: 0033:0x7ff6be2aab19 [ 1662.705637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.709563] RSP: 002b:00007ff6bb7ff108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1662.711185] RAX: ffffffffffffffda RBX: 00007ff6be3be020 RCX: 00007ff6be2aab19 [ 1662.712714] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1662.714236] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1662.715808] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1662.717363] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) [ 1662.755001] FAULT_INJECTION: forcing a failure. [ 1662.755001] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.757629] CPU: 1 PID: 8799 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1662.759135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1662.760962] Call Trace: [ 1662.761554] dump_stack+0x107/0x167 [ 1662.762360] should_fail.cold+0x5/0xa [ 1662.763199] ? percpu_ref_init+0xd8/0x3d0 [ 1662.764107] should_failslab+0x5/0x20 [ 1662.764981] kmem_cache_alloc_trace+0x55/0x320 [ 1662.765980] ? io_tctx_exit_cb+0xf0/0xf0 [ 1662.766867] percpu_ref_init+0xd8/0x3d0 [ 1662.767776] io_uring_setup+0x47a/0x2980 [ 1662.768740] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1662.769788] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1662.770902] ? wait_for_completion_io+0x270/0x270 [ 1662.772014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1662.773187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1662.774321] do_syscall_64+0x33/0x40 [ 1662.775139] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1662.776271] RIP: 0033:0x7f6ebd7dfb19 [ 1662.777108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.781190] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1662.782750] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1662.784206] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1662.785669] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1662.787129] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1662.788579] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) [ 1662.811361] FAULT_INJECTION: forcing a failure. [ 1662.811361] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.813989] CPU: 1 PID: 8796 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1662.815387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1662.817096] Call Trace: [ 1662.817639] dump_stack+0x107/0x167 [ 1662.818419] should_fail.cold+0x5/0xa [ 1662.819219] ? create_object.isra.0+0x3a/0xa30 [ 1662.820158] should_failslab+0x5/0x20 [ 1662.820959] kmem_cache_alloc+0x5b/0x310 [ 1662.821806] ? mark_held_locks+0x9e/0xe0 [ 1662.822657] create_object.isra.0+0x3a/0xa30 [ 1662.823558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1662.824626] kmem_cache_alloc_bulk+0x168/0x320 [ 1662.825573] io_submit_sqes+0x6fe4/0x8610 [ 1662.826466] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1662.827487] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1662.828477] ? find_held_lock+0x2c/0x110 [ 1662.829331] ? io_submit_sqes+0x8610/0x8610 [ 1662.830228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1662.831217] ? wait_for_completion_io+0x270/0x270 [ 1662.832196] ? rcu_read_lock_any_held+0x75/0xa0 [ 1662.833166] ? vfs_write+0x354/0xb10 [ 1662.833926] ? fput_many+0x2f/0x1a0 [ 1662.834674] ? ksys_write+0x1a9/0x260 [ 1662.835454] ? __ia32_sys_read+0xb0/0xb0 [ 1662.836296] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1662.837375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1662.838443] do_syscall_64+0x33/0x40 [ 1662.839208] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1662.840253] RIP: 0033:0x7f8e4c378b19 [ 1662.841029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.844800] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1662.846362] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1662.847826] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1662.849301] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1662.850767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1662.852217] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 22:07:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:18 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "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"}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0xfa7, 0x4) 22:07:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 11) 22:07:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 12) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1663.004064] FAULT_INJECTION: forcing a failure. [ 1663.004064] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.006544] CPU: 0 PID: 8808 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1663.007997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.008519] FAULT_INJECTION: forcing a failure. [ 1663.008519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1663.009749] Call Trace: [ 1663.009780] dump_stack+0x107/0x167 [ 1663.009810] should_fail.cold+0x5/0xa [ 1663.014274] ? create_object.isra.0+0x3a/0xa30 [ 1663.015241] should_failslab+0x5/0x20 [ 1663.016049] kmem_cache_alloc+0x5b/0x310 [ 1663.016931] create_object.isra.0+0x3a/0xa30 [ 1663.017861] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1663.018945] kmem_cache_alloc_trace+0x151/0x320 [ 1663.019951] ? io_tctx_exit_cb+0xf0/0xf0 [ 1663.020823] percpu_ref_init+0xd8/0x3d0 [ 1663.021681] io_uring_setup+0x47a/0x2980 [ 1663.022554] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1663.023587] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1663.024704] ? wait_for_completion_io+0x270/0x270 [ 1663.025762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.026884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1663.028026] do_syscall_64+0x33/0x40 [ 1663.028858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.029980] RIP: 0033:0x7f6ebd7dfb19 [ 1663.030776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.034739] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1663.036410] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1663.038029] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1663.039536] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1663.041066] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1663.042638] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1663.044218] CPU: 1 PID: 8812 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1663.045610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.047253] Call Trace: [ 1663.047784] dump_stack+0x107/0x167 [ 1663.048499] should_fail.cold+0x5/0xa [ 1663.049270] __alloc_pages_nodemask+0x182/0x600 [ 1663.050189] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1663.051375] ? cap_capable+0x1cd/0x230 [ 1663.052157] alloc_pages_current+0x187/0x280 [ 1663.053024] __get_free_pages+0xc/0xa0 [ 1663.053808] io_uring_setup+0xe27/0x2980 [ 1663.054630] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1663.055634] ? wait_for_completion_io+0x270/0x270 [ 1663.056590] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.057608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1663.058624] do_syscall_64+0x33/0x40 [ 1663.059357] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.060371] RIP: 0033:0x7f89589a3b19 [ 1663.061096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.064664] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1663.066122] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1663.067496] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1663.068802] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1663.070101] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1663.071400] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 12) 22:07:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 13) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:07:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 12) 22:07:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 22:07:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:30 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 22:07:30 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "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"}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:07:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) [ 1674.894409] FAULT_INJECTION: forcing a failure. [ 1674.894409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1674.895889] CPU: 0 PID: 8822 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1674.896703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.897699] Call Trace: [ 1674.898024] dump_stack+0x107/0x167 [ 1674.898464] should_fail.cold+0x5/0xa [ 1674.898930] __alloc_pages_nodemask+0x182/0x600 [ 1674.899488] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1674.900215] ? cap_capable+0x1cd/0x230 [ 1674.900690] alloc_pages_current+0x187/0x280 [ 1674.901229] __get_free_pages+0xc/0xa0 [ 1674.901701] io_uring_setup+0xf9a/0x2980 [ 1674.902210] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1674.902816] ? wait_for_completion_io+0x270/0x270 [ 1674.903416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.904045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.904667] do_syscall_64+0x33/0x40 [ 1674.905119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.905728] RIP: 0033:0x7f89589a3b19 [ 1674.906169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.908348] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1674.909263] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1674.910106] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1674.910949] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1674.911795] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1674.912637] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1674.928600] FAULT_INJECTION: forcing a failure. [ 1674.928600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1674.931622] CPU: 1 PID: 8827 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1674.933334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.935413] Call Trace: [ 1674.936091] dump_stack+0x107/0x167 [ 1674.937018] should_fail.cold+0x5/0xa [ 1674.937986] __alloc_pages_nodemask+0x182/0x600 [ 1674.939176] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1674.940688] ? cap_capable+0x1cd/0x230 [ 1674.941700] alloc_pages_current+0x187/0x280 22:07:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1674.942955] __get_free_pages+0xc/0xa0 [ 1674.943965] io_uring_setup+0xe27/0x2980 [ 1674.945014] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1674.946303] ? wait_for_completion_io+0x270/0x270 [ 1674.947526] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.948876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.950200] do_syscall_64+0x33/0x40 [ 1674.951141] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.952437] RIP: 0033:0x7ff6be2aab19 [ 1674.953390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.958017] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1674.959932] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1674.961724] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1674.963525] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1674.965325] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1674.967135] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1674.978408] FAULT_INJECTION: forcing a failure. [ 1674.978408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1674.979850] CPU: 0 PID: 8831 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1674.980645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.981606] Call Trace: [ 1674.981920] dump_stack+0x107/0x167 [ 1674.982341] should_fail.cold+0x5/0xa [ 1674.982788] __alloc_pages_nodemask+0x182/0x600 [ 1674.983325] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1674.984034] ? cap_capable+0x1cd/0x230 [ 1674.984492] alloc_pages_current+0x187/0x280 [ 1674.985009] __get_free_pages+0xc/0xa0 [ 1674.985458] io_uring_setup+0xe27/0x2980 [ 1674.985937] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1674.986516] ? wait_for_completion_io+0x270/0x270 [ 1674.987102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.987704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.988296] do_syscall_64+0x33/0x40 [ 1674.988729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.989322] RIP: 0033:0x7f6ebd7dfb19 [ 1674.989752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.991844] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1674.992729] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1674.992978] FAULT_INJECTION: forcing a failure. [ 1674.992978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.993557] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1674.993574] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1674.997768] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1674.998583] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1674.999437] CPU: 1 PID: 8825 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1675.000998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1675.002854] Call Trace: [ 1675.003449] dump_stack+0x107/0x167 [ 1675.004266] should_fail.cold+0x5/0xa [ 1675.005149] _copy_from_user+0x2e/0x1b0 [ 1675.006046] __copy_msghdr_from_user+0x91/0x4b0 [ 1675.007090] ? __ia32_sys_shutdown+0x80/0x80 [ 1675.007634] FAULT_INJECTION: forcing a failure. [ 1675.007634] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.008088] sendmsg_copy_msghdr+0xa1/0x160 [ 1675.010311] ? do_recvmmsg+0x6d0/0x6d0 [ 1675.011192] ? lock_chain_count+0x20/0x20 [ 1675.012123] ? __is_insn_slot_addr+0x123/0x290 [ 1675.013152] ? lock_downgrade+0x6d0/0x6d0 [ 1675.014082] ? mark_lock+0xf5/0x2df0 [ 1675.014923] io_sendmsg+0x62c/0x830 [ 1675.015735] ? io_setup_async_msg+0x2d0/0x2d0 [ 1675.016758] ? register_lock_class+0xbb/0x17b0 [ 1675.017790] ? mark_lock+0xf5/0x2df0 [ 1675.018641] ? lock_chain_count+0x20/0x20 [ 1675.019561] ? mark_held_locks+0x9e/0xe0 [ 1675.020469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1675.021657] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1675.022854] ? trace_hardirqs_on+0x5b/0x180 [ 1675.023812] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1675.025042] ? __lock_acquire+0xbb1/0x5b00 [ 1675.025978] io_issue_sqe+0x3b3/0x77d0 [ 1675.026870] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1675.028074] ? SOFTIRQ_verbose+0x10/0x10 [ 1675.028998] ? percpu_ref_put_many+0x153/0x2b0 [ 1675.030006] ? io_connect+0x610/0x610 [ 1675.030869] ? lock_acquire+0x197/0x470 [ 1675.031762] ? find_held_lock+0x2c/0x110 [ 1675.032689] ? __fget_files+0x2cf/0x520 [ 1675.033621] ? lock_downgrade+0x6d0/0x6d0 [ 1675.034544] __io_queue_sqe+0x90/0x9d0 [ 1675.035436] ? io_issue_sqe+0x77d0/0x77d0 [ 1675.036372] ? __fget_files+0x2f8/0x520 [ 1675.037305] io_submit_sqes+0x44a8/0x8610 [ 1675.038259] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1675.039365] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1675.040452] ? find_held_lock+0x2c/0x110 [ 1675.041389] ? io_submit_sqes+0x8610/0x8610 [ 1675.042361] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1675.043434] ? wait_for_completion_io+0x270/0x270 [ 1675.044519] ? rcu_read_lock_any_held+0x75/0xa0 [ 1675.045542] ? vfs_write+0x354/0xb10 [ 1675.046381] ? fput_many+0x2f/0x1a0 [ 1675.047195] ? ksys_write+0x1a9/0x260 [ 1675.048046] ? __ia32_sys_read+0xb0/0xb0 [ 1675.048961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1675.050129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1675.051284] do_syscall_64+0x33/0x40 [ 1675.052120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1675.053287] RIP: 0033:0x7f8e4c378b19 [ 1675.054125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.058191] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1675.059887] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1675.061495] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1675.063083] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1675.064686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1675.066293] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 [ 1675.067915] CPU: 0 PID: 8834 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1675.068710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1675.069655] Call Trace: [ 1675.069965] dump_stack+0x107/0x167 [ 1675.070383] should_fail.cold+0x5/0xa [ 1675.070825] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1675.071462] should_failslab+0x5/0x20 [ 1675.071898] kmem_cache_alloc_trace+0x55/0x320 [ 1675.072423] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1675.073044] io_uring_setup+0x14f6/0x2980 [ 1675.073522] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1675.074104] ? wait_for_completion_io+0x270/0x270 [ 1675.074678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1675.075282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1675.075874] do_syscall_64+0x33/0x40 [ 1675.076303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1675.076890] RIP: 0033:0x7f89589a3b19 [ 1675.077320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.079397] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1675.080270] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1675.081094] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1675.081912] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1675.082726] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1675.083547] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:30 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "ae156c234ad7e8deed423dd51a4d7ca4a2ed3b1f35aa6241475278307ad3c7e7ddb240142179506b2c3912a280729b96bb028f28a5520022d3274e13e6cff160acaecb02d77f9e994fb21fae7da6407f96d1a3663726672df2d179109aa7b57510a14f1cb2d9bedb01892d33b0786e07c4d38a6165584368aaec6eb379941ebd90fb74c5bdced633d73c9d6cda53f02c6a008a7fb7fe53c1be7110a67f9d69b8489182282114684873c7c89a327071af639e31197357830fd54d0293a1782b29b73de1711884907f99b95c57cf19b2cc14ba63c26f01dd87eb935dfb9da092d14de706b1b8bba0ccb1e6f2379d1e4451c8d51136c826098820b4fbd588cedaf054fe8b67154c6ad767600768fae5ffe971ee47aca5095d112ae084b526a0106b1846603c82e42cf051c6b1e14846b2835f85f7ab2084e1d38e4548ed97feb1f7feda1fcdefd943fed054788b3155d505fd9eed74557a763300d8cd1aabb59da8ea368482c818b83b9b4d1b45d97a9aadf96e156a8542814c9cdee8c1f131b9783d8e53d946a97b2ca4e68c315a6eee2b2a2b574ac35bbd0dbf17bba4a550ad91922822235474181e4e225ea2c610c0dcaacb2e0d0326a8ecc7bb35cf01590c48566625d2bda2cb2cf2bc8e1ede492133985237b1462a507587af5fb8fa14ee7425ec2b4dd4583903a909c774cd4cc7e821194184578bf898640ebf82df429ea395666772d5c339b219add5ee8b38a18877441a674cebe929a42eb3ffa8107fbfb4c085b69a6aa457c40d412b3336fca665240c30f92303a12e6672bd7dc2236412674daf560a4988d8edbcc18d8efe7eead7a155349095e0f37717671c259c841b6ac2374c3e5864753eade867285a40962555b92d2b59008e137d9518a062775f398236e4d5aeae86ae8169348cc8747accb6f92c47cb4f54f3fa73014ccf9bdaf62e2ec962f40dc0dec6384be6cf4362368e5949bba10af0c832f94a7c85d07dfae7e1e7c202a976f4eee5486f61d11be1c78a2b010a7618607007b3fd07b12f0d17f5801d5e28b2241b390bea415875af6be24b281af875b9b0471237040f79a4426398bfd46c5f2da8f1f250f10241c77fdbc959d30f001c407666b76158c658b532ecdc6a82e3008683185bdd937a1882f4b777f190eb2209dfcbc6074a8d6bd6c5ec9af0b488219e10dbc114eb39249d16d66093693cd3c2458f677e527c753eb6a19f68fc40fadf114d1b0e0d7262176741aa508244f9f3d48877937286f661d79e5a1baac63ff5c5dccb23c1fc56e4a2bac6a93cf4ce9b1968e584c64e9a99a5d26f459ca3cc7f2bc9d652cc3ac76a83a94095f5e58df972eee98fba79e6b8577202f63d570b0d0c74e4297e3e93656d23680e9e885eb6e01701e79e5f6fbb0e33a62eaf5ca592cb75a12831dc8657db503d2b1d406dc9c189b87cd38198d2bf566446681ad35c7757d213afdaa7b2458a40ac9b2794fda94bff98486866993d7d9586c6cb8e3b1fc087ebfaaafe0afc5d3c52f23243b9809707cf0280a565574df07a9b9ab396d62b92ae2963cfef2d51e43255c247a47d527a65a952a09673da0f12ac1612c14e7d31f0f69797dd8ba28ac90c2bf4fa8822ccdbc3cdf818b1d1e60115908625270a841ef99793275bfba1fb491139fd7287ff2f362849063bad044e812ab08f28a766646f9df0efce36674f3813bb349b51655b6d37fcffb6c201a40b339376619a482925dfcfa0e582cb028451d5a125acd65b89b8c1ca4943d217954c0ac8eb6cdf75626a1568e756fff582a256199317443d03270bb5213d454bebfb06a614a759fcdf0a0ff11c7af86f37304dcca7f3dda291a9c28899078cea2390167a4519acd0b42a30f1c43e880b9f263b96ee1cc8391a08c2f38a19bc6404174d7dc46bd96045b1eb88b17f68e8f0544afaa90e30a227cea53288ed255191836b3997cd447ca770d27b5fcdad1e13c957892805df8ab64e4ccac9680d0dad0db17813e3ff6055db50eccf28c276ed379965f0ed12cfab656d5913f6ec55846baf49d9349ceb685ac660dc9b406e8b55ecf61f9025b9e1e4dca7906d9e649033f3cd81b76072ced04e6341601284e8042767fed92dbbb01b41a73e3f9d75c9c4469a7ef1d09858e09d63850fec0f0b63e82330d0f1a6c4fc03bb3a579b9b994f2282e26a6a1177cb928e5e61d23b3079f57895fd361476c6c267631f7136c6433e59408b1d5ce1250f30ac02162a728247f69246004a2f23e63f246a6c376744b9060b9045fa16a15f9d43c744d9a472e00e077de7ace1dd84abdf15c6d002c3b1c1527b21e07dcf80ebbcc899c1782680148496668de40d0a0ff8f45374eaa204774ab0f1da35b559482806bbff3ff0c631101ab302e0fb41a73ac0a35e10a0ce6f91839c3b327b559aabf8294117cc0f2c9c5399463d09f03a3aecaeed849d173b7451811b5078c2674a1b36ab8f852d7bf04e922340c6e8ff35276228156f2a4e7283f7275243429da2df3be78702c1b9227e2007c1a2e6d810895e6e39bbf311ca97356043b5ecd1f2a2a7d4ae5583bdd347c5d74873cb49516005dd6fc4ef5612dd275cf44566a8e92f21f6879ce4630617e7a714a2ef58737e19ab777c4a326372bc62b4458bce952360efdabe5d4c1e50cd4921215680da891330d5ab19f4b66079c6b7f1cfa126d884fd014f9059b5301db3893f581af349b3bd528fa1c52e30661ab814ffce4d8000f29b2638f39412e90be2f7a8e362e46abf168d6d8a9ce97bf8b4cc84f227a2a894b25b9b777ec225c40ad8addd87d149bbc58206a6fae1cf40b60f845007e80ac1b6dc27404154db386a9d438cd05728e3b840fd415eefaee8ff90b3b828f89d4f5faed41a3c8452a38dbf9d56938f34c053364b9aedbf6989618802c37351f7e9c425b213a1f0501645205d7c3f91073708a222057534ba93a797d70caa64e5eee2962bee2f4099d77835eca5e887a4eabbce366355d6af4087b1067568608d240f5fa07a035418815fb701c62531bff93efc4140b788614414b4b0b4e2adc444aaca24aef2ed75ef8d795833c0980e4b403fa8d1e4d38cfed8986f041d0973263f9985340c2e7a953e9e532339bab86837542c4383da0cffad4295ecaba7bd0f32f69b740884965cd639776307ed73ab57641cedf2a0a2a2948ac46aa62192c2e245978a3c606eb34ec01f7d455b5cf563bb5471f0322f10edc3e56b928b5668d47e720e5b12f28fe44038ed79cc56aef02d1d669dd9c0851ee25a484ebdd04c8d6262e7ed8705a79251c23caf213e7c87db602764220ca18f0788a798763c96bd361d12540857fa5990960c330c8cfa5d0ce59e722668eb1bbad38f84246f2cec7d8759e176dd71e26e8a17ffc6cec7e003706a1138b45c374b89f369cc056e4fc2b915887c60aab8dffd0115e78b33089a20368c19496935f3224262e28e96e725a3aee9cc7aa1a1c8f1e38337b5eaa289cbe8a6c9912fdbc96ce94799a9922694a14b9450232e2103c36f75bed793bb4ceb52d5814b4d4da5da9e3c8cea75fae8bdd21e10532ce2eca5b7b35adee451830ac5bba37b27c84e8f6dfe454df71b9baee884d93d120895a7474ffd4b6df541090ef7d60aa65b68325f8f216009098ba49c29c39eca5eccc0e119977895cf93095dc8bdc8bcb717a2c924bae2f559ae1ba17c3f5a763ed39358ffc15af4d7ba777c0202f0568b0c49bf04d15ceca832272222c5c9f5abb811671eb9e4c262381874184bff3ff9e532fd68f7af93ec9316125a624ff97c94c8c88470040e1071c82f49421008418feca766fad66eca3489507725f0c19e21990aca07cd4a641e88f985990c0253a73d5943115cc44a4304ce3dbf4af1e7dc90921a0693e88e67d558d4f59538e2d1b8a51d3902825ddffadd3f4a71d8c7a6d99b364bd72bb4a3baa2a5aa0f2cc552f1c2c027801e7ed7b817f43638b9c51c71c827b6ad844b48df31c391d9eb549d8152ee0d0d7d6491b612928d33e1dfd3cc3a4d03ccb86e2679973ccb65325522366703ab5a5adb661e46bd3770177dd694e72481af46b0ad200cd4ab50473a243e25e356292e7349c8d38ef492d497c3fac28b5b7f4c19c699c5fbe34be8d805005f24ef067125c52006fc1ef29290bb22e11ea674376f4dbb7a356603df00043c613ec106c1442d841c37a03c6a99d89b1fb4f3f4337aafd2fb76e0110b7c72b01d2e3933bac7ec786a6f630aef70ddbe3d1f12d83cc7baad1507f11b813c70d0f95e2075e2ab487d5dd534a04d18e0d3ce8da86d0b1d7e1687f689b3a6cce9e83b7ec5e1be505852a36f204cb0f4b73674f9761223a749c05fe0866514833205b962d149d419ed937382e6c0faef170df610c6a0c8ca4fe38b94dddb8187ba7108c63878c7a02cf997a78ff8481efadaeac1e290abdee62cd9e9385e38650c43922d7278cbe15e96a5e612bd58dde16c8e222ec31f707d58c0a9999bed3dc9238ae4eb6489d7be62c2889aada9b498e719f79c85d5052e22e8c3c5daaaa93385469c019bcde68bef37ba8fdd42b3945c3c2298b5de7cbbaa861f27f7c877e297a0f110df9d66a2d1f5c040d5bcc38dd9ced713fc95f2e06191b56ea203d4a2db2634cfa5c5d0decc087857ea981605395569632e85547377c69fe53ce2dd04883ac86316373fa6ce8dace74b52c865f3b2424b1046ddd951d83c7c229f5732107985553a5c66ac18fd1e2b774df013c420c0f6b9d73cee456769171ea2cca8bc2a301349fda7c42d23d605b6a2276056a8539d632d6b5bce9e42b7bbbd9b0fbd9b1141000e8397fd201022f22455d7d56b49dbf7c413c18f5936c0fd12f55e335a9b2fac28b0268feb4edd7a7ac10903718db1a4d2b051569e8dedcc03ccebffebc551f7603c2375e02033dc57803d1aaac74c474c7a0697c3e20bd71866f1b940924cc72927458f387bb1fc8e8b71a523fb705df963ff67cdd80b28adc2c4edfdbedd85215b12e65dafa80133bff684f9cda80614138b59016f7c36eb9c53667816702573b2d890ae67dc50d5ba79233c2dbd9791e612a1446ebef2c7c4798322ec7606d8325543c13b476b927d1670308b5e92021613c21fee3aadb4bec10d234035d96420b94c1a9b096536839f764ad29d1e667cbd4b24ac8aac828b109bd46d355cb386bdfe3ebe8e67b074d184b7112364a85843f6dda6763675565a90383c92af11b1a6341240f6bbec29025544213cf8767794b223c9295e01343211c9a9067945fea9e8fd2e8636eafda7d5c1cd56fcd64668fc5e187f6c4163c4d0481c401729aa11ab7dd6a063b5fad280dc6f566b37a67f0538d1169f3a58affc890e60fa35b7c6c1ef6786b5dc46a9dee49a43b38a507efbaa228952aa66453d21fb6975ed9f02c213914dbee980f98f8911cc4ea12f5d5eafd65ea4c7b85119144d0d5afd33b8076284437ab6559e485a35e80cf9b893e6f92fdd4b4035583da4ff312363e0e31c3a77d9d2c3b9f71677866fba2dd89880eb00d8eb433b0bd93eade9d55e0c4a4bf80bf7dd75e77fc3de207d7b398cd8953bbae12dbfe3854a0a0d4c80cb54704014081ec327881b7a512ef569ec00f60d9e2a5f998794e62d86576a3a9f3ba5b789297fcc86618adb65670c33e4a0cd482ab4ea44d1fabb42e702ce657f6d43890c810aa3c119392f192314042beb3a6ae23dd3b259142e2d1c0c1c7e1c5e366b54164c9060435c20893bb332ab860d644fdd348982c74694a43592a3efad"}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:07:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) 22:07:30 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "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"}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:07:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 13) 22:07:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:07:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:07:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) [ 1675.185014] FAULT_INJECTION: forcing a failure. [ 1675.185014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1675.186492] CPU: 0 PID: 8848 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1675.187265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1675.188235] Call Trace: [ 1675.188540] dump_stack+0x107/0x167 [ 1675.188962] should_fail.cold+0x5/0xa [ 1675.189400] __alloc_pages_nodemask+0x182/0x600 [ 1675.189935] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1675.190622] ? cap_capable+0x1cd/0x230 [ 1675.191077] alloc_pages_current+0x187/0x280 [ 1675.191580] __get_free_pages+0xc/0xa0 [ 1675.192027] io_uring_setup+0xf9a/0x2980 [ 1675.192498] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1675.193084] ? wait_for_completion_io+0x270/0x270 [ 1675.193657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1675.194252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1675.194839] do_syscall_64+0x33/0x40 [ 1675.195264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1675.195843] RIP: 0033:0x7f6ebd7dfb19 [ 1675.196262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.198373] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1675.199237] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1675.200040] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1675.200852] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1675.201657] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1675.202461] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1686.710391] FAULT_INJECTION: forcing a failure. [ 1686.710391] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.712062] CPU: 1 PID: 8861 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1686.713029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.714177] Call Trace: [ 1686.714554] dump_stack+0x107/0x167 [ 1686.715059] should_fail.cold+0x5/0xa [ 1686.715591] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1686.716365] should_failslab+0x5/0x20 [ 1686.716904] kmem_cache_alloc_trace+0x55/0x320 [ 1686.717544] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1686.718302] io_uring_setup+0x14f6/0x2980 [ 1686.718897] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1686.719600] ? wait_for_completion_io+0x270/0x270 [ 1686.720282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.721028] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.721758] do_syscall_64+0x33/0x40 [ 1686.722285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.722992] RIP: 0033:0x7f6ebd7dfb19 [ 1686.723504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.726049] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1686.727098] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1686.728085] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1686.729081] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1686.730064] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1686.731046] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1686.738274] FAULT_INJECTION: forcing a failure. [ 1686.738274] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1686.740036] CPU: 1 PID: 8869 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1686.740990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.742138] Call Trace: [ 1686.742507] dump_stack+0x107/0x167 [ 1686.743014] should_fail.cold+0x5/0xa [ 1686.743555] __alloc_pages_nodemask+0x182/0x600 [ 1686.744199] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1686.745052] ? cap_capable+0x1cd/0x230 [ 1686.745594] alloc_pages_current+0x187/0x280 [ 1686.746208] __get_free_pages+0xc/0xa0 [ 1686.746751] io_uring_setup+0xf9a/0x2980 [ 1686.747322] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1686.748023] ? wait_for_completion_io+0x270/0x270 [ 1686.748710] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.749442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.750157] do_syscall_64+0x33/0x40 [ 1686.750672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.751385] RIP: 0033:0x7ff6be2aab19 [ 1686.751902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.754462] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1686.755514] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1686.756499] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1686.757492] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1686.758477] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1686.759474] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:41 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r0}, "ae156c234ad7e8deed423dd51a4d7ca4a2ed3b1f35aa6241475278307ad3c7e7ddb240142179506b2c3912a280729b96bb028f28a5520022d3274e13e6cff160acaecb02d77f9e994fb21fae7da6407f96d1a3663726672df2d179109aa7b57510a14f1cb2d9bedb01892d33b0786e07c4d38a6165584368aaec6eb379941ebd90fb74c5bdced633d73c9d6cda53f02c6a008a7fb7fe53c1be7110a67f9d69b8489182282114684873c7c89a327071af639e31197357830fd54d0293a1782b29b73de1711884907f99b95c57cf19b2cc14ba63c26f01dd87eb935dfb9da092d14de706b1b8bba0ccb1e6f2379d1e4451c8d51136c826098820b4fbd588cedaf054fe8b67154c6ad767600768fae5ffe971ee47aca5095d112ae084b526a0106b1846603c82e42cf051c6b1e14846b2835f85f7ab2084e1d38e4548ed97feb1f7feda1fcdefd943fed054788b3155d505fd9eed74557a763300d8cd1aabb59da8ea368482c818b83b9b4d1b45d97a9aadf96e156a8542814c9cdee8c1f131b9783d8e53d946a97b2ca4e68c315a6eee2b2a2b574ac35bbd0dbf17bba4a550ad91922822235474181e4e225ea2c610c0dcaacb2e0d0326a8ecc7bb35cf01590c48566625d2bda2cb2cf2bc8e1ede492133985237b1462a507587af5fb8fa14ee7425ec2b4dd4583903a909c774cd4cc7e821194184578bf898640ebf82df429ea395666772d5c339b219add5ee8b38a18877441a674cebe929a42eb3ffa8107fbfb4c085b69a6aa457c40d412b3336fca665240c30f92303a12e6672bd7dc2236412674daf560a4988d8edbcc18d8efe7eead7a155349095e0f37717671c259c841b6ac2374c3e5864753eade867285a40962555b92d2b59008e137d9518a062775f398236e4d5aeae86ae8169348cc8747accb6f92c47cb4f54f3fa73014ccf9bdaf62e2ec962f40dc0dec6384be6cf4362368e5949bba10af0c832f94a7c85d07dfae7e1e7c202a976f4eee5486f61d11be1c78a2b010a7618607007b3fd07b12f0d17f5801d5e28b2241b390bea415875af6be24b281af875b9b0471237040f79a4426398bfd46c5f2da8f1f250f10241c77fdbc959d30f001c407666b76158c658b532ecdc6a82e3008683185bdd937a1882f4b777f190eb2209dfcbc6074a8d6bd6c5ec9af0b488219e10dbc114eb39249d16d66093693cd3c2458f677e527c753eb6a19f68fc40fadf114d1b0e0d7262176741aa508244f9f3d48877937286f661d79e5a1baac63ff5c5dccb23c1fc56e4a2bac6a93cf4ce9b1968e584c64e9a99a5d26f459ca3cc7f2bc9d652cc3ac76a83a94095f5e58df972eee98fba79e6b8577202f63d570b0d0c74e4297e3e93656d23680e9e885eb6e01701e79e5f6fbb0e33a62eaf5ca592cb75a12831dc8657db503d2b1d406dc9c189b87cd38198d2bf566446681ad35c7757d213afdaa7b2458a40ac9b2794fda94bff98486866993d7d9586c6cb8e3b1fc087ebfaaafe0afc5d3c52f23243b9809707cf0280a565574df07a9b9ab396d62b92ae2963cfef2d51e43255c247a47d527a65a952a09673da0f12ac1612c14e7d31f0f69797dd8ba28ac90c2bf4fa8822ccdbc3cdf818b1d1e60115908625270a841ef99793275bfba1fb491139fd7287ff2f362849063bad044e812ab08f28a766646f9df0efce36674f3813bb349b51655b6d37fcffb6c201a40b339376619a482925dfcfa0e582cb028451d5a125acd65b89b8c1ca4943d217954c0ac8eb6cdf75626a1568e756fff582a256199317443d03270bb5213d454bebfb06a614a759fcdf0a0ff11c7af86f37304dcca7f3dda291a9c28899078cea2390167a4519acd0b42a30f1c43e880b9f263b96ee1cc8391a08c2f38a19bc6404174d7dc46bd96045b1eb88b17f68e8f0544afaa90e30a227cea53288ed255191836b3997cd447ca770d27b5fcdad1e13c957892805df8ab64e4ccac9680d0dad0db17813e3ff6055db50eccf28c276ed379965f0ed12cfab656d5913f6ec55846baf49d9349ceb685ac660dc9b406e8b55ecf61f9025b9e1e4dca7906d9e649033f3cd81b76072ced04e6341601284e8042767fed92dbbb01b41a73e3f9d75c9c4469a7ef1d09858e09d63850fec0f0b63e82330d0f1a6c4fc03bb3a579b9b994f2282e26a6a1177cb928e5e61d23b3079f57895fd361476c6c267631f7136c6433e59408b1d5ce1250f30ac02162a728247f69246004a2f23e63f246a6c376744b9060b9045fa16a15f9d43c744d9a472e00e077de7ace1dd84abdf15c6d002c3b1c1527b21e07dcf80ebbcc899c1782680148496668de40d0a0ff8f45374eaa204774ab0f1da35b559482806bbff3ff0c631101ab302e0fb41a73ac0a35e10a0ce6f91839c3b327b559aabf8294117cc0f2c9c5399463d09f03a3aecaeed849d173b7451811b5078c2674a1b36ab8f852d7bf04e922340c6e8ff35276228156f2a4e7283f7275243429da2df3be78702c1b9227e2007c1a2e6d810895e6e39bbf311ca97356043b5ecd1f2a2a7d4ae5583bdd347c5d74873cb49516005dd6fc4ef5612dd275cf44566a8e92f21f6879ce4630617e7a714a2ef58737e19ab777c4a326372bc62b4458bce952360efdabe5d4c1e50cd4921215680da891330d5ab19f4b66079c6b7f1cfa126d884fd014f9059b5301db3893f581af349b3bd528fa1c52e30661ab814ffce4d8000f29b2638f39412e90be2f7a8e362e46abf168d6d8a9ce97bf8b4cc84f227a2a894b25b9b777ec225c40ad8addd87d149bbc58206a6fae1cf40b60f845007e80ac1b6dc27404154db386a9d438cd05728e3b840fd415eefaee8ff90b3b828f89d4f5faed41a3c8452a38dbf9d56938f34c053364b9aedbf6989618802c37351f7e9c425b213a1f0501645205d7c3f91073708a222057534ba93a797d70caa64e5eee2962bee2f4099d77835eca5e887a4eabbce366355d6af4087b1067568608d240f5fa07a035418815fb701c62531bff93efc4140b788614414b4b0b4e2adc444aaca24aef2ed75ef8d795833c0980e4b403fa8d1e4d38cfed8986f041d0973263f9985340c2e7a953e9e532339bab86837542c4383da0cffad4295ecaba7bd0f32f69b740884965cd639776307ed73ab57641cedf2a0a2a2948ac46aa62192c2e245978a3c606eb34ec01f7d455b5cf563bb5471f0322f10edc3e56b928b5668d47e720e5b12f28fe44038ed79cc56aef02d1d669dd9c0851ee25a484ebdd04c8d6262e7ed8705a79251c23caf213e7c87db602764220ca18f0788a798763c96bd361d12540857fa5990960c330c8cfa5d0ce59e722668eb1bbad38f84246f2cec7d8759e176dd71e26e8a17ffc6cec7e003706a1138b45c374b89f369cc056e4fc2b915887c60aab8dffd0115e78b33089a20368c19496935f3224262e28e96e725a3aee9cc7aa1a1c8f1e38337b5eaa289cbe8a6c9912fdbc96ce94799a9922694a14b9450232e2103c36f75bed793bb4ceb52d5814b4d4da5da9e3c8cea75fae8bdd21e10532ce2eca5b7b35adee451830ac5bba37b27c84e8f6dfe454df71b9baee884d93d120895a7474ffd4b6df541090ef7d60aa65b68325f8f216009098ba49c29c39eca5eccc0e119977895cf93095dc8bdc8bcb717a2c924bae2f559ae1ba17c3f5a763ed39358ffc15af4d7ba777c0202f0568b0c49bf04d15ceca832272222c5c9f5abb811671eb9e4c262381874184bff3ff9e532fd68f7af93ec9316125a624ff97c94c8c88470040e1071c82f49421008418feca766fad66eca3489507725f0c19e21990aca07cd4a641e88f985990c0253a73d5943115cc44a4304ce3dbf4af1e7dc90921a0693e88e67d558d4f59538e2d1b8a51d3902825ddffadd3f4a71d8c7a6d99b364bd72bb4a3baa2a5aa0f2cc552f1c2c027801e7ed7b817f43638b9c51c71c827b6ad844b48df31c391d9eb549d8152ee0d0d7d6491b612928d33e1dfd3cc3a4d03ccb86e2679973ccb65325522366703ab5a5adb661e46bd3770177dd694e72481af46b0ad200cd4ab50473a243e25e356292e7349c8d38ef492d497c3fac28b5b7f4c19c699c5fbe34be8d805005f24ef067125c52006fc1ef29290bb22e11ea674376f4dbb7a356603df00043c613ec106c1442d841c37a03c6a99d89b1fb4f3f4337aafd2fb76e0110b7c72b01d2e3933bac7ec786a6f630aef70ddbe3d1f12d83cc7baad1507f11b813c70d0f95e2075e2ab487d5dd534a04d18e0d3ce8da86d0b1d7e1687f689b3a6cce9e83b7ec5e1be505852a36f204cb0f4b73674f9761223a749c05fe0866514833205b962d149d419ed937382e6c0faef170df610c6a0c8ca4fe38b94dddb8187ba7108c63878c7a02cf997a78ff8481efadaeac1e290abdee62cd9e9385e38650c43922d7278cbe15e96a5e612bd58dde16c8e222ec31f707d58c0a9999bed3dc9238ae4eb6489d7be62c2889aada9b498e719f79c85d5052e22e8c3c5daaaa93385469c019bcde68bef37ba8fdd42b3945c3c2298b5de7cbbaa861f27f7c877e297a0f110df9d66a2d1f5c040d5bcc38dd9ced713fc95f2e06191b56ea203d4a2db2634cfa5c5d0decc087857ea981605395569632e85547377c69fe53ce2dd04883ac86316373fa6ce8dace74b52c865f3b2424b1046ddd951d83c7c229f5732107985553a5c66ac18fd1e2b774df013c420c0f6b9d73cee456769171ea2cca8bc2a301349fda7c42d23d605b6a2276056a8539d632d6b5bce9e42b7bbbd9b0fbd9b1141000e8397fd201022f22455d7d56b49dbf7c413c18f5936c0fd12f55e335a9b2fac28b0268feb4edd7a7ac10903718db1a4d2b051569e8dedcc03ccebffebc551f7603c2375e02033dc57803d1aaac74c474c7a0697c3e20bd71866f1b940924cc72927458f387bb1fc8e8b71a523fb705df963ff67cdd80b28adc2c4edfdbedd85215b12e65dafa80133bff684f9cda80614138b59016f7c36eb9c53667816702573b2d890ae67dc50d5ba79233c2dbd9791e612a1446ebef2c7c4798322ec7606d8325543c13b476b927d1670308b5e92021613c21fee3aadb4bec10d234035d96420b94c1a9b096536839f764ad29d1e667cbd4b24ac8aac828b109bd46d355cb386bdfe3ebe8e67b074d184b7112364a85843f6dda6763675565a90383c92af11b1a6341240f6bbec29025544213cf8767794b223c9295e01343211c9a9067945fea9e8fd2e8636eafda7d5c1cd56fcd64668fc5e187f6c4163c4d0481c401729aa11ab7dd6a063b5fad280dc6f566b37a67f0538d1169f3a58affc890e60fa35b7c6c1ef6786b5dc46a9dee49a43b38a507efbaa228952aa66453d21fb6975ed9f02c213914dbee980f98f8911cc4ea12f5d5eafd65ea4c7b85119144d0d5afd33b8076284437ab6559e485a35e80cf9b893e6f92fdd4b4035583da4ff312363e0e31c3a77d9d2c3b9f71677866fba2dd89880eb00d8eb433b0bd93eade9d55e0c4a4bf80bf7dd75e77fc3de207d7b398cd8953bbae12dbfe3854a0a0d4c80cb54704014081ec327881b7a512ef569ec00f60d9e2a5f998794e62d86576a3a9f3ba5b789297fcc86618adb65670c33e4a0cd482ab4ea44d1fabb42e702ce657f6d43890c810aa3c119392f192314042beb3a6ae23dd3b259142e2d1c0c1c7e1c5e366b54164c9060435c20893bb332ab860d644fdd348982c74694a43592a3efad"}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:07:41 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 22:07:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 15) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:07:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 13) 22:07:41 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:07:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 14) [ 1686.775432] FAULT_INJECTION: forcing a failure. [ 1686.775432] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.777085] CPU: 1 PID: 8871 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1686.778038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.779187] Call Trace: [ 1686.779559] dump_stack+0x107/0x167 [ 1686.780068] should_fail.cold+0x5/0xa [ 1686.780600] ? create_object.isra.0+0x3a/0xa30 [ 1686.781270] should_failslab+0x5/0x20 [ 1686.781839] kmem_cache_alloc+0x5b/0x310 [ 1686.782447] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1686.783313] create_object.isra.0+0x3a/0xa30 [ 1686.783959] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1686.784679] kmem_cache_alloc_trace+0x151/0x320 [ 1686.785367] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1686.786165] io_uring_setup+0x14f6/0x2980 [ 1686.786772] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1686.787515] ? wait_for_completion_io+0x270/0x270 [ 1686.788217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.788984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.789714] do_syscall_64+0x33/0x40 [ 1686.790259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.790983] RIP: 0033:0x7f89589a3b19 [ 1686.791526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.793994] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1686.795008] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1686.795961] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1686.796919] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1686.797864] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1686.798810] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:42 executing program 5: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1686.836047] FAULT_INJECTION: forcing a failure. [ 1686.836047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1686.837823] CPU: 1 PID: 8873 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1686.838793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.839964] Call Trace: [ 1686.840351] dump_stack+0x107/0x167 [ 1686.840903] should_fail.cold+0x5/0xa [ 1686.841454] _copy_from_user+0x2e/0x1b0 [ 1686.842027] __copy_msghdr_from_user+0x91/0x4b0 [ 1686.842687] ? __ia32_sys_shutdown+0x80/0x80 [ 1686.843338] sendmsg_copy_msghdr+0xa1/0x160 [ 1686.843990] ? do_recvmmsg+0x6d0/0x6d0 [ 1686.844562] ? lock_chain_count+0x20/0x20 [ 1686.845191] ? __is_insn_slot_addr+0x123/0x290 [ 1686.845865] ? lock_downgrade+0x6d0/0x6d0 [ 1686.846467] ? mark_lock+0xf5/0x2df0 [ 1686.847007] ? mark_lock+0xf5/0x2df0 [ 1686.847555] io_sendmsg+0x62c/0x830 [ 1686.848091] ? io_setup_async_msg+0x2d0/0x2d0 [ 1686.848748] ? register_lock_class+0xbb/0x17b0 [ 1686.849424] ? mark_lock+0xf5/0x2df0 [ 1686.849971] ? lock_chain_count+0x20/0x20 [ 1686.850573] ? __lock_acquire+0xbb1/0x5b00 [ 1686.851203] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.851959] ? __lock_acquire+0xbb1/0x5b00 [ 1686.852575] io_issue_sqe+0x3b3/0x77d0 [ 1686.853157] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.853926] ? SOFTIRQ_verbose+0x10/0x10 [ 1686.854515] ? percpu_ref_put_many+0x153/0x2b0 [ 1686.855195] ? io_connect+0x610/0x610 [ 1686.855759] ? do_raw_spin_lock+0x121/0x260 [ 1686.856394] ? lock_acquire+0x197/0x470 [ 1686.856976] ? find_held_lock+0x2c/0x110 [ 1686.857578] ? __fget_files+0x2cf/0x520 [ 1686.858153] ? lock_downgrade+0x6d0/0x6d0 [ 1686.858765] __io_queue_sqe+0x90/0x9d0 [ 1686.859339] ? io_issue_sqe+0x77d0/0x77d0 [ 1686.859940] ? __fget_files+0x2f8/0x520 [ 1686.860527] io_submit_sqes+0x44a8/0x8610 [ 1686.861157] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1686.861873] __do_sys_io_uring_enter+0x6b2/0x1890 22:07:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 15) [ 1686.862579] ? find_held_lock+0x2c/0x110 [ 1686.863393] ? io_submit_sqes+0x8610/0x8610 [ 1686.864061] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1686.864758] ? wait_for_completion_io+0x270/0x270 [ 1686.865467] ? rcu_read_lock_any_held+0x75/0xa0 [ 1686.866146] ? vfs_write+0x354/0xb10 [ 1686.866699] ? fput_many+0x2f/0x1a0 [ 1686.867221] ? ksys_write+0x1a9/0x260 [ 1686.867781] ? __ia32_sys_read+0xb0/0xb0 [ 1686.868372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.869164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.869892] do_syscall_64+0x33/0x40 [ 1686.870432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.871158] RIP: 0033:0x7f8e4c378b19 [ 1686.871699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.874296] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1686.875362] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1686.876359] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1686.877305] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.878099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1686.878891] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 22:07:42 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) [ 1686.919267] FAULT_INJECTION: forcing a failure. 22:07:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1686.919267] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.920890] CPU: 1 PID: 8879 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1686.921691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.922662] Call Trace: [ 1686.922990] dump_stack+0x107/0x167 [ 1686.923424] should_fail.cold+0x5/0xa [ 1686.923875] ? create_object.isra.0+0x3a/0xa30 [ 1686.924408] should_failslab+0x5/0x20 [ 1686.924858] kmem_cache_alloc+0x5b/0x310 [ 1686.925343] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1686.926044] create_object.isra.0+0x3a/0xa30 [ 1686.926559] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1686.927169] kmem_cache_alloc_trace+0x151/0x320 [ 1686.927725] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1686.928365] io_uring_setup+0x14f6/0x2980 [ 1686.928848] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1686.929449] ? wait_for_completion_io+0x270/0x270 [ 1686.930021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.930643] ? syscall_enter_from_user_mode+0x1d/0x50 22:07:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 14) [ 1686.931251] do_syscall_64+0x33/0x40 [ 1686.931810] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.932424] RIP: 0033:0x7f6ebd7dfb19 [ 1686.932861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.935026] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1686.935907] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 22:07:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 16) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1686.936751] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1686.937694] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1686.938490] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1686.939278] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 22:07:42 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 1687.037636] FAULT_INJECTION: forcing a failure. [ 1687.037636] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.038394] FAULT_INJECTION: forcing a failure. [ 1687.038394] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.040507] CPU: 0 PID: 8889 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1687.043248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1687.045146] Call Trace: [ 1687.045793] dump_stack+0x107/0x167 [ 1687.046682] should_fail.cold+0x5/0xa [ 1687.047604] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1687.048887] should_failslab+0x5/0x20 [ 1687.049810] kmem_cache_alloc_trace+0x55/0x320 [ 1687.050939] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1687.052260] io_uring_setup+0x14f6/0x2980 [ 1687.053299] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1687.054531] ? wait_for_completion_io+0x270/0x270 [ 1687.055756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1687.056989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1687.058206] do_syscall_64+0x33/0x40 [ 1687.059053] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1687.060171] RIP: 0033:0x7ff6be2aab19 [ 1687.060990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.065188] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1687.066847] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1687.068398] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1687.069950] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1687.071500] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1687.073057] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1687.074659] CPU: 1 PID: 8891 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1687.075544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1687.076549] Call Trace: [ 1687.076884] dump_stack+0x107/0x167 [ 1687.077324] should_fail.cold+0x5/0xa [ 1687.077801] ? create_object.isra.0+0x3a/0xa30 [ 1687.078367] should_failslab+0x5/0x20 [ 1687.078839] kmem_cache_alloc+0x5b/0x310 [ 1687.079336] create_object.isra.0+0x3a/0xa30 [ 1687.079881] kmemleak_alloc_percpu+0xa0/0x100 [ 1687.080430] pcpu_alloc+0x4e2/0x1240 [ 1687.080903] ? io_async_queue_proc+0x80/0x80 [ 1687.081439] percpu_ref_init+0x31/0x3d0 [ 1687.081891] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1687.082553] io_uring_setup+0x14f6/0x2980 [ 1687.083057] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1687.083676] ? wait_for_completion_io+0x270/0x270 [ 1687.084277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1687.084928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1687.085561] do_syscall_64+0x33/0x40 [ 1687.086009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1687.086624] RIP: 0033:0x7f89589a3b19 [ 1687.087070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.089297] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1687.090220] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1687.091078] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1687.091947] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1687.092820] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1687.093700] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1687.128328] FAULT_INJECTION: forcing a failure. [ 1687.128328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.131045] CPU: 0 PID: 8897 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1687.132510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1687.134312] Call Trace: [ 1687.134887] dump_stack+0x107/0x167 [ 1687.135678] should_fail.cold+0x5/0xa [ 1687.136652] _copy_from_user+0x2e/0x1b0 [ 1687.137534] __copy_msghdr_from_user+0x91/0x4b0 [ 1687.138543] ? __ia32_sys_shutdown+0x80/0x80 [ 1687.139516] sendmsg_copy_msghdr+0xa1/0x160 [ 1687.140452] ? do_recvmmsg+0x6d0/0x6d0 [ 1687.141305] ? lock_chain_count+0x20/0x20 [ 1687.142209] ? __is_insn_slot_addr+0x123/0x290 [ 1687.143202] ? lock_downgrade+0x6d0/0x6d0 [ 1687.144107] ? mark_lock+0xf5/0x2df0 [ 1687.144925] ? mark_lock+0xf5/0x2df0 [ 1687.145746] io_sendmsg+0x62c/0x830 [ 1687.146544] ? io_setup_async_msg+0x2d0/0x2d0 [ 1687.147519] ? register_lock_class+0xbb/0x17b0 [ 1687.148518] ? mark_lock+0xf5/0x2df0 [ 1687.149348] ? lock_chain_count+0x20/0x20 [ 1687.150260] ? __lock_acquire+0xbb1/0x5b00 [ 1687.151199] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1687.152345] ? __lock_acquire+0xbb1/0x5b00 [ 1687.153282] io_issue_sqe+0x3b3/0x77d0 [ 1687.154142] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1687.155282] ? SOFTIRQ_verbose+0x10/0x10 [ 1687.156173] ? percpu_ref_put_many+0x153/0x2b0 [ 1687.157177] ? io_connect+0x610/0x610 [ 1687.157999] ? do_raw_spin_lock+0x121/0x260 [ 1687.158943] ? lock_acquire+0x197/0x470 [ 1687.159803] ? find_held_lock+0x2c/0x110 [ 1687.160689] ? __fget_files+0x2cf/0x520 [ 1687.161573] ? lock_downgrade+0x6d0/0x6d0 [ 1687.162479] __io_queue_sqe+0x90/0x9d0 [ 1687.163326] ? io_issue_sqe+0x77d0/0x77d0 [ 1687.164226] ? __fget_files+0x2f8/0x520 [ 1687.165119] io_submit_sqes+0x44a8/0x8610 [ 1687.166050] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1687.167134] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1687.168185] ? find_held_lock+0x2c/0x110 [ 1687.169085] ? io_submit_sqes+0x8610/0x8610 [ 1687.170034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1687.171083] ? wait_for_completion_io+0x270/0x270 [ 1687.172138] ? rcu_read_lock_any_held+0x75/0xa0 [ 1687.173157] ? vfs_write+0x354/0xb10 [ 1687.173967] ? fput_many+0x2f/0x1a0 [ 1687.174757] ? ksys_write+0x1a9/0x260 [ 1687.175581] ? __ia32_sys_read+0xb0/0xb0 [ 1687.176469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1687.177618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1687.178740] do_syscall_64+0x33/0x40 [ 1687.179549] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1687.180661] RIP: 0033:0x7f8e4c378b19 [ 1687.181477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.185488] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1687.187140] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1687.188691] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1687.190248] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1687.191796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1687.193358] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 22:07:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 17) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:07:54 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 22:07:54 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:07:54 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 16) 22:07:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x60ff, 0x0, 0x0, 0x0) 22:07:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 15) 22:07:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1699.427251] FAULT_INJECTION: forcing a failure. [ 1699.427251] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.429494] CPU: 0 PID: 8910 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1699.430784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.432331] Call Trace: [ 1699.432830] dump_stack+0x107/0x167 [ 1699.433535] should_fail.cold+0x5/0xa [ 1699.434257] ? create_object.isra.0+0x3a/0xa30 [ 1699.435127] should_failslab+0x5/0x20 [ 1699.435853] kmem_cache_alloc+0x5b/0x310 [ 1699.436629] create_object.isra.0+0x3a/0xa30 [ 1699.437490] kmemleak_alloc_percpu+0xa0/0x100 [ 1699.438345] pcpu_alloc+0x4e2/0x1240 [ 1699.439075] ? io_async_queue_proc+0x80/0x80 [ 1699.439912] percpu_ref_init+0x31/0x3d0 [ 1699.440672] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1699.441698] io_uring_setup+0x14f6/0x2980 [ 1699.442496] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1699.443445] ? wait_for_completion_io+0x270/0x270 [ 1699.444402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.445405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.446374] do_syscall_64+0x33/0x40 [ 1699.447070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.448033] RIP: 0033:0x7f89589a3b19 [ 1699.448722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.452133] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1699.453562] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1699.454884] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1699.456200] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1699.457530] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1699.458852] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1699.468571] FAULT_INJECTION: forcing a failure. [ 1699.468571] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.470755] CPU: 0 PID: 8916 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1699.472026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.473563] Call Trace: [ 1699.474059] dump_stack+0x107/0x167 [ 1699.474748] should_fail.cold+0x5/0xa [ 1699.475463] ? create_object.isra.0+0x3a/0xa30 [ 1699.476312] should_failslab+0x5/0x20 [ 1699.477028] kmem_cache_alloc+0x5b/0x310 [ 1699.477793] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1699.478911] create_object.isra.0+0x3a/0xa30 [ 1699.479724] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1699.480677] kmem_cache_alloc_trace+0x151/0x320 [ 1699.481565] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1699.482565] io_uring_setup+0x14f6/0x2980 [ 1699.483343] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1699.484266] ? wait_for_completion_io+0x270/0x270 [ 1699.485200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.486153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.487107] do_syscall_64+0x33/0x40 [ 1699.487796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.488230] FAULT_INJECTION: forcing a failure. [ 1699.488230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.488719] RIP: 0033:0x7ff6be2aab19 [ 1699.488739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.488749] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1699.488769] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1699.488780] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1699.488800] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1699.500643] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1699.501927] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1699.503250] CPU: 1 PID: 8911 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1699.504822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.506662] Call Trace: [ 1699.507257] dump_stack+0x107/0x167 [ 1699.507827] FAULT_INJECTION: forcing a failure. [ 1699.507827] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.508078] should_fail.cold+0x5/0xa [ 1699.510916] _copy_from_user+0x2e/0x1b0 [ 1699.511826] __copy_msghdr_from_user+0x91/0x4b0 [ 1699.512866] ? __ia32_sys_shutdown+0x80/0x80 [ 1699.513912] sendmsg_copy_msghdr+0xa1/0x160 [ 1699.514894] ? do_recvmmsg+0x6d0/0x6d0 [ 1699.515785] ? lock_chain_count+0x20/0x20 [ 1699.516700] ? __is_insn_slot_addr+0x123/0x290 [ 1699.517733] ? lock_downgrade+0x6d0/0x6d0 [ 1699.518685] ? mark_lock+0xf5/0x2df0 [ 1699.519527] ? mark_lock+0xf5/0x2df0 [ 1699.520367] io_sendmsg+0x62c/0x830 [ 1699.521196] ? io_setup_async_msg+0x2d0/0x2d0 [ 1699.522197] ? register_lock_class+0xbb/0x17b0 [ 1699.523248] ? mark_lock+0xf5/0x2df0 [ 1699.524107] ? lock_chain_count+0x20/0x20 [ 1699.525066] ? __lock_acquire+0xbb1/0x5b00 [ 1699.526042] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1699.527229] ? __lock_acquire+0xbb1/0x5b00 [ 1699.528177] io_issue_sqe+0x3b3/0x77d0 [ 1699.529075] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1699.530237] ? SOFTIRQ_verbose+0x10/0x10 [ 1699.531145] ? percpu_ref_put_many+0x153/0x2b0 [ 1699.532157] ? io_connect+0x610/0x610 [ 1699.533029] ? do_raw_spin_lock+0x121/0x260 [ 1699.534013] ? lock_acquire+0x197/0x470 [ 1699.534912] ? find_held_lock+0x2c/0x110 [ 1699.535805] ? __fget_files+0x2cf/0x520 [ 1699.536713] ? lock_downgrade+0x6d0/0x6d0 [ 1699.537650] __io_queue_sqe+0x90/0x9d0 [ 1699.538546] ? io_issue_sqe+0x77d0/0x77d0 [ 1699.539475] ? __fget_files+0x2f8/0x520 [ 1699.540388] io_submit_sqes+0x44a8/0x8610 [ 1699.541387] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1699.542504] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1699.543579] ? find_held_lock+0x2c/0x110 [ 1699.544494] ? io_submit_sqes+0x8610/0x8610 [ 1699.545477] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1699.546564] ? wait_for_completion_io+0x270/0x270 [ 1699.547680] ? rcu_read_lock_any_held+0x75/0xa0 [ 1699.548709] ? vfs_write+0x354/0xb10 [ 1699.549553] ? fput_many+0x2f/0x1a0 [ 1699.550357] ? ksys_write+0x1a9/0x260 [ 1699.551202] ? __ia32_sys_read+0xb0/0xb0 [ 1699.552107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.553294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.554463] do_syscall_64+0x33/0x40 [ 1699.555248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.556284] RIP: 0033:0x7f8e4c378b19 [ 1699.557064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.560822] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1699.562387] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1699.563828] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1699.565438] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1699.567037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1699.568656] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 [ 1699.570296] CPU: 0 PID: 8913 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1699.571526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.572947] Call Trace: [ 1699.573419] dump_stack+0x107/0x167 [ 1699.574050] should_fail.cold+0x5/0xa [ 1699.574710] ? create_object.isra.0+0x3a/0xa30 [ 1699.575499] should_failslab+0x5/0x20 [ 1699.576151] kmem_cache_alloc+0x5b/0x310 [ 1699.576855] create_object.isra.0+0x3a/0xa30 [ 1699.577641] kmemleak_alloc_percpu+0xa0/0x100 [ 1699.578423] pcpu_alloc+0x4e2/0x1240 [ 1699.579092] ? io_async_queue_proc+0x80/0x80 [ 1699.579852] percpu_ref_init+0x31/0x3d0 [ 1699.580545] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1699.581498] io_uring_setup+0x14f6/0x2980 [ 1699.582232] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1699.583106] ? wait_for_completion_io+0x270/0x270 [ 1699.583969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.584877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.585767] do_syscall_64+0x33/0x40 [ 1699.586406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.587295] RIP: 0033:0x7f6ebd7dfb19 [ 1699.587926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.591065] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1699.592364] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1699.593587] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1699.594800] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1699.596018] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1699.597250] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1699.603498] FAULT_INJECTION: forcing a failure. [ 1699.603498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.605618] CPU: 0 PID: 8906 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1699.606781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.608188] Call Trace: [ 1699.608645] dump_stack+0x107/0x167 [ 1699.609279] should_fail.cold+0x5/0xa [ 1699.609948] _copy_from_user+0x2e/0x1b0 [ 1699.610634] io_uring_setup+0x9b/0x2980 [ 1699.611312] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1699.612141] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1699.612995] ? wait_for_completion_io+0x270/0x270 [ 1699.613837] ? rcu_read_lock_any_held+0x75/0xa0 [ 1699.614625] ? vfs_write+0x354/0xb10 [ 1699.615271] ? fput_many+0x2f/0x1a0 [ 1699.615890] ? ksys_write+0x1a9/0x260 [ 1699.616535] ? __ia32_sys_read+0xb0/0xb0 [ 1699.617237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.618124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.619007] do_syscall_64+0x33/0x40 [ 1699.619634] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.620495] RIP: 0033:0x7fc72ff08b19 [ 1699.621134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.624215] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1699.625503] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1699.626704] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1699.627906] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1699.629106] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1699.630300] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:54 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:07:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:07:54 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:07:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 16) 22:07:54 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 22:07:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:07:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 22:07:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) [ 1699.792227] FAULT_INJECTION: forcing a failure. [ 1699.792227] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.794838] CPU: 1 PID: 8933 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1699.796361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.798169] Call Trace: [ 1699.798728] dump_stack+0x107/0x167 [ 1699.799526] should_fail.cold+0x5/0xa [ 1699.800352] ? io_uring_setup+0x258/0x2980 [ 1699.801254] should_failslab+0x5/0x20 [ 1699.802042] kmem_cache_alloc_trace+0x55/0x320 22:07:55 executing program 5: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1699.803009] io_uring_setup+0x258/0x2980 [ 1699.804062] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1699.805074] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1699.806108] ? wait_for_completion_io+0x270/0x270 [ 1699.807118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.808194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.809271] do_syscall_64+0x33/0x40 [ 1699.810071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.811123] RIP: 0033:0x7fc72ff08b19 [ 1699.811884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.812057] FAULT_INJECTION: forcing a failure. [ 1699.812057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.815658] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1699.815678] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1699.815688] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1699.815699] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1699.815715] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1699.824721] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1699.826217] CPU: 0 PID: 8934 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1699.827196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.828362] Call Trace: [ 1699.828739] dump_stack+0x107/0x167 [ 1699.829265] should_fail.cold+0x5/0xa [ 1699.829811] _copy_from_user+0x2e/0x1b0 [ 1699.829918] FAULT_INJECTION: forcing a failure. [ 1699.829918] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.830383] __copy_msghdr_from_user+0x91/0x4b0 [ 1699.833280] ? __ia32_sys_shutdown+0x80/0x80 [ 1699.833913] sendmsg_copy_msghdr+0xa1/0x160 [ 1699.834509] ? do_recvmmsg+0x6d0/0x6d0 [ 1699.835057] ? lock_chain_count+0x20/0x20 [ 1699.835640] ? __is_insn_slot_addr+0x123/0x290 [ 1699.836279] ? mark_lock+0xf5/0x2df0 [ 1699.836796] ? mark_lock+0xf5/0x2df0 [ 1699.837326] io_sendmsg+0x62c/0x830 [ 1699.837840] ? io_setup_async_msg+0x2d0/0x2d0 [ 1699.838464] ? register_lock_class+0xbb/0x17b0 [ 1699.839096] ? lock_chain_count+0x20/0x20 [ 1699.839672] ? mark_lock+0xf5/0x2df0 [ 1699.840194] ? register_lock_class+0xbb/0x17b0 [ 1699.840837] ? lock_chain_count+0x20/0x20 [ 1699.841424] ? mark_held_locks+0x9e/0xe0 [ 1699.841992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.842718] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1699.843454] ? trace_hardirqs_on+0x5b/0x180 [ 1699.844049] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1699.844795] ? io_issue_sqe+0x94/0x77d0 [ 1699.845362] io_issue_sqe+0x3b3/0x77d0 [ 1699.845902] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1699.846617] ? SOFTIRQ_verbose+0x10/0x10 [ 1699.847172] ? percpu_ref_put_many+0x153/0x2b0 [ 1699.847797] ? io_connect+0x610/0x610 [ 1699.848318] ? do_raw_spin_lock+0x121/0x260 [ 1699.848915] ? lock_acquire+0x197/0x470 [ 1699.849467] ? find_held_lock+0x2c/0x110 [ 1699.850029] ? __fget_files+0x2cf/0x520 [ 1699.850573] ? lock_downgrade+0x6d0/0x6d0 [ 1699.851141] __io_queue_sqe+0x90/0x9d0 [ 1699.851679] ? io_issue_sqe+0x77d0/0x77d0 [ 1699.852246] ? __fget_files+0x2f8/0x520 [ 1699.852809] io_submit_sqes+0x44a8/0x8610 [ 1699.853420] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1699.854110] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1699.854771] ? find_held_lock+0x2c/0x110 [ 1699.855331] ? io_submit_sqes+0x8610/0x8610 [ 1699.855924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1699.856585] ? wait_for_completion_io+0x270/0x270 [ 1699.857263] ? rcu_read_lock_any_held+0x75/0xa0 [ 1699.857898] ? vfs_write+0x354/0xb10 [ 1699.858415] ? fput_many+0x2f/0x1a0 [ 1699.858911] ? ksys_write+0x1a9/0x260 [ 1699.859432] ? __ia32_sys_read+0xb0/0xb0 [ 1699.859997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.860717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.861430] do_syscall_64+0x33/0x40 [ 1699.861934] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.862630] RIP: 0033:0x7f8e4c378b19 [ 1699.863140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.865690] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1699.866722] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1699.867690] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1699.868653] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1699.869631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1699.870604] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 [ 1699.871610] CPU: 1 PID: 8935 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1699.873060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.874774] Call Trace: [ 1699.875312] dump_stack+0x107/0x167 [ 1699.876065] should_fail.cold+0x5/0xa [ 1699.876861] ? create_object.isra.0+0x3a/0xa30 [ 1699.877809] should_failslab+0x5/0x20 [ 1699.878600] kmem_cache_alloc+0x5b/0x310 [ 1699.879441] create_object.isra.0+0x3a/0xa30 [ 1699.880359] kmemleak_alloc_percpu+0xa0/0x100 [ 1699.881293] pcpu_alloc+0x4e2/0x1240 [ 1699.882074] ? io_async_queue_proc+0x80/0x80 [ 1699.882966] percpu_ref_init+0x31/0x3d0 [ 1699.883780] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1699.884889] io_uring_setup+0x14f6/0x2980 [ 1699.885756] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1699.886798] ? wait_for_completion_io+0x270/0x270 [ 1699.887800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.888869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.889934] do_syscall_64+0x33/0x40 [ 1699.890696] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.891744] RIP: 0033:0x7ff6be2aab19 [ 1699.892510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.896277] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1699.897855] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1699.899315] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1699.900775] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1699.902234] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1699.903679] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1699.907382] FAULT_INJECTION: forcing a failure. [ 1699.907382] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.909686] CPU: 1 PID: 8938 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1699.911092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.912784] Call Trace: [ 1699.913334] dump_stack+0x107/0x167 [ 1699.914085] should_fail.cold+0x5/0xa [ 1699.914877] ? percpu_ref_init+0xd8/0x3d0 [ 1699.915724] should_failslab+0x5/0x20 [ 1699.916512] kmem_cache_alloc_trace+0x55/0x320 [ 1699.917457] ? io_async_queue_proc+0x80/0x80 [ 1699.918360] percpu_ref_init+0xd8/0x3d0 [ 1699.919184] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1699.920289] io_uring_setup+0x14f6/0x2980 22:07:55 executing program 5: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1699.921157] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1699.922410] ? wait_for_completion_io+0x270/0x270 [ 1699.923418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.924492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.925565] do_syscall_64+0x33/0x40 [ 1699.926336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1699.927410] RIP: 0033:0x7f89589a3b19 [ 1699.928172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.931977] RSP: 002b:00007f8955ef8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1699.933540] RAX: ffffffffffffffda RBX: 00007f8958ab7020 RCX: 00007f89589a3b19 [ 1699.935035] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1699.936510] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1699.938004] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1699.939470] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:07:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 17) 22:07:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:07:55 executing program 5: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:07:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1700.064257] FAULT_INJECTION: forcing a failure. [ 1700.064257] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.065661] CPU: 0 PID: 8954 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1700.066482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.067471] Call Trace: [ 1700.067793] dump_stack+0x107/0x167 [ 1700.068232] should_fail.cold+0x5/0xa [ 1700.068690] ? create_object.isra.0+0x3a/0xa30 [ 1700.069255] should_failslab+0x5/0x20 [ 1700.069711] kmem_cache_alloc+0x5b/0x310 [ 1700.070206] create_object.isra.0+0x3a/0xa30 [ 1700.070744] kmemleak_alloc_percpu+0xa0/0x100 [ 1700.071292] pcpu_alloc+0x4e2/0x1240 [ 1700.071762] ? io_async_queue_proc+0x80/0x80 [ 1700.072288] percpu_ref_init+0x31/0x3d0 [ 1700.072771] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1700.073428] io_uring_setup+0x14f6/0x2980 [ 1700.073934] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1700.074537] ? wait_for_completion_io+0x270/0x270 [ 1700.075138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.075768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.076393] do_syscall_64+0x33/0x40 [ 1700.076850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.077479] RIP: 0033:0x7f6ebd7dfb19 [ 1700.077927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.080116] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1700.081037] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1700.081889] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1700.082745] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1700.083593] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1700.084452] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 18) 22:08:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:08:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:08:07 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 22:08:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0xb0ff20, 0x0, 0x0, 0x0) 22:08:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:08:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 19) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:08:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 17) [ 1712.280980] FAULT_INJECTION: forcing a failure. [ 1712.280980] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.282378] CPU: 1 PID: 8969 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1712.283164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.284120] Call Trace: [ 1712.284435] dump_stack+0x107/0x167 [ 1712.284860] should_fail.cold+0x5/0xa [ 1712.285326] ? create_object.isra.0+0x3a/0xa30 [ 1712.285867] should_failslab+0x5/0x20 [ 1712.286312] kmem_cache_alloc+0x5b/0x310 [ 1712.286786] create_object.isra.0+0x3a/0xa30 [ 1712.287297] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1712.287886] kmem_cache_alloc_trace+0x151/0x320 [ 1712.288430] io_uring_setup+0x258/0x2980 [ 1712.288899] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1712.289471] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1712.290051] ? wait_for_completion_io+0x270/0x270 [ 1712.290625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.291229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.291831] do_syscall_64+0x33/0x40 [ 1712.292257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.292845] RIP: 0033:0x7fc72ff08b19 [ 1712.293292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.295391] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.296182] FAULT_INJECTION: forcing a failure. [ 1712.296182] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.296277] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1712.296294] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.300614] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.301442] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.302260] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1712.303114] CPU: 0 PID: 8973 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1712.304608] FAULT_INJECTION: forcing a failure. [ 1712.304608] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.304845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.304859] Call Trace: [ 1712.308883] dump_stack+0x107/0x167 [ 1712.309838] should_fail.cold+0x5/0xa [ 1712.310790] ? create_object.isra.0+0x3a/0xa30 [ 1712.311942] should_failslab+0x5/0x20 [ 1712.312889] kmem_cache_alloc+0x5b/0x310 [ 1712.313922] create_object.isra.0+0x3a/0xa30 [ 1712.315032] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1712.316320] kmem_cache_alloc_trace+0x151/0x320 [ 1712.317507] ? io_async_queue_proc+0x80/0x80 [ 1712.318620] percpu_ref_init+0xd8/0x3d0 [ 1712.319628] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1712.320957] io_uring_setup+0x14f6/0x2980 [ 1712.322032] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1712.323269] ? wait_for_completion_io+0x270/0x270 [ 1712.324498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.325795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.327103] do_syscall_64+0x33/0x40 [ 1712.328027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.329327] RIP: 0033:0x7f89589a3b19 [ 1712.330250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.334840] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.336703] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1712.338470] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.340207] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.341979] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.343712] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1712.345513] CPU: 1 PID: 8967 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1712.346311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.347258] Call Trace: [ 1712.347569] dump_stack+0x107/0x167 [ 1712.348003] should_fail.cold+0x5/0xa [ 1712.348444] ? create_object.isra.0+0x3a/0xa30 [ 1712.348965] should_failslab+0x5/0x20 [ 1712.349419] kmem_cache_alloc+0x5b/0x310 [ 1712.349883] create_object.isra.0+0x3a/0xa30 [ 1712.350395] kmemleak_alloc_percpu+0xa0/0x100 [ 1712.350909] pcpu_alloc+0x4e2/0x1240 [ 1712.351343] ? io_async_queue_proc+0x80/0x80 [ 1712.351845] percpu_ref_init+0x31/0x3d0 [ 1712.352300] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1712.352917] io_uring_setup+0x14f6/0x2980 [ 1712.353425] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1712.354007] ? wait_for_completion_io+0x270/0x270 [ 1712.354573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.355172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.355757] do_syscall_64+0x33/0x40 [ 1712.356180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.356760] RIP: 0033:0x7ff6be2aab19 [ 1712.357200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.359290] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.360159] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1712.360969] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.361794] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.362611] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.363422] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1712.386857] FAULT_INJECTION: forcing a failure. [ 1712.386857] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.389640] CPU: 0 PID: 8975 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1712.391196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.393076] Call Trace: [ 1712.393714] dump_stack+0x107/0x167 [ 1712.394559] should_fail.cold+0x5/0xa [ 1712.395433] ? percpu_ref_init+0xd8/0x3d0 [ 1712.396383] should_failslab+0x5/0x20 [ 1712.397262] kmem_cache_alloc_trace+0x55/0x320 [ 1712.398311] ? io_async_queue_proc+0x80/0x80 [ 1712.399312] percpu_ref_init+0xd8/0x3d0 [ 1712.400230] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1712.401476] io_uring_setup+0x14f6/0x2980 [ 1712.402440] ? __do_sys_io_uring_enter+0x1890/0x1890 22:08:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 18) [ 1712.403589] ? wait_for_completion_io+0x270/0x270 [ 1712.404937] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.406241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.407516] do_syscall_64+0x33/0x40 [ 1712.408439] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.409715] RIP: 0033:0x7f6ebd7dfb19 [ 1712.410633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.414094] FAULT_INJECTION: forcing a failure. [ 1712.414094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1712.415116] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.415143] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1712.415160] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.421938] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.423717] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.425541] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1712.427387] CPU: 1 PID: 8979 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1712.428274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.429249] Call Trace: [ 1712.429556] dump_stack+0x107/0x167 [ 1712.429973] should_fail.cold+0x5/0xa [ 1712.430412] _copy_to_user+0x2e/0x180 [ 1712.430850] io_uring_setup+0x11b5/0x2980 [ 1712.431327] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1712.431910] ? wait_for_completion_io+0x270/0x270 [ 1712.432477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.433087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.433702] do_syscall_64+0x33/0x40 [ 1712.434126] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.434712] RIP: 0033:0x7f89589a3b19 [ 1712.435135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.437242] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.438108] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1712.438700] FAULT_INJECTION: forcing a failure. [ 1712.438700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1712.438922] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.438928] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.438934] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.438940] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1712.444326] FAULT_INJECTION: forcing a failure. [ 1712.444326] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.445296] CPU: 0 PID: 8977 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1712.447491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.448670] Call Trace: [ 1712.449055] dump_stack+0x107/0x167 [ 1712.449588] should_fail.cold+0x5/0xa [ 1712.450146] _copy_from_user+0x2e/0x1b0 [ 1712.450719] __copy_msghdr_from_user+0x91/0x4b0 [ 1712.451402] ? __ia32_sys_shutdown+0x80/0x80 [ 1712.452052] sendmsg_copy_msghdr+0xa1/0x160 [ 1712.452683] ? do_recvmmsg+0x6d0/0x6d0 [ 1712.453245] ? lock_chain_count+0x20/0x20 [ 1712.453847] ? __is_insn_slot_addr+0x123/0x290 [ 1712.454494] ? lock_downgrade+0x6d0/0x6d0 [ 1712.455098] ? mark_lock+0xf5/0x2df0 [ 1712.455645] ? mark_lock+0xf5/0x2df0 [ 1712.456190] io_sendmsg+0x62c/0x830 [ 1712.456709] ? io_setup_async_msg+0x2d0/0x2d0 [ 1712.457355] ? register_lock_class+0xbb/0x17b0 [ 1712.458008] ? mark_lock+0xf5/0x2df0 [ 1712.458545] ? lock_chain_count+0x20/0x20 [ 1712.459139] ? __lock_acquire+0xbb1/0x5b00 [ 1712.459760] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1712.460527] ? __lock_acquire+0xbb1/0x5b00 [ 1712.461230] io_issue_sqe+0x3b3/0x77d0 [ 1712.462273] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1712.463607] ? SOFTIRQ_verbose+0x10/0x10 [ 1712.464647] ? percpu_ref_put_many+0x153/0x2b0 [ 1712.465831] ? io_connect+0x610/0x610 [ 1712.466688] ? do_raw_spin_lock+0x121/0x260 [ 1712.467664] ? lock_acquire+0x197/0x470 [ 1712.468562] ? find_held_lock+0x2c/0x110 [ 1712.469496] ? __fget_files+0x2cf/0x520 [ 1712.470391] ? lock_downgrade+0x6d0/0x6d0 [ 1712.471334] __io_queue_sqe+0x90/0x9d0 [ 1712.472215] ? io_issue_sqe+0x77d0/0x77d0 [ 1712.473157] ? __fget_files+0x2f8/0x520 [ 1712.474071] io_submit_sqes+0x44a8/0x8610 [ 1712.475046] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1712.476166] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1712.477266] ? find_held_lock+0x2c/0x110 [ 1712.478186] ? io_submit_sqes+0x8610/0x8610 [ 1712.479173] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1712.480258] ? wait_for_completion_io+0x270/0x270 [ 1712.481367] ? rcu_read_lock_any_held+0x75/0xa0 [ 1712.482409] ? vfs_write+0x354/0xb10 [ 1712.483249] ? fput_many+0x2f/0x1a0 [ 1712.484072] ? ksys_write+0x1a9/0x260 [ 1712.484936] ? __ia32_sys_read+0xb0/0xb0 [ 1712.485866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.487048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.488218] do_syscall_64+0x33/0x40 [ 1712.489059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.490222] RIP: 0033:0x7f8e4c378b19 [ 1712.491058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.495228] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1712.496942] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1712.498558] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1712.500165] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1712.501790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1712.503402] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 [ 1712.505043] CPU: 1 PID: 8982 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1712.505859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.506799] Call Trace: [ 1712.507108] dump_stack+0x107/0x167 [ 1712.507524] should_fail.cold+0x5/0xa [ 1712.507960] ? percpu_ref_init+0xd8/0x3d0 [ 1712.508437] should_failslab+0x5/0x20 [ 1712.508882] kmem_cache_alloc_trace+0x55/0x320 [ 1712.509437] ? io_async_queue_proc+0x80/0x80 [ 1712.509957] percpu_ref_init+0xd8/0x3d0 [ 1712.510420] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1712.511040] io_uring_setup+0x14f6/0x2980 [ 1712.511516] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1712.512093] ? wait_for_completion_io+0x270/0x270 [ 1712.512656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.513272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.513861] do_syscall_64+0x33/0x40 [ 1712.514287] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.514868] RIP: 0033:0x7ff6be2aab19 [ 1712.515291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.517389] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.518257] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1712.519064] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.519876] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.520689] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.521517] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:08:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 21) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:08:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:08:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1712.592724] FAULT_INJECTION: forcing a failure. [ 1712.592724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1712.595525] CPU: 0 PID: 8988 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1712.597094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.598996] Call Trace: [ 1712.599613] dump_stack+0x107/0x167 [ 1712.600462] should_fail.cold+0x5/0xa [ 1712.601360] __alloc_pages_nodemask+0x182/0x600 [ 1712.602434] ? lock_release+0x680/0x680 [ 1712.603347] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1712.604743] ? lock_downgrade+0x6d0/0x6d0 [ 1712.605738] alloc_pages_current+0x187/0x280 [ 1712.606760] kmalloc_order+0x35/0x160 [ 1712.607651] kmalloc_order_trace+0x14/0xa0 [ 1712.608632] io_uring_setup+0x33c/0x2980 [ 1712.609581] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1712.610694] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1712.611854] ? wait_for_completion_io+0x270/0x270 [ 1712.613008] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.614221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.615411] do_syscall_64+0x33/0x40 [ 1712.616270] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.617447] RIP: 0033:0x7fc72ff08b19 [ 1712.618298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.622494] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.624245] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1712.625880] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.627515] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.629163] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.630798] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1712.639016] FAULT_INJECTION: forcing a failure. [ 1712.639016] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.640388] CPU: 1 PID: 8991 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1712.641182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.642135] Call Trace: [ 1712.642443] dump_stack+0x107/0x167 [ 1712.642863] should_fail.cold+0x5/0xa [ 1712.643304] ? __d_alloc+0x2a/0x990 [ 1712.643719] should_failslab+0x5/0x20 [ 1712.644160] kmem_cache_alloc+0x5b/0x310 [ 1712.644633] __d_alloc+0x2a/0x990 [ 1712.645030] ? find_held_lock+0x2c/0x110 [ 1712.645511] d_alloc_pseudo+0x19/0x70 [ 1712.645948] alloc_file_pseudo+0xce/0x250 [ 1712.646419] ? trace_hardirqs_on+0x5b/0x180 [ 1712.646909] ? alloc_file+0x5a0/0x5a0 [ 1712.647356] anon_inode_getfile+0xc8/0x1f0 [ 1712.647845] io_uring_setup+0x138b/0x2980 [ 1712.648322] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1712.648902] ? wait_for_completion_io+0x270/0x270 [ 1712.649478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.650077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.650662] do_syscall_64+0x33/0x40 [ 1712.651089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.651672] RIP: 0033:0x7f89589a3b19 [ 1712.652098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.654210] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.655080] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1712.655895] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.656713] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.657544] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.658361] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 19) 22:08:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000001080)) [ 1712.715366] FAULT_INJECTION: forcing a failure. [ 1712.715366] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.716772] CPU: 1 PID: 8996 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1712.717571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.718521] Call Trace: [ 1712.718832] dump_stack+0x107/0x167 [ 1712.719249] should_fail.cold+0x5/0xa [ 1712.719688] ? create_object.isra.0+0x3a/0xa30 [ 1712.720215] should_failslab+0x5/0x20 [ 1712.720650] kmem_cache_alloc+0x5b/0x310 [ 1712.721122] create_object.isra.0+0x3a/0xa30 [ 1712.721642] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1712.722232] kmem_cache_alloc_trace+0x151/0x320 [ 1712.722765] ? io_async_queue_proc+0x80/0x80 [ 1712.723266] percpu_ref_init+0xd8/0x3d0 [ 1712.723724] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1712.724344] io_uring_setup+0x14f6/0x2980 [ 1712.724824] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1712.725425] ? wait_for_completion_io+0x270/0x270 [ 1712.725989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.726589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.727181] do_syscall_64+0x33/0x40 [ 1712.727604] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.728191] RIP: 0033:0x7ff6be2aab19 [ 1712.728616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.730738] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.731607] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1712.732426] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.733256] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.734071] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.734890] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 19) 22:08:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 22:08:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000001080)) [ 1712.757606] FAULT_INJECTION: forcing a failure. [ 1712.757606] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.758946] CPU: 1 PID: 8999 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1712.759728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.760676] Call Trace: [ 1712.760981] dump_stack+0x107/0x167 [ 1712.761423] should_fail.cold+0x5/0xa [ 1712.761864] ? create_object.isra.0+0x3a/0xa30 [ 1712.762391] should_failslab+0x5/0x20 [ 1712.762832] kmem_cache_alloc+0x5b/0x310 [ 1712.763307] create_object.isra.0+0x3a/0xa30 [ 1712.763815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1712.764405] kmem_cache_alloc_trace+0x151/0x320 [ 1712.764943] ? io_async_queue_proc+0x80/0x80 [ 1712.765472] percpu_ref_init+0xd8/0x3d0 [ 1712.765931] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1712.766553] io_uring_setup+0x14f6/0x2980 [ 1712.767033] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1712.767610] ? wait_for_completion_io+0x270/0x270 [ 1712.768180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.768787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.769447] do_syscall_64+0x33/0x40 [ 1712.769887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1712.770477] RIP: 0033:0x7f6ebd7dfb19 [ 1712.770904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.773017] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1712.773897] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1712.774712] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1712.775522] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1712.776336] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1712.777161] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:21 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 22:08:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 20) 22:08:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 22) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:08:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000001080)) 22:08:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0xf0ff1f, 0x0, 0x0, 0x0) 22:08:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 20) 22:08:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 22:08:21 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1726.310559] FAULT_INJECTION: forcing a failure. [ 1726.310559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.312083] CPU: 0 PID: 9018 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1726.312928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.313965] Call Trace: [ 1726.314300] dump_stack+0x107/0x167 [ 1726.314755] should_fail.cold+0x5/0xa [ 1726.315233] _copy_from_user+0x2e/0x1b0 [ 1726.315729] __copy_msghdr_from_user+0x91/0x4b0 [ 1726.316307] ? __ia32_sys_shutdown+0x80/0x80 [ 1726.316861] sendmsg_copy_msghdr+0xa1/0x160 [ 1726.317405] ? do_recvmmsg+0x6d0/0x6d0 [ 1726.317902] ? lock_chain_count+0x20/0x20 [ 1726.318427] ? __is_insn_slot_addr+0x123/0x290 [ 1726.319014] ? lock_downgrade+0x6d0/0x6d0 [ 1726.319538] ? mark_lock+0xf5/0x2df0 [ 1726.319997] ? mark_lock+0xf5/0x2df0 [ 1726.320463] io_sendmsg+0x62c/0x830 [ 1726.320928] ? io_setup_async_msg+0x2d0/0x2d0 [ 1726.321491] ? register_lock_class+0xbb/0x17b0 [ 1726.322060] ? mark_lock+0xf5/0x2df0 [ 1726.322538] ? lock_chain_count+0x20/0x20 [ 1726.323056] ? __lock_acquire+0xbb1/0x5b00 [ 1726.323594] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1726.324267] ? __lock_acquire+0xbb1/0x5b00 [ 1726.324807] io_issue_sqe+0x3b3/0x77d0 [ 1726.325327] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1726.325970] ? percpu_ref_put_many+0x153/0x2b0 [ 1726.326537] ? io_connect+0x610/0x610 [ 1726.327017] ? do_raw_spin_lock+0x121/0x260 [ 1726.327550] ? lock_acquire+0x197/0x470 [ 1726.328040] ? find_held_lock+0x2c/0x110 [ 1726.328548] ? __fget_files+0x2cf/0x520 [ 1726.329038] ? lock_downgrade+0x6d0/0x6d0 [ 1726.329565] __io_queue_sqe+0x90/0x9d0 [ 1726.330053] ? io_issue_sqe+0x77d0/0x77d0 [ 1726.330562] ? __fget_files+0x2f8/0x520 [ 1726.331061] io_submit_sqes+0x44a8/0x8610 [ 1726.331590] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1726.332203] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1726.332808] ? find_held_lock+0x2c/0x110 [ 1726.333319] ? io_submit_sqes+0x8610/0x8610 [ 1726.333861] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1726.334463] ? wait_for_completion_io+0x270/0x270 [ 1726.335061] ? rcu_read_lock_any_held+0x75/0xa0 [ 1726.335639] ? vfs_write+0x354/0xb10 [ 1726.336098] ? fput_many+0x2f/0x1a0 [ 1726.336544] ? ksys_write+0x1a9/0x260 [ 1726.337012] ? __ia32_sys_read+0xb0/0xb0 [ 1726.337527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.338166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.338802] do_syscall_64+0x33/0x40 [ 1726.339265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.339896] RIP: 0033:0x7f8e4c378b19 [ 1726.340348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.342603] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1726.343538] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1726.344402] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1726.345293] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.346171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.347037] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 [ 1726.355376] FAULT_INJECTION: forcing a failure. [ 1726.355376] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.357915] CPU: 1 PID: 9021 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1726.359374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.361122] Call Trace: [ 1726.361696] dump_stack+0x107/0x167 [ 1726.362472] should_fail.cold+0x5/0xa [ 1726.363284] ? create_object.isra.0+0x3a/0xa30 [ 1726.364251] should_failslab+0x5/0x20 [ 1726.365059] kmem_cache_alloc+0x5b/0x310 [ 1726.365954] create_object.isra.0+0x3a/0xa30 [ 1726.366883] ? kasan_unpoison_shadow+0x33/0x50 [ 1726.367848] kmalloc_order+0xfe/0x160 [ 1726.368653] kmalloc_order_trace+0x14/0xa0 [ 1726.369559] io_uring_setup+0x33c/0x2980 [ 1726.370420] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1726.371441] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1726.372506] ? wait_for_completion_io+0x270/0x270 [ 1726.373559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.374666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.375757] do_syscall_64+0x33/0x40 [ 1726.376550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.377645] RIP: 0033:0x7fc72ff08b19 [ 1726.378430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.379660] FAULT_INJECTION: forcing a failure. [ 1726.379660] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.382320] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1726.382342] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1726.382353] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1726.382364] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1726.382379] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1726.391272] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1726.392802] CPU: 0 PID: 9024 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1726.393640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.394647] Call Trace: [ 1726.394973] dump_stack+0x107/0x167 [ 1726.395415] should_fail.cold+0x5/0xa [ 1726.395884] ? create_object.isra.0+0x3a/0xa30 [ 1726.396429] should_failslab+0x5/0x20 [ 1726.396894] kmem_cache_alloc+0x5b/0x310 [ 1726.397400] create_object.isra.0+0x3a/0xa30 [ 1726.397938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1726.398560] kmem_cache_alloc+0x159/0x310 [ 1726.399075] __d_alloc+0x2a/0x990 [ 1726.399494] ? find_held_lock+0x2c/0x110 [ 1726.399994] d_alloc_pseudo+0x19/0x70 [ 1726.400454] alloc_file_pseudo+0xce/0x250 [ 1726.400948] ? trace_hardirqs_on+0x5b/0x180 [ 1726.401475] ? alloc_file+0x5a0/0x5a0 [ 1726.401951] anon_inode_getfile+0xc8/0x1f0 [ 1726.402465] io_uring_setup+0x138b/0x2980 [ 1726.402974] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1726.403576] ? wait_for_completion_io+0x270/0x270 [ 1726.404182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.404809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.405439] do_syscall_64+0x33/0x40 [ 1726.405889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.406499] RIP: 0033:0x7f89589a3b19 [ 1726.406944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.409130] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1726.410050] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1726.410899] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1726.411754] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1726.411962] FAULT_INJECTION: forcing a failure. [ 1726.411962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.412598] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1726.412614] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1726.416745] CPU: 1 PID: 9025 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1726.417115] FAULT_INJECTION: forcing a failure. [ 1726.417115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.418195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.418201] Call Trace: [ 1726.418224] dump_stack+0x107/0x167 [ 1726.418246] should_fail.cold+0x5/0xa [ 1726.423405] _copy_to_user+0x2e/0x180 [ 1726.424216] io_uring_setup+0x11b5/0x2980 [ 1726.425097] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1726.426174] ? wait_for_completion_io+0x270/0x270 [ 1726.427210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.428313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.429410] do_syscall_64+0x33/0x40 [ 1726.430200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.431278] RIP: 0033:0x7ff6be2aab19 [ 1726.432078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.435941] RSP: 002b:00007ff6bb7ff108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1726.437551] RAX: ffffffffffffffda RBX: 00007ff6be3be020 RCX: 00007ff6be2aab19 [ 1726.439053] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1726.440551] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1726.442058] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1726.443553] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1726.445081] CPU: 0 PID: 9020 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1726.445907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.446884] Call Trace: [ 1726.447198] dump_stack+0x107/0x167 [ 1726.447632] should_fail.cold+0x5/0xa [ 1726.448093] _copy_to_user+0x2e/0x180 [ 1726.448550] io_uring_setup+0x11b5/0x2980 [ 1726.449052] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1726.449660] ? wait_for_completion_io+0x270/0x270 [ 1726.450253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.450878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.451493] do_syscall_64+0x33/0x40 [ 1726.451936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.452537] RIP: 0033:0x7f6ebd7dfb19 [ 1726.452977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.455136] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1726.456029] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1726.456863] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1726.457714] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1726.458570] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1726.459415] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 22:08:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:08:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:08:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 22:08:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 23) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:08:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 21) 22:08:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) [ 1726.595301] FAULT_INJECTION: forcing a failure. [ 1726.595301] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.596651] CPU: 0 PID: 9040 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1726.597448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.598403] Call Trace: [ 1726.598714] dump_stack+0x107/0x167 [ 1726.599141] should_fail.cold+0x5/0xa [ 1726.599583] ? __alloc_file+0x21/0x320 [ 1726.600037] should_failslab+0x5/0x20 [ 1726.600479] kmem_cache_alloc+0x5b/0x310 [ 1726.600957] __alloc_file+0x21/0x320 [ 1726.601404] alloc_empty_file+0x6d/0x170 [ 1726.601878] alloc_file+0x5e/0x5a0 [ 1726.602301] alloc_file_pseudo+0x16a/0x250 [ 1726.602790] ? alloc_file+0x5a0/0x5a0 [ 1726.603256] anon_inode_getfile+0xc8/0x1f0 [ 1726.603758] io_uring_setup+0x138b/0x2980 [ 1726.604249] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1726.604837] ? wait_for_completion_io+0x270/0x270 [ 1726.605427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.606042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.606642] do_syscall_64+0x33/0x40 [ 1726.607076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.607667] RIP: 0033:0x7f89589a3b19 [ 1726.608101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.610236] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1726.611116] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1726.611937] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1726.612767] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1726.613602] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1726.614427] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1726.628573] FAULT_INJECTION: forcing a failure. [ 1726.628573] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.631035] CPU: 1 PID: 9042 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1726.632478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.634233] Call Trace: [ 1726.634795] dump_stack+0x107/0x167 [ 1726.635568] should_fail.cold+0x5/0xa [ 1726.636379] ? __d_alloc+0x2a/0x990 [ 1726.637145] should_failslab+0x5/0x20 [ 1726.637955] kmem_cache_alloc+0x5b/0x310 [ 1726.638822] __d_alloc+0x2a/0x990 [ 1726.639553] ? find_held_lock+0x2c/0x110 [ 1726.640411] d_alloc_pseudo+0x19/0x70 [ 1726.641210] alloc_file_pseudo+0xce/0x250 [ 1726.642087] ? trace_hardirqs_on+0x5b/0x180 [ 1726.642988] ? alloc_file+0x5a0/0x5a0 [ 1726.643803] anon_inode_getfile+0xc8/0x1f0 [ 1726.644702] io_uring_setup+0x138b/0x2980 [ 1726.645590] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1726.646651] ? wait_for_completion_io+0x270/0x270 [ 1726.647688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.648789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.649883] do_syscall_64+0x33/0x40 [ 1726.650668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.651756] RIP: 0033:0x7f6ebd7dfb19 [ 1726.652541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.656448] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1726.658061] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1726.659562] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1726.661061] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1726.662574] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1726.664079] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 22) 22:08:34 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 22:08:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:08:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) 22:08:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 21) 22:08:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:08:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 24) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:08:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x1ffff000, 0x0, 0x0, 0x0) [ 1739.240851] FAULT_INJECTION: forcing a failure. [ 1739.240851] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.242190] CPU: 1 PID: 9053 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1739.242964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.243913] Call Trace: [ 1739.244220] dump_stack+0x107/0x167 [ 1739.244638] should_fail.cold+0x5/0xa [ 1739.245085] ? __d_alloc+0x2a/0x990 [ 1739.245506] should_failslab+0x5/0x20 [ 1739.245938] kmem_cache_alloc+0x5b/0x310 [ 1739.246407] __d_alloc+0x2a/0x990 [ 1739.246808] ? find_held_lock+0x2c/0x110 [ 1739.247277] d_alloc_pseudo+0x19/0x70 [ 1739.247714] alloc_file_pseudo+0xce/0x250 [ 1739.248187] ? trace_hardirqs_on+0x5b/0x180 [ 1739.248677] ? alloc_file+0x5a0/0x5a0 [ 1739.249127] anon_inode_getfile+0xc8/0x1f0 [ 1739.249624] io_uring_setup+0x138b/0x2980 [ 1739.250103] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1739.250680] ? wait_for_completion_io+0x270/0x270 [ 1739.251246] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.251846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.252438] do_syscall_64+0x33/0x40 [ 1739.252868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.253464] RIP: 0033:0x7f6ebd7dfb19 [ 1739.253890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.255991] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1739.256861] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1739.257683] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1739.258492] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1739.259304] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1739.260115] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1739.263385] FAULT_INJECTION: forcing a failure. [ 1739.263385] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.264686] CPU: 1 PID: 9066 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1739.265470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.266410] Call Trace: [ 1739.266714] dump_stack+0x107/0x167 [ 1739.267136] should_fail.cold+0x5/0xa [ 1739.267572] ? io_uring_setup+0x40b/0x2980 [ 1739.268054] should_failslab+0x5/0x20 [ 1739.268490] kmem_cache_alloc_trace+0x55/0x320 [ 1739.269017] io_uring_setup+0x40b/0x2980 [ 1739.269487] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1739.270041] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1739.270617] ? wait_for_completion_io+0x270/0x270 [ 1739.271177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.271775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.272365] do_syscall_64+0x33/0x40 [ 1739.272794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.273377] RIP: 0033:0x7fc72ff08b19 [ 1739.273616] FAULT_INJECTION: forcing a failure. [ 1739.273616] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.273810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.273816] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1739.273826] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1739.273832] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1739.273838] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1739.273854] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1739.282901] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1739.283749] CPU: 0 PID: 9064 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1739.285539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.287472] Call Trace: [ 1739.288078] dump_stack+0x107/0x167 [ 1739.288928] should_fail.cold+0x5/0xa [ 1739.289816] ? create_object.isra.0+0x3a/0xa30 [ 1739.290697] FAULT_INJECTION: forcing a failure. [ 1739.290697] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.290867] should_failslab+0x5/0x20 [ 1739.290891] kmem_cache_alloc+0x5b/0x310 [ 1739.293909] create_object.isra.0+0x3a/0xa30 [ 1739.294910] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.296083] kmem_cache_alloc+0x159/0x310 [ 1739.297041] __alloc_file+0x21/0x320 [ 1739.297914] alloc_empty_file+0x6d/0x170 [ 1739.298846] alloc_file+0x5e/0x5a0 [ 1739.299668] alloc_file_pseudo+0x16a/0x250 [ 1739.300635] ? alloc_file+0x5a0/0x5a0 [ 1739.301554] anon_inode_getfile+0xc8/0x1f0 [ 1739.302530] io_uring_setup+0x138b/0x2980 [ 1739.303506] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1739.304656] ? wait_for_completion_io+0x270/0x270 [ 1739.305818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.307014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.308202] do_syscall_64+0x33/0x40 [ 1739.309059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.310236] RIP: 0033:0x7f89589a3b19 [ 1739.311087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.315274] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1739.317010] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1739.318635] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1739.320250] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1739.321877] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1739.323489] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1739.325149] CPU: 1 PID: 9059 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1739.325807] FAULT_INJECTION: forcing a failure. [ 1739.325807] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.325933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.325943] Call Trace: [ 1739.329652] dump_stack+0x107/0x167 [ 1739.330068] should_fail.cold+0x5/0xa [ 1739.330503] should_failslab+0x5/0x20 [ 1739.330937] kmem_cache_alloc_bulk+0x4b/0x320 [ 1739.331449] io_submit_sqes+0x6fe4/0x8610 [ 1739.331936] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1739.332503] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1739.333053] ? find_held_lock+0x2c/0x110 [ 1739.333523] ? io_submit_sqes+0x8610/0x8610 [ 1739.334014] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1739.334564] ? wait_for_completion_io+0x270/0x270 [ 1739.335113] ? rcu_read_lock_any_held+0x75/0xa0 [ 1739.335641] ? vfs_write+0x354/0xb10 [ 1739.336062] ? fput_many+0x2f/0x1a0 [ 1739.336473] ? ksys_write+0x1a9/0x260 [ 1739.336903] ? __ia32_sys_read+0xb0/0xb0 [ 1739.337366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.337963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.338548] do_syscall_64+0x33/0x40 [ 1739.338969] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.339551] RIP: 0033:0x7f8e4c378b19 [ 1739.339971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.342046] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1739.342901] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1739.343703] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1739.344508] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.345308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.346118] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 [ 1739.346942] CPU: 0 PID: 9065 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1739.348501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.350375] Call Trace: [ 1739.350982] dump_stack+0x107/0x167 [ 1739.351823] should_fail.cold+0x5/0xa [ 1739.352694] ? __d_alloc+0x2a/0x990 [ 1739.353531] should_failslab+0x5/0x20 [ 1739.354405] kmem_cache_alloc+0x5b/0x310 [ 1739.355350] __d_alloc+0x2a/0x990 [ 1739.356140] ? find_held_lock+0x2c/0x110 [ 1739.357074] d_alloc_pseudo+0x19/0x70 [ 1739.357958] alloc_file_pseudo+0xce/0x250 22:08:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) [ 1739.358901] ? trace_hardirqs_on+0x5b/0x180 [ 1739.360036] ? alloc_file+0x5a0/0x5a0 [ 1739.360956] anon_inode_getfile+0xc8/0x1f0 [ 1739.361953] io_uring_setup+0x138b/0x2980 [ 1739.362929] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1739.364083] ? wait_for_completion_io+0x270/0x270 [ 1739.365249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.366461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.367654] do_syscall_64+0x33/0x40 [ 1739.368507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.369687] RIP: 0033:0x7ff6be2aab19 [ 1739.370536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.374730] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1739.376475] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1739.378108] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1739.379733] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1739.381351] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1739.382996] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) 22:08:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:08:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) [ 1739.686513] FAULT_INJECTION: forcing a failure. [ 1739.686513] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.687901] CPU: 1 PID: 9082 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1739.688687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.689651] Call Trace: [ 1739.689958] dump_stack+0x107/0x167 [ 1739.690370] should_fail.cold+0x5/0xa [ 1739.690807] ? create_object.isra.0+0x3a/0xa30 [ 1739.691324] should_failslab+0x5/0x20 [ 1739.691760] kmem_cache_alloc+0x5b/0x310 [ 1739.692221] create_object.isra.0+0x3a/0xa30 [ 1739.692719] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.693305] kmem_cache_alloc_trace+0x151/0x320 [ 1739.693849] io_uring_setup+0x40b/0x2980 [ 1739.694318] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1739.694866] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1739.695440] ? wait_for_completion_io+0x270/0x270 [ 1739.696001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1739.696599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1739.697197] do_syscall_64+0x33/0x40 [ 1739.697629] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1739.698220] RIP: 0033:0x7fc72ff08b19 [ 1739.698645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.700754] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1739.701633] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1739.702453] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1739.703271] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1739.704087] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1739.704902] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:48 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 22:08:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:08:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:08:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:08:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 25) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:08:48 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 23) 22:08:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 22:08:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 22) [ 1752.939360] FAULT_INJECTION: forcing a failure. [ 1752.939360] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.940770] CPU: 1 PID: 9096 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1752.941598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.942600] Call Trace: [ 1752.942924] dump_stack+0x107/0x167 [ 1752.943369] should_fail.cold+0x5/0xa [ 1752.943742] FAULT_INJECTION: forcing a failure. [ 1752.943742] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.943839] ? __alloc_file+0x21/0x320 [ 1752.946674] should_failslab+0x5/0x20 [ 1752.947141] kmem_cache_alloc+0x5b/0x310 [ 1752.947649] __alloc_file+0x21/0x320 [ 1752.948109] alloc_empty_file+0x6d/0x170 [ 1752.948606] alloc_file+0x5e/0x5a0 [ 1752.949042] alloc_file_pseudo+0x16a/0x250 [ 1752.949568] ? alloc_file+0x5a0/0x5a0 [ 1752.950053] anon_inode_getfile+0xc8/0x1f0 [ 1752.950578] io_uring_setup+0x138b/0x2980 [ 1752.951092] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1752.951713] ? wait_for_completion_io+0x270/0x270 [ 1752.952314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.952959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.953603] do_syscall_64+0x33/0x40 [ 1752.954060] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.954687] RIP: 0033:0x7f6ebd7dfb19 [ 1752.955137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.957380] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1752.958305] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1752.959158] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1752.960009] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1752.960861] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1752.961723] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1752.962612] CPU: 0 PID: 9100 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1752.963662] FAULT_INJECTION: forcing a failure. [ 1752.963662] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.964064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.964072] Call Trace: [ 1752.964095] dump_stack+0x107/0x167 [ 1752.968472] should_fail.cold+0x5/0xa [ 1752.969297] ? create_object.isra.0+0x3a/0xa30 [ 1752.970271] should_failslab+0x5/0x20 [ 1752.971085] kmem_cache_alloc+0x5b/0x310 [ 1752.971968] create_object.isra.0+0x3a/0xa30 [ 1752.972905] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.974039] kmem_cache_alloc+0x159/0x310 [ 1752.974967] __d_alloc+0x2a/0x990 [ 1752.975724] ? find_held_lock+0x2c/0x110 [ 1752.976599] d_alloc_pseudo+0x19/0x70 [ 1752.977432] alloc_file_pseudo+0xce/0x250 [ 1752.978341] ? trace_hardirqs_on+0x5b/0x180 [ 1752.979275] ? alloc_file+0x5a0/0x5a0 [ 1752.980133] anon_inode_getfile+0xc8/0x1f0 [ 1752.981061] io_uring_setup+0x138b/0x2980 [ 1752.981986] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1752.983075] ? wait_for_completion_io+0x270/0x270 [ 1752.984162] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.985275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.986403] do_syscall_64+0x33/0x40 [ 1752.987192] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.988303] RIP: 0033:0x7ff6be2aab19 [ 1752.989108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.993061] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1752.994684] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1752.996193] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1752.997698] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1752.999390] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1753.001096] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1753.002860] CPU: 1 PID: 9098 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1753.003669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.004645] Call Trace: [ 1753.004956] dump_stack+0x107/0x167 [ 1753.005386] should_fail.cold+0x5/0xa [ 1753.005841] ? security_file_alloc+0x34/0x170 [ 1753.006379] should_failslab+0x5/0x20 [ 1753.006835] kmem_cache_alloc+0x5b/0x310 [ 1753.007326] security_file_alloc+0x34/0x170 [ 1753.007834] __alloc_file+0xb7/0x320 [ 1753.008274] alloc_empty_file+0x6d/0x170 [ 1753.008753] alloc_file+0x5e/0x5a0 [ 1753.009175] alloc_file_pseudo+0x16a/0x250 [ 1753.009681] ? alloc_file+0x5a0/0x5a0 [ 1753.010150] anon_inode_getfile+0xc8/0x1f0 [ 1753.010653] io_uring_setup+0x138b/0x2980 [ 1753.011145] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1753.011739] ? wait_for_completion_io+0x270/0x270 [ 1753.012319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.012936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.013544] do_syscall_64+0x33/0x40 [ 1753.013991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.014591] RIP: 0033:0x7f89589a3b19 [ 1753.015029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.017191] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1753.018084] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1753.018916] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1753.019751] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1753.020581] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1753.021420] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1753.023892] FAULT_INJECTION: forcing a failure. [ 1753.023892] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.025402] CPU: 1 PID: 9099 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1753.026339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.027386] Call Trace: [ 1753.027718] dump_stack+0x107/0x167 [ 1753.028283] should_fail.cold+0x5/0xa [ 1753.028768] ? create_object.isra.0+0x3a/0xa30 [ 1753.029430] should_failslab+0x5/0x20 [ 1753.030698] kmem_cache_alloc+0x5b/0x310 [ 1753.031459] create_object.isra.0+0x3a/0xa30 [ 1753.032215] kmemleak_alloc_percpu+0xa0/0x100 [ 1753.032981] pcpu_alloc+0x4e2/0x1240 [ 1753.033653] ? io_tctx_exit_cb+0xf0/0xf0 [ 1753.034354] percpu_ref_init+0x31/0x3d0 [ 1753.035039] io_uring_setup+0x47a/0x2980 [ 1753.035739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1753.036566] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1753.037429] ? wait_for_completion_io+0x270/0x270 [ 1753.038297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.039065] FAULT_INJECTION: forcing a failure. [ 1753.039065] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.039184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.039202] do_syscall_64+0x33/0x40 [ 1753.039217] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.039239] RIP: 0033:0x7fc72ff08b19 [ 1753.044806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.047898] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1753.049135] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1753.050296] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1753.051455] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1753.052603] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1753.053802] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1753.055045] CPU: 0 PID: 9086 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1753.056471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.058220] Call Trace: [ 1753.058779] dump_stack+0x107/0x167 [ 1753.059547] should_fail.cold+0x5/0xa [ 1753.060361] ? create_object.isra.0+0x3a/0xa30 [ 1753.061327] should_failslab+0x5/0x20 [ 1753.062147] kmem_cache_alloc+0x5b/0x310 [ 1753.063010] create_object.isra.0+0x3a/0xa30 [ 1753.063933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.065015] kmem_cache_alloc_bulk+0x168/0x320 [ 1753.065996] io_submit_sqes+0x6fe4/0x8610 [ 1753.066904] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.067952] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.068981] ? find_held_lock+0x2c/0x110 [ 1753.069853] ? io_submit_sqes+0x8610/0x8610 [ 1753.070780] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1753.071804] ? wait_for_completion_io+0x270/0x270 [ 1753.072829] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.073826] ? vfs_write+0x354/0xb10 [ 1753.074618] ? fput_many+0x2f/0x1a0 [ 1753.075387] ? ksys_write+0x1a9/0x260 [ 1753.076193] ? __ia32_sys_read+0xb0/0xb0 [ 1753.077062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.078195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.079311] do_syscall_64+0x33/0x40 [ 1753.080103] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.081198] RIP: 0033:0x7f8e4c378b19 [ 1753.081991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.085925] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1753.087546] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1753.089078] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1753.090624] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.092160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1753.093709] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 22:08:48 executing program 5: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:08:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:08:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 23) [ 1753.169718] FAULT_INJECTION: forcing a failure. [ 1753.169718] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.172324] CPU: 0 PID: 9108 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1753.173775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.175533] Call Trace: [ 1753.176089] dump_stack+0x107/0x167 [ 1753.176879] should_fail.cold+0x5/0xa [ 1753.177717] ? __alloc_file+0x21/0x320 [ 1753.178531] should_failslab+0x5/0x20 [ 1753.179345] kmem_cache_alloc+0x5b/0x310 [ 1753.180211] __alloc_file+0x21/0x320 [ 1753.181005] alloc_empty_file+0x6d/0x170 [ 1753.181876] alloc_file+0x5e/0x5a0 [ 1753.182638] alloc_file_pseudo+0x16a/0x250 [ 1753.183536] ? alloc_file+0x5a0/0x5a0 [ 1753.184380] anon_inode_getfile+0xc8/0x1f0 [ 1753.185289] io_uring_setup+0x138b/0x2980 [ 1753.186197] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1753.187266] ? wait_for_completion_io+0x270/0x270 [ 1753.188323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.189434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.190554] do_syscall_64+0x33/0x40 [ 1753.191335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.192420] RIP: 0033:0x7ff6be2aab19 [ 1753.193212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.197101] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1753.198744] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1753.200252] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1753.201758] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1753.203272] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1753.204761] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:08:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:08:48 executing program 5: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:09:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 24) 22:09:02 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 22:09:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:09:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x20ffb000, 0x0, 0x0, 0x0) 22:09:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:09:02 executing program 5: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:09:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 24) 22:09:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1766.806303] FAULT_INJECTION: forcing a failure. [ 1766.806303] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.808796] CPU: 0 PID: 9123 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1766.810245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.812037] Call Trace: [ 1766.812664] dump_stack+0x107/0x167 [ 1766.813526] should_fail.cold+0x5/0xa [ 1766.814370] ? create_object.isra.0+0x3a/0xa30 [ 1766.815392] should_failslab+0x5/0x20 [ 1766.816285] kmem_cache_alloc+0x5b/0x310 [ 1766.817214] create_object.isra.0+0x3a/0xa30 [ 1766.818151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.819238] kmem_cache_alloc+0x159/0x310 [ 1766.820137] __alloc_file+0x21/0x320 [ 1766.820937] alloc_empty_file+0x6d/0x170 [ 1766.821819] alloc_file+0x5e/0x5a0 [ 1766.822592] alloc_file_pseudo+0x16a/0x250 [ 1766.823495] ? alloc_file+0x5a0/0x5a0 [ 1766.824341] anon_inode_getfile+0xc8/0x1f0 [ 1766.825256] io_uring_setup+0x138b/0x2980 [ 1766.826171] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1766.827244] ? wait_for_completion_io+0x270/0x270 [ 1766.828317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.829432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.830544] do_syscall_64+0x33/0x40 [ 1766.831338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.832424] RIP: 0033:0x7ff6be2aab19 [ 1766.833208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.837114] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1766.838726] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1766.840243] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1766.841762] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1766.843251] FAULT_INJECTION: forcing a failure. [ 1766.843251] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.843278] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1766.843299] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1766.849205] CPU: 1 PID: 9132 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1766.850973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.852762] Call Trace: [ 1766.853337] dump_stack+0x107/0x167 [ 1766.854140] should_fail.cold+0x5/0xa [ 1766.854962] ? create_object.isra.0+0x3a/0xa30 [ 1766.855944] should_failslab+0x5/0x20 [ 1766.856762] kmem_cache_alloc+0x5b/0x310 [ 1766.857641] create_object.isra.0+0x3a/0xa30 [ 1766.858607] kmemleak_alloc_percpu+0xa0/0x100 [ 1766.859580] pcpu_alloc+0x4e2/0x1240 [ 1766.860398] ? io_tctx_exit_cb+0xf0/0xf0 [ 1766.861274] percpu_ref_init+0x31/0x3d0 [ 1766.862149] io_uring_setup+0x47a/0x2980 [ 1766.863029] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1766.864067] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1766.865162] ? wait_for_completion_io+0x270/0x270 [ 1766.866229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.867357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.868475] do_syscall_64+0x33/0x40 [ 1766.869282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.870398] RIP: 0033:0x7fc72ff08b19 [ 1766.871192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.875162] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1766.876798] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1766.877797] FAULT_INJECTION: forcing a failure. [ 1766.877797] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.878338] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1766.878357] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1766.883754] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1766.885282] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1766.886845] CPU: 0 PID: 9133 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1766.888303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.890078] Call Trace: [ 1766.890649] dump_stack+0x107/0x167 [ 1766.891426] should_fail.cold+0x5/0xa [ 1766.892249] ? create_object.isra.0+0x3a/0xa30 [ 1766.893226] should_failslab+0x5/0x20 [ 1766.894048] kmem_cache_alloc+0x5b/0x310 [ 1766.894923] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1766.896105] create_object.isra.0+0x3a/0xa30 [ 1766.897042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.898141] kmem_cache_alloc+0x159/0x310 [ 1766.899047] security_file_alloc+0x34/0x170 [ 1766.899097] FAULT_INJECTION: forcing a failure. [ 1766.899097] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.899966] __alloc_file+0xb7/0x320 [ 1766.899992] alloc_empty_file+0x6d/0x170 [ 1766.900025] alloc_file+0x5e/0x5a0 [ 1766.904738] alloc_file_pseudo+0x16a/0x250 [ 1766.905643] ? alloc_file+0x5a0/0x5a0 [ 1766.906497] anon_inode_getfile+0xc8/0x1f0 [ 1766.907402] io_uring_setup+0x138b/0x2980 [ 1766.908297] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1766.909360] ? wait_for_completion_io+0x270/0x270 [ 1766.910437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.911546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.912643] do_syscall_64+0x33/0x40 [ 1766.913431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.914511] RIP: 0033:0x7f89589a3b19 [ 1766.915290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.919173] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1766.920777] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1766.922280] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1766.923783] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1766.925286] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1766.926795] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1766.928340] CPU: 1 PID: 9131 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1766.929830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.931606] Call Trace: [ 1766.932107] FAULT_INJECTION: forcing a failure. [ 1766.932107] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.932176] dump_stack+0x107/0x167 [ 1766.935245] should_fail.cold+0x5/0xa [ 1766.936064] ? create_object.isra.0+0x3a/0xa30 [ 1766.937045] should_failslab+0x5/0x20 [ 1766.937875] kmem_cache_alloc+0x5b/0x310 [ 1766.938749] ? mark_held_locks+0x9e/0xe0 [ 1766.939624] create_object.isra.0+0x3a/0xa30 [ 1766.940564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.941660] kmem_cache_alloc_bulk+0x168/0x320 [ 1766.942660] io_submit_sqes+0x6fe4/0x8610 [ 1766.943579] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.944643] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.945676] ? find_held_lock+0x2c/0x110 [ 1766.946562] ? io_submit_sqes+0x8610/0x8610 [ 1766.947492] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1766.948524] ? wait_for_completion_io+0x270/0x270 [ 1766.949555] ? rcu_read_lock_any_held+0x75/0xa0 [ 1766.950549] ? vfs_write+0x354/0xb10 [ 1766.951343] ? fput_many+0x2f/0x1a0 [ 1766.952121] ? ksys_write+0x1a9/0x260 [ 1766.952933] ? __ia32_sys_read+0xb0/0xb0 [ 1766.953816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.954938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.956046] do_syscall_64+0x33/0x40 [ 1766.956844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.957947] RIP: 0033:0x7f8e4c378b19 [ 1766.958739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.962680] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1766.964313] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1766.965858] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1766.967383] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.968910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1766.970446] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 [ 1766.972004] CPU: 0 PID: 9125 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1766.973447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.975214] Call Trace: [ 1766.975779] dump_stack+0x107/0x167 [ 1766.976554] should_fail.cold+0x5/0xa [ 1766.977364] ? create_object.isra.0+0x3a/0xa30 [ 1766.978335] should_failslab+0x5/0x20 [ 1766.979139] kmem_cache_alloc+0x5b/0x310 [ 1766.980007] create_object.isra.0+0x3a/0xa30 [ 1766.980940] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.982030] kmem_cache_alloc+0x159/0x310 [ 1766.982919] __alloc_file+0x21/0x320 [ 1766.983712] alloc_empty_file+0x6d/0x170 [ 1766.984571] alloc_file+0x5e/0x5a0 [ 1766.985329] alloc_file_pseudo+0x16a/0x250 [ 1766.986234] ? alloc_file+0x5a0/0x5a0 [ 1766.987063] anon_inode_getfile+0xc8/0x1f0 [ 1766.987961] io_uring_setup+0x138b/0x2980 [ 1766.988861] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1766.989937] ? wait_for_completion_io+0x270/0x270 [ 1766.990997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.992093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.993182] do_syscall_64+0x33/0x40 [ 1766.993975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.995052] RIP: 0033:0x7f6ebd7dfb19 [ 1766.995844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.999709] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1767.001304] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1767.002808] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1767.004306] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1767.005815] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1767.007315] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 25) 22:09:02 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:09:02 executing program 1: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1767.073703] FAULT_INJECTION: forcing a failure. [ 1767.073703] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.076246] CPU: 0 PID: 9141 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1767.077989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.080103] Call Trace: [ 1767.080798] dump_stack+0x107/0x167 [ 1767.081760] should_fail.cold+0x5/0xa [ 1767.082752] ? security_file_alloc+0x34/0x170 [ 1767.083861] should_failslab+0x5/0x20 [ 1767.084727] kmem_cache_alloc+0x5b/0x310 [ 1767.085650] security_file_alloc+0x34/0x170 [ 1767.086628] __alloc_file+0xb7/0x320 [ 1767.087497] alloc_empty_file+0x6d/0x170 [ 1767.088390] alloc_file+0x5e/0x5a0 [ 1767.089200] alloc_file_pseudo+0x16a/0x250 [ 1767.090130] ? alloc_file+0x5a0/0x5a0 [ 1767.090991] anon_inode_getfile+0xc8/0x1f0 [ 1767.091911] io_uring_setup+0x138b/0x2980 [ 1767.092870] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1767.094014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.095140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1767.096250] do_syscall_64+0x33/0x40 [ 1767.097043] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1767.098158] RIP: 0033:0x7ff6be2aab19 [ 1767.098959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1767.102994] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1767.104691] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1767.106262] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1767.107852] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1767.109443] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1767.111008] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1767.154467] FAULT_INJECTION: forcing a failure. [ 1767.154467] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.157118] CPU: 0 PID: 9149 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1767.158645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.160546] Call Trace: [ 1767.161125] dump_stack+0x107/0x167 [ 1767.161952] should_fail.cold+0x5/0xa [ 1767.162780] ? percpu_ref_init+0xd8/0x3d0 [ 1767.163722] should_failslab+0x5/0x20 [ 1767.164548] kmem_cache_alloc_trace+0x55/0x320 [ 1767.165595] ? io_tctx_exit_cb+0xf0/0xf0 [ 1767.166536] percpu_ref_init+0xd8/0x3d0 [ 1767.167455] io_uring_setup+0x47a/0x2980 [ 1767.168367] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1767.169420] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1767.170516] ? wait_for_completion_io+0x270/0x270 [ 1767.171581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.172677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1767.173825] do_syscall_64+0x33/0x40 [ 1767.174669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1767.175820] RIP: 0033:0x7fc72ff08b19 [ 1767.176677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1767.181179] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1767.183127] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1767.184902] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1767.186704] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1767.188501] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1767.190115] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:02 executing program 1: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:09:02 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:09:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0xff600000, 0x0, 0x0, 0x0) 22:09:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 25) 22:09:02 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001040), 0x0) [ 1767.314566] FAULT_INJECTION: forcing a failure. [ 1767.314566] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.317037] CPU: 0 PID: 9158 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1767.318490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.320251] Call Trace: [ 1767.320815] dump_stack+0x107/0x167 [ 1767.321601] should_fail.cold+0x5/0xa [ 1767.322428] ? security_file_alloc+0x34/0x170 [ 1767.323377] should_failslab+0x5/0x20 [ 1767.324185] kmem_cache_alloc+0x5b/0x310 [ 1767.325060] security_file_alloc+0x34/0x170 [ 1767.325985] __alloc_file+0xb7/0x320 [ 1767.326782] alloc_empty_file+0x6d/0x170 [ 1767.327641] alloc_file+0x5e/0x5a0 [ 1767.328411] alloc_file_pseudo+0x16a/0x250 [ 1767.329312] ? alloc_file+0x5a0/0x5a0 [ 1767.330165] anon_inode_getfile+0xc8/0x1f0 [ 1767.331072] io_uring_setup+0x138b/0x2980 [ 1767.331977] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1767.333057] ? wait_for_completion_io+0x270/0x270 [ 1767.334125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.335235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1767.336332] do_syscall_64+0x33/0x40 [ 1767.337127] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1767.338211] RIP: 0033:0x7f6ebd7dfb19 [ 1767.339008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1767.342905] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1767.344516] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1767.346035] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1767.347540] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1767.349044] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1767.350552] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 26) 22:09:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 11) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:09:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 26) 22:09:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 22:09:17 executing program 1: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:09:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 27) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:09:17 executing program 5: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:09:17 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) [ 1782.156917] FAULT_INJECTION: forcing a failure. [ 1782.156917] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.159525] CPU: 1 PID: 9172 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1782.161062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.162929] Call Trace: [ 1782.163528] dump_stack+0x107/0x167 [ 1782.164354] should_fail.cold+0x5/0xa [ 1782.164458] FAULT_INJECTION: forcing a failure. [ 1782.164458] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.165226] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1782.165246] should_failslab+0x5/0x20 [ 1782.165276] kmem_cache_alloc_trace+0x55/0x320 [ 1782.170679] io_uring_alloc_task_context+0x99/0x6a0 [ 1782.171804] ? io_import_iovec+0x1120/0x1120 [ 1782.172807] ? lock_downgrade+0x6d0/0x6d0 [ 1782.173739] ? do_raw_spin_lock+0x121/0x260 [ 1782.174715] ? rwlock_bug.part.0+0x90/0x90 [ 1782.175671] __io_uring_add_tctx_node+0x2c6/0x520 [ 1782.176754] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1782.177951] ? alloc_fd+0x2e7/0x670 [ 1782.178796] io_uring_setup+0x1fbb/0x2980 [ 1782.179747] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1782.180910] ? wait_for_completion_io+0x270/0x270 [ 1782.182036] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.183225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.184416] do_syscall_64+0x33/0x40 [ 1782.185263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.186433] RIP: 0033:0x7f89589a3b19 [ 1782.187282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.191482] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1782.193217] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1782.194849] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1782.196464] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1782.198122] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1782.199750] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1782.201409] CPU: 0 PID: 9178 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1782.202931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.204723] Call Trace: [ 1782.205302] dump_stack+0x107/0x167 [ 1782.206111] should_fail.cold+0x5/0xa [ 1782.206930] ? create_object.isra.0+0x3a/0xa30 [ 1782.207904] should_failslab+0x5/0x20 [ 1782.208571] FAULT_INJECTION: forcing a failure. [ 1782.208571] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.208713] kmem_cache_alloc+0x5b/0x310 [ 1782.208738] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1782.208770] create_object.isra.0+0x3a/0xa30 [ 1782.214195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1782.215290] kmem_cache_alloc+0x159/0x310 [ 1782.216189] security_file_alloc+0x34/0x170 [ 1782.217117] __alloc_file+0xb7/0x320 [ 1782.217926] alloc_empty_file+0x6d/0x170 [ 1782.218795] alloc_file+0x5e/0x5a0 [ 1782.219562] alloc_file_pseudo+0x16a/0x250 [ 1782.220461] ? alloc_file+0x5a0/0x5a0 [ 1782.221306] anon_inode_getfile+0xc8/0x1f0 [ 1782.222234] io_uring_setup+0x138b/0x2980 [ 1782.223135] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1782.224212] ? wait_for_completion_io+0x270/0x270 [ 1782.225282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.226411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.227520] do_syscall_64+0x33/0x40 [ 1782.228315] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.229402] RIP: 0033:0x7f6ebd7dfb19 [ 1782.230208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.234109] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1782.235723] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1782.237231] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1782.238751] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1782.240261] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1782.241790] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1782.243360] CPU: 1 PID: 9180 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1782.244963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.246852] Call Trace: [ 1782.247463] dump_stack+0x107/0x167 [ 1782.248168] FAULT_INJECTION: forcing a failure. [ 1782.248168] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.248291] should_fail.cold+0x5/0xa [ 1782.251491] ? create_object.isra.0+0x3a/0xa30 [ 1782.252523] should_failslab+0x5/0x20 [ 1782.253394] kmem_cache_alloc+0x5b/0x310 [ 1782.254329] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1782.255580] create_object.isra.0+0x3a/0xa30 [ 1782.256580] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1782.257742] kmem_cache_alloc+0x159/0x310 [ 1782.258707] security_file_alloc+0x34/0x170 [ 1782.259690] __alloc_file+0xb7/0x320 [ 1782.260539] alloc_empty_file+0x6d/0x170 [ 1782.261468] alloc_file+0x5e/0x5a0 [ 1782.262294] alloc_file_pseudo+0x16a/0x250 [ 1782.263261] ? alloc_file+0x5a0/0x5a0 [ 1782.264150] anon_inode_getfile+0xc8/0x1f0 [ 1782.265121] io_uring_setup+0x138b/0x2980 [ 1782.266087] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1782.267242] ? wait_for_completion_io+0x270/0x270 [ 1782.268367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.269561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.270751] do_syscall_64+0x33/0x40 [ 1782.271602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.272772] RIP: 0033:0x7ff6be2aab19 [ 1782.273620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.277812] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1782.279555] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1782.281189] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1782.282821] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1782.284444] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1782.286076] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1782.287748] CPU: 0 PID: 9182 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1782.289202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.290945] Call Trace: [ 1782.291508] dump_stack+0x107/0x167 [ 1782.292273] should_fail.cold+0x5/0xa [ 1782.293071] ? create_object.isra.0+0x3a/0xa30 [ 1782.294031] should_failslab+0x5/0x20 [ 1782.294828] kmem_cache_alloc+0x5b/0x310 [ 1782.295682] create_object.isra.0+0x3a/0xa30 [ 1782.296606] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1782.297671] kmem_cache_alloc_trace+0x151/0x320 [ 1782.298658] ? io_tctx_exit_cb+0xf0/0xf0 [ 1782.299510] percpu_ref_init+0xd8/0x3d0 [ 1782.300346] io_uring_setup+0x47a/0x2980 [ 1782.301203] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1782.302236] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1782.303305] ? wait_for_completion_io+0x270/0x270 [ 1782.304346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.305450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.306538] do_syscall_64+0x33/0x40 [ 1782.307324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.308399] RIP: 0033:0x7fc72ff08b19 [ 1782.309181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.313059] RSP: 002b:00007fc72d45d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1782.314664] RAX: ffffffffffffffda RBX: 00007fc73001c020 RCX: 00007fc72ff08b19 [ 1782.316166] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1782.317667] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1782.319176] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1782.320680] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1782.330291] FAULT_INJECTION: forcing a failure. [ 1782.330291] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.332883] CPU: 0 PID: 9170 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1782.334316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1782.336032] Call Trace: [ 1782.336575] dump_stack+0x107/0x167 [ 1782.337338] should_fail.cold+0x5/0xa [ 1782.338147] ? create_object.isra.0+0x3a/0xa30 [ 1782.339093] should_failslab+0x5/0x20 [ 1782.339880] kmem_cache_alloc+0x5b/0x310 [ 1782.340729] ? mark_held_locks+0x9e/0xe0 [ 1782.341575] create_object.isra.0+0x3a/0xa30 [ 1782.342499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1782.343554] kmem_cache_alloc_bulk+0x168/0x320 [ 1782.344515] io_submit_sqes+0x6fe4/0x8610 [ 1782.345413] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1782.346458] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1782.347465] ? find_held_lock+0x2c/0x110 [ 1782.348313] ? io_submit_sqes+0x8610/0x8610 [ 1782.349213] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1782.350228] ? wait_for_completion_io+0x270/0x270 [ 1782.351229] ? rcu_read_lock_any_held+0x75/0xa0 [ 1782.352193] ? vfs_write+0x354/0xb10 [ 1782.352968] ? fput_many+0x2f/0x1a0 [ 1782.353720] ? ksys_write+0x1a9/0x260 [ 1782.354540] ? __ia32_sys_read+0xb0/0xb0 [ 1782.355398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.356491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.357568] do_syscall_64+0x33/0x40 [ 1782.358354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.359420] RIP: 0033:0x7f8e4c378b19 [ 1782.360191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.363998] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1782.365584] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1782.367065] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1782.368529] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1782.370021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1782.371510] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 22:09:17 executing program 5: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), 0x0) 22:09:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 27) 22:09:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 27) 22:09:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 28) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:09:32 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:09:32 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 22:09:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 12) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:09:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 22:09:32 executing program 5: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000001040), 0x0) [ 1797.022660] FAULT_INJECTION: forcing a failure. [ 1797.022660] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.024194] CPU: 1 PID: 9203 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1797.025080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.026162] Call Trace: [ 1797.026509] dump_stack+0x107/0x167 [ 1797.026988] should_fail.cold+0x5/0xa [ 1797.027499] ? create_object.isra.0+0x3a/0xa30 [ 1797.028088] should_failslab+0x5/0x20 [ 1797.028596] kmem_cache_alloc+0x5b/0x310 [ 1797.029123] create_object.isra.0+0x3a/0xa30 [ 1797.029698] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.030372] kmem_cache_alloc_trace+0x151/0x320 [ 1797.030982] io_uring_alloc_task_context+0x99/0x6a0 [ 1797.031622] ? io_import_iovec+0x1120/0x1120 [ 1797.032187] ? lock_downgrade+0x6d0/0x6d0 [ 1797.032739] ? do_raw_spin_lock+0x121/0x260 [ 1797.033312] ? rwlock_bug.part.0+0x90/0x90 [ 1797.033868] __io_uring_add_tctx_node+0x2c6/0x520 [ 1797.034496] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1797.035175] ? alloc_fd+0x2e7/0x670 [ 1797.035652] io_uring_setup+0x1fbb/0x2980 [ 1797.036201] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.036844] ? wait_for_completion_io+0x270/0x270 [ 1797.037479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.037789] FAULT_INJECTION: forcing a failure. [ 1797.037789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1797.038154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.038171] do_syscall_64+0x33/0x40 [ 1797.041888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.042569] RIP: 0033:0x7f89589a3b19 [ 1797.043056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.045456] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.046449] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1797.047372] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.048318] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.049240] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1797.050190] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1797.051131] CPU: 0 PID: 9210 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1797.052689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.054576] Call Trace: [ 1797.055181] dump_stack+0x107/0x167 22:09:32 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1797.056027] should_fail.cold+0x5/0xa [ 1797.057027] __alloc_pages_nodemask+0x182/0x600 [ 1797.058106] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1797.059476] ? cap_capable+0x1cd/0x230 [ 1797.060370] alloc_pages_current+0x187/0x280 [ 1797.061368] __get_free_pages+0xc/0xa0 [ 1797.062256] io_uring_setup+0xe27/0x2980 [ 1797.063195] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.064325] ? wait_for_completion_io+0x270/0x270 [ 1797.065455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.066636] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.067798] do_syscall_64+0x33/0x40 [ 1797.068647] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.069792] RIP: 0033:0x7fc72ff08b19 [ 1797.070642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.074733] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.076437] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1797.078040] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.079633] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.081227] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1797.082828] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x60ff, 0x0, 0x0) 22:09:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 29) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1797.108668] FAULT_INJECTION: forcing a failure. [ 1797.108668] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.111318] CPU: 0 PID: 9209 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1797.112831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.114684] Call Trace: [ 1797.115271] dump_stack+0x107/0x167 [ 1797.116085] should_fail.cold+0x5/0xa [ 1797.116933] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1797.118080] should_failslab+0x5/0x20 [ 1797.118922] kmem_cache_alloc_trace+0x55/0x320 [ 1797.119943] io_uring_alloc_task_context+0x99/0x6a0 [ 1797.121049] ? io_import_iovec+0x1120/0x1120 [ 1797.122018] ? lock_downgrade+0x6d0/0x6d0 [ 1797.122939] ? do_raw_spin_lock+0x121/0x260 [ 1797.123891] ? rwlock_bug.part.0+0x90/0x90 [ 1797.124836] __io_uring_add_tctx_node+0x2c6/0x520 [ 1797.125907] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1797.127070] ? alloc_fd+0x2e7/0x670 [ 1797.127901] io_uring_setup+0x1fbb/0x2980 [ 1797.128834] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.129948] ? wait_for_completion_io+0x270/0x270 [ 1797.131064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.132215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.133358] do_syscall_64+0x33/0x40 [ 1797.134178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.135291] RIP: 0033:0x7ff6be2aab19 [ 1797.136100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.140089] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.141746] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1797.143312] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.144865] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.146426] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1797.147981] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1797.155372] FAULT_INJECTION: forcing a failure. 22:09:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x800000, 0x0, 0x0) [ 1797.155372] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.158129] CPU: 0 PID: 9215 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1797.159607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.161393] Call Trace: [ 1797.161963] dump_stack+0x107/0x167 [ 1797.162767] should_fail.cold+0x5/0xa [ 1797.163596] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1797.164703] should_failslab+0x5/0x20 [ 1797.165523] kmem_cache_alloc_trace+0x55/0x320 [ 1797.166519] io_uring_alloc_task_context+0x99/0x6a0 [ 1797.167595] ? io_import_iovec+0x1120/0x1120 [ 1797.168542] ? lock_downgrade+0x6d0/0x6d0 [ 1797.169431] ? do_raw_spin_lock+0x121/0x260 [ 1797.170359] ? rwlock_bug.part.0+0x90/0x90 [ 1797.171270] __io_uring_add_tctx_node+0x2c6/0x520 [ 1797.172300] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1797.173418] ? alloc_fd+0x2e7/0x670 [ 1797.174221] io_uring_setup+0x1fbb/0x2980 [ 1797.175120] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.176203] ? wait_for_completion_io+0x270/0x270 [ 1797.177255] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.178386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.179489] do_syscall_64+0x33/0x40 [ 1797.180285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.181377] RIP: 0033:0x7f6ebd7dfb19 [ 1797.182183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.186109] RSP: 002b:00007f6ebad34108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.187730] RAX: ffffffffffffffda RBX: 00007f6ebd8f3020 RCX: 00007f6ebd7dfb19 [ 1797.189240] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.190756] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 22:09:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 28) 22:09:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 13) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1797.190922] FAULT_INJECTION: forcing a failure. [ 1797.190922] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.192266] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1797.192278] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1797.195675] CPU: 1 PID: 9206 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1797.196501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.197501] Call Trace: [ 1797.197821] dump_stack+0x107/0x167 [ 1797.198267] should_fail.cold+0x5/0xa [ 1797.198731] ? create_object.isra.0+0x3a/0xa30 [ 1797.199288] should_failslab+0x5/0x20 [ 1797.199750] kmem_cache_alloc+0x5b/0x310 [ 1797.200238] ? mark_held_locks+0x9e/0xe0 [ 1797.200735] create_object.isra.0+0x3a/0xa30 [ 1797.201273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.201883] kmem_cache_alloc_bulk+0x168/0x320 [ 1797.202450] io_submit_sqes+0x6fe4/0x8610 [ 1797.202964] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1797.203571] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1797.204159] ? find_held_lock+0x2c/0x110 [ 1797.204661] ? io_submit_sqes+0x8610/0x8610 [ 1797.205179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1797.205759] ? wait_for_completion_io+0x270/0x270 [ 1797.206339] ? rcu_read_lock_any_held+0x75/0xa0 [ 1797.206886] ? vfs_write+0x354/0xb10 [ 1797.207329] ? fput_many+0x2f/0x1a0 [ 1797.207759] ? ksys_write+0x1a9/0x260 [ 1797.208209] ? __ia32_sys_read+0xb0/0xb0 [ 1797.208694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.209323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.209939] do_syscall_64+0x33/0x40 [ 1797.210395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.211004] RIP: 0033:0x7f8e4c378b19 [ 1797.211448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.213622] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1797.214530] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1797.215377] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1797.216228] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.217073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1797.217919] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 [ 1797.228168] FAULT_INJECTION: forcing a failure. [ 1797.228168] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.231024] CPU: 0 PID: 9224 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1797.232656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.234653] Call Trace: [ 1797.235294] dump_stack+0x107/0x167 22:09:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), 0x0) [ 1797.236169] should_fail.cold+0x5/0xa [ 1797.237262] ? create_object.isra.0+0x3a/0xa30 [ 1797.238357] should_failslab+0x5/0x20 [ 1797.239287] kmem_cache_alloc+0x5b/0x310 [ 1797.240279] create_object.isra.0+0x3a/0xa30 [ 1797.241360] kmemleak_alloc_percpu+0xa0/0x100 [ 1797.242464] pcpu_alloc+0x4e2/0x1240 [ 1797.243410] __percpu_counter_init+0x10d/0x2d0 [ 1797.244521] io_uring_alloc_task_context+0xcc/0x6a0 [ 1797.245728] ? io_import_iovec+0x1120/0x1120 [ 1797.246799] ? lock_downgrade+0x6d0/0x6d0 [ 1797.247795] ? do_raw_spin_lock+0x121/0x260 [ 1797.248828] ? rwlock_bug.part.0+0x90/0x90 [ 1797.249860] __io_uring_add_tctx_node+0x2c6/0x520 [ 1797.251021] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1797.252005] FAULT_INJECTION: forcing a failure. [ 1797.252005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1797.252274] ? alloc_fd+0x2e7/0x670 [ 1797.254516] io_uring_setup+0x1fbb/0x2980 [ 1797.255520] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.256718] ? wait_for_completion_io+0x270/0x270 [ 1797.257917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.259172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.260417] do_syscall_64+0x33/0x40 [ 1797.261314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.262541] RIP: 0033:0x7f89589a3b19 [ 1797.263426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.267772] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.269574] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1797.271268] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.272932] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.274627] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1797.276296] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1797.278018] CPU: 1 PID: 9229 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1797.278842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.279807] Call Trace: [ 1797.280166] dump_stack+0x107/0x167 [ 1797.280594] should_fail.cold+0x5/0xa [ 1797.281040] __alloc_pages_nodemask+0x182/0x600 [ 1797.281581] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1797.282295] ? cap_capable+0x1cd/0x230 [ 1797.282759] alloc_pages_current+0x187/0x280 [ 1797.283269] __get_free_pages+0xc/0xa0 [ 1797.283717] io_uring_setup+0xf9a/0x2980 [ 1797.284190] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.284771] ? wait_for_completion_io+0x270/0x270 [ 1797.285337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.285948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.286553] do_syscall_64+0x33/0x40 [ 1797.286979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.287565] RIP: 0033:0x7fc72ff08b19 [ 1797.287997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.290138] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.291016] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1797.291844] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.292678] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.293505] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1797.294337] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1797.300175] FAULT_INJECTION: forcing a failure. [ 1797.300175] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.301500] CPU: 1 PID: 9232 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1797.302310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.303267] Call Trace: [ 1797.303572] dump_stack+0x107/0x167 [ 1797.303997] should_fail.cold+0x5/0xa [ 1797.304439] ? create_object.isra.0+0x3a/0xa30 [ 1797.304967] should_failslab+0x5/0x20 [ 1797.305405] kmem_cache_alloc+0x5b/0x310 [ 1797.305879] create_object.isra.0+0x3a/0xa30 [ 1797.306388] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.306977] kmem_cache_alloc_trace+0x151/0x320 [ 1797.307513] io_uring_alloc_task_context+0x99/0x6a0 [ 1797.308087] ? io_import_iovec+0x1120/0x1120 [ 1797.308589] ? lock_downgrade+0x6d0/0x6d0 [ 1797.309061] ? do_raw_spin_lock+0x121/0x260 [ 1797.309552] ? rwlock_bug.part.0+0x90/0x90 [ 1797.310052] __io_uring_add_tctx_node+0x2c6/0x520 [ 1797.310608] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1797.311203] ? alloc_fd+0x2e7/0x670 [ 1797.311633] io_uring_setup+0x1fbb/0x2980 [ 1797.312114] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.312700] ? wait_for_completion_io+0x270/0x270 [ 1797.313260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.313865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.314460] do_syscall_64+0x33/0x40 [ 1797.314889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.315476] RIP: 0033:0x7ff6be2aab19 [ 1797.315903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.318009] RSP: 002b:00007ff6bb7ff108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.318884] RAX: ffffffffffffffda RBX: 00007ff6be3be020 RCX: 00007ff6be2aab19 [ 1797.319698] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.320513] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.321330] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1797.322151] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:32 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:09:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xb0ff20, 0x0, 0x0) 22:09:32 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 22:09:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 28) [ 1797.430426] FAULT_INJECTION: forcing a failure. [ 1797.430426] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.431854] CPU: 1 PID: 9245 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1797.432640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.433589] Call Trace: [ 1797.433899] dump_stack+0x107/0x167 [ 1797.434324] should_fail.cold+0x5/0xa [ 1797.434761] ? create_object.isra.0+0x3a/0xa30 [ 1797.435280] should_failslab+0x5/0x20 [ 1797.435718] kmem_cache_alloc+0x5b/0x310 [ 1797.436189] create_object.isra.0+0x3a/0xa30 [ 1797.436690] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.437272] kmem_cache_alloc_trace+0x151/0x320 [ 1797.437808] io_uring_alloc_task_context+0x99/0x6a0 [ 1797.438390] ? io_import_iovec+0x1120/0x1120 [ 1797.438892] ? lock_downgrade+0x6d0/0x6d0 [ 1797.439365] ? do_raw_spin_lock+0x121/0x260 [ 1797.439857] ? rwlock_bug.part.0+0x90/0x90 [ 1797.440344] __io_uring_add_tctx_node+0x2c6/0x520 [ 1797.440894] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1797.441492] ? alloc_fd+0x2e7/0x670 [ 1797.441913] io_uring_setup+0x1fbb/0x2980 [ 1797.442400] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1797.442976] ? wait_for_completion_io+0x270/0x270 [ 1797.443545] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.444143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.444731] do_syscall_64+0x33/0x40 [ 1797.445153] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.445737] RIP: 0033:0x7f6ebd7dfb19 [ 1797.446166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.448251] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1797.448544] FAULT_INJECTION: forcing a failure. [ 1797.448544] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.449112] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1797.449119] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1797.449125] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1797.449130] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1797.449136] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1797.460252] CPU: 0 PID: 9244 Comm: syz-executor.7 Not tainted 5.10.252 #1 [ 1797.461810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1797.463706] Call Trace: [ 1797.464317] dump_stack+0x107/0x167 [ 1797.465155] should_fail.cold+0x5/0xa [ 1797.466043] ? create_object.isra.0+0x3a/0xa30 [ 1797.467079] should_failslab+0x5/0x20 [ 1797.467946] kmem_cache_alloc+0x5b/0x310 [ 1797.468871] ? mark_held_locks+0x9e/0xe0 [ 1797.469807] create_object.isra.0+0x3a/0xa30 [ 1797.470818] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1797.471985] kmem_cache_alloc_bulk+0x168/0x320 [ 1797.473041] io_submit_sqes+0x6fe4/0x8610 [ 1797.474015] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1797.475161] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1797.476265] ? find_held_lock+0x2c/0x110 [ 1797.477199] ? io_submit_sqes+0x8610/0x8610 [ 1797.478198] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1797.479307] ? wait_for_completion_io+0x270/0x270 [ 1797.480404] ? rcu_read_lock_any_held+0x75/0xa0 [ 1797.481453] ? vfs_write+0x354/0xb10 [ 1797.482316] ? fput_many+0x2f/0x1a0 [ 1797.483139] ? ksys_write+0x1a9/0x260 [ 1797.484000] ? __ia32_sys_read+0xb0/0xb0 [ 1797.484930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.486127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.487303] do_syscall_64+0x33/0x40 [ 1797.488155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.489326] RIP: 0033:0x7f8e4c378b19 [ 1797.490181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.494393] RSP: 002b:00007f8e498ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1797.496128] RAX: ffffffffffffffda RBX: 00007f8e4c48bf60 RCX: 00007f8e4c378b19 [ 1797.497751] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1797.499393] RBP: 00007f8e498ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.501007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1797.502638] R13: 00007ffda3509d6f R14: 00007f8e498ee300 R15: 0000000000022000 22:09:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:09:45 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 22:09:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 29) [ 1810.037355] FAULT_INJECTION: forcing a failure. [ 1810.037355] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.038961] CPU: 1 PID: 9259 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1810.039889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.041014] Call Trace: [ 1810.041380] dump_stack+0x107/0x167 [ 1810.041879] should_fail.cold+0x5/0xa [ 1810.042407] ? create_object.isra.0+0x3a/0xa30 [ 1810.043029] should_failslab+0x5/0x20 [ 1810.043544] kmem_cache_alloc+0x5b/0x310 [ 1810.044112] create_object.isra.0+0x3a/0xa30 [ 1810.044719] kmemleak_alloc_percpu+0xa0/0x100 [ 1810.045338] pcpu_alloc+0x4e2/0x1240 [ 1810.045864] __percpu_counter_init+0x10d/0x2d0 [ 1810.046512] io_uring_alloc_task_context+0xcc/0x6a0 [ 1810.047186] ? io_import_iovec+0x1120/0x1120 [ 1810.047797] ? lock_downgrade+0x6d0/0x6d0 [ 1810.048372] ? do_raw_spin_lock+0x121/0x260 [ 1810.048957] ? rwlock_bug.part.0+0x90/0x90 [ 1810.049538] __io_uring_add_tctx_node+0x2c6/0x520 [ 1810.050216] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1810.050928] ? alloc_fd+0x2e7/0x670 [ 1810.051440] io_uring_setup+0x1fbb/0x2980 [ 1810.052005] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1810.052696] ? wait_for_completion_io+0x270/0x270 [ 1810.053369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 22:09:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 29) 22:09:45 executing program 1: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) 22:09:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xf0ff1f, 0x0, 0x0) 22:09:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:09:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 30) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1810.054088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.055043] do_syscall_64+0x33/0x40 [ 1810.055624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.056454] RIP: 0033:0x7f6ebd7dfb19 [ 1810.057061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.060091] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1810.061319] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1810.062502] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1810.063665] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1810.064524] FAULT_INJECTION: forcing a failure. [ 1810.064524] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.064818] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1810.064826] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1810.071202] CPU: 0 PID: 9264 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1810.072824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.074835] Call Trace: [ 1810.075473] dump_stack+0x107/0x167 [ 1810.076354] should_fail.cold+0x5/0xa [ 1810.077275] ? create_object.isra.0+0x3a/0xa30 [ 1810.078375] should_failslab+0x5/0x20 [ 1810.079288] kmem_cache_alloc+0x5b/0x310 [ 1810.080152] FAULT_INJECTION: forcing a failure. [ 1810.080152] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.080274] create_object.isra.0+0x3a/0xa30 [ 1810.083110] kmemleak_alloc_percpu+0xa0/0x100 [ 1810.084192] pcpu_alloc+0x4e2/0x1240 [ 1810.085130] __percpu_counter_init+0x10d/0x2d0 [ 1810.086241] io_uring_alloc_task_context+0xcc/0x6a0 [ 1810.087436] ? io_import_iovec+0x1120/0x1120 [ 1810.088494] ? lock_downgrade+0x6d0/0x6d0 [ 1810.089479] ? do_raw_spin_lock+0x121/0x260 [ 1810.090520] ? rwlock_bug.part.0+0x90/0x90 [ 1810.091551] __io_uring_add_tctx_node+0x2c6/0x520 [ 1810.092711] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1810.093966] ? alloc_fd+0x2e7/0x670 [ 1810.094877] io_uring_setup+0x1fbb/0x2980 [ 1810.095909] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1810.097125] ? wait_for_completion_io+0x270/0x270 [ 1810.098343] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.099602] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.100843] do_syscall_64+0x33/0x40 [ 1810.101742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.102996] RIP: 0033:0x7f89589a3b19 [ 1810.103899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.108285] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1810.110106] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1810.111831] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1810.113519] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1810.115220] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1810.116928] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1810.118702] CPU: 1 PID: 9257 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1810.119636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.120789] Call Trace: [ 1810.121146] dump_stack+0x107/0x167 [ 1810.121638] should_fail.cold+0x5/0xa [ 1810.122157] ? create_object.isra.0+0x3a/0xa30 [ 1810.122776] should_failslab+0x5/0x20 [ 1810.123287] kmem_cache_alloc+0x5b/0x310 [ 1810.123846] create_object.isra.0+0x3a/0xa30 [ 1810.124456] kmemleak_alloc_percpu+0xa0/0x100 [ 1810.125063] pcpu_alloc+0x4e2/0x1240 [ 1810.125578] __percpu_counter_init+0x10d/0x2d0 [ 1810.126210] io_uring_alloc_task_context+0xcc/0x6a0 [ 1810.126878] ? io_import_iovec+0x1120/0x1120 [ 1810.127486] ? lock_downgrade+0x6d0/0x6d0 [ 1810.128044] ? do_raw_spin_lock+0x121/0x260 [ 1810.128637] ? rwlock_bug.part.0+0x90/0x90 [ 1810.129222] __io_uring_add_tctx_node+0x2c6/0x520 [ 1810.129877] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1810.130592] ? alloc_fd+0x2e7/0x670 [ 1810.131106] io_uring_setup+0x1fbb/0x2980 [ 1810.131672] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1810.132354] ? wait_for_completion_io+0x270/0x270 [ 1810.133016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.133734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.134436] do_syscall_64+0x33/0x40 [ 1810.134935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.135620] RIP: 0033:0x7ff6be2aab19 [ 1810.136134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.138617] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1810.139645] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1810.140627] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1810.141605] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1810.142574] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1810.143535] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 31) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1810.149437] FAULT_INJECTION: forcing a failure. [ 1810.149437] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.152134] CPU: 0 PID: 9265 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1810.153762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.155752] Call Trace: [ 1810.156400] dump_stack+0x107/0x167 [ 1810.157283] should_fail.cold+0x5/0xa [ 1810.158216] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1810.159550] should_failslab+0x5/0x20 [ 1810.160458] kmem_cache_alloc_trace+0x55/0x320 [ 1810.161564] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1810.162888] io_uring_setup+0x14f6/0x2980 [ 1810.163901] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1810.165103] ? wait_for_completion_io+0x270/0x270 [ 1810.166310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.167581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.168818] do_syscall_64+0x33/0x40 [ 1810.169712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.170939] RIP: 0033:0x7fc72ff08b19 [ 1810.171832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.176166] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1810.177962] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1810.179644] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1810.181328] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1810.183005] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1810.184688] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:45 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:09:45 executing program 1: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1810.265331] FAULT_INJECTION: forcing a failure. [ 1810.265331] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.266881] CPU: 1 PID: 9274 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1810.267786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.268868] Call Trace: [ 1810.269214] dump_stack+0x107/0x167 [ 1810.269703] should_fail.cold+0x5/0xa [ 1810.270220] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1810.270908] should_failslab+0x5/0x20 [ 1810.271425] kmem_cache_alloc_trace+0x55/0x320 [ 1810.272047] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1810.272722] ? io_import_iovec+0x1120/0x1120 [ 1810.273286] ? lock_downgrade+0x6d0/0x6d0 [ 1810.273829] ? do_raw_spin_lock+0x121/0x260 [ 1810.274401] ? rwlock_bug.part.0+0x90/0x90 [ 1810.274956] __io_uring_add_tctx_node+0x2c6/0x520 [ 1810.275586] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1810.276271] ? alloc_fd+0x2e7/0x670 [ 1810.276758] io_uring_setup+0x1fbb/0x2980 [ 1810.277304] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1810.277977] ? wait_for_completion_io+0x270/0x270 [ 1810.278625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.279320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.280005] do_syscall_64+0x33/0x40 [ 1810.280494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.281173] RIP: 0033:0x7f89589a3b19 [ 1810.281660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 22:09:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 30) [ 1810.284097] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1810.285317] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1810.286427] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1810.287362] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1810.288299] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1810.289232] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) (fail_nth: 1) 22:09:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x1ffff000, 0x0, 0x0) [ 1810.308663] FAULT_INJECTION: forcing a failure. [ 1810.308663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1810.310406] CPU: 1 PID: 9280 Comm: syz-executor.5 Not tainted 5.10.252 #1 [ 1810.311311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.312374] Call Trace: [ 1810.312727] dump_stack+0x107/0x167 [ 1810.313209] should_fail.cold+0x5/0xa [ 1810.313706] _copy_to_user+0x2e/0x180 [ 1810.314229] simple_read_from_buffer+0xcc/0x160 [ 1810.314841] proc_fail_nth_read+0x198/0x230 [ 1810.315415] ? proc_sessionid_read+0x230/0x230 [ 1810.316010] ? security_file_permission+0xb1/0xe0 [ 1810.316644] ? proc_sessionid_read+0x230/0x230 [ 1810.317244] vfs_read+0x228/0x620 [ 1810.317693] ksys_read+0x12d/0x260 [ 1810.318149] ? vfs_write+0xb10/0xb10 [ 1810.318315] FAULT_INJECTION: forcing a failure. [ 1810.318315] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.318650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.321811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.322487] do_syscall_64+0x33/0x40 [ 1810.322967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.323621] RIP: 0033:0x7fcd94dbf69c [ 1810.324100] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1810.326490] RSP: 002b:00007fcd92382170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1810.327483] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fcd94dbf69c [ 1810.328409] RDX: 000000000000000f RSI: 00007fcd923821e0 RDI: 0000000000000004 [ 1810.329336] RBP: 00007fcd923821d0 R08: 0000000000000000 R09: 0000000000000000 [ 1810.330265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1810.331190] R13: 00007ffec98b3ddf R14: 00007fcd92382300 R15: 0000000000022000 [ 1810.332178] CPU: 0 PID: 9283 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1810.333751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.335652] Call Trace: [ 1810.336260] dump_stack+0x107/0x167 [ 1810.337104] should_fail.cold+0x5/0xa [ 1810.337980] ? create_object.isra.0+0x3a/0xa30 [ 1810.339036] should_failslab+0x5/0x20 [ 1810.339909] kmem_cache_alloc+0x5b/0x310 [ 1810.340855] create_object.isra.0+0x3a/0xa30 [ 1810.341883] kmemleak_alloc_percpu+0xa0/0x100 [ 1810.342931] pcpu_alloc+0x4e2/0x1240 [ 1810.343823] __percpu_counter_init+0x10d/0x2d0 [ 1810.344870] io_uring_alloc_task_context+0xcc/0x6a0 [ 1810.346009] ? io_import_iovec+0x1120/0x1120 [ 1810.347021] ? lock_downgrade+0x6d0/0x6d0 [ 1810.347961] ? do_raw_spin_lock+0x121/0x260 [ 1810.348940] ? rwlock_bug.part.0+0x90/0x90 [ 1810.349914] __io_uring_add_tctx_node+0x2c6/0x520 [ 1810.351018] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1810.352200] ? alloc_fd+0x2e7/0x670 [ 1810.353055] io_uring_setup+0x1fbb/0x2980 [ 1810.354013] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1810.355169] ? wait_for_completion_io+0x270/0x270 [ 1810.356309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.357492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.358681] do_syscall_64+0x33/0x40 [ 1810.359527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.360686] RIP: 0033:0x7f6ebd7dfb19 [ 1810.361528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.365671] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1810.367404] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1810.369008] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1810.370605] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1810.372195] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1810.373789] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 30) [ 1810.394813] FAULT_INJECTION: forcing a failure. [ 1810.394813] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.396285] CPU: 1 PID: 9288 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1810.397141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.398188] Call Trace: [ 1810.398531] dump_stack+0x107/0x167 [ 1810.398993] should_fail.cold+0x5/0xa [ 1810.399477] ? create_object.isra.0+0x3a/0xa30 [ 1810.400064] should_failslab+0x5/0x20 [ 1810.400541] kmem_cache_alloc+0x5b/0x310 [ 1810.401068] create_object.isra.0+0x3a/0xa30 [ 1810.401626] kmemleak_alloc_percpu+0xa0/0x100 22:09:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 15) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1810.402209] pcpu_alloc+0x4e2/0x1240 [ 1810.402844] __percpu_counter_init+0x10d/0x2d0 [ 1810.403431] io_uring_alloc_task_context+0xcc/0x6a0 [ 1810.404061] ? io_import_iovec+0x1120/0x1120 [ 1810.404616] ? lock_downgrade+0x6d0/0x6d0 [ 1810.405146] ? do_raw_spin_lock+0x121/0x260 [ 1810.405687] ? rwlock_bug.part.0+0x90/0x90 [ 1810.406249] __io_uring_add_tctx_node+0x2c6/0x520 [ 1810.406856] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1810.407514] ? alloc_fd+0x2e7/0x670 [ 1810.407978] io_uring_setup+0x1fbb/0x2980 [ 1810.408509] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1810.409167] ? wait_for_completion_io+0x270/0x270 [ 1810.409788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 22:09:45 executing program 1: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1810.410453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.411206] do_syscall_64+0x33/0x40 [ 1810.411685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.412332] RIP: 0033:0x7ff6be2aab19 [ 1810.412796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.415120] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1810.416062] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1810.416943] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1810.417825] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1810.418716] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1810.419604] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) [ 1810.472214] FAULT_INJECTION: forcing a failure. [ 1810.472214] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.474837] CPU: 0 PID: 9294 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1810.476318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.478106] Call Trace: [ 1810.478701] dump_stack+0x107/0x167 [ 1810.479500] should_fail.cold+0x5/0xa [ 1810.480338] ? create_object.isra.0+0x3a/0xa30 [ 1810.481332] should_failslab+0x5/0x20 [ 1810.482158] kmem_cache_alloc+0x5b/0x310 [ 1810.483051] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1810.484372] create_object.isra.0+0x3a/0xa30 [ 1810.485321] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1810.486461] kmem_cache_alloc_trace+0x151/0x320 [ 1810.487489] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1810.488665] io_uring_setup+0x14f6/0x2980 [ 1810.489588] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1810.490687] ? wait_for_completion_io+0x270/0x270 [ 1810.491777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.492907] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.494027] do_syscall_64+0x33/0x40 [ 1810.494842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.495944] RIP: 0033:0x7fc72ff08b19 [ 1810.496745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.500670] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1810.502308] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1810.503832] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1810.505358] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1810.506888] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1810.508418] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:45 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 22:09:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 31) 22:09:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:09:58 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 22:09:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 16) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:09:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 31) 22:09:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x20ffb000, 0x0, 0x0) 22:09:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000001080)) 22:09:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 1823.009422] FAULT_INJECTION: forcing a failure. [ 1823.009422] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.011971] CPU: 1 PID: 9316 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1823.013446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.013989] FAULT_INJECTION: forcing a failure. [ 1823.013989] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.015261] Call Trace: [ 1823.015288] dump_stack+0x107/0x167 [ 1823.015312] should_fail.cold+0x5/0xa [ 1823.015341] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1823.020915] should_failslab+0x5/0x20 [ 1823.021742] kmem_cache_alloc_trace+0x55/0x320 [ 1823.022745] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1823.023851] ? io_import_iovec+0x1120/0x1120 [ 1823.024804] ? lock_downgrade+0x6d0/0x6d0 [ 1823.025700] ? do_raw_spin_lock+0x121/0x260 [ 1823.026635] ? rwlock_bug.part.0+0x90/0x90 [ 1823.027548] __io_uring_add_tctx_node+0x2c6/0x520 [ 1823.028587] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1823.029711] ? alloc_fd+0x2e7/0x670 [ 1823.030517] io_uring_setup+0x1fbb/0x2980 [ 1823.031415] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1823.032498] ? wait_for_completion_io+0x270/0x270 [ 1823.033561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.034692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.035806] do_syscall_64+0x33/0x40 [ 1823.036602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.037696] RIP: 0033:0x7f6ebd7dfb19 [ 1823.038495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.042423] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1823.044048] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1823.045561] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1823.047084] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1823.048591] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1823.050101] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1823.051648] CPU: 0 PID: 9309 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1823.053107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.054870] Call Trace: [ 1823.055442] dump_stack+0x107/0x167 [ 1823.056227] should_fail.cold+0x5/0xa [ 1823.057048] ? create_object.isra.0+0x3a/0xa30 [ 1823.058020] should_failslab+0x5/0x20 [ 1823.058845] kmem_cache_alloc+0x5b/0x310 [ 1823.059730] create_object.isra.0+0x3a/0xa30 [ 1823.060684] kmemleak_alloc_percpu+0xa0/0x100 [ 1823.061654] pcpu_alloc+0x4e2/0x1240 [ 1823.062494] ? io_async_queue_proc+0x80/0x80 [ 1823.063438] percpu_ref_init+0x31/0x3d0 [ 1823.064305] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1823.065459] io_uring_setup+0x14f6/0x2980 [ 1823.066373] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1823.067447] ? wait_for_completion_io+0x270/0x270 [ 1823.068521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.068617] FAULT_INJECTION: forcing a failure. [ 1823.068617] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.069638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.069670] do_syscall_64+0x33/0x40 [ 1823.069699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.075479] RIP: 0033:0x7fc72ff08b19 [ 1823.076276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.080173] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1823.081790] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1823.083313] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1823.084820] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1823.086338] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1823.087854] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1823.089428] CPU: 1 PID: 9321 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1823.091188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.093280] Call Trace: [ 1823.093932] FAULT_INJECTION: forcing a failure. [ 1823.093932] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.096730] dump_stack+0x107/0x167 [ 1823.097659] should_fail.cold+0x5/0xa [ 1823.098647] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1823.099990] should_failslab+0x5/0x20 [ 1823.100950] kmem_cache_alloc_trace+0x55/0x320 [ 1823.102120] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1823.103413] ? io_import_iovec+0x1120/0x1120 [ 1823.104536] ? lock_downgrade+0x6d0/0x6d0 [ 1823.105579] ? do_raw_spin_lock+0x121/0x260 [ 1823.106644] ? rwlock_bug.part.0+0x90/0x90 [ 1823.107708] __io_uring_add_tctx_node+0x2c6/0x520 [ 1823.108936] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1823.110245] ? alloc_fd+0x2e7/0x670 [ 1823.111184] io_uring_setup+0x1fbb/0x2980 [ 1823.112229] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1823.113487] ? wait_for_completion_io+0x270/0x270 [ 1823.114720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.116043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.117334] do_syscall_64+0x33/0x40 [ 1823.118268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.119554] RIP: 0033:0x7ff6be2aab19 [ 1823.120487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.125055] RSP: 002b:00007ff6bb7ff108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1823.126925] RAX: ffffffffffffffda RBX: 00007ff6be3be020 RCX: 00007ff6be2aab19 [ 1823.128696] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1823.130462] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1823.132214] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1823.133955] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1823.135738] CPU: 0 PID: 9317 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1823.137216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.138988] Call Trace: [ 1823.139555] dump_stack+0x107/0x167 [ 1823.140353] should_fail.cold+0x5/0xa [ 1823.141179] ? create_object.isra.0+0x3a/0xa30 [ 1823.142161] should_failslab+0x5/0x20 [ 1823.142989] kmem_cache_alloc+0x5b/0x310 [ 1823.143868] create_object.isra.0+0x3a/0xa30 [ 1823.144803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.145904] kmem_cache_alloc_trace+0x151/0x320 [ 1823.146922] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1823.148014] ? io_import_iovec+0x1120/0x1120 [ 1823.148956] ? lock_downgrade+0x6d0/0x6d0 [ 1823.149852] ? do_raw_spin_lock+0x121/0x260 [ 1823.150778] ? rwlock_bug.part.0+0x90/0x90 [ 1823.151698] __io_uring_add_tctx_node+0x2c6/0x520 [ 1823.152725] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1823.153844] ? alloc_fd+0x2e7/0x670 [ 1823.154654] io_uring_setup+0x1fbb/0x2980 [ 1823.155557] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1823.156629] ? wait_for_completion_io+0x270/0x270 [ 1823.157704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.158829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.159944] do_syscall_64+0x33/0x40 [ 1823.160740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.161832] RIP: 0033:0x7f89589a3b19 [ 1823.162634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.166529] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1823.168154] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1823.169672] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1823.171216] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1823.172732] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1823.174245] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:09:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:09:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:09:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xff600000, 0x0, 0x0) 22:09:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 17) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:09:58 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x60ff, 0x0, 0x0, 0x0) 22:09:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 33) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:09:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 32) [ 1823.381540] FAULT_INJECTION: forcing a failure. [ 1823.381540] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.384062] CPU: 1 PID: 9336 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1823.385493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.387239] Call Trace: [ 1823.387796] dump_stack+0x107/0x167 [ 1823.388552] should_fail.cold+0x5/0xa [ 1823.389355] ? create_object.isra.0+0x3a/0xa30 [ 1823.390320] should_failslab+0x5/0x20 [ 1823.391118] kmem_cache_alloc+0x5b/0x310 [ 1823.391977] create_object.isra.0+0x3a/0xa30 [ 1823.392909] kmemleak_alloc_percpu+0xa0/0x100 [ 1823.393854] pcpu_alloc+0x4e2/0x1240 [ 1823.394680] ? io_async_queue_proc+0x80/0x80 [ 1823.395594] percpu_ref_init+0x31/0x3d0 [ 1823.396424] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1823.397557] io_uring_setup+0x14f6/0x2980 [ 1823.398453] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1823.399513] ? wait_for_completion_io+0x270/0x270 [ 1823.400562] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.401674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.402791] do_syscall_64+0x33/0x40 [ 1823.403578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.404665] RIP: 0033:0x7fc72ff08b19 [ 1823.405458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.406500] FAULT_INJECTION: forcing a failure. [ 1823.406500] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.409371] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1823.409393] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1823.409404] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1823.409415] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1823.409426] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1823.409437] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1823.421457] CPU: 0 PID: 9342 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1823.422953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.424728] Call Trace: [ 1823.425313] dump_stack+0x107/0x167 [ 1823.426118] should_fail.cold+0x5/0xa [ 1823.426976] ? io_wq_create+0xeb/0xc00 [ 1823.427832] should_failslab+0x5/0x20 [ 1823.428658] __kmalloc+0x72/0x390 [ 1823.429414] io_wq_create+0xeb/0xc00 [ 1823.430231] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1823.431342] ? io_import_iovec+0x1120/0x1120 [ 1823.432281] ? io_apoll_task_func+0x2d0/0x2d0 [ 1823.433232] ? __io_req_find_next+0x300/0x300 [ 1823.434180] ? do_raw_spin_lock+0x121/0x260 [ 1823.435105] ? rwlock_bug.part.0+0x90/0x90 [ 1823.436018] __io_uring_add_tctx_node+0x2c6/0x520 [ 1823.437043] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1823.438151] ? alloc_fd+0x2e7/0x670 [ 1823.438963] io_uring_setup+0x1fbb/0x2980 [ 1823.439888] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1823.440958] ? wait_for_completion_io+0x270/0x270 [ 1823.442059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.442990] FAULT_INJECTION: forcing a failure. [ 1823.442990] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.443222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.446713] do_syscall_64+0x33/0x40 [ 1823.447528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.448647] RIP: 0033:0x7f89589a3b19 [ 1823.449463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.453466] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1823.455135] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1823.456679] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1823.458241] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1823.459808] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1823.461365] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1823.462980] CPU: 1 PID: 9344 Comm: syz-executor.2 Not tainted 5.10.252 #1 22:09:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x21, 0x0, 0x0) [ 1823.464493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.466537] Call Trace: [ 1823.467118] dump_stack+0x107/0x167 [ 1823.467922] should_fail.cold+0x5/0xa [ 1823.468763] ? create_object.isra.0+0x3a/0xa30 [ 1823.469763] should_failslab+0x5/0x20 [ 1823.470660] kmem_cache_alloc+0x5b/0x310 [ 1823.471557] create_object.isra.0+0x3a/0xa30 [ 1823.472517] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.473634] kmem_cache_alloc_trace+0x151/0x320 [ 1823.474668] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1823.475779] ? io_import_iovec+0x1120/0x1120 [ 1823.476744] ? lock_downgrade+0x6d0/0x6d0 [ 1823.477649] ? do_raw_spin_lock+0x121/0x260 [ 1823.478600] ? rwlock_bug.part.0+0x90/0x90 [ 1823.479535] __io_uring_add_tctx_node+0x2c6/0x520 [ 1823.480597] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1823.481745] ? alloc_fd+0x2e7/0x670 [ 1823.482561] io_uring_setup+0x1fbb/0x2980 [ 1823.483476] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1823.484586] ? wait_for_completion_io+0x270/0x270 [ 1823.485662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.486816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.487953] do_syscall_64+0x33/0x40 [ 1823.488770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.489894] RIP: 0033:0x7f6ebd7dfb19 [ 1823.490715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.494776] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1823.496451] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1823.498021] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1823.499596] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1823.501162] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1823.502731] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 34) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:10:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x60ff, 0x0, 0x0) 22:10:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 33) 22:10:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x2000000000, 0x0, 0x0) 22:10:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 32) 22:10:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:10:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:10:14 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x800000, 0x0, 0x0, 0x0) [ 1839.201928] FAULT_INJECTION: forcing a failure. [ 1839.201928] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.204836] CPU: 0 PID: 9362 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1839.206599] FAULT_INJECTION: forcing a failure. [ 1839.206599] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.209399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.211539] Call Trace: [ 1839.212229] dump_stack+0x107/0x167 [ 1839.213182] should_fail.cold+0x5/0xa [ 1839.214170] ? create_object.isra.0+0x3a/0xa30 [ 1839.215372] should_failslab+0x5/0x20 [ 1839.216367] kmem_cache_alloc+0x5b/0x310 [ 1839.217437] create_object.isra.0+0x3a/0xa30 [ 1839.218575] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1839.219900] kmem_cache_alloc_trace+0x151/0x320 [ 1839.221126] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1839.222438] ? io_import_iovec+0x1120/0x1120 [ 1839.223587] ? lock_downgrade+0x6d0/0x6d0 [ 1839.224653] ? do_raw_spin_lock+0x121/0x260 [ 1839.225770] ? rwlock_bug.part.0+0x90/0x90 [ 1839.226889] __io_uring_add_tctx_node+0x2c6/0x520 [ 1839.228133] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1839.229480] ? alloc_fd+0x2e7/0x670 [ 1839.230450] io_uring_setup+0x1fbb/0x2980 [ 1839.231513] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1839.232592] ? wait_for_completion_io+0x270/0x270 [ 1839.233668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.234803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.235918] do_syscall_64+0x33/0x40 [ 1839.236715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1839.237815] RIP: 0033:0x7ff6be2aab19 [ 1839.238617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.242537] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1839.244158] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1839.245655] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1839.247168] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1839.248688] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1839.250201] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1839.251770] CPU: 1 PID: 9365 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1839.253241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.255001] Call Trace: [ 1839.255558] dump_stack+0x107/0x167 [ 1839.256329] should_fail.cold+0x5/0xa [ 1839.257134] ? io_wq_create+0xeb/0xc00 [ 1839.257963] should_failslab+0x5/0x20 [ 1839.258772] __kmalloc+0x72/0x390 [ 1839.259518] io_wq_create+0xeb/0xc00 [ 1839.260313] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1839.261400] ? io_import_iovec+0x1120/0x1120 [ 1839.262330] ? io_apoll_task_func+0x2d0/0x2d0 [ 1839.263294] ? __io_req_find_next+0x300/0x300 [ 1839.264246] ? do_raw_spin_lock+0x121/0x260 [ 1839.265166] ? rwlock_bug.part.0+0x90/0x90 [ 1839.266059] __io_uring_add_tctx_node+0x2c6/0x520 [ 1839.267090] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1839.268200] ? alloc_fd+0x2e7/0x670 [ 1839.268977] io_uring_setup+0x1fbb/0x2980 [ 1839.269869] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1839.270948] ? wait_for_completion_io+0x270/0x270 [ 1839.271986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.273093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.274196] do_syscall_64+0x33/0x40 [ 1839.274984] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1839.276052] RIP: 0033:0x7f6ebd7dfb19 [ 1839.276839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.280709] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1839.282303] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1839.283801] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1839.285300] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1839.286819] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1839.288326] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1839.291406] FAULT_INJECTION: forcing a failure. [ 1839.291406] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.293775] CPU: 1 PID: 9370 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1839.295216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.296958] Call Trace: [ 1839.297511] dump_stack+0x107/0x167 [ 1839.298281] should_fail.cold+0x5/0xa [ 1839.299099] ? create_object.isra.0+0x3a/0xa30 [ 1839.300053] should_failslab+0x5/0x20 [ 1839.300851] kmem_cache_alloc+0x5b/0x310 [ 1839.301710] create_object.isra.0+0x3a/0xa30 [ 1839.302647] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1839.303719] __kmalloc+0x16e/0x390 22:10:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 1839.304479] io_wq_create+0xeb/0xc00 [ 1839.305517] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1839.306604] ? io_import_iovec+0x1120/0x1120 [ 1839.307531] ? io_apoll_task_func+0x2d0/0x2d0 [ 1839.308475] ? __io_req_find_next+0x300/0x300 [ 1839.309423] ? do_raw_spin_lock+0x121/0x260 [ 1839.310327] ? rwlock_bug.part.0+0x90/0x90 [ 1839.311242] __io_uring_add_tctx_node+0x2c6/0x520 [ 1839.312256] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1839.313354] ? alloc_fd+0x2e7/0x670 [ 1839.314135] io_uring_setup+0x1fbb/0x2980 [ 1839.315024] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1839.316084] ? wait_for_completion_io+0x270/0x270 [ 1839.317115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.318215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.319324] do_syscall_64+0x33/0x40 [ 1839.320108] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1839.321183] RIP: 0033:0x7f89589a3b19 [ 1839.321967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.325836] RSP: 002b:00007f8955ef8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1839.327441] RAX: ffffffffffffffda RBX: 00007f8958ab7020 RCX: 00007f89589a3b19 [ 1839.328935] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1839.330441] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1839.331951] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1839.333443] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1839.342439] FAULT_INJECTION: forcing a failure. [ 1839.342439] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.344960] CPU: 0 PID: 9372 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1839.346395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.348155] Call Trace: [ 1839.348714] dump_stack+0x107/0x167 [ 1839.349484] should_fail.cold+0x5/0xa [ 1839.350294] ? percpu_ref_init+0xd8/0x3d0 [ 1839.351182] should_failslab+0x5/0x20 [ 1839.351992] kmem_cache_alloc_trace+0x55/0x320 [ 1839.352959] ? io_async_queue_proc+0x80/0x80 [ 1839.353888] percpu_ref_init+0xd8/0x3d0 [ 1839.354748] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1839.355901] io_uring_setup+0x14f6/0x2980 [ 1839.356786] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1839.357862] ? wait_for_completion_io+0x270/0x270 [ 1839.358910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.360019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.361112] do_syscall_64+0x33/0x40 [ 1839.361898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1839.362985] RIP: 0033:0x7fc72ff08b19 [ 1839.363774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.367662] RSP: 002b:00007fc72d45d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1839.369272] RAX: ffffffffffffffda RBX: 00007fc73001c020 RCX: 00007fc72ff08b19 [ 1839.370784] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1839.372288] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1839.373797] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1839.375316] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xf0ff1f, 0x0, 0x0) 22:10:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 33) 22:10:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) 22:10:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 34) 22:10:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x1ffff000, 0x0, 0x0) [ 1839.505328] FAULT_INJECTION: forcing a failure. [ 1839.505328] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.507821] CPU: 0 PID: 9382 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1839.509281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.511031] Call Trace: [ 1839.511600] dump_stack+0x107/0x167 [ 1839.512378] should_fail.cold+0x5/0xa [ 1839.513190] ? io_wq_create+0xeb/0xc00 [ 1839.514022] should_failslab+0x5/0x20 [ 1839.514839] __kmalloc+0x72/0x390 [ 1839.515589] io_wq_create+0xeb/0xc00 [ 1839.516400] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1839.517491] ? io_import_iovec+0x1120/0x1120 [ 1839.518421] ? io_apoll_task_func+0x2d0/0x2d0 [ 1839.519380] ? __io_req_find_next+0x300/0x300 [ 1839.520323] ? do_raw_spin_lock+0x121/0x260 [ 1839.521235] ? rwlock_bug.part.0+0x90/0x90 [ 1839.522151] __io_uring_add_tctx_node+0x2c6/0x520 [ 1839.523178] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1839.524282] ? alloc_fd+0x2e7/0x670 [ 1839.525081] io_uring_setup+0x1fbb/0x2980 [ 1839.525974] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1839.527046] ? wait_for_completion_io+0x270/0x270 [ 1839.528116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.529224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.530336] do_syscall_64+0x33/0x40 [ 1839.531137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1839.532231] RIP: 0033:0x7ff6be2aab19 [ 1839.533021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.536909] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1839.538514] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1839.540021] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1839.541546] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1839.543085] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1839.544586] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1839.548023] FAULT_INJECTION: forcing a failure. [ 1839.548023] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.550497] CPU: 1 PID: 9386 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1839.551958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.553696] Call Trace: [ 1839.554252] dump_stack+0x107/0x167 [ 1839.555027] should_fail.cold+0x5/0xa [ 1839.555825] ? create_object.isra.0+0x3a/0xa30 [ 1839.556773] should_failslab+0x5/0x20 [ 1839.557570] kmem_cache_alloc+0x5b/0x310 [ 1839.558428] create_object.isra.0+0x3a/0xa30 [ 1839.559358] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1839.560427] __kmalloc+0x16e/0x390 [ 1839.561182] io_wq_create+0xeb/0xc00 [ 1839.561967] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1839.563043] ? io_import_iovec+0x1120/0x1120 [ 1839.563966] ? io_apoll_task_func+0x2d0/0x2d0 [ 1839.564910] ? __io_req_find_next+0x300/0x300 [ 1839.565847] ? do_raw_spin_lock+0x121/0x260 [ 1839.566753] ? rwlock_bug.part.0+0x90/0x90 [ 1839.567647] __io_uring_add_tctx_node+0x2c6/0x520 [ 1839.568661] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1839.569763] ? alloc_fd+0x2e7/0x670 [ 1839.570552] io_uring_setup+0x1fbb/0x2980 [ 1839.571427] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1839.572488] ? wait_for_completion_io+0x270/0x270 [ 1839.573523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.574644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.575732] do_syscall_64+0x33/0x40 [ 1839.576521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1839.577594] RIP: 0033:0x7f6ebd7dfb19 [ 1839.578381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.582248] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1839.583850] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1839.585348] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1839.587056] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1839.588663] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1839.590171] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 19) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:10:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 35) 22:10:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 34) 22:10:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 35) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:10:29 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0xb0ff20, 0x0, 0x0, 0x0) 22:10:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x60ffffffffff, 0x0, 0x0) 22:10:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x20000000, 0x0, 0x0) 22:10:29 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x800000, 0x0, 0x0, 0x0) [ 1854.259961] FAULT_INJECTION: forcing a failure. [ 1854.259961] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.262412] CPU: 1 PID: 9404 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1854.263831] FAULT_INJECTION: forcing a failure. [ 1854.263831] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.263874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1854.263889] Call Trace: [ 1854.268616] dump_stack+0x107/0x167 [ 1854.269395] should_fail.cold+0x5/0xa [ 1854.270207] ? create_object.isra.0+0x3a/0xa30 [ 1854.271180] should_failslab+0x5/0x20 [ 1854.271989] kmem_cache_alloc+0x5b/0x310 [ 1854.272848] create_object.isra.0+0x3a/0xa30 [ 1854.273769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1854.274854] kmem_cache_alloc_trace+0x151/0x320 [ 1854.275843] ? io_async_queue_proc+0x80/0x80 [ 1854.276777] percpu_ref_init+0xd8/0x3d0 [ 1854.277629] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1854.278779] io_uring_setup+0x14f6/0x2980 [ 1854.279675] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1854.280736] ? wait_for_completion_io+0x270/0x270 [ 1854.281777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1854.282886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1854.283986] do_syscall_64+0x33/0x40 [ 1854.284783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1854.285858] RIP: 0033:0x7fc72ff08b19 [ 1854.286654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1854.290501] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1854.292126] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1854.293637] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1854.295143] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1854.296637] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1854.298129] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1854.299656] CPU: 0 PID: 9406 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1854.301155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1854.302958] Call Trace: [ 1854.303540] dump_stack+0x107/0x167 [ 1854.304342] should_fail.cold+0x5/0xa [ 1854.305178] ? io_wq_create+0x6ef/0xc00 [ 1854.306044] should_failslab+0x5/0x20 [ 1854.306878] kmem_cache_alloc_node_trace+0x59/0x340 [ 1854.307981] io_wq_create+0x6ef/0xc00 [ 1854.308826] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1854.309931] ? io_import_iovec+0x1120/0x1120 [ 1854.310881] ? io_apoll_task_func+0x2d0/0x2d0 [ 1854.311586] FAULT_INJECTION: forcing a failure. [ 1854.311586] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.311848] ? __io_req_find_next+0x300/0x300 [ 1854.311867] ? do_raw_spin_lock+0x121/0x260 [ 1854.311897] ? rwlock_bug.part.0+0x90/0x90 [ 1854.316993] __io_uring_add_tctx_node+0x2c6/0x520 [ 1854.318023] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1854.319154] ? alloc_fd+0x2e7/0x670 [ 1854.319960] io_uring_setup+0x1fbb/0x2980 [ 1854.320869] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1854.321948] ? wait_for_completion_io+0x270/0x270 [ 1854.323034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1854.324155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1854.325264] do_syscall_64+0x33/0x40 [ 1854.326056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1854.327164] RIP: 0033:0x7f6ebd7dfb19 [ 1854.327971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1854.331871] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1854.333477] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1854.334991] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1854.336496] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1854.338010] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1854.339533] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1854.341103] CPU: 1 PID: 9407 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1854.342550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1854.344314] Call Trace: [ 1854.344885] dump_stack+0x107/0x167 [ 1854.345658] should_fail.cold+0x5/0xa [ 1854.346466] ? io_wq_create+0x6ef/0xc00 [ 1854.347315] should_failslab+0x5/0x20 [ 1854.348119] kmem_cache_alloc_node_trace+0x59/0x340 [ 1854.349193] io_wq_create+0x6ef/0xc00 [ 1854.350009] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1854.351094] ? io_import_iovec+0x1120/0x1120 [ 1854.352035] ? io_apoll_task_func+0x2d0/0x2d0 [ 1854.352990] ? __io_req_find_next+0x300/0x300 [ 1854.353948] ? do_raw_spin_lock+0x121/0x260 [ 1854.354864] ? rwlock_bug.part.0+0x90/0x90 [ 1854.355236] FAULT_INJECTION: forcing a failure. [ 1854.355236] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.355760] __io_uring_add_tctx_node+0x2c6/0x520 [ 1854.355781] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1854.355799] ? alloc_fd+0x2e7/0x670 [ 1854.355831] io_uring_setup+0x1fbb/0x2980 [ 1854.362286] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1854.363348] ? wait_for_completion_io+0x270/0x270 [ 1854.364395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1854.365491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1854.366576] do_syscall_64+0x33/0x40 [ 1854.367373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1854.368457] RIP: 0033:0x7f89589a3b19 [ 1854.369252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1854.373149] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1854.374766] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1854.376253] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1854.377748] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1854.379272] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1854.380776] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1854.382324] CPU: 0 PID: 9412 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1854.384026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1854.386058] Call Trace: [ 1854.386724] dump_stack+0x107/0x167 [ 1854.387643] should_fail.cold+0x5/0xa [ 1854.388593] ? create_object.isra.0+0x3a/0xa30 [ 1854.389706] should_failslab+0x5/0x20 [ 1854.390617] kmem_cache_alloc+0x5b/0x310 [ 1854.391644] create_object.isra.0+0x3a/0xa30 [ 1854.392702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1854.393942] __kmalloc+0x16e/0x390 [ 1854.394833] io_wq_create+0xeb/0xc00 [ 1854.395754] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1854.396967] ? io_import_iovec+0x1120/0x1120 [ 1854.398030] ? io_apoll_task_func+0x2d0/0x2d0 [ 1854.399105] ? __io_req_find_next+0x300/0x300 [ 1854.400177] ? do_raw_spin_lock+0x121/0x260 [ 1854.401206] ? rwlock_bug.part.0+0x90/0x90 [ 1854.402232] __io_uring_add_tctx_node+0x2c6/0x520 [ 1854.403403] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1854.404664] ? alloc_fd+0x2e7/0x670 [ 1854.405585] io_uring_setup+0x1fbb/0x2980 [ 1854.406607] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1854.407836] ? wait_for_completion_io+0x270/0x270 [ 1854.409041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1854.410299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1854.411556] do_syscall_64+0x33/0x40 [ 1854.412461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1854.413684] RIP: 0033:0x7ff6be2aab19 [ 1854.414583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1854.418946] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1854.420745] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1854.422456] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1854.424154] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1854.425835] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1854.427515] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:29 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 22:10:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7f1631153000, 0x0, 0x0) 22:10:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x21000000, 0x0, 0x0) 22:10:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 36) 22:10:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1854.557711] FAULT_INJECTION: forcing a failure. [ 1854.557711] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.560508] CPU: 1 PID: 9423 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1854.561960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1854.563732] Call Trace: [ 1854.564296] dump_stack+0x107/0x167 [ 1854.565076] should_fail.cold+0x5/0xa [ 1854.565888] ? create_object.isra.0+0x3a/0xa30 [ 1854.566864] should_failslab+0x5/0x20 [ 1854.567672] kmem_cache_alloc+0x5b/0x310 [ 1854.568531] ? io_wq_create+0x114/0xc00 [ 1854.569384] create_object.isra.0+0x3a/0xa30 [ 1854.570321] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1854.571417] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1854.572519] io_wq_create+0x6ef/0xc00 [ 1854.573352] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1854.574430] ? io_import_iovec+0x1120/0x1120 [ 1854.575360] ? io_apoll_task_func+0x2d0/0x2d0 [ 1854.576328] ? __io_req_find_next+0x300/0x300 [ 1854.577284] ? do_raw_spin_lock+0x121/0x260 [ 1854.578194] ? rwlock_bug.part.0+0x90/0x90 [ 1854.579110] __io_uring_add_tctx_node+0x2c6/0x520 [ 1854.580138] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1854.581250] ? alloc_fd+0x2e7/0x670 [ 1854.582036] io_uring_setup+0x1fbb/0x2980 [ 1854.582944] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1854.584013] ? wait_for_completion_io+0x270/0x270 [ 1854.585072] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1854.586195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1854.587297] do_syscall_64+0x33/0x40 [ 1854.588092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1854.589184] RIP: 0033:0x7f6ebd7dfb19 [ 1854.589982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1854.593878] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1854.595503] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1854.597027] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1854.598536] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1854.600054] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1854.601568] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:29 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0xf0ff1f, 0x0, 0x0, 0x0) [ 1854.656328] FAULT_INJECTION: forcing a failure. [ 1854.656328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1854.658886] CPU: 1 PID: 9429 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1854.660349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1854.662103] Call Trace: [ 1854.662672] dump_stack+0x107/0x167 [ 1854.663449] should_fail.cold+0x5/0xa [ 1854.664260] _copy_to_user+0x2e/0x180 [ 1854.665072] io_uring_setup+0x11b5/0x2980 [ 1854.665939] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1854.667044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1854.668153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1854.669233] do_syscall_64+0x33/0x40 [ 1854.670013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1854.671111] RIP: 0033:0x7fc72ff08b19 [ 1854.671889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1854.675768] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1854.677365] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1854.678889] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1854.680386] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1854.681882] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1854.683392] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7f1631353000, 0x0, 0x0) 22:10:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xff600000, 0x0, 0x0) 22:10:43 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x1ffff000, 0x0, 0x0, 0x0) 22:10:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 35) 22:10:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 37) 22:10:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 36) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1868.359555] FAULT_INJECTION: forcing a failure. 22:10:43 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x60ff, 0x0, 0x0, 0x0) [ 1868.359555] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.362440] CPU: 0 PID: 9446 Comm: syz-executor.2 Not tainted 5.10.252 #1 22:10:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7f1632153000, 0x0, 0x0) [ 1868.364092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.366112] Call Trace: [ 1868.366750] dump_stack+0x107/0x167 [ 1868.367641] should_fail.cold+0x5/0xa [ 1868.368556] ? io_wq_create+0x6ef/0xc00 [ 1868.369509] should_failslab+0x5/0x20 [ 1868.370419] kmem_cache_alloc_node_trace+0x59/0x340 [ 1868.371636] io_wq_create+0x6ef/0xc00 [ 1868.372584] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1868.373808] ? io_import_iovec+0x1120/0x1120 [ 1868.374869] ? io_apoll_task_func+0x2d0/0x2d0 [ 1868.375946] ? __io_req_find_next+0x300/0x300 [ 1868.377020] ? do_raw_spin_lock+0x121/0x260 [ 1868.378053] ? rwlock_bug.part.0+0x90/0x90 [ 1868.379091] __io_uring_add_tctx_node+0x2c6/0x520 [ 1868.380243] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1868.381484] ? alloc_fd+0x2e7/0x670 [ 1868.382387] io_uring_setup+0x1fbb/0x2980 [ 1868.383406] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1868.384609] ? wait_for_completion_io+0x270/0x270 [ 1868.385814] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1868.387085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.388326] do_syscall_64+0x33/0x40 [ 1868.389218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1868.390440] RIP: 0033:0x7f6ebd7dfb19 [ 1868.391340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.395641] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1868.397425] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1868.399132] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1868.400810] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1868.402494] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1868.404184] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 21) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1868.426207] FAULT_INJECTION: forcing a failure. [ 1868.426207] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.427804] CPU: 1 PID: 9456 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1868.428707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.429371] FAULT_INJECTION: forcing a failure. [ 1868.429371] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.429823] Call Trace: [ 1868.429845] dump_stack+0x107/0x167 [ 1868.429860] should_fail.cold+0x5/0xa [ 1868.429875] ? __d_alloc+0x2a/0x990 [ 1868.429899] should_failslab+0x5/0x20 [ 1868.434800] kmem_cache_alloc+0x5b/0x310 [ 1868.435349] __d_alloc+0x2a/0x990 [ 1868.435806] ? find_held_lock+0x2c/0x110 [ 1868.436355] d_alloc_pseudo+0x19/0x70 [ 1868.436861] alloc_file_pseudo+0xce/0x250 [ 1868.437409] ? trace_hardirqs_on+0x5b/0x180 [ 1868.438000] ? alloc_file+0x5a0/0x5a0 [ 1868.438517] anon_inode_getfile+0xc8/0x1f0 [ 1868.439102] io_uring_setup+0x138b/0x2980 [ 1868.439648] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1868.440314] ? wait_for_completion_io+0x270/0x270 [ 1868.440983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1868.441689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.442395] do_syscall_64+0x33/0x40 [ 1868.442893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1868.443577] RIP: 0033:0x7fc72ff08b19 [ 1868.444062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.446524] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1868.447541] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1868.448491] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1868.449443] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1868.450395] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1868.451354] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1868.452343] CPU: 0 PID: 9445 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1868.453938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.455873] Call Trace: [ 1868.456496] dump_stack+0x107/0x167 [ 1868.457347] should_fail.cold+0x5/0xa [ 1868.458235] ? io_wq_create+0x6ef/0xc00 [ 1868.459170] should_failslab+0x5/0x20 [ 1868.460058] kmem_cache_alloc_node_trace+0x59/0x340 [ 1868.461229] io_wq_create+0x6ef/0xc00 [ 1868.462132] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1868.463318] ? io_import_iovec+0x1120/0x1120 [ 1868.464340] ? io_apoll_task_func+0x2d0/0x2d0 [ 1868.465370] ? __io_req_find_next+0x300/0x300 [ 1868.466400] ? do_raw_spin_lock+0x121/0x260 [ 1868.467407] ? rwlock_bug.part.0+0x90/0x90 [ 1868.468399] __io_uring_add_tctx_node+0x2c6/0x520 [ 1868.469516] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1868.470726] ? alloc_fd+0x2e7/0x670 [ 1868.471602] io_uring_setup+0x1fbb/0x2980 [ 1868.472573] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1868.473732] ? wait_for_completion_io+0x270/0x270 [ 1868.474892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1868.476099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.477288] do_syscall_64+0x33/0x40 [ 1868.478156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1868.479340] RIP: 0033:0x7ff6be2aab19 [ 1868.480195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.484387] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1868.486131] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1868.487763] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1868.489392] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1868.491027] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1868.492653] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1868.496224] FAULT_INJECTION: forcing a failure. 22:10:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xffffffff, 0x0, 0x0) [ 1868.496224] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.499413] CPU: 0 PID: 9457 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1868.500980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.502875] Call Trace: [ 1868.503483] dump_stack+0x107/0x167 [ 1868.504322] should_fail.cold+0x5/0xa [ 1868.505202] ? io_wq_create+0x6ef/0xc00 [ 1868.506118] should_failslab+0x5/0x20 [ 1868.507011] kmem_cache_alloc_node_trace+0x59/0x340 [ 1868.508165] io_wq_create+0x6ef/0xc00 [ 1868.509057] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1868.510214] ? io_import_iovec+0x1120/0x1120 [ 1868.511236] ? io_apoll_task_func+0x2d0/0x2d0 [ 1868.512254] ? __io_req_find_next+0x300/0x300 22:10:43 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1868.513271] ? do_raw_spin_lock+0x121/0x260 [ 1868.514382] ? rwlock_bug.part.0+0x90/0x90 [ 1868.515378] __io_uring_add_tctx_node+0x2c6/0x520 [ 1868.516477] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1868.517656] ? alloc_fd+0x2e7/0x670 [ 1868.518506] io_uring_setup+0x1fbb/0x2980 [ 1868.519471] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1868.520613] ? wait_for_completion_io+0x270/0x270 [ 1868.521750] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1868.522942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.524117] do_syscall_64+0x33/0x40 [ 1868.524962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1868.526117] RIP: 0033:0x7f89589a3b19 [ 1868.526967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.531100] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1868.532824] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1868.534429] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1868.536042] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1868.537654] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1868.539257] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:43 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20001000", @ANYRES16=r0, @ANYBLOB="20002bbd7000fcdbdf25520000000c009900ffffffff18000000"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40008000) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) 22:10:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7f1632353000, 0x0, 0x0) 22:10:43 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 22:10:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 37) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:10:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 22) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:10:43 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) getsockopt$packet_int(r0, 0x107, 0x1b, 0x0, 0x0) 22:10:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000001080)) (fail_nth: 1) [ 1868.720841] FAULT_INJECTION: forcing a failure. [ 1868.720841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1868.723370] CPU: 0 PID: 9485 Comm: syz-executor.1 Not tainted 5.10.252 #1 [ 1868.724841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.726624] Call Trace: [ 1868.727210] dump_stack+0x107/0x167 [ 1868.728010] should_fail.cold+0x5/0xa [ 1868.728847] _copy_to_user+0x2e/0x180 [ 1868.729682] simple_read_from_buffer+0xcc/0x160 [ 1868.730705] proc_fail_nth_read+0x198/0x230 [ 1868.731654] ? proc_sessionid_read+0x230/0x230 [ 1868.732647] ? security_file_permission+0xb1/0xe0 [ 1868.733703] ? proc_sessionid_read+0x230/0x230 [ 1868.734691] vfs_read+0x228/0x620 [ 1868.735459] ksys_read+0x12d/0x260 [ 1868.736238] ? vfs_write+0xb10/0xb10 [ 1868.737061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1868.738210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.739359] do_syscall_64+0x33/0x40 [ 1868.740178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1868.741303] RIP: 0033:0x7fb25d54269c [ 1868.742113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1868.746194] RSP: 002b:00007fb25ab05170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1868.747890] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb25d54269c [ 1868.749467] RDX: 000000000000000f RSI: 00007fb25ab051e0 RDI: 0000000000000004 [ 1868.751052] RBP: 00007fb25ab051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1868.752648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.754211] R13: 00007fffa659423f R14: 00007fb25ab05300 R15: 0000000000022000 [ 1868.754943] FAULT_INJECTION: forcing a failure. [ 1868.754943] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.757234] CPU: 1 PID: 9480 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1868.758025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.758995] Call Trace: [ 1868.759307] dump_stack+0x107/0x167 [ 1868.759732] should_fail.cold+0x5/0xa [ 1868.760186] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1868.760766] should_failslab+0x5/0x20 [ 1868.761206] kmem_cache_alloc_trace+0x55/0x320 [ 1868.761739] __io_uring_add_tctx_node+0x15c/0x520 [ 1868.762296] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1868.762913] ? alloc_fd+0x2e7/0x670 [ 1868.763338] io_uring_setup+0x1fbb/0x2980 [ 1868.763823] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1868.764411] ? wait_for_completion_io+0x270/0x270 [ 1868.764989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1868.765600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.766222] FAULT_INJECTION: forcing a failure. [ 1868.766222] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.766232] do_syscall_64+0x33/0x40 [ 1868.766252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1868.769699] RIP: 0033:0x7f89589a3b19 [ 1868.770130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.772267] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1868.773145] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1868.773969] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1868.774802] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1868.775630] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1868.776456] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1868.777306] CPU: 0 PID: 9486 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1868.778778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1868.780563] Call Trace: [ 1868.781131] dump_stack+0x107/0x167 [ 1868.781919] should_fail.cold+0x5/0xa [ 1868.782739] ? create_object.isra.0+0x3a/0xa30 [ 1868.783739] should_failslab+0x5/0x20 [ 1868.784559] kmem_cache_alloc+0x5b/0x310 [ 1868.785445] create_object.isra.0+0x3a/0xa30 [ 1868.786386] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1868.787489] kmem_cache_alloc+0x159/0x310 [ 1868.788392] __d_alloc+0x2a/0x990 [ 1868.789142] ? find_held_lock+0x2c/0x110 [ 1868.790024] d_alloc_pseudo+0x19/0x70 [ 1868.790847] alloc_file_pseudo+0xce/0x250 [ 1868.791737] ? trace_hardirqs_on+0x5b/0x180 [ 1868.792659] ? alloc_file+0x5a0/0x5a0 [ 1868.793507] anon_inode_getfile+0xc8/0x1f0 [ 1868.794424] io_uring_setup+0x138b/0x2980 [ 1868.795342] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1868.796423] ? wait_for_completion_io+0x270/0x270 [ 1868.797497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1868.798611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.799722] do_syscall_64+0x33/0x40 [ 1868.800517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1868.801605] RIP: 0033:0x7fc72ff08b19 [ 1868.802401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1868.806298] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1868.807931] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1868.809442] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1868.810963] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1868.812482] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1868.813994] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7ffffffff000, 0x0, 0x0) 22:10:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000001080)) 22:10:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 23) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:10:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 38) 22:10:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 36) 22:10:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 38) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:10:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = fsmount(0xffffffffffffffff, 0x1, 0x44) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff010000", @ANYRES16=r5, @ANYBLOB="00002dbd7000fcdbdf250700000005002e000100000005002a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000001c0)={0x0, r3}) getsockname$packet(r3, &(0x7f0000000040), &(0x7f0000000080)=0xfffffede) 22:10:57 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x20ffb000, 0x0, 0x0, 0x0) [ 1882.537364] FAULT_INJECTION: forcing a failure. [ 1882.537364] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.539285] FAULT_INJECTION: forcing a failure. [ 1882.539285] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.540194] CPU: 0 PID: 9511 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1882.542782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1882.544709] Call Trace: [ 1882.545339] dump_stack+0x107/0x167 [ 1882.546198] should_fail.cold+0x5/0xa [ 1882.547127] ? create_object.isra.0+0x3a/0xa30 [ 1882.548189] should_failslab+0x5/0x20 [ 1882.549208] kmem_cache_alloc+0x5b/0x310 [ 1882.550155] create_object.isra.0+0x3a/0xa30 [ 1882.551175] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1882.552341] kmem_cache_alloc_trace+0x151/0x320 [ 1882.553439] __io_uring_add_tctx_node+0x15c/0x520 [ 1882.554553] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1882.555771] ? alloc_fd+0x2e7/0x670 [ 1882.556650] io_uring_setup+0x1fbb/0x2980 [ 1882.557633] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1882.558790] ? wait_for_completion_io+0x270/0x270 [ 1882.559977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1882.561199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1882.562394] do_syscall_64+0x33/0x40 [ 1882.563441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1882.564680] RIP: 0033:0x7f6ebd7dfb19 [ 1882.565543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.569930] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1882.572014] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1882.573790] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1882.575447] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1882.577107] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1882.578750] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1882.580458] CPU: 1 PID: 9514 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1882.581243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1882.582190] Call Trace: [ 1882.582495] dump_stack+0x107/0x167 [ 1882.582911] should_fail.cold+0x5/0xa [ 1882.583353] ? create_object.isra.0+0x3a/0xa30 [ 1882.583872] should_failslab+0x5/0x20 [ 1882.584313] kmem_cache_alloc+0x5b/0x310 [ 1882.584777] create_object.isra.0+0x3a/0xa30 [ 1882.585284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1882.585865] kmem_cache_alloc_trace+0x151/0x320 [ 1882.586382] __io_uring_add_tctx_node+0x15c/0x520 [ 1882.586940] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1882.587543] ? alloc_fd+0x2e7/0x670 [ 1882.587964] io_uring_setup+0x1fbb/0x2980 [ 1882.588446] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1882.589026] ? wait_for_completion_io+0x270/0x270 [ 1882.589592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1882.590198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1882.590782] do_syscall_64+0x33/0x40 [ 1882.591217] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1882.591800] RIP: 0033:0x7f89589a3b19 [ 1882.592225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.594317] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1882.595223] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1882.596167] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1882.596976] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1882.597784] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1882.598591] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1882.604770] FAULT_INJECTION: forcing a failure. [ 1882.604770] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.605790] FAULT_INJECTION: forcing a failure. [ 1882.605790] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.607775] CPU: 0 PID: 9503 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1882.610320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1882.612242] Call Trace: [ 1882.612877] dump_stack+0x107/0x167 [ 1882.613745] should_fail.cold+0x5/0xa [ 1882.614646] ? __alloc_file+0x21/0x320 [ 1882.615575] should_failslab+0x5/0x20 [ 1882.616465] kmem_cache_alloc+0x5b/0x310 [ 1882.617435] __alloc_file+0x21/0x320 [ 1882.618312] alloc_empty_file+0x6d/0x170 [ 1882.619280] alloc_file+0x5e/0x5a0 [ 1882.620117] alloc_file_pseudo+0x16a/0x250 [ 1882.621104] ? alloc_file+0x5a0/0x5a0 [ 1882.622032] anon_inode_getfile+0xc8/0x1f0 [ 1882.623045] io_uring_setup+0x138b/0x2980 [ 1882.624038] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1882.625211] ? wait_for_completion_io+0x270/0x270 [ 1882.626381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1882.627614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1882.628892] do_syscall_64+0x33/0x40 [ 1882.629747] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1882.630909] RIP: 0033:0x7fc72ff08b19 [ 1882.631781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.635994] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1882.637763] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1882.639400] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1882.641163] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1882.642882] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1882.644531] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1882.646271] CPU: 1 PID: 9513 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1882.647035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1882.647981] Call Trace: [ 1882.648281] dump_stack+0x107/0x167 [ 1882.648695] should_fail.cold+0x5/0xa [ 1882.649122] ? create_object.isra.0+0x3a/0xa30 [ 1882.649647] should_failslab+0x5/0x20 [ 1882.650080] kmem_cache_alloc+0x5b/0x310 [ 1882.650522] ? io_wq_create+0x114/0xc00 [ 1882.650982] create_object.isra.0+0x3a/0xa30 [ 1882.651483] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1882.652065] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1882.652644] io_wq_create+0x6ef/0xc00 [ 1882.653081] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1882.653663] ? io_import_iovec+0x1120/0x1120 [ 1882.654165] ? io_apoll_task_func+0x2d0/0x2d0 [ 1882.654670] ? __io_req_find_next+0x300/0x300 [ 1882.655188] ? do_raw_spin_lock+0x121/0x260 [ 1882.655688] ? rwlock_bug.part.0+0x90/0x90 [ 1882.656172] __io_uring_add_tctx_node+0x2c6/0x520 [ 1882.656697] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1882.657270] ? alloc_fd+0x2e7/0x670 [ 1882.657676] io_uring_setup+0x1fbb/0x2980 [ 1882.658127] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1882.658670] ? wait_for_completion_io+0x270/0x270 [ 1882.659211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1882.659809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1882.660405] do_syscall_64+0x33/0x40 [ 1882.660829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1882.661411] RIP: 0033:0x7ff6be2aab19 [ 1882.661838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.663947] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1882.664815] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1882.665635] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1882.666454] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1882.667286] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1882.668096] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:10:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000001080)) 22:10:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x81000000}}, './file0\x00'}) getsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) 22:10:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_batadv\x00', {0x1}}) 22:10:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x301531167f0000, 0x0, 0x0) 22:11:11 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0xff600000, 0x0, 0x0, 0x0) 22:11:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) 22:11:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x301532167f0000, 0x0, 0x0) 22:11:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 39) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:11:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 39) 22:11:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 37) 22:11:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 24) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:11:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x6, 0x0, &(0x7f0000001080)) [ 1896.304944] FAULT_INJECTION: forcing a failure. [ 1896.304944] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.307590] CPU: 0 PID: 9553 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1896.309033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.310786] Call Trace: [ 1896.311379] dump_stack+0x107/0x167 [ 1896.311929] FAULT_INJECTION: forcing a failure. [ 1896.311929] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.312155] should_fail.cold+0x5/0xa [ 1896.315293] ? xas_alloc+0x336/0x440 [ 1896.316085] should_failslab+0x5/0x20 [ 1896.316890] kmem_cache_alloc+0x5b/0x310 [ 1896.317773] xas_alloc+0x336/0x440 [ 1896.318537] xas_create+0x34a/0x10d0 [ 1896.319361] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1896.320475] xas_store+0x8c/0x1c40 [ 1896.321259] __xa_store+0x164/0x2d0 [ 1896.322038] ? xa_delete_node+0x280/0x280 [ 1896.322940] ? trace_hardirqs_on+0x5b/0x180 [ 1896.323893] xa_store+0x31/0x50 [ 1896.324600] __io_uring_add_tctx_node+0x1cf/0x520 [ 1896.325620] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1896.326723] ? alloc_fd+0x2e7/0x670 [ 1896.327535] io_uring_setup+0x1fbb/0x2980 [ 1896.328432] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1896.329499] ? wait_for_completion_io+0x270/0x270 [ 1896.330558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.331674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.332772] do_syscall_64+0x33/0x40 [ 1896.333559] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.334635] RIP: 0033:0x7f6ebd7dfb19 [ 1896.335441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.339318] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1896.340919] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1896.342417] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1896.343922] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1896.345418] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1896.346921] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1896.348488] CPU: 1 PID: 9549 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1896.349931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.351682] Call Trace: [ 1896.352238] dump_stack+0x107/0x167 [ 1896.353002] should_fail.cold+0x5/0xa [ 1896.353805] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1896.354853] should_failslab+0x5/0x20 [ 1896.355659] kmem_cache_alloc_trace+0x55/0x320 [ 1896.356627] __io_uring_add_tctx_node+0x15c/0x520 [ 1896.357636] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1896.358730] ? alloc_fd+0x2e7/0x670 [ 1896.359463] FAULT_INJECTION: forcing a failure. [ 1896.359463] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.361783] io_uring_setup+0x1fbb/0x2980 [ 1896.362659] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1896.363731] ? wait_for_completion_io+0x270/0x270 [ 1896.364762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.365859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.366939] do_syscall_64+0x33/0x40 [ 1896.367731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.368799] RIP: 0033:0x7ff6be2aab19 [ 1896.369576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.373430] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1896.375020] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1896.376516] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1896.378007] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1896.379508] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1896.380998] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1896.382512] CPU: 0 PID: 9556 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1896.383979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.385724] Call Trace: [ 1896.386278] dump_stack+0x107/0x167 [ 1896.387042] should_fail.cold+0x5/0xa [ 1896.387301] FAULT_INJECTION: forcing a failure. [ 1896.387301] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.387854] ? create_object.isra.0+0x3a/0xa30 [ 1896.387873] should_failslab+0x5/0x20 [ 1896.387891] kmem_cache_alloc+0x5b/0x310 [ 1896.387917] create_object.isra.0+0x3a/0xa30 [ 1896.393669] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1896.394744] kmem_cache_alloc+0x159/0x310 [ 1896.395625] __alloc_file+0x21/0x320 [ 1896.396411] alloc_empty_file+0x6d/0x170 [ 1896.397267] alloc_file+0x5e/0x5a0 [ 1896.398025] alloc_file_pseudo+0x16a/0x250 [ 1896.398915] ? alloc_file+0x5a0/0x5a0 [ 1896.399747] anon_inode_getfile+0xc8/0x1f0 [ 1896.400638] io_uring_setup+0x138b/0x2980 [ 1896.401517] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1896.402599] ? wait_for_completion_io+0x270/0x270 [ 1896.403642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.404739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.405828] do_syscall_64+0x33/0x40 [ 1896.406614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.407693] RIP: 0033:0x7fc72ff08b19 [ 1896.408472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.412334] RSP: 002b:00007fc72d45d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1896.413936] RAX: ffffffffffffffda RBX: 00007fc73001c020 RCX: 00007fc72ff08b19 [ 1896.415441] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1896.416934] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1896.418433] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1896.419932] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1896.421450] CPU: 1 PID: 9548 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1896.422890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.424637] Call Trace: [ 1896.425192] dump_stack+0x107/0x167 [ 1896.425963] should_fail.cold+0x5/0xa [ 1896.426768] ? xas_alloc+0x336/0x440 [ 1896.427559] should_failslab+0x5/0x20 [ 1896.428361] kmem_cache_alloc+0x5b/0x310 [ 1896.429217] ? stack_trace_consume_entry+0x160/0x160 [ 1896.430283] xas_alloc+0x336/0x440 [ 1896.431033] xas_create+0x34a/0x10d0 [ 1896.431847] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1896.432955] xas_store+0x8c/0x1c40 [ 1896.433725] __xa_store+0x164/0x2d0 [ 1896.434492] ? xa_delete_node+0x280/0x280 [ 1896.435385] ? trace_hardirqs_on+0x5b/0x180 [ 1896.436297] xa_store+0x31/0x50 [ 1896.436992] __io_uring_add_tctx_node+0x1cf/0x520 [ 1896.438006] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1896.439108] ? alloc_fd+0x2e7/0x670 [ 1896.439894] io_uring_setup+0x1fbb/0x2980 [ 1896.440774] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1896.441833] ? wait_for_completion_io+0x270/0x270 [ 1896.442869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.443990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.445079] do_syscall_64+0x33/0x40 [ 1896.445859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.446934] RIP: 0033:0x7f89589a3b19 [ 1896.447726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.451587] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1896.453182] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1896.454673] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1896.456172] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1896.457673] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1896.459173] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:11:11 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r1) keyctl$search(0xa, r1, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x2}, r0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) 22:11:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000001080)) 22:11:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x303531167f0000, 0x0, 0x0) 22:11:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 38) 22:11:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x208400, 0xb6) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) fallocate(r2, 0x9, 0x4, 0x2) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x101, 0xcad, 0x9}, 0x10) 22:11:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000001080)) 22:11:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:11:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 40) 22:11:11 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) [ 1896.692171] FAULT_INJECTION: forcing a failure. [ 1896.692171] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.694767] CPU: 0 PID: 9569 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1896.696236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.697990] Call Trace: [ 1896.698558] dump_stack+0x107/0x167 [ 1896.699352] should_fail.cold+0x5/0xa [ 1896.700174] ? create_object.isra.0+0x3a/0xa30 [ 1896.701155] should_failslab+0x5/0x20 [ 1896.701968] kmem_cache_alloc+0x5b/0x310 [ 1896.702850] create_object.isra.0+0x3a/0xa30 [ 1896.703791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1896.704885] kmem_cache_alloc_trace+0x151/0x320 [ 1896.705887] __io_uring_add_tctx_node+0x15c/0x520 [ 1896.706923] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1896.708043] ? alloc_fd+0x2e7/0x670 [ 1896.708842] io_uring_setup+0x1fbb/0x2980 [ 1896.709742] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1896.710820] ? wait_for_completion_io+0x270/0x270 [ 1896.711904] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.713020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.714131] do_syscall_64+0x33/0x40 [ 1896.714929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.716032] RIP: 0033:0x7ff6be2aab19 [ 1896.716823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.720737] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1896.722353] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1896.723873] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1896.725378] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1896.726936] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1896.728458] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1896.735581] FAULT_INJECTION: forcing a failure. [ 1896.735581] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.738029] CPU: 0 PID: 9573 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1896.739481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.741235] Call Trace: [ 1896.741801] dump_stack+0x107/0x167 [ 1896.742578] should_fail.cold+0x5/0xa [ 1896.743401] ? create_object.isra.0+0x3a/0xa30 [ 1896.744372] should_failslab+0x5/0x20 [ 1896.745180] kmem_cache_alloc+0x5b/0x310 [ 1896.746053] create_object.isra.0+0x3a/0xa30 [ 1896.746989] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1896.748100] kmem_cache_alloc+0x159/0x310 [ 1896.748997] xas_alloc+0x336/0x440 [ 1896.749764] xas_create+0x34a/0x10d0 22:11:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 25) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1896.750756] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1896.751916] xas_store+0x8c/0x1c40 [ 1896.752709] __xa_store+0x164/0x2d0 [ 1896.753495] ? xa_delete_node+0x280/0x280 [ 1896.754405] ? trace_hardirqs_on+0x5b/0x180 [ 1896.755348] xa_store+0x31/0x50 [ 1896.756061] __io_uring_add_tctx_node+0x1cf/0x520 [ 1896.757097] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1896.758205] ? alloc_fd+0x2e7/0x670 [ 1896.759011] io_uring_setup+0x1fbb/0x2980 [ 1896.759923] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1896.760995] ? wait_for_completion_io+0x270/0x270 [ 1896.762064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.763192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.764302] do_syscall_64+0x33/0x40 [ 1896.765101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.766193] RIP: 0033:0x7f6ebd7dfb19 [ 1896.766996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.770908] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1896.772543] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1896.774059] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1896.774327] FAULT_INJECTION: forcing a failure. [ 1896.774327] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.775584] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1896.775598] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1896.775611] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1896.782746] CPU: 1 PID: 9583 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1896.784191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.785928] Call Trace: [ 1896.786481] dump_stack+0x107/0x167 [ 1896.787249] should_fail.cold+0x5/0xa [ 1896.788046] ? create_object.isra.0+0x3a/0xa30 [ 1896.788998] should_failslab+0x5/0x20 [ 1896.789796] kmem_cache_alloc+0x5b/0x310 [ 1896.790650] create_object.isra.0+0x3a/0xa30 [ 1896.791565] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1896.792622] kmem_cache_alloc+0x159/0x310 [ 1896.793482] __alloc_file+0x21/0x320 [ 1896.794253] alloc_empty_file+0x6d/0x170 [ 1896.795216] alloc_file+0x5e/0x5a0 [ 1896.795959] alloc_file_pseudo+0x16a/0x250 [ 1896.796834] ? alloc_file+0x5a0/0x5a0 [ 1896.797639] anon_inode_getfile+0xc8/0x1f0 [ 1896.798528] io_uring_setup+0x138b/0x2980 [ 1896.799406] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1896.800467] ? wait_for_completion_io+0x270/0x270 [ 1896.801487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.802572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.803654] do_syscall_64+0x33/0x40 [ 1896.804424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.805488] RIP: 0033:0x7fc72ff08b19 [ 1896.806260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.810071] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1896.811660] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1896.813143] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1896.814628] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1896.816125] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1896.817628] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1896.821235] FAULT_INJECTION: forcing a failure. [ 1896.821235] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.823685] CPU: 1 PID: 9581 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1896.825118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.826849] Call Trace: [ 1896.827426] dump_stack+0x107/0x167 [ 1896.828197] should_fail.cold+0x5/0xa [ 1896.828996] ? create_object.isra.0+0x3a/0xa30 [ 1896.829960] should_failslab+0x5/0x20 [ 1896.830755] kmem_cache_alloc+0x5b/0x310 [ 1896.831626] create_object.isra.0+0x3a/0xa30 [ 1896.832551] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1896.833617] kmem_cache_alloc+0x159/0x310 [ 1896.834489] xas_alloc+0x336/0x440 [ 1896.835249] xas_create+0x34a/0x10d0 [ 1896.836043] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1896.837152] xas_store+0x8c/0x1c40 [ 1896.837920] __xa_store+0x164/0x2d0 [ 1896.838687] ? xa_delete_node+0x280/0x280 [ 1896.839570] ? trace_hardirqs_on+0x5b/0x180 [ 1896.840489] xa_store+0x31/0x50 [ 1896.841186] __io_uring_add_tctx_node+0x1cf/0x520 [ 1896.842205] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1896.843311] ? alloc_fd+0x2e7/0x670 [ 1896.844090] io_uring_setup+0x1fbb/0x2980 [ 1896.844969] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1896.846034] ? wait_for_completion_io+0x270/0x270 [ 1896.847075] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.848195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.849280] do_syscall_64+0x33/0x40 [ 1896.850070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.851126] RIP: 0033:0x7f89589a3b19 [ 1896.851901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.855735] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1896.857324] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1896.858803] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1896.860287] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1896.861780] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1896.863264] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:11:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000001080)) 22:11:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x303532167f0000, 0x0, 0x0) 22:11:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x3a4, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="6d18580f3eb471466738ce6798337085c227e6b477f39e5a83b5ec81489d4584513e4b7ac4dc8c99f54b6d45670bc83c22a23cc78a6fa3a7a4d14fddeb68e0490a8554b1cc02a699823352fab4267ca1429bdacf54de2fee6730f24b880c3f34", 0x60}], 0x0, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_within_size}, {@huge_always}], [{@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) openat(r3, &(0x7f00000002c0)='./file1\x00', 0x0, 0x45) sendfile(r1, r2, 0x0, 0x100000001) bind$packet(r1, &(0x7f0000000000)={0x11, 0xfe, 0x0, 0x1, 0x1, 0x6, @random="95bb4fd0d509"}, 0x14) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:11:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000001080)) [ 1896.940610] loop5: detected capacity change from 0 to 512 [ 1896.950341] tmpfs: Bad value for 'gid' 22:11:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 22:11:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 39) 22:11:12 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 22:11:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 41) 22:11:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 26) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1897.126245] FAULT_INJECTION: forcing a failure. [ 1897.126245] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.128966] CPU: 0 PID: 9606 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1897.130583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.132366] Call Trace: [ 1897.132942] dump_stack+0x107/0x167 [ 1897.133725] should_fail.cold+0x5/0xa [ 1897.134554] ? xas_alloc+0x336/0x440 [ 1897.135377] should_failslab+0x5/0x20 [ 1897.136199] kmem_cache_alloc+0x5b/0x310 [ 1897.137089] xas_alloc+0x336/0x440 [ 1897.137859] xas_create+0x34a/0x10d0 [ 1897.138686] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1897.139813] xas_store+0x8c/0x1c40 [ 1897.140611] __xa_store+0x164/0x2d0 [ 1897.141401] ? xa_delete_node+0x280/0x280 [ 1897.142305] ? trace_hardirqs_on+0x5b/0x180 [ 1897.143248] xa_store+0x31/0x50 [ 1897.143956] __io_uring_add_tctx_node+0x1cf/0x520 [ 1897.144976] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1897.146094] ? alloc_fd+0x2e7/0x670 [ 1897.146897] io_uring_setup+0x1fbb/0x2980 [ 1897.147801] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1897.148863] ? wait_for_completion_io+0x270/0x270 [ 1897.149940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1897.151045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.152149] do_syscall_64+0x33/0x40 [ 1897.152938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1897.154014] RIP: 0033:0x7f6ebd7dfb19 [ 1897.154807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.158736] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1897.160390] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1897.161928] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1897.163459] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1897.164990] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1897.166521] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1897.172509] FAULT_INJECTION: forcing a failure. [ 1897.172509] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.175041] CPU: 0 PID: 9611 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1897.176508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.178280] Call Trace: [ 1897.178848] dump_stack+0x107/0x167 [ 1897.179652] should_fail.cold+0x5/0xa [ 1897.180470] ? create_object.isra.0+0x3a/0xa30 [ 1897.181453] should_failslab+0x5/0x20 [ 1897.182272] kmem_cache_alloc+0x5b/0x310 [ 1897.183148] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1897.184329] create_object.isra.0+0x3a/0xa30 [ 1897.185265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1897.186364] kmem_cache_alloc+0x159/0x310 [ 1897.187277] security_file_alloc+0x34/0x170 [ 1897.188206] __alloc_file+0xb7/0x320 [ 1897.189008] alloc_empty_file+0x6d/0x170 [ 1897.189880] alloc_file+0x5e/0x5a0 [ 1897.190655] alloc_file_pseudo+0x16a/0x250 [ 1897.190826] FAULT_INJECTION: forcing a failure. [ 1897.190826] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.191568] ? alloc_file+0x5a0/0x5a0 [ 1897.194331] anon_inode_getfile+0xc8/0x1f0 [ 1897.195255] io_uring_setup+0x138b/0x2980 [ 1897.196162] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1897.197255] ? wait_for_completion_io+0x270/0x270 [ 1897.198337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1897.199464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.200577] do_syscall_64+0x33/0x40 [ 1897.201375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1897.202480] RIP: 0033:0x7fc72ff08b19 [ 1897.203291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.207222] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1897.208852] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1897.210375] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1897.211910] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1897.213436] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1897.214959] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1897.216539] CPU: 1 PID: 9609 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1897.217733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.219173] Call Trace: [ 1897.219640] dump_stack+0x107/0x167 [ 1897.220269] should_fail.cold+0x5/0xa [ 1897.220933] ? xas_alloc+0x336/0x440 [ 1897.221573] should_failslab+0x5/0x20 [ 1897.222289] kmem_cache_alloc+0x5b/0x310 [ 1897.223234] ? stack_trace_consume_entry+0x160/0x160 [ 1897.224104] xas_alloc+0x336/0x440 [ 1897.224719] xas_create+0x34a/0x10d0 [ 1897.225374] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1897.226284] xas_store+0x8c/0x1c40 [ 1897.226909] __xa_store+0x164/0x2d0 [ 1897.227543] ? xa_delete_node+0x280/0x280 [ 1897.228263] ? trace_hardirqs_on+0x5b/0x180 [ 1897.229009] xa_store+0x31/0x50 [ 1897.229578] __io_uring_add_tctx_node+0x1cf/0x520 [ 1897.230418] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1897.231316] ? alloc_fd+0x2e7/0x670 [ 1897.231952] io_uring_setup+0x1fbb/0x2980 [ 1897.232683] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1897.233560] ? wait_for_completion_io+0x270/0x270 [ 1897.234394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1897.235301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.236183] do_syscall_64+0x33/0x40 [ 1897.236822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1897.237697] RIP: 0033:0x7ff6be2aab19 [ 1897.238327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.241471] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1897.242774] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1897.243991] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1897.245215] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1897.246437] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1897.247658] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1897.376058] loop5: detected capacity change from 0 to 512 [ 1897.378627] tmpfs: Bad value for 'gid' 22:11:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="040000f6000000002e2f66696c653000"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r2}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3481, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, 0x0) 22:11:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 41) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:11:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:11:24 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 42) 22:11:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xb0ff2000000000, 0x0, 0x0) 22:11:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000001080)) 22:11:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 40) 22:11:24 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x60ff, 0x0, 0x0) [ 1908.978806] FAULT_INJECTION: forcing a failure. [ 1908.978806] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.980382] CPU: 1 PID: 9629 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1908.981332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1908.981558] FAULT_INJECTION: forcing a failure. [ 1908.981558] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.982453] Call Trace: [ 1908.982472] dump_stack+0x107/0x167 [ 1908.982486] should_fail.cold+0x5/0xa [ 1908.982508] ? xas_alloc+0x336/0x440 [ 1908.986743] should_failslab+0x5/0x20 [ 1908.987258] kmem_cache_alloc+0x5b/0x310 [ 1908.987802] xas_alloc+0x336/0x440 [ 1908.988282] xas_create+0x34a/0x10d0 [ 1908.988797] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1908.989496] xas_store+0x8c/0x1c40 [ 1908.989964] __xa_store+0x164/0x2d0 [ 1908.990451] ? xa_delete_node+0x280/0x280 [ 1908.991012] ? trace_hardirqs_on+0x5b/0x180 [ 1908.991610] xa_store+0x31/0x50 [ 1908.992037] __io_uring_add_tctx_node+0x1cf/0x520 [ 1908.992684] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1908.993381] ? alloc_fd+0x2e7/0x670 [ 1908.993867] io_uring_setup+0x1fbb/0x2980 [ 1908.994422] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1908.995102] ? wait_for_completion_io+0x270/0x270 [ 1908.995767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1908.996481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1908.997151] do_syscall_64+0x33/0x40 [ 1908.997653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1908.998339] RIP: 0033:0x7f89589a3b19 [ 1908.998834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.001191] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1909.002156] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1909.003066] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1909.003997] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1909.004902] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1909.005823] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1909.006771] CPU: 0 PID: 9627 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1909.008333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.010156] Call Trace: [ 1909.010185] dump_stack+0x107/0x167 [ 1909.010213] should_fail.cold+0x5/0xa [ 1909.010240] ? create_object.isra.0+0x3a/0xa30 [ 1909.010265] should_failslab+0x5/0x20 [ 1909.013884] kmem_cache_alloc+0x5b/0x310 [ 1909.014748] ? mark_held_locks+0x9e/0xe0 [ 1909.015639] create_object.isra.0+0x3a/0xa30 [ 1909.016573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1909.017657] kmem_cache_alloc+0x159/0x310 [ 1909.018551] xas_alloc+0x336/0x440 [ 1909.019331] xas_create+0x34a/0x10d0 [ 1909.020144] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1909.021260] xas_store+0x8c/0x1c40 22:11:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 42) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1909.022051] __xa_store+0x164/0x2d0 [ 1909.022990] ? xa_delete_node+0x280/0x280 [ 1909.023913] ? trace_hardirqs_on+0x5b/0x180 [ 1909.024875] xa_store+0x31/0x50 [ 1909.025612] __io_uring_add_tctx_node+0x1cf/0x520 [ 1909.026669] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1909.027818] ? alloc_fd+0x2e7/0x670 [ 1909.028641] io_uring_setup+0x1fbb/0x2980 [ 1909.029572] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1909.030677] ? wait_for_completion_io+0x270/0x270 [ 1909.031788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.032930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.033939] FAULT_INJECTION: forcing a failure. [ 1909.033939] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.034057] do_syscall_64+0x33/0x40 [ 1909.036350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.037459] RIP: 0033:0x7f6ebd7dfb19 [ 1909.038272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.042255] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1909.043915] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1909.045469] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1909.047010] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1909.048578] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1909.050134] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1909.051745] CPU: 1 PID: 9635 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1909.052781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.053878] Call Trace: [ 1909.054241] dump_stack+0x107/0x167 [ 1909.054808] should_fail.cold+0x5/0xa [ 1909.055341] ? create_object.isra.0+0x3a/0xa30 [ 1909.055940] should_failslab+0x5/0x20 [ 1909.056439] kmem_cache_alloc+0x5b/0x310 [ 1909.056972] ? mark_held_locks+0x9e/0xe0 [ 1909.057501] create_object.isra.0+0x3a/0xa30 [ 1909.058072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1909.058726] kmem_cache_alloc+0x159/0x310 [ 1909.059276] xas_alloc+0x336/0x440 [ 1909.059751] xas_create+0x34a/0x10d0 [ 1909.060228] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1909.060888] xas_store+0x8c/0x1c40 [ 1909.061358] __xa_store+0x164/0x2d0 [ 1909.061829] ? xa_delete_node+0x280/0x280 [ 1909.062040] FAULT_INJECTION: forcing a failure. [ 1909.062040] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.062363] ? trace_hardirqs_on+0x5b/0x180 [ 1909.062385] xa_store+0x31/0x50 [ 1909.062410] __io_uring_add_tctx_node+0x1cf/0x520 [ 1909.066313] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1909.066960] ? alloc_fd+0x2e7/0x670 [ 1909.067497] io_uring_setup+0x1fbb/0x2980 [ 1909.068024] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1909.068656] ? wait_for_completion_io+0x270/0x270 [ 1909.069277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.069943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.070595] do_syscall_64+0x33/0x40 [ 1909.071084] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.071761] RIP: 0033:0x7f89589a3b19 [ 1909.072244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.074523] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1909.075472] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1909.076352] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1909.077231] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1909.078109] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1909.078987] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1909.079918] CPU: 0 PID: 9628 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1909.081424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.083197] Call Trace: [ 1909.083790] dump_stack+0x107/0x167 [ 1909.084578] should_fail.cold+0x5/0xa [ 1909.085401] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1909.086506] should_failslab+0x5/0x20 [ 1909.087332] kmem_cache_alloc_trace+0x55/0x320 [ 1909.088319] io_uring_alloc_task_context+0x99/0x6a0 [ 1909.089017] FAULT_INJECTION: forcing a failure. [ 1909.089017] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.089382] ? io_import_iovec+0x1120/0x1120 [ 1909.091745] ? lock_downgrade+0x6d0/0x6d0 [ 1909.092638] ? do_raw_spin_lock+0x121/0x260 [ 1909.093558] ? rwlock_bug.part.0+0x90/0x90 [ 1909.094473] __io_uring_add_tctx_node+0x2c6/0x520 [ 1909.095513] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1909.096625] ? alloc_fd+0x2e7/0x670 [ 1909.097422] io_uring_setup+0x1fbb/0x2980 [ 1909.098325] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1909.099405] ? wait_for_completion_io+0x270/0x270 [ 1909.100477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.101593] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.102698] do_syscall_64+0x33/0x40 [ 1909.103498] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.104596] RIP: 0033:0x7fc72ff08b19 [ 1909.105387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.109298] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1909.110911] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1909.112435] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1909.113950] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1909.115481] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1909.116994] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1909.118557] CPU: 1 PID: 9639 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1909.119454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.120473] Call Trace: [ 1909.120816] dump_stack+0x107/0x167 [ 1909.121263] should_fail.cold+0x5/0xa [ 1909.121725] ? create_object.isra.0+0x3a/0xa30 [ 1909.122277] should_failslab+0x5/0x20 [ 1909.122742] kmem_cache_alloc+0x5b/0x310 [ 1909.123262] create_object.isra.0+0x3a/0xa30 [ 1909.123806] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1909.124426] kmem_cache_alloc+0x159/0x310 [ 1909.124939] xas_alloc+0x336/0x440 [ 1909.125371] xas_create+0x34a/0x10d0 [ 1909.125832] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1909.126482] xas_store+0x8c/0x1c40 [ 1909.126935] __xa_store+0x164/0x2d0 [ 1909.127412] ? xa_delete_node+0x280/0x280 [ 1909.127924] ? trace_hardirqs_on+0x5b/0x180 [ 1909.128457] xa_store+0x31/0x50 [ 1909.128866] __io_uring_add_tctx_node+0x1cf/0x520 [ 1909.129466] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1909.130107] ? alloc_fd+0x2e7/0x670 [ 1909.130562] io_uring_setup+0x1fbb/0x2980 [ 1909.131078] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1909.131707] ? wait_for_completion_io+0x270/0x270 [ 1909.132309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.132960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.133595] do_syscall_64+0x33/0x40 [ 1909.134057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.134684] RIP: 0033:0x7ff6be2aab19 [ 1909.135147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.137406] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1909.138335] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1909.139213] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1909.140115] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1909.140998] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1909.141869] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:11:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, 0x0) 22:11:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xf0ff1f00000000, 0x0, 0x0) 22:11:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000001080)) 22:11:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 43) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:11:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 41) [ 1909.272390] FAULT_INJECTION: forcing a failure. [ 1909.272390] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.273812] CPU: 1 PID: 9654 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1909.274597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.275580] Call Trace: [ 1909.275890] dump_stack+0x107/0x167 [ 1909.276317] should_fail.cold+0x5/0xa [ 1909.276758] ? xas_alloc+0x336/0x440 [ 1909.277193] should_failslab+0x5/0x20 [ 1909.277637] kmem_cache_alloc+0x5b/0x310 [ 1909.278109] xas_alloc+0x336/0x440 [ 1909.278523] xas_create+0x34a/0x10d0 [ 1909.278958] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1909.279567] xas_store+0x8c/0x1c40 [ 1909.279988] __xa_store+0x164/0x2d0 [ 1909.280408] ? xa_delete_node+0x280/0x280 [ 1909.280890] ? trace_hardirqs_on+0x5b/0x180 [ 1909.281396] xa_store+0x31/0x50 [ 1909.281776] __io_uring_add_tctx_node+0x1cf/0x520 [ 1909.282342] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1909.282948] ? alloc_fd+0x2e7/0x670 [ 1909.283381] io_uring_setup+0x1fbb/0x2980 [ 1909.283860] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1909.284452] ? wait_for_completion_io+0x270/0x270 [ 1909.285026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.285632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.286234] do_syscall_64+0x33/0x40 [ 1909.286661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.287259] RIP: 0033:0x7f89589a3b19 [ 1909.287690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.289822] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1909.290699] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1909.291530] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1909.292354] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1909.293176] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1909.293995] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1909.333225] FAULT_INJECTION: forcing a failure. [ 1909.333225] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.334586] CPU: 1 PID: 9659 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1909.335372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1909.336310] Call Trace: [ 1909.336623] dump_stack+0x107/0x167 [ 1909.337038] should_fail.cold+0x5/0xa [ 1909.337471] ? xas_alloc+0x336/0x440 [ 1909.337896] should_failslab+0x5/0x20 [ 1909.338332] kmem_cache_alloc+0x5b/0x310 [ 1909.338798] xas_alloc+0x336/0x440 [ 1909.339204] xas_create+0x34a/0x10d0 [ 1909.339645] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1909.340246] xas_store+0x8c/0x1c40 [ 1909.340661] __xa_store+0x164/0x2d0 [ 1909.341086] ? xa_delete_node+0x280/0x280 [ 1909.341564] ? trace_hardirqs_on+0x5b/0x180 [ 1909.342066] xa_store+0x31/0x50 [ 1909.342451] __io_uring_add_tctx_node+0x1cf/0x520 [ 1909.343007] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1909.343617] ? alloc_fd+0x2e7/0x670 [ 1909.344049] io_uring_setup+0x1fbb/0x2980 [ 1909.344531] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1909.345107] ? wait_for_completion_io+0x270/0x270 [ 1909.345675] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1909.346271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1909.346863] do_syscall_64+0x33/0x40 [ 1909.347298] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1909.347883] RIP: 0033:0x7ff6be2aab19 [ 1909.348309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1909.350432] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1909.351318] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1909.352137] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1909.352951] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1909.353770] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1909.354586] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1921.158737] FAULT_INJECTION: forcing a failure. [ 1921.158737] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.160127] CPU: 1 PID: 9677 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1921.160946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.161943] Call Trace: [ 1921.162251] dump_stack+0x107/0x167 [ 1921.162949] should_fail.cold+0x5/0xa 22:11:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 43) 22:11:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 42) 22:11:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) 22:11:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000001080)) 22:11:36 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 22:11:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:11:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 44) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1921.163431] ? xas_alloc+0x336/0x440 [ 1921.163959] should_failslab+0x5/0x20 [ 1921.164126] FAULT_INJECTION: forcing a failure. [ 1921.164126] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.164411] kmem_cache_alloc+0x5b/0x310 [ 1921.164432] xas_alloc+0x336/0x440 [ 1921.167985] xas_create+0x34a/0x10d0 [ 1921.168442] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1921.169075] xas_store+0x8c/0x1c40 [ 1921.169500] __xa_store+0x164/0x2d0 [ 1921.169945] ? xa_delete_node+0x280/0x280 [ 1921.170442] ? trace_hardirqs_on+0x5b/0x180 [ 1921.170965] xa_store+0x31/0x50 [ 1921.171368] __io_uring_add_tctx_node+0x1cf/0x520 [ 1921.171952] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1921.172569] ? alloc_fd+0x2e7/0x670 [ 1921.173008] io_uring_setup+0x1fbb/0x2980 [ 1921.173500] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1921.174107] ? wait_for_completion_io+0x270/0x270 [ 1921.174694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.175321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.175947] do_syscall_64+0x33/0x40 [ 1921.176382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.176989] RIP: 0033:0x7f89589a3b19 [ 1921.177428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.179617] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1921.180520] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1921.181362] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1921.182209] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1921.183057] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1921.183920] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1921.184801] CPU: 0 PID: 9670 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1921.186488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.188531] Call Trace: [ 1921.189190] dump_stack+0x107/0x167 [ 1921.190097] should_fail.cold+0x5/0xa [ 1921.191038] ? xas_alloc+0x336/0x440 [ 1921.191965] should_failslab+0x5/0x20 [ 1921.192897] kmem_cache_alloc+0x5b/0x310 [ 1921.193909] xas_alloc+0x336/0x440 [ 1921.194792] xas_create+0x34a/0x10d0 [ 1921.195741] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1921.197034] xas_store+0x8c/0x1c40 [ 1921.197953] __xa_store+0x164/0x2d0 [ 1921.198867] ? xa_delete_node+0x280/0x280 [ 1921.199924] ? trace_hardirqs_on+0x5b/0x180 [ 1921.201011] xa_store+0x31/0x50 [ 1921.201837] __io_uring_add_tctx_node+0x1cf/0x520 [ 1921.203027] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1921.204324] ? alloc_fd+0x2e7/0x670 [ 1921.205253] io_uring_setup+0x1fbb/0x2980 [ 1921.206297] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1921.207551] ? wait_for_completion_io+0x270/0x270 [ 1921.208793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.210088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.211421] do_syscall_64+0x33/0x40 [ 1921.212349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.213620] RIP: 0033:0x7f6ebd7dfb19 22:11:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 28) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:11:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 45) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1921.214543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.219266] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1921.221161] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1921.222917] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1921.224677] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1921.226431] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1921.228199] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1921.235540] FAULT_INJECTION: forcing a failure. [ 1921.235540] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.238375] CPU: 0 PID: 9681 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1921.240078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.242135] Call Trace: [ 1921.242801] dump_stack+0x107/0x167 [ 1921.243731] should_fail.cold+0x5/0xa [ 1921.244681] ? create_object.isra.0+0x3a/0xa30 [ 1921.245812] should_failslab+0x5/0x20 [ 1921.246754] kmem_cache_alloc+0x5b/0x310 [ 1921.247797] create_object.isra.0+0x3a/0xa30 [ 1921.248884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1921.250154] kmem_cache_alloc_trace+0x151/0x320 [ 1921.251326] io_uring_alloc_task_context+0x99/0x6a0 [ 1921.252575] ? io_import_iovec+0x1120/0x1120 [ 1921.253667] ? lock_downgrade+0x6d0/0x6d0 [ 1921.254596] FAULT_INJECTION: forcing a failure. [ 1921.254596] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.254689] ? do_raw_spin_lock+0x121/0x260 [ 1921.257077] ? rwlock_bug.part.0+0x90/0x90 [ 1921.258141] __io_uring_add_tctx_node+0x2c6/0x520 [ 1921.259338] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1921.260639] ? alloc_fd+0x2e7/0x670 [ 1921.261570] io_uring_setup+0x1fbb/0x2980 [ 1921.262621] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1921.263879] ? wait_for_completion_io+0x270/0x270 [ 1921.265129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.266424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.267718] do_syscall_64+0x33/0x40 [ 1921.268642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.269911] RIP: 0033:0x7fc72ff08b19 [ 1921.270832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.275377] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1921.277263] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1921.279022] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1921.280787] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1921.282546] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1921.284320] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1921.286132] CPU: 1 PID: 9685 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1921.286956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.287916] Call Trace: [ 1921.288236] dump_stack+0x107/0x167 [ 1921.288674] should_fail.cold+0x5/0xa [ 1921.289137] ? xas_alloc+0x336/0x440 [ 1921.289579] should_failslab+0x5/0x20 [ 1921.290038] kmem_cache_alloc+0x5b/0x310 [ 1921.290522] xas_alloc+0x336/0x440 [ 1921.290948] xas_create+0x34a/0x10d0 [ 1921.291414] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1921.292042] xas_store+0x8c/0x1c40 [ 1921.292475] __xa_store+0x164/0x2d0 [ 1921.292911] ? xa_delete_node+0x280/0x280 [ 1921.293409] ? trace_hardirqs_on+0x5b/0x180 [ 1921.293928] xa_store+0x31/0x50 [ 1921.294234] FAULT_INJECTION: forcing a failure. [ 1921.294234] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.294325] __io_uring_add_tctx_node+0x1cf/0x520 [ 1921.294345] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1921.298271] ? alloc_fd+0x2e7/0x670 [ 1921.298712] io_uring_setup+0x1fbb/0x2980 [ 1921.299213] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1921.299825] ? wait_for_completion_io+0x270/0x270 [ 1921.300395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.301021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.301637] do_syscall_64+0x33/0x40 [ 1921.302082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.302692] RIP: 0033:0x7f89589a3b19 [ 1921.303132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.305333] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1921.306237] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1921.307051] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1921.307908] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1921.308752] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1921.309596] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1921.310470] CPU: 0 PID: 9679 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1921.312223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.314315] Call Trace: [ 1921.314992] dump_stack+0x107/0x167 [ 1921.315936] should_fail.cold+0x5/0xa [ 1921.316912] ? create_object.isra.0+0x3a/0xa30 [ 1921.318079] should_failslab+0x5/0x20 [ 1921.319053] kmem_cache_alloc+0x5b/0x310 [ 1921.320094] ? mark_held_locks+0x9e/0xe0 [ 1921.321140] create_object.isra.0+0x3a/0xa30 [ 1921.322253] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1921.323564] kmem_cache_alloc+0x159/0x310 [ 1921.324637] xas_alloc+0x336/0x440 [ 1921.325562] xas_create+0x34a/0x10d0 [ 1921.326538] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1921.327887] xas_store+0x8c/0x1c40 [ 1921.328831] __xa_store+0x164/0x2d0 [ 1921.329767] ? xa_delete_node+0x280/0x280 [ 1921.330843] ? trace_hardirqs_on+0x5b/0x180 [ 1921.331969] xa_store+0x31/0x50 [ 1921.332820] __io_uring_add_tctx_node+0x1cf/0x520 [ 1921.334047] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1921.335383] ? alloc_fd+0x2e7/0x670 [ 1921.336340] io_uring_setup+0x1fbb/0x2980 [ 1921.337416] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1921.338698] ? wait_for_completion_io+0x270/0x270 [ 1921.339985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.341313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.342632] do_syscall_64+0x33/0x40 [ 1921.343589] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.344885] RIP: 0033:0x7ff6be2aab19 [ 1921.345832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.350473] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 22:11:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 44) [ 1921.352412] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1921.354392] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1921.356220] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1921.358041] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1921.359864] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:11:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 46) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1921.397100] FAULT_INJECTION: forcing a failure. [ 1921.397100] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.398465] CPU: 1 PID: 9692 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1921.399285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.400244] Call Trace: [ 1921.400566] dump_stack+0x107/0x167 [ 1921.401005] should_fail.cold+0x5/0xa [ 1921.401472] ? create_object.isra.0+0x3a/0xa30 [ 1921.402019] should_failslab+0x5/0x20 [ 1921.402475] kmem_cache_alloc+0x5b/0x310 [ 1921.402964] ? mark_held_locks+0x9e/0xe0 [ 1921.403469] create_object.isra.0+0x3a/0xa30 [ 1921.403996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1921.404585] kmem_cache_alloc+0x159/0x310 [ 1921.405085] xas_alloc+0x336/0x440 [ 1921.405514] xas_create+0x34a/0x10d0 [ 1921.405968] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1921.406598] xas_store+0x8c/0x1c40 [ 1921.407035] __xa_store+0x164/0x2d0 [ 1921.407482] ? xa_delete_node+0x280/0x280 [ 1921.407985] ? trace_hardirqs_on+0x5b/0x180 [ 1921.408507] xa_store+0x31/0x50 [ 1921.408907] __io_uring_add_tctx_node+0x1cf/0x520 [ 1921.409484] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1921.410111] ? alloc_fd+0x2e7/0x670 [ 1921.410555] io_uring_setup+0x1fbb/0x2980 [ 1921.411060] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1921.411677] ? wait_for_completion_io+0x270/0x270 [ 1921.412270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.412903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.413521] do_syscall_64+0x33/0x40 [ 1921.413969] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.414582] RIP: 0033:0x7f6ebd7dfb19 [ 1921.415028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.417244] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1921.418116] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1921.418970] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1921.419833] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1921.420685] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1921.421538] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:11:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) [ 1921.436429] FAULT_INJECTION: forcing a failure. [ 1921.436429] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.437793] CPU: 1 PID: 9694 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1921.438600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1921.439563] Call Trace: [ 1921.439882] dump_stack+0x107/0x167 [ 1921.440316] should_fail.cold+0x5/0xa [ 1921.440771] ? create_object.isra.0+0x3a/0xa30 [ 1921.441314] should_failslab+0x5/0x20 [ 1921.441760] kmem_cache_alloc+0x5b/0x310 [ 1921.442244] ? mark_held_locks+0x9e/0xe0 [ 1921.442730] create_object.isra.0+0x3a/0xa30 [ 1921.443252] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1921.443867] kmem_cache_alloc+0x159/0x310 [ 1921.444364] xas_alloc+0x336/0x440 [ 1921.444790] xas_create+0x34a/0x10d0 [ 1921.445241] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1921.445868] xas_store+0x8c/0x1c40 [ 1921.446300] __xa_store+0x164/0x2d0 [ 1921.446740] ? xa_delete_node+0x280/0x280 [ 1921.447242] ? trace_hardirqs_on+0x5b/0x180 [ 1921.447769] xa_store+0x31/0x50 [ 1921.448164] __io_uring_add_tctx_node+0x1cf/0x520 [ 1921.448737] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1921.449358] ? alloc_fd+0x2e7/0x670 [ 1921.449798] io_uring_setup+0x1fbb/0x2980 [ 1921.450297] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1921.450899] ? wait_for_completion_io+0x270/0x270 [ 1921.451495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1921.452119] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1921.452733] do_syscall_64+0x33/0x40 [ 1921.453176] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1921.453785] RIP: 0033:0x7f89589a3b19 [ 1921.454227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1921.456425] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1921.457332] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1921.458179] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1921.459028] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1921.459887] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1921.460736] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:11:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xffffffffff600000, 0x0, 0x0) 22:11:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 22:11:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 43) 22:11:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 45) 22:11:49 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xb0ff20, 0x0, 0x0) 22:11:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000001080)) 22:11:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 29) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:11:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 47) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1933.970523] FAULT_INJECTION: forcing a failure. [ 1933.970523] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.972025] CPU: 0 PID: 9707 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1933.972866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1933.973890] Call Trace: [ 1933.974227] dump_stack+0x107/0x167 [ 1933.974690] should_fail.cold+0x5/0xa [ 1933.975173] ? xas_alloc+0x336/0x440 [ 1933.975651] should_failslab+0x5/0x20 [ 1933.976126] kmem_cache_alloc+0x5b/0x310 [ 1933.976639] xas_alloc+0x336/0x440 [ 1933.977087] xas_create+0x34a/0x10d0 [ 1933.977569] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1933.978240] xas_store+0x8c/0x1c40 [ 1933.978700] __xa_store+0x164/0x2d0 [ 1933.979158] ? xa_delete_node+0x280/0x280 [ 1933.979694] ? trace_hardirqs_on+0x5b/0x180 [ 1933.980236] xa_store+0x31/0x50 [ 1933.980653] __io_uring_add_tctx_node+0x1cf/0x520 [ 1933.981247] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1933.981893] ? alloc_fd+0x2e7/0x670 [ 1933.982357] io_uring_setup+0x1fbb/0x2980 [ 1933.982884] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1933.983517] ? wait_for_completion_io+0x270/0x270 [ 1933.984135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1933.984784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1933.985422] do_syscall_64+0x33/0x40 [ 1933.985884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1933.986520] RIP: 0033:0x7f6ebd7dfb19 [ 1933.986984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1933.989253] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1933.990195] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1933.990529] FAULT_INJECTION: forcing a failure. [ 1933.990529] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.991075] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1933.991084] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1933.991091] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1933.991100] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1934.000372] CPU: 1 PID: 9716 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1934.001920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.003806] Call Trace: [ 1934.004419] dump_stack+0x107/0x167 [ 1934.005247] should_fail.cold+0x5/0xa [ 1934.006109] ? xas_alloc+0x336/0x440 [ 1934.006950] should_failslab+0x5/0x20 [ 1934.007828] kmem_cache_alloc+0x5b/0x310 [ 1934.008752] xas_alloc+0x336/0x440 [ 1934.009565] xas_create+0x34a/0x10d0 [ 1934.010428] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1934.011622] xas_store+0x8c/0x1c40 [ 1934.012442] __xa_store+0x164/0x2d0 [ 1934.013269] ? xa_delete_node+0x280/0x280 [ 1934.014211] ? trace_hardirqs_on+0x5b/0x180 [ 1934.015178] xa_store+0x31/0x50 [ 1934.015936] __io_uring_add_tctx_node+0x1cf/0x520 [ 1934.017029] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1934.018208] ? alloc_fd+0x2e7/0x670 [ 1934.019046] io_uring_setup+0x1fbb/0x2980 [ 1934.020003] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1934.021141] ? wait_for_completion_io+0x270/0x270 [ 1934.022257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.023443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.024619] do_syscall_64+0x33/0x40 [ 1934.025459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.026618] RIP: 0033:0x7ff6be2aab19 [ 1934.027459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.028879] FAULT_INJECTION: forcing a failure. [ 1934.028879] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.031638] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1934.031659] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1934.031670] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1934.031682] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1934.031699] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1934.041197] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1934.042844] CPU: 0 PID: 9719 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1934.043694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.044698] Call Trace: [ 1934.045030] dump_stack+0x107/0x167 [ 1934.045473] should_fail.cold+0x5/0xa [ 1934.045939] ? xas_alloc+0x336/0x440 [ 1934.046394] should_failslab+0x5/0x20 [ 1934.046859] kmem_cache_alloc+0x5b/0x310 [ 1934.047358] xas_alloc+0x336/0x440 [ 1934.047805] xas_create+0x34a/0x10d0 [ 1934.048271] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1934.048909] xas_store+0x8c/0x1c40 [ 1934.049359] __xa_store+0x164/0x2d0 [ 1934.049804] ? xa_delete_node+0x280/0x280 [ 1934.050317] ? trace_hardirqs_on+0x5b/0x180 [ 1934.050850] xa_store+0x31/0x50 [ 1934.051259] __io_uring_add_tctx_node+0x1cf/0x520 [ 1934.051847] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1934.052471] ? alloc_fd+0x2e7/0x670 [ 1934.052925] io_uring_setup+0x1fbb/0x2980 [ 1934.053432] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1934.054036] ? wait_for_completion_io+0x270/0x270 [ 1934.054637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.055265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.055896] do_syscall_64+0x33/0x40 [ 1934.056356] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.056969] RIP: 0033:0x7f89589a3b19 [ 1934.057412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.059587] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1934.060496] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1934.061347] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1934.062194] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1934.063041] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1934.063896] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:11:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 22:11:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 46) [ 1934.079352] FAULT_INJECTION: forcing a failure. [ 1934.079352] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.082087] CPU: 1 PID: 9720 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1934.083652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.085537] Call Trace: [ 1934.086147] dump_stack+0x107/0x167 [ 1934.086978] should_fail.cold+0x5/0xa [ 1934.087861] ? create_object.isra.0+0x3a/0xa30 [ 1934.088903] should_failslab+0x5/0x20 [ 1934.089770] kmem_cache_alloc+0x5b/0x310 [ 1934.090701] create_object.isra.0+0x3a/0xa30 [ 1934.091718] kmemleak_alloc_percpu+0xa0/0x100 [ 1934.092739] pcpu_alloc+0x4e2/0x1240 [ 1934.093610] __percpu_counter_init+0x10d/0x2d0 [ 1934.094650] io_uring_alloc_task_context+0xcc/0x6a0 [ 1934.095789] ? io_import_iovec+0x1120/0x1120 [ 1934.096789] ? lock_downgrade+0x6d0/0x6d0 [ 1934.097729] ? do_raw_spin_lock+0x121/0x260 [ 1934.098708] ? rwlock_bug.part.0+0x90/0x90 [ 1934.099684] __io_uring_add_tctx_node+0x2c6/0x520 [ 1934.100779] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1934.101963] ? alloc_fd+0x2e7/0x670 [ 1934.102799] io_uring_setup+0x1fbb/0x2980 [ 1934.103755] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1934.104898] ? wait_for_completion_io+0x270/0x270 [ 1934.106009] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.107195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.108380] do_syscall_64+0x33/0x40 [ 1934.109225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.110380] RIP: 0033:0x7fc72ff08b19 [ 1934.111224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.115380] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1934.117116] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1934.118731] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1934.120349] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1934.121962] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1934.123588] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1934.127289] FAULT_INJECTION: forcing a failure. [ 1934.127289] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.128714] CPU: 0 PID: 9725 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1934.129505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.130471] Call Trace: [ 1934.130789] dump_stack+0x107/0x167 [ 1934.131222] should_fail.cold+0x5/0xa [ 1934.131683] ? create_object.isra.0+0x3a/0xa30 [ 1934.132222] should_failslab+0x5/0x20 [ 1934.132669] kmem_cache_alloc+0x5b/0x310 [ 1934.133151] ? mark_held_locks+0x9e/0xe0 [ 1934.133630] create_object.isra.0+0x3a/0xa30 [ 1934.134147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1934.134749] kmem_cache_alloc+0x159/0x310 [ 1934.135242] xas_alloc+0x336/0x440 [ 1934.135671] xas_create+0x34a/0x10d0 [ 1934.136117] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1934.136735] xas_store+0x8c/0x1c40 [ 1934.137167] __xa_store+0x164/0x2d0 [ 1934.137599] ? xa_delete_node+0x280/0x280 [ 1934.138093] ? trace_hardirqs_on+0x5b/0x180 [ 1934.138606] xa_store+0x31/0x50 [ 1934.138997] __io_uring_add_tctx_node+0x1cf/0x520 [ 1934.139569] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1934.140185] ? alloc_fd+0x2e7/0x670 [ 1934.140625] io_uring_setup+0x1fbb/0x2980 [ 1934.141123] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1934.141713] ? wait_for_completion_io+0x270/0x270 [ 1934.142310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.142927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.143537] do_syscall_64+0x33/0x40 [ 1934.143976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.144567] RIP: 0033:0x7f6ebd7dfb19 [ 1934.144997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.147128] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1934.148017] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1934.148842] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1934.149664] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1934.150488] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1934.151314] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:11:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 48) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1934.177924] FAULT_INJECTION: forcing a failure. [ 1934.177924] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.180529] CPU: 1 PID: 9730 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1934.182077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.183967] Call Trace: [ 1934.184570] dump_stack+0x107/0x167 [ 1934.185400] should_fail.cold+0x5/0xa [ 1934.186276] ? create_object.isra.0+0x3a/0xa30 [ 1934.187321] should_failslab+0x5/0x20 [ 1934.188196] kmem_cache_alloc+0x5b/0x310 [ 1934.189119] ? mark_held_locks+0x9e/0xe0 [ 1934.190046] create_object.isra.0+0x3a/0xa30 [ 1934.191040] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1934.192209] kmem_cache_alloc+0x159/0x310 [ 1934.193157] xas_alloc+0x336/0x440 [ 1934.193968] xas_create+0x34a/0x10d0 [ 1934.194837] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1934.196044] xas_store+0x8c/0x1c40 [ 1934.196871] __xa_store+0x164/0x2d0 [ 1934.197706] ? xa_delete_node+0x280/0x280 [ 1934.198672] ? trace_hardirqs_on+0x5b/0x180 [ 1934.199677] xa_store+0x31/0x50 [ 1934.200431] __io_uring_add_tctx_node+0x1cf/0x520 [ 1934.201525] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1934.202713] ? alloc_fd+0x2e7/0x670 [ 1934.203565] io_uring_setup+0x1fbb/0x2980 [ 1934.204515] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1934.205661] ? wait_for_completion_io+0x270/0x270 [ 1934.206784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.207987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.209160] do_syscall_64+0x33/0x40 [ 1934.210007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.211167] RIP: 0033:0x7f89589a3b19 [ 1934.212019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.216189] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1934.217913] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1934.219545] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1934.221162] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1934.222776] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1934.224401] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:11:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000001080)) 22:11:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 44) [ 1934.253068] FAULT_INJECTION: forcing a failure. [ 1934.253068] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.254430] CPU: 0 PID: 9734 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1934.255216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.256180] Call Trace: [ 1934.256498] dump_stack+0x107/0x167 [ 1934.256924] should_fail.cold+0x5/0xa [ 1934.257370] ? create_object.isra.0+0x3a/0xa30 [ 1934.257904] should_failslab+0x5/0x20 [ 1934.258347] kmem_cache_alloc+0x5b/0x310 [ 1934.258825] ? mark_held_locks+0x9e/0xe0 [ 1934.259305] create_object.isra.0+0x3a/0xa30 [ 1934.259825] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1934.260417] kmem_cache_alloc+0x159/0x310 [ 1934.260909] xas_alloc+0x336/0x440 [ 1934.261328] xas_create+0x34a/0x10d0 [ 1934.261775] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1934.262391] xas_store+0x8c/0x1c40 [ 1934.262822] __xa_store+0x164/0x2d0 [ 1934.263255] ? xa_delete_node+0x280/0x280 [ 1934.263760] ? trace_hardirqs_on+0x5b/0x180 [ 1934.264276] xa_store+0x31/0x50 [ 1934.264668] __io_uring_add_tctx_node+0x1cf/0x520 [ 1934.265229] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1934.265836] ? alloc_fd+0x2e7/0x670 [ 1934.266275] io_uring_setup+0x1fbb/0x2980 [ 1934.266765] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1934.267356] ? wait_for_completion_io+0x270/0x270 [ 1934.267953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.268568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.269174] do_syscall_64+0x33/0x40 [ 1934.269609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.270204] RIP: 0033:0x7ff6be2aab19 [ 1934.270635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.272757] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1934.273640] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1934.274465] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1934.275287] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1934.276125] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1934.276949] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1952.240583] FAULT_INJECTION: forcing a failure. [ 1952.240583] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.242466] FAULT_INJECTION: forcing a failure. [ 1952.242466] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.243062] CPU: 0 PID: 9747 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1952.246970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.248720] Call Trace: [ 1952.249283] dump_stack+0x107/0x167 [ 1952.250066] should_fail.cold+0x5/0xa [ 1952.250884] ? xas_alloc+0x336/0x440 [ 1952.251696] should_failslab+0x5/0x20 [ 1952.252510] kmem_cache_alloc+0x5b/0x310 [ 1952.253382] xas_alloc+0x336/0x440 [ 1952.254146] xas_create+0x34a/0x10d0 [ 1952.254975] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1952.256106] xas_store+0x8c/0x1c40 [ 1952.256895] __xa_store+0x164/0x2d0 [ 1952.257669] ? xa_delete_node+0x280/0x280 [ 1952.258558] ? trace_hardirqs_on+0x5b/0x180 [ 1952.259487] xa_store+0x31/0x50 [ 1952.260221] __io_uring_add_tctx_node+0x1cf/0x520 [ 1952.261256] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1952.262354] ? alloc_fd+0x2e7/0x670 [ 1952.263152] io_uring_setup+0x1fbb/0x2980 [ 1952.264050] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1952.265122] ? wait_for_completion_io+0x270/0x270 [ 1952.266194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.267297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.268407] do_syscall_64+0x33/0x40 [ 1952.269207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.270301] RIP: 0033:0x7f89589a3b19 [ 1952.271085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.274967] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1952.276575] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1952.278067] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1952.279563] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1952.281106] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1952.282607] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1952.284191] CPU: 1 PID: 9750 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1952.285812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.287718] Call Trace: [ 1952.288336] dump_stack+0x107/0x167 [ 1952.289166] should_fail.cold+0x5/0xa [ 1952.290033] ? create_object.isra.0+0x3a/0xa30 [ 1952.291082] should_failslab+0x5/0x20 [ 1952.291957] kmem_cache_alloc+0x5b/0x310 [ 1952.292893] create_object.isra.0+0x3a/0xa30 [ 1952.293900] kmemleak_alloc_percpu+0xa0/0x100 [ 1952.294955] pcpu_alloc+0x4e2/0x1240 [ 1952.295842] __percpu_counter_init+0x10d/0x2d0 [ 1952.296924] io_uring_alloc_task_context+0xcc/0x6a0 [ 1952.298115] ? io_import_iovec+0x1120/0x1120 [ 1952.299148] ? lock_downgrade+0x6d0/0x6d0 [ 1952.300123] ? do_raw_spin_lock+0x121/0x260 22:12:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 47) 22:12:07 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xf0ff1f, 0x0, 0x0) 22:12:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000001080)) 22:12:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 30) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:12:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x60ff) 22:12:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 49) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:12:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 45) [ 1952.301097] ? rwlock_bug.part.0+0x90/0x90 [ 1952.302280] __io_uring_add_tctx_node+0x2c6/0x520 [ 1952.303423] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1952.304622] ? alloc_fd+0x2e7/0x670 [ 1952.305464] io_uring_setup+0x1fbb/0x2980 22:12:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) sendfile(r1, r0, &(0x7f0000000000)=0x400, 0xfffffffffffffffb) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 1952.306424] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1952.307764] ? wait_for_completion_io+0x270/0x270 [ 1952.308889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.310095] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.311282] do_syscall_64+0x33/0x40 [ 1952.312151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.313316] RIP: 0033:0x7fc72ff08b19 [ 1952.314168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.318377] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1952.320136] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1952.321776] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1952.323380] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1952.325001] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1952.326603] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1952.332259] FAULT_INJECTION: forcing a failure. [ 1952.332259] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.334809] CPU: 1 PID: 9756 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1952.336354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.338232] Call Trace: [ 1952.338838] dump_stack+0x107/0x167 [ 1952.339664] should_fail.cold+0x5/0xa [ 1952.340541] ? xas_alloc+0x336/0x440 [ 1952.341383] should_failslab+0x5/0x20 [ 1952.342257] kmem_cache_alloc+0x5b/0x310 [ 1952.343178] xas_alloc+0x336/0x440 [ 1952.343994] xas_create+0x34a/0x10d0 [ 1952.344851] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1952.346038] xas_store+0x8c/0x1c40 [ 1952.346856] __xa_store+0x164/0x2d0 [ 1952.347688] ? xa_delete_node+0x280/0x280 [ 1952.348633] ? trace_hardirqs_on+0x5b/0x180 [ 1952.349616] xa_store+0x31/0x50 [ 1952.350362] __io_uring_add_tctx_node+0x1cf/0x520 [ 1952.351447] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1952.352633] ? alloc_fd+0x2e7/0x670 [ 1952.353467] io_uring_setup+0x1fbb/0x2980 [ 1952.354411] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1952.355553] ? wait_for_completion_io+0x270/0x270 [ 1952.356671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 22:12:07 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x1ffff000, 0x0, 0x0) [ 1952.357855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.359250] do_syscall_64+0x33/0x40 [ 1952.360111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.361260] RIP: 0033:0x7f6ebd7dfb19 [ 1952.362094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.366224] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1952.367948] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1952.369538] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1952.371136] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1952.372742] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1952.374339] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1952.389813] FAULT_INJECTION: forcing a failure. [ 1952.389813] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.392484] CPU: 1 PID: 9761 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1952.394010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.395873] Call Trace: [ 1952.396474] dump_stack+0x107/0x167 [ 1952.397298] should_fail.cold+0x5/0xa [ 1952.398152] ? xas_alloc+0x336/0x440 [ 1952.398993] should_failslab+0x5/0x20 [ 1952.399850] kmem_cache_alloc+0x5b/0x310 [ 1952.400759] xas_alloc+0x336/0x440 [ 1952.401560] xas_create+0x34a/0x10d0 [ 1952.402412] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1952.403586] xas_store+0x8c/0x1c40 [ 1952.404410] __xa_store+0x164/0x2d0 [ 1952.405223] ? xa_delete_node+0x280/0x280 [ 1952.406160] ? trace_hardirqs_on+0x5b/0x180 [ 1952.407127] xa_store+0x31/0x50 [ 1952.407876] __io_uring_add_tctx_node+0x1cf/0x520 [ 1952.408953] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1952.410114] ? alloc_fd+0x2e7/0x670 [ 1952.410935] io_uring_setup+0x1fbb/0x2980 [ 1952.411882] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1952.413012] ? wait_for_completion_io+0x270/0x270 [ 1952.414115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.415263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.416435] do_syscall_64+0x33/0x40 [ 1952.417266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.418542] RIP: 0033:0x7ff6be2aab19 [ 1952.419536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.423648] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1952.425346] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1952.426932] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1952.428518] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1952.430085] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1952.431653] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:12:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 46) 22:12:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 48) 22:12:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000001080)) 22:12:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x800000) [ 1952.556451] FAULT_INJECTION: forcing a failure. [ 1952.556451] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.558982] CPU: 1 PID: 9775 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1952.560460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.562233] Call Trace: [ 1952.562800] dump_stack+0x107/0x167 [ 1952.563584] should_fail.cold+0x5/0xa [ 1952.564416] ? create_object.isra.0+0x3a/0xa30 [ 1952.565391] should_failslab+0x5/0x20 [ 1952.566205] kmem_cache_alloc+0x5b/0x310 [ 1952.567076] ? mark_held_locks+0x9e/0xe0 [ 1952.567962] create_object.isra.0+0x3a/0xa30 [ 1952.568905] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.570002] kmem_cache_alloc+0x159/0x310 [ 1952.570754] FAULT_INJECTION: forcing a failure. [ 1952.570754] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.570901] xas_alloc+0x336/0x440 [ 1952.574011] xas_create+0x34a/0x10d0 [ 1952.574827] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1952.575967] xas_store+0x8c/0x1c40 [ 1952.576748] __xa_store+0x164/0x2d0 [ 1952.577532] ? xa_delete_node+0x280/0x280 [ 1952.578429] ? trace_hardirqs_on+0x5b/0x180 [ 1952.579361] xa_store+0x31/0x50 [ 1952.580092] __io_uring_add_tctx_node+0x1cf/0x520 [ 1952.581110] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1952.582211] ? alloc_fd+0x2e7/0x670 [ 1952.582999] io_uring_setup+0x1fbb/0x2980 [ 1952.583890] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1952.584952] ? wait_for_completion_io+0x270/0x270 [ 1952.585995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.587098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.588204] do_syscall_64+0x33/0x40 [ 1952.589000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.590088] RIP: 0033:0x7ff6be2aab19 [ 1952.590869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.594744] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1952.596367] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1952.597864] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1952.599362] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1952.600880] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1952.602378] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1952.603920] CPU: 0 PID: 9776 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1952.605387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.607152] Call Trace: [ 1952.607747] dump_stack+0x107/0x167 [ 1952.608536] should_fail.cold+0x5/0xa [ 1952.609349] ? create_object.isra.0+0x3a/0xa30 [ 1952.610317] should_failslab+0x5/0x20 [ 1952.611132] kmem_cache_alloc+0x5b/0x310 [ 1952.612012] ? mark_held_locks+0x9e/0xe0 [ 1952.612893] create_object.isra.0+0x3a/0xa30 [ 1952.613831] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.614909] kmem_cache_alloc+0x159/0x310 [ 1952.615812] xas_alloc+0x336/0x440 [ 1952.616573] xas_create+0x34a/0x10d0 [ 1952.617393] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1952.618504] xas_store+0x8c/0x1c40 [ 1952.619290] __xa_store+0x164/0x2d0 [ 1952.620094] ? xa_delete_node+0x280/0x280 [ 1952.620987] ? trace_hardirqs_on+0x5b/0x180 [ 1952.621915] xa_store+0x31/0x50 [ 1952.622614] __io_uring_add_tctx_node+0x1cf/0x520 [ 1952.623642] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1952.624755] ? alloc_fd+0x2e7/0x670 [ 1952.625547] io_uring_setup+0x1fbb/0x2980 [ 1952.626435] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1952.627493] ? wait_for_completion_io+0x270/0x270 [ 1952.628558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.629664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.630765] do_syscall_64+0x33/0x40 [ 1952.631571] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.632654] RIP: 0033:0x7f6ebd7dfb19 [ 1952.633438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.637274] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1952.638876] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1952.640385] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1952.641889] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1952.643391] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1952.644906] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:07 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 22:12:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 31) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:12:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x8, 0x5, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) bind$packet(r1, &(0x7f0000000180)={0x11, 0x6, r2, 0x1, 0xbb, 0x6, @remote}, 0x14) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x5}, 0x4) 22:12:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 50) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1952.709326] FAULT_INJECTION: forcing a failure. [ 1952.709326] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.711842] CPU: 1 PID: 9786 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1952.713308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.715060] Call Trace: [ 1952.715617] dump_stack+0x107/0x167 [ 1952.716408] should_fail.cold+0x5/0xa [ 1952.717216] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1952.718326] should_failslab+0x5/0x20 [ 1952.719126] kmem_cache_alloc_trace+0x55/0x320 [ 1952.720105] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1952.721172] ? io_import_iovec+0x1120/0x1120 [ 1952.722103] ? lock_downgrade+0x6d0/0x6d0 [ 1952.722976] ? do_raw_spin_lock+0x121/0x260 [ 1952.723888] ? rwlock_bug.part.0+0x90/0x90 [ 1952.724792] __io_uring_add_tctx_node+0x2c6/0x520 [ 1952.725806] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1952.726920] ? alloc_fd+0x2e7/0x670 [ 1952.727717] io_uring_setup+0x1fbb/0x2980 [ 1952.728615] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1952.729692] ? wait_for_completion_io+0x270/0x270 [ 1952.730738] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.731854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.732953] do_syscall_64+0x33/0x40 [ 1952.733748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.734833] RIP: 0033:0x7fc72ff08b19 [ 1952.735637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.739552] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1952.741177] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1952.742676] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1952.744223] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1952.745755] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1952.747285] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1952.802959] FAULT_INJECTION: forcing a failure. [ 1952.802959] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.805661] CPU: 1 PID: 9792 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1952.807233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.809017] Call Trace: [ 1952.809630] dump_stack+0x107/0x167 [ 1952.810464] should_fail.cold+0x5/0xa [ 1952.811218] ? create_object.isra.0+0x3a/0xa30 [ 1952.812155] should_failslab+0x5/0x20 [ 1952.812915] kmem_cache_alloc+0x5b/0x310 [ 1952.813734] ? mark_held_locks+0x9e/0xe0 [ 1952.814557] create_object.isra.0+0x3a/0xa30 [ 1952.815434] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.816466] kmem_cache_alloc+0x159/0x310 [ 1952.817316] xas_alloc+0x336/0x440 [ 1952.818047] xas_create+0x34a/0x10d0 [ 1952.818824] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1952.819887] xas_store+0x8c/0x1c40 [ 1952.820616] __xa_store+0x164/0x2d0 [ 1952.821360] ? xa_delete_node+0x280/0x280 [ 1952.822210] ? trace_hardirqs_on+0x5b/0x180 [ 1952.823101] xa_store+0x31/0x50 [ 1952.823787] __io_uring_add_tctx_node+0x1cf/0x520 [ 1952.824767] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1952.825843] ? alloc_fd+0x2e7/0x670 [ 1952.826596] io_uring_setup+0x1fbb/0x2980 [ 1952.827451] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1952.828491] ? wait_for_completion_io+0x270/0x270 [ 1952.829489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.830557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.831630] do_syscall_64+0x33/0x40 [ 1952.832403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.833463] RIP: 0033:0x7f89589a3b19 [ 1952.834234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.838033] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1952.839635] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1952.841073] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1952.842548] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1952.844003] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1952.845509] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 51) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:12:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001080)) 22:12:21 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1966.391127] FAULT_INJECTION: forcing a failure. 22:12:21 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x20ffb000, 0x0, 0x0) 22:12:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xb0ff20) [ 1966.391127] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.393695] CPU: 1 PID: 9805 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1966.395141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.396893] Call Trace: [ 1966.397458] dump_stack+0x107/0x167 [ 1966.398232] should_fail.cold+0x5/0xa [ 1966.399066] ? create_object.isra.0+0x3a/0xa30 [ 1966.400023] should_failslab+0x5/0x20 [ 1966.400834] kmem_cache_alloc+0x5b/0x310 [ 1966.401704] create_object.isra.0+0x3a/0xa30 [ 1966.402624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1966.403701] kmem_cache_alloc_trace+0x151/0x320 [ 1966.404707] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1966.405775] ? io_import_iovec+0x1120/0x1120 [ 1966.406684] ? lock_downgrade+0x6d0/0x6d0 [ 1966.407553] ? do_raw_spin_lock+0x121/0x260 [ 1966.408469] ? rwlock_bug.part.0+0x90/0x90 [ 1966.409365] __io_uring_add_tctx_node+0x2c6/0x520 [ 1966.410392] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1966.411493] ? alloc_fd+0x2e7/0x670 [ 1966.412285] io_uring_setup+0x1fbb/0x2980 [ 1966.413148] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1966.414208] ? wait_for_completion_io+0x270/0x270 [ 1966.415257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.416384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.417449] do_syscall_64+0x33/0x40 [ 1966.418240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.419316] RIP: 0033:0x7fc72ff08b19 [ 1966.420096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.423958] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1966.425546] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1966.427035] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1966.428530] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1966.430008] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1966.431502] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1966.453534] FAULT_INJECTION: forcing a failure. [ 1966.453534] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.456063] CPU: 0 PID: 9813 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1966.457503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.459247] Call Trace: [ 1966.459812] dump_stack+0x107/0x167 [ 1966.460598] should_fail.cold+0x5/0xa [ 1966.461407] ? xas_alloc+0x336/0x440 [ 1966.462201] should_failslab+0x5/0x20 [ 1966.463004] kmem_cache_alloc+0x5b/0x310 [ 1966.463916] xas_alloc+0x336/0x440 [ 1966.464677] xas_create+0x34a/0x10d0 22:12:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 47) 22:12:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 49) 22:12:21 executing program 5: timer_gettime(0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) timer_create(0x4, &(0x7f0000000100)={0x0, 0xe, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_gettime(r1, &(0x7f0000000180)) timer_gettime(r1, &(0x7f0000000280)) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) fallocate(r4, 0x40, 0x3, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000001c0)={0x0, r3}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x8eba71411b657dfb, &(0x7f0000000040)={@local, @empty, 0x0}, &(0x7f0000000080)=0xc) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x2, r5, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r6 = fork() r7 = getpid() ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000740)={&(0x7f00000006c0)=""/116, 0x74}) kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x4, 0xe0, 0x6, 0x1f, 0x0, 0x0, 0x10108, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d, 0x4, @perf_config_ext={0xf55, 0x1ac3bd10}, 0x10, 0x81, 0x7, 0x0, 0x401, 0xf8, 0x99f8, 0x0, 0xfffffffa, 0x0, 0x8000}, r7, 0x9, 0xffffffffffffffff, 0x0) [ 1966.465487] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1966.466816] xas_store+0x8c/0x1c40 [ 1966.467589] __xa_store+0x164/0x2d0 [ 1966.468364] ? xa_delete_node+0x280/0x280 [ 1966.469235] ? trace_hardirqs_on+0x5b/0x180 [ 1966.470134] xa_store+0x31/0x50 [ 1966.470821] __io_uring_add_tctx_node+0x1cf/0x520 [ 1966.471819] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1966.472902] ? alloc_fd+0x2e7/0x670 [ 1966.473682] io_uring_setup+0x1fbb/0x2980 [ 1966.474557] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1966.475592] ? wait_for_completion_io+0x270/0x270 [ 1966.476633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.477710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.478787] do_syscall_64+0x33/0x40 [ 1966.479568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.480622] RIP: 0033:0x7f89589a3b19 [ 1966.481397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.482878] FAULT_INJECTION: forcing a failure. [ 1966.482878] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.485161] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1966.485184] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1966.485196] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1966.485208] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1966.485229] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1966.495407] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1966.496923] CPU: 1 PID: 9815 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1966.498728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.500877] Call Trace: [ 1966.501609] dump_stack+0x107/0x167 [ 1966.502555] should_fail.cold+0x5/0xa [ 1966.503537] ? xas_alloc+0x336/0x440 [ 1966.504517] should_failslab+0x5/0x20 [ 1966.505488] kmem_cache_alloc+0x5b/0x310 [ 1966.506538] xas_alloc+0x336/0x440 [ 1966.507450] xas_create+0x34a/0x10d0 [ 1966.508435] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1966.509781] xas_store+0x8c/0x1c40 [ 1966.510555] __xa_store+0x164/0x2d0 [ 1966.511493] ? xa_delete_node+0x280/0x280 [ 1966.512579] ? trace_hardirqs_on+0x5b/0x180 [ 1966.513681] xa_store+0x31/0x50 [ 1966.514526] __io_uring_add_tctx_node+0x1cf/0x520 [ 1966.515749] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1966.517113] ? alloc_fd+0x2e7/0x670 [ 1966.518057] io_uring_setup+0x1fbb/0x2980 [ 1966.519128] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1966.520417] ? wait_for_completion_io+0x270/0x270 [ 1966.521689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.523041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.524367] do_syscall_64+0x33/0x40 [ 1966.525312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.526627] RIP: 0033:0x7ff6be2aab19 [ 1966.527574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.532290] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1966.532377] FAULT_INJECTION: forcing a failure. [ 1966.532377] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.534236] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1966.534249] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1966.534261] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1966.534277] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 22:12:21 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 33) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:12:21 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xff600000, 0x0, 0x0) [ 1966.534294] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1966.544654] CPU: 0 PID: 9819 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1966.546033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.547705] Call Trace: [ 1966.548263] dump_stack+0x107/0x167 [ 1966.549006] should_fail.cold+0x5/0xa [ 1966.549778] ? io_wq_create+0xeb/0xc00 [ 1966.550564] should_failslab+0x5/0x20 [ 1966.551323] __kmalloc+0x72/0x390 [ 1966.552038] io_wq_create+0xeb/0xc00 [ 1966.552800] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1966.553817] ? io_import_iovec+0x1120/0x1120 [ 1966.554689] ? io_apoll_task_func+0x2d0/0x2d0 [ 1966.555575] ? __io_req_find_next+0x300/0x300 [ 1966.556469] ? do_raw_spin_lock+0x121/0x260 [ 1966.557327] ? rwlock_bug.part.0+0x90/0x90 [ 1966.558189] __io_uring_add_tctx_node+0x2c6/0x520 [ 1966.559151] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1966.560189] ? alloc_fd+0x2e7/0x670 [ 1966.560936] io_uring_setup+0x1fbb/0x2980 [ 1966.561769] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1966.562768] ? wait_for_completion_io+0x270/0x270 [ 1966.563758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.563852] FAULT_INJECTION: forcing a failure. [ 1966.563852] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.564799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.564829] do_syscall_64+0x33/0x40 [ 1966.564849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.564871] RIP: 0033:0x7fc72ff08b19 [ 1966.570944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.574539] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1966.576049] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1966.577448] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1966.578837] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1966.580238] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1966.581634] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1966.583080] CPU: 1 PID: 9822 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1966.584570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.586321] Call Trace: [ 1966.586904] dump_stack+0x107/0x167 [ 1966.587681] should_fail.cold+0x5/0xa [ 1966.588509] ? xas_alloc+0x336/0x440 [ 1966.589305] should_failslab+0x5/0x20 [ 1966.590119] kmem_cache_alloc+0x5b/0x310 [ 1966.590994] xas_alloc+0x336/0x440 [ 1966.591778] xas_create+0x34a/0x10d0 [ 1966.592609] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1966.593723] xas_store+0x8c/0x1c40 [ 1966.594508] __xa_store+0x164/0x2d0 [ 1966.595286] ? xa_delete_node+0x280/0x280 [ 1966.596199] ? trace_hardirqs_on+0x5b/0x180 [ 1966.597130] xa_store+0x31/0x50 [ 1966.597852] __io_uring_add_tctx_node+0x1cf/0x520 [ 1966.598874] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1966.599997] ? alloc_fd+0x2e7/0x670 [ 1966.600789] io_uring_setup+0x1fbb/0x2980 [ 1966.601692] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1966.602772] ? wait_for_completion_io+0x270/0x270 [ 1966.603830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.604971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.606071] do_syscall_64+0x33/0x40 [ 1966.606871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.607974] RIP: 0033:0x7f6ebd7dfb19 [ 1966.608771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.612653] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1966.614263] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1966.615767] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1966.617295] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1966.618799] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1966.620315] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x17, 0x0, &(0x7f0000001080)) 22:12:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 52) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:12:21 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 34) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:12:21 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x2000000000, 0x0, 0x0) 22:12:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xf0ff1f) [ 1966.788903] FAULT_INJECTION: forcing a failure. [ 1966.788903] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.790920] CPU: 0 PID: 9839 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1966.792114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.793563] Call Trace: [ 1966.794025] dump_stack+0x107/0x167 [ 1966.794668] should_fail.cold+0x5/0xa [ 1966.795344] ? create_object.isra.0+0x3a/0xa30 [ 1966.795667] FAULT_INJECTION: forcing a failure. [ 1966.795667] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.796147] should_failslab+0x5/0x20 [ 1966.796164] kmem_cache_alloc+0x5b/0x310 [ 1966.796190] ? mark_held_locks+0x9e/0xe0 [ 1966.800575] create_object.isra.0+0x3a/0xa30 [ 1966.801342] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1966.802227] kmem_cache_alloc+0x159/0x310 [ 1966.802964] xas_alloc+0x336/0x440 [ 1966.803590] xas_create+0x34a/0x10d0 [ 1966.804261] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1966.805165] xas_store+0x8c/0x1c40 [ 1966.805815] __xa_store+0x164/0x2d0 [ 1966.806447] ? xa_delete_node+0x280/0x280 [ 1966.807185] ? trace_hardirqs_on+0x5b/0x180 [ 1966.807951] xa_store+0x31/0x50 [ 1966.808531] __io_uring_add_tctx_node+0x1cf/0x520 [ 1966.809370] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1966.810274] ? alloc_fd+0x2e7/0x670 [ 1966.810922] io_uring_setup+0x1fbb/0x2980 [ 1966.811652] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1966.812547] ? wait_for_completion_io+0x270/0x270 [ 1966.813410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.814324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.815213] do_syscall_64+0x33/0x40 [ 1966.815859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.816739] RIP: 0033:0x7f89589a3b19 [ 1966.817385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.820528] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1966.821820] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1966.823032] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1966.824247] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1966.825447] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1966.826652] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1966.827933] CPU: 1 PID: 9840 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1966.829404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.831153] Call Trace: [ 1966.831737] dump_stack+0x107/0x167 [ 1966.832543] should_fail.cold+0x5/0xa [ 1966.833376] ? create_object.isra.0+0x3a/0xa30 [ 1966.834353] should_failslab+0x5/0x20 [ 1966.835168] kmem_cache_alloc+0x5b/0x310 [ 1966.836066] create_object.isra.0+0x3a/0xa30 [ 1966.837001] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1966.838095] __kmalloc+0x16e/0x390 [ 1966.838869] io_wq_create+0xeb/0xc00 [ 1966.839675] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1966.840777] ? io_import_iovec+0x1120/0x1120 [ 1966.841718] ? io_apoll_task_func+0x2d0/0x2d0 [ 1966.842672] ? __io_req_find_next+0x300/0x300 [ 1966.843620] ? do_raw_spin_lock+0x121/0x260 [ 1966.844560] ? rwlock_bug.part.0+0x90/0x90 [ 1966.845470] __io_uring_add_tctx_node+0x2c6/0x520 [ 1966.846494] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1966.847609] ? alloc_fd+0x2e7/0x670 [ 1966.848416] io_uring_setup+0x1fbb/0x2980 [ 1966.849314] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1966.850395] ? wait_for_completion_io+0x270/0x270 [ 1966.851454] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.852579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.853678] do_syscall_64+0x33/0x40 [ 1966.854478] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.855573] RIP: 0033:0x7fc72ff08b19 [ 1966.856379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.860291] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1966.861912] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1966.863431] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1966.864965] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1966.866481] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1966.868007] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 53) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:12:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x600, 0x0, &(0x7f0000001080)) [ 1980.023039] FAULT_INJECTION: forcing a failure. [ 1980.023039] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.025063] CPU: 1 PID: 9858 Comm: syz-executor.3 Not tainted 5.10.252 #1 22:12:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 50) 22:12:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 35) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 1980.026051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.028262] Call Trace: [ 1980.028954] dump_stack+0x107/0x167 [ 1980.029892] should_fail.cold+0x5/0xa [ 1980.030866] ? xas_alloc+0x336/0x440 [ 1980.031822] should_failslab+0x5/0x20 [ 1980.032807] kmem_cache_alloc+0x5b/0x310 [ 1980.033863] xas_alloc+0x336/0x440 [ 1980.034781] xas_create+0x34a/0x10d0 [ 1980.035741] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 22:12:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1f}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x8000002d) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r4}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000001) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="0c14b95d5df2dfc07d21f9bb36463fff84f3ab3ebdec", 0x16, 0x1, &(0x7f00000000c0)={0x11, 0x11, r5, 0x1, 0x8}, 0x14) 22:12:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 48) 22:12:35 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) 22:12:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x1ffff000) [ 1980.037185] xas_store+0x8c/0x1c40 [ 1980.038234] __xa_store+0x164/0x2d0 [ 1980.039156] ? xa_delete_node+0x280/0x280 [ 1980.039459] FAULT_INJECTION: forcing a failure. [ 1980.039459] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.040237] ? trace_hardirqs_on+0x5b/0x180 [ 1980.040272] xa_store+0x31/0x50 [ 1980.043442] __io_uring_add_tctx_node+0x1cf/0x520 [ 1980.044652] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1980.045974] ? alloc_fd+0x2e7/0x670 [ 1980.046918] io_uring_setup+0x1fbb/0x2980 [ 1980.047975] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.049260] ? wait_for_completion_io+0x270/0x270 [ 1980.050499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.051823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.053142] do_syscall_64+0x33/0x40 [ 1980.054078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.055377] RIP: 0033:0x7f89589a3b19 [ 1980.056329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.060984] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.062891] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1980.064704] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1980.066498] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1980.068296] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1980.070082] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1980.071904] CPU: 0 PID: 9860 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1980.072724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.073683] Call Trace: [ 1980.074002] dump_stack+0x107/0x167 [ 1980.074430] should_fail.cold+0x5/0xa [ 1980.074881] ? create_object.isra.0+0x3a/0xa30 [ 1980.075411] should_failslab+0x5/0x20 [ 1980.075852] kmem_cache_alloc+0x5b/0x310 [ 1980.076334] create_object.isra.0+0x3a/0xa30 [ 1980.076838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.077427] __kmalloc+0x16e/0x390 [ 1980.077848] io_wq_create+0xeb/0xc00 [ 1980.078285] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1980.078872] ? io_import_iovec+0x1120/0x1120 [ 1980.079379] ? io_apoll_task_func+0x2d0/0x2d0 [ 1980.079897] ? __io_req_find_next+0x300/0x300 [ 1980.080422] ? do_raw_spin_lock+0x121/0x260 [ 1980.080930] ? rwlock_bug.part.0+0x90/0x90 [ 1980.081428] __io_uring_add_tctx_node+0x2c6/0x520 [ 1980.081987] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1980.082590] ? alloc_fd+0x2e7/0x670 [ 1980.083027] io_uring_setup+0x1fbb/0x2980 [ 1980.083514] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.084105] ? wait_for_completion_io+0x270/0x270 [ 1980.084690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.085299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.085900] do_syscall_64+0x33/0x40 [ 1980.086331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.086931] RIP: 0033:0x7fc72ff08b19 [ 1980.087358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.089472] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.090355] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1980.091185] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1980.092016] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1980.092829] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1980.093648] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1980.102320] FAULT_INJECTION: forcing a failure. [ 1980.102320] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.103659] CPU: 0 PID: 9857 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1980.104457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.105414] Call Trace: [ 1980.105721] dump_stack+0x107/0x167 [ 1980.106150] should_fail.cold+0x5/0xa [ 1980.106597] ? create_object.isra.0+0x3a/0xa30 [ 1980.107140] should_failslab+0x5/0x20 [ 1980.107582] kmem_cache_alloc+0x5b/0x310 [ 1980.108062] ? mark_held_locks+0x9e/0xe0 [ 1980.108537] create_object.isra.0+0x3a/0xa30 [ 1980.109048] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.109645] kmem_cache_alloc+0x159/0x310 [ 1980.110134] xas_alloc+0x336/0x440 [ 1980.110553] xas_create+0x34a/0x10d0 [ 1980.110998] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.111609] xas_store+0x8c/0x1c40 [ 1980.112051] __xa_store+0x164/0x2d0 [ 1980.112479] ? xa_delete_node+0x280/0x280 [ 1980.112974] ? trace_hardirqs_on+0x5b/0x180 [ 1980.113480] xa_store+0x31/0x50 [ 1980.113874] __io_uring_add_tctx_node+0x1cf/0x520 [ 1980.114432] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1980.115032] ? alloc_fd+0x2e7/0x670 [ 1980.115467] io_uring_setup+0x1fbb/0x2980 [ 1980.115959] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.116562] ? wait_for_completion_io+0x270/0x270 [ 1980.117139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.117746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.118344] do_syscall_64+0x33/0x40 [ 1980.118778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.119367] RIP: 0033:0x7f6ebd7dfb19 [ 1980.119797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.121906] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.122785] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1980.123603] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1980.124436] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1980.125262] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1980.126085] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1980.130678] FAULT_INJECTION: forcing a failure. [ 1980.130678] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.132189] CPU: 0 PID: 9868 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1980.132977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.133929] Call Trace: [ 1980.134237] dump_stack+0x107/0x167 [ 1980.134662] should_fail.cold+0x5/0xa [ 1980.135104] ? create_object.isra.0+0x3a/0xa30 [ 1980.135631] should_failslab+0x5/0x20 [ 1980.136084] kmem_cache_alloc+0x5b/0x310 [ 1980.136553] ? mark_held_locks+0x9e/0xe0 [ 1980.137031] create_object.isra.0+0x3a/0xa30 [ 1980.137534] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.138126] kmem_cache_alloc+0x159/0x310 [ 1980.138614] xas_alloc+0x336/0x440 [ 1980.139029] xas_create+0x34a/0x10d0 [ 1980.139472] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.140094] xas_store+0x8c/0x1c40 [ 1980.140522] __xa_store+0x164/0x2d0 [ 1980.140950] ? xa_delete_node+0x280/0x280 [ 1980.141435] ? trace_hardirqs_on+0x5b/0x180 [ 1980.141945] xa_store+0x31/0x50 [ 1980.142328] __io_uring_add_tctx_node+0x1cf/0x520 [ 1980.142886] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1980.143491] ? alloc_fd+0x2e7/0x670 [ 1980.143924] io_uring_setup+0x1fbb/0x2980 [ 1980.144421] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.145008] ? wait_for_completion_io+0x270/0x270 [ 1980.145589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.146201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.146801] do_syscall_64+0x33/0x40 [ 1980.147232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.147823] RIP: 0033:0x7ff6be2aab19 [ 1980.148275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.150399] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.151292] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1980.152125] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1980.152947] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1980.153762] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1980.154587] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 54) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:12:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x900, 0x0, &(0x7f0000001080)) 22:12:35 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xf4a8e7f0000, 0x0, 0x0) 22:12:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa00, 0x0, &(0x7f0000001080)) 22:12:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 36) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:12:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) [ 1980.256690] FAULT_INJECTION: forcing a failure. [ 1980.256690] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.258814] CPU: 1 PID: 9881 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1980.260098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.261686] Call Trace: [ 1980.262182] dump_stack+0x107/0x167 22:12:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) [ 1980.262867] should_fail.cold+0x5/0xa [ 1980.263677] ? create_object.isra.0+0x3a/0xa30 [ 1980.264365] should_failslab+0x5/0x20 [ 1980.264959] kmem_cache_alloc+0x5b/0x310 [ 1980.265602] ? mark_held_locks+0x9e/0xe0 [ 1980.266241] create_object.isra.0+0x3a/0xa30 [ 1980.266934] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.267737] kmem_cache_alloc+0x159/0x310 [ 1980.268405] xas_alloc+0x336/0x440 [ 1980.268959] xas_create+0x34a/0x10d0 [ 1980.269553] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.270375] xas_store+0x8c/0x1c40 [ 1980.270945] __xa_store+0x164/0x2d0 [ 1980.271513] ? xa_delete_node+0x280/0x280 [ 1980.272169] ? trace_hardirqs_on+0x5b/0x180 [ 1980.272851] xa_store+0x31/0x50 [ 1980.273363] __io_uring_add_tctx_node+0x1cf/0x520 [ 1980.274109] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1980.274923] ? alloc_fd+0x2e7/0x670 [ 1980.275506] io_uring_setup+0x1fbb/0x2980 [ 1980.276173] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.276954] ? wait_for_completion_io+0x270/0x270 [ 1980.277711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.278541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.279341] do_syscall_64+0x33/0x40 [ 1980.279928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.280718] RIP: 0033:0x7f89589a3b19 [ 1980.281303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.284164] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.285348] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1980.286456] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1980.287587] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1980.288711] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1980.289827] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 49) 22:12:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 51) [ 1980.333884] FAULT_INJECTION: forcing a failure. [ 1980.333884] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.335335] CPU: 0 PID: 9890 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1980.336129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.337080] Call Trace: [ 1980.337391] dump_stack+0x107/0x167 [ 1980.337818] should_fail.cold+0x5/0xa [ 1980.338259] ? create_object.isra.0+0x3a/0xa30 [ 1980.338789] should_failslab+0x5/0x20 [ 1980.339226] kmem_cache_alloc+0x5b/0x310 [ 1980.339698] ? io_wq_create+0x114/0xc00 [ 1980.340169] create_object.isra.0+0x3a/0xa30 [ 1980.340674] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.341264] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1980.341856] io_wq_create+0x6ef/0xc00 [ 1980.342304] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1980.342892] ? io_import_iovec+0x1120/0x1120 [ 1980.343397] ? io_apoll_task_func+0x2d0/0x2d0 [ 1980.343914] ? __io_req_find_next+0x300/0x300 [ 1980.344435] ? do_raw_spin_lock+0x121/0x260 [ 1980.344932] ? rwlock_bug.part.0+0x90/0x90 [ 1980.345424] __io_uring_add_tctx_node+0x2c6/0x520 [ 1980.345982] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1980.346584] ? alloc_fd+0x2e7/0x670 [ 1980.347019] io_uring_setup+0x1fbb/0x2980 [ 1980.347507] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.348098] ? wait_for_completion_io+0x270/0x270 [ 1980.348677] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.349283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.349880] do_syscall_64+0x33/0x40 [ 1980.350313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.350533] FAULT_INJECTION: forcing a failure. [ 1980.350533] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.350898] RIP: 0033:0x7fc72ff08b19 [ 1980.350910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.350917] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.350930] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1980.350944] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1980.357630] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1980.358449] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1980.359267] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1980.360128] CPU: 1 PID: 9896 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1980.361197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.362484] Call Trace: [ 1980.362898] dump_stack+0x107/0x167 [ 1980.363461] should_fail.cold+0x5/0xa [ 1980.364045] ? xas_alloc+0x336/0x440 [ 1980.364622] should_failslab+0x5/0x20 [ 1980.365197] kmem_cache_alloc+0x5b/0x310 [ 1980.365823] xas_alloc+0x336/0x440 [ 1980.366373] xas_create+0x34a/0x10d0 [ 1980.366959] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.367759] xas_store+0x8c/0x1c40 [ 1980.368330] __xa_store+0x164/0x2d0 [ 1980.368878] ? xa_delete_node+0x280/0x280 [ 1980.369531] ? trace_hardirqs_on+0x5b/0x180 [ 1980.370198] xa_store+0x31/0x50 [ 1980.370726] __io_uring_add_tctx_node+0x1cf/0x520 [ 1980.371466] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1980.372278] ? alloc_fd+0x2e7/0x670 [ 1980.372843] io_uring_setup+0x1fbb/0x2980 [ 1980.373497] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.374264] ? wait_for_completion_io+0x270/0x270 [ 1980.374994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.375790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.376578] do_syscall_64+0x33/0x40 [ 1980.377140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.377923] RIP: 0033:0x7ff6be2aab19 [ 1980.378497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.381321] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.382463] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1980.383538] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1980.384606] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1980.385679] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1980.386764] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1980.391916] FAULT_INJECTION: forcing a failure. [ 1980.391916] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.393766] CPU: 1 PID: 9897 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1980.394836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.396094] Call Trace: [ 1980.396499] dump_stack+0x107/0x167 [ 1980.397068] should_fail.cold+0x5/0xa [ 1980.397649] ? xas_alloc+0x336/0x440 [ 1980.398227] should_failslab+0x5/0x20 [ 1980.398800] kmem_cache_alloc+0x5b/0x310 [ 1980.399437] xas_alloc+0x336/0x440 [ 1980.399992] xas_create+0x34a/0x10d0 [ 1980.400546] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.401347] xas_store+0x8c/0x1c40 [ 1980.401907] __xa_store+0x164/0x2d0 [ 1980.402465] ? xa_delete_node+0x280/0x280 [ 1980.403081] ? trace_hardirqs_on+0x5b/0x180 [ 1980.403715] xa_store+0x31/0x50 [ 1980.404216] __io_uring_add_tctx_node+0x1cf/0x520 [ 1980.404953] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1980.405736] ? alloc_fd+0x2e7/0x670 [ 1980.406278] io_uring_setup+0x1fbb/0x2980 [ 1980.406903] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.407666] ? wait_for_completion_io+0x270/0x270 [ 1980.408399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.409173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.409941] do_syscall_64+0x33/0x40 [ 1980.410494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.411271] RIP: 0033:0x7f6ebd7dfb19 [ 1980.411830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.414518] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.415648] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1980.416695] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1980.417742] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1980.418806] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1980.419849] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb00, 0x0, &(0x7f0000001080)) 22:12:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x26c000, 0x0) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000001c0)={0x0, r3}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) 22:12:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 50) 22:12:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 37) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:12:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x20ffb000) 22:12:49 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xf4b8e7f0000, 0x0, 0x0) 22:12:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 52) 22:12:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 55) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 1994.112473] FAULT_INJECTION: forcing a failure. [ 1994.112473] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.113865] CPU: 0 PID: 9914 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1994.114645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.115601] Call Trace: [ 1994.115915] dump_stack+0x107/0x167 [ 1994.116349] should_fail.cold+0x5/0xa [ 1994.116793] ? create_object.isra.0+0x3a/0xa30 [ 1994.117323] should_failslab+0x5/0x20 [ 1994.117761] kmem_cache_alloc+0x5b/0x310 [ 1994.118230] ? mark_held_locks+0x9e/0xe0 [ 1994.118703] create_object.isra.0+0x3a/0xa30 [ 1994.119204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.119801] kmem_cache_alloc+0x159/0x310 [ 1994.120296] xas_alloc+0x336/0x440 [ 1994.120716] xas_create+0x34a/0x10d0 [ 1994.121161] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1994.121773] xas_store+0x8c/0x1c40 [ 1994.122197] __xa_store+0x164/0x2d0 [ 1994.122629] ? xa_delete_node+0x280/0x280 [ 1994.123121] ? trace_hardirqs_on+0x5b/0x180 [ 1994.123628] xa_store+0x31/0x50 [ 1994.124018] __io_uring_add_tctx_node+0x1cf/0x520 [ 1994.124583] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.125190] ? alloc_fd+0x2e7/0x670 [ 1994.125630] io_uring_setup+0x1fbb/0x2980 [ 1994.126119] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.126707] ? wait_for_completion_io+0x270/0x270 [ 1994.127286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.127895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.128500] do_syscall_64+0x33/0x40 [ 1994.128933] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.129527] RIP: 0033:0x7f6ebd7dfb19 [ 1994.129961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.132067] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.132953] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1994.133774] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.134593] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.135408] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.136236] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1994.141604] FAULT_INJECTION: forcing a failure. [ 1994.141604] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.142942] CPU: 0 PID: 9919 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1994.143738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.144708] Call Trace: [ 1994.145014] dump_stack+0x107/0x167 [ 1994.145440] should_fail.cold+0x5/0xa [ 1994.145884] ? xas_alloc+0x336/0x440 [ 1994.146319] should_failslab+0x5/0x20 [ 1994.146760] kmem_cache_alloc+0x5b/0x310 [ 1994.147241] xas_alloc+0x336/0x440 [ 1994.147484] FAULT_INJECTION: forcing a failure. [ 1994.147484] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.147665] xas_create+0x34a/0x10d0 [ 1994.150980] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1994.151594] xas_store+0x8c/0x1c40 [ 1994.152026] __xa_store+0x164/0x2d0 [ 1994.152475] ? xa_delete_node+0x280/0x280 [ 1994.152964] ? trace_hardirqs_on+0x5b/0x180 [ 1994.153472] xa_store+0x31/0x50 [ 1994.153859] __io_uring_add_tctx_node+0x1cf/0x520 [ 1994.154427] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.155029] ? alloc_fd+0x2e7/0x670 [ 1994.155468] io_uring_setup+0x1fbb/0x2980 [ 1994.155957] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.156550] ? wait_for_completion_io+0x270/0x270 [ 1994.157132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.157751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.158359] do_syscall_64+0x33/0x40 [ 1994.158789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.159380] RIP: 0033:0x7f89589a3b19 [ 1994.159811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.161951] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.162835] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1994.163660] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.164492] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.165312] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.166137] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1994.167011] CPU: 1 PID: 9918 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1994.168508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.170288] Call Trace: [ 1994.170862] dump_stack+0x107/0x167 [ 1994.171650] should_fail.cold+0x5/0xa [ 1994.172469] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1994.173527] should_failslab+0x5/0x20 [ 1994.174336] kmem_cache_alloc_trace+0x55/0x320 [ 1994.175315] __io_uring_add_tctx_node+0x15c/0x520 [ 1994.176356] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.177472] ? alloc_fd+0x2e7/0x670 [ 1994.178256] io_uring_setup+0x1fbb/0x2980 [ 1994.179152] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.180244] ? wait_for_completion_io+0x270/0x270 [ 1994.181293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.182413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.183508] do_syscall_64+0x33/0x40 [ 1994.184309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.185397] RIP: 0033:0x7fc72ff08b19 [ 1994.186195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.190109] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.191725] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1994.193248] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.194762] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.196292] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.197810] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1994.209635] FAULT_INJECTION: forcing a failure. [ 1994.209635] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.210986] CPU: 0 PID: 9920 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1994.211772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.212735] Call Trace: [ 1994.213046] dump_stack+0x107/0x167 [ 1994.213474] should_fail.cold+0x5/0xa [ 1994.213919] ? create_object.isra.0+0x3a/0xa30 [ 1994.214444] should_failslab+0x5/0x20 [ 1994.214882] kmem_cache_alloc+0x5b/0x310 [ 1994.215354] ? mark_held_locks+0x9e/0xe0 [ 1994.215828] create_object.isra.0+0x3a/0xa30 [ 1994.216341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.216932] kmem_cache_alloc+0x159/0x310 [ 1994.217422] xas_alloc+0x336/0x440 [ 1994.217847] xas_create+0x34a/0x10d0 [ 1994.218291] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1994.218896] xas_store+0x8c/0x1c40 [ 1994.219325] __xa_store+0x164/0x2d0 [ 1994.219751] ? xa_delete_node+0x280/0x280 [ 1994.220248] ? trace_hardirqs_on+0x5b/0x180 [ 1994.220762] xa_store+0x31/0x50 [ 1994.221146] __io_uring_add_tctx_node+0x1cf/0x520 [ 1994.221700] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.222301] ? alloc_fd+0x2e7/0x670 [ 1994.222732] io_uring_setup+0x1fbb/0x2980 [ 1994.223221] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.223809] ? wait_for_completion_io+0x270/0x270 [ 1994.224396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.225003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.225603] do_syscall_64+0x33/0x40 [ 1994.226032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.226628] RIP: 0033:0x7ff6be2aab19 [ 1994.227058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.229200] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.230076] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1994.230902] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.231718] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.232545] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.233369] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 53) 22:12:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xc00, 0x0, &(0x7f0000001080)) 22:12:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 56) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:12:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 38) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:12:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) [ 1994.276588] FAULT_INJECTION: forcing a failure. [ 1994.276588] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.277921] CPU: 0 PID: 9927 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1994.278707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.279653] Call Trace: [ 1994.279968] dump_stack+0x107/0x167 [ 1994.280398] should_fail.cold+0x5/0xa [ 1994.280845] ? xas_alloc+0x336/0x440 [ 1994.281276] should_failslab+0x5/0x20 [ 1994.281716] kmem_cache_alloc+0x5b/0x310 [ 1994.282188] xas_alloc+0x336/0x440 [ 1994.282603] xas_create+0x34a/0x10d0 [ 1994.283046] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1994.283653] xas_store+0x8c/0x1c40 [ 1994.284080] __xa_store+0x164/0x2d0 [ 1994.284519] ? xa_delete_node+0x280/0x280 [ 1994.285011] ? trace_hardirqs_on+0x5b/0x180 [ 1994.285518] xa_store+0x31/0x50 [ 1994.285905] __io_uring_add_tctx_node+0x1cf/0x520 [ 1994.286465] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.287069] ? alloc_fd+0x2e7/0x670 [ 1994.287503] io_uring_setup+0x1fbb/0x2980 [ 1994.287993] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.288584] ? wait_for_completion_io+0x270/0x270 [ 1994.289165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.289770] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.290371] do_syscall_64+0x33/0x40 [ 1994.290807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.291397] RIP: 0033:0x7f6ebd7dfb19 [ 1994.291830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.293947] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.294828] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1994.295647] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.296478] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.297299] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.298123] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe00, 0x0, &(0x7f0000001080)) [ 1994.337331] FAULT_INJECTION: forcing a failure. [ 1994.337331] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.340115] CPU: 1 PID: 9936 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 1994.341592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.343355] Call Trace: [ 1994.343920] dump_stack+0x107/0x167 [ 1994.344717] should_fail.cold+0x5/0xa [ 1994.345529] ? create_object.isra.0+0x3a/0xa30 [ 1994.346504] should_failslab+0x5/0x20 [ 1994.347310] kmem_cache_alloc+0x5b/0x310 [ 1994.348182] ? mark_held_locks+0x9e/0xe0 [ 1994.349056] create_object.isra.0+0x3a/0xa30 [ 1994.349988] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.351072] kmem_cache_alloc+0x159/0x310 [ 1994.351955] xas_alloc+0x336/0x440 [ 1994.352719] xas_create+0x34a/0x10d0 [ 1994.353529] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1994.354647] xas_store+0x8c/0x1c40 [ 1994.355419] __xa_store+0x164/0x2d0 [ 1994.356202] ? xa_delete_node+0x280/0x280 [ 1994.357090] ? trace_hardirqs_on+0x5b/0x180 [ 1994.358015] xa_store+0x31/0x50 [ 1994.358722] __io_uring_add_tctx_node+0x1cf/0x520 [ 1994.359751] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.360864] ? alloc_fd+0x2e7/0x670 [ 1994.361649] io_uring_setup+0x1fbb/0x2980 [ 1994.362538] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.363611] ? wait_for_completion_io+0x270/0x270 [ 1994.364664] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.365774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.366875] do_syscall_64+0x33/0x40 [ 1994.367663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.368756] RIP: 0033:0x7f89589a3b19 [ 1994.369544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.373478] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.375099] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 1994.376616] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.378136] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.379640] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.381159] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 51) 22:12:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 54) [ 1994.396983] FAULT_INJECTION: forcing a failure. [ 1994.396983] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.399386] CPU: 1 PID: 9937 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 1994.400846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.402592] Call Trace: [ 1994.403156] dump_stack+0x107/0x167 [ 1994.403929] should_fail.cold+0x5/0xa [ 1994.404753] ? create_object.isra.0+0x3a/0xa30 [ 1994.405730] should_failslab+0x5/0x20 [ 1994.406543] kmem_cache_alloc+0x5b/0x310 [ 1994.407409] create_object.isra.0+0x3a/0xa30 [ 1994.408352] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.409437] kmem_cache_alloc_trace+0x151/0x320 [ 1994.410431] __io_uring_add_tctx_node+0x15c/0x520 [ 1994.411236] FAULT_INJECTION: forcing a failure. [ 1994.411236] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.411453] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.411474] ? alloc_fd+0x2e7/0x670 [ 1994.414636] io_uring_setup+0x1fbb/0x2980 [ 1994.415527] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.416607] ? wait_for_completion_io+0x270/0x270 [ 1994.417654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.418763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.419859] do_syscall_64+0x33/0x40 [ 1994.420658] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.421749] RIP: 0033:0x7fc72ff08b19 [ 1994.422558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.426449] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.428068] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 1994.429584] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.431090] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.432604] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.434109] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1994.435646] CPU: 0 PID: 9944 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 1994.436448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.437398] Call Trace: [ 1994.437711] dump_stack+0x107/0x167 [ 1994.438135] should_fail.cold+0x5/0xa [ 1994.438583] ? xas_alloc+0x336/0x440 [ 1994.439018] should_failslab+0x5/0x20 [ 1994.439456] kmem_cache_alloc+0x5b/0x310 [ 1994.439937] xas_alloc+0x336/0x440 [ 1994.440370] xas_create+0x34a/0x10d0 [ 1994.440817] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1994.441423] xas_store+0x8c/0x1c40 [ 1994.441853] __xa_store+0x164/0x2d0 [ 1994.442280] ? xa_delete_node+0x280/0x280 [ 1994.442770] ? trace_hardirqs_on+0x5b/0x180 [ 1994.443283] xa_store+0x31/0x50 [ 1994.443669] __io_uring_add_tctx_node+0x1cf/0x520 [ 1994.444233] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.444838] ? alloc_fd+0x2e7/0x670 [ 1994.445272] io_uring_setup+0x1fbb/0x2980 [ 1994.445762] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.446350] ? wait_for_completion_io+0x270/0x270 [ 1994.446931] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.447529] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.448127] do_syscall_64+0x33/0x40 [ 1994.448567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.449162] RIP: 0033:0x7ff6be2aab19 [ 1994.449590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.451694] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.452575] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 1994.453389] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.454204] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.455026] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.455847] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 1994.465166] FAULT_INJECTION: forcing a failure. [ 1994.465166] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.466479] CPU: 0 PID: 9945 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1994.467262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.468233] Call Trace: [ 1994.468546] dump_stack+0x107/0x167 [ 1994.468967] should_fail.cold+0x5/0xa [ 1994.469410] ? create_object.isra.0+0x3a/0xa30 [ 1994.469934] should_failslab+0x5/0x20 [ 1994.470371] kmem_cache_alloc+0x5b/0x310 [ 1994.470841] ? mark_held_locks+0x9e/0xe0 [ 1994.471311] create_object.isra.0+0x3a/0xa30 [ 1994.471817] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.472421] kmem_cache_alloc+0x159/0x310 [ 1994.472907] xas_alloc+0x336/0x440 [ 1994.473323] xas_create+0x34a/0x10d0 [ 1994.473762] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1994.474368] xas_store+0x8c/0x1c40 [ 1994.474795] __xa_store+0x164/0x2d0 [ 1994.475220] ? xa_delete_node+0x280/0x280 [ 1994.475705] ? trace_hardirqs_on+0x5b/0x180 [ 1994.476220] xa_store+0x31/0x50 [ 1994.476604] __io_uring_add_tctx_node+0x1cf/0x520 [ 1994.477165] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.477762] ? alloc_fd+0x2e7/0x670 [ 1994.478196] io_uring_setup+0x1fbb/0x2980 [ 1994.478685] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.479264] ? wait_for_completion_io+0x270/0x270 [ 1994.479843] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.480456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.481059] do_syscall_64+0x33/0x40 [ 1994.481487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.482073] RIP: 0033:0x7f6ebd7dfb19 [ 1994.482498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.484629] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.485520] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1994.486348] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.487196] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.488027] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.488865] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:12:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r2}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x51, 0x44d, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, 0x0, 0x80, 0x1, 0x220000}}) connect$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x81, 0x6, @broadcast}, 0x14) 22:12:49 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x2f4a8e7f0000, 0x0, 0x0) 22:12:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xf00, 0x0, &(0x7f0000001080)) 22:12:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xff600000) 22:12:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) 22:12:49 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x2f4b8e7f0000, 0x0, 0x0) 22:12:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 55) [ 1994.637033] FAULT_INJECTION: forcing a failure. [ 1994.637033] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.639465] CPU: 1 PID: 9968 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 1994.640921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.642664] Call Trace: [ 1994.643222] dump_stack+0x107/0x167 [ 1994.643989] should_fail.cold+0x5/0xa [ 1994.644812] ? xas_alloc+0x336/0x440 [ 1994.645597] should_failslab+0x5/0x20 [ 1994.646397] kmem_cache_alloc+0x5b/0x310 [ 1994.647254] xas_alloc+0x336/0x440 [ 1994.648003] xas_create+0x34a/0x10d0 [ 1994.648809] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1994.649910] xas_store+0x8c/0x1c40 [ 1994.650675] __xa_store+0x164/0x2d0 [ 1994.651440] ? xa_delete_node+0x280/0x280 [ 1994.652326] ? trace_hardirqs_on+0x5b/0x180 [ 1994.653252] xa_store+0x31/0x50 [ 1994.653950] __io_uring_add_tctx_node+0x1cf/0x520 [ 1994.654984] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1994.656103] ? alloc_fd+0x2e7/0x670 [ 1994.656902] io_uring_setup+0x1fbb/0x2980 [ 1994.657792] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.658854] ? wait_for_completion_io+0x270/0x270 [ 1994.659893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.661007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.662106] do_syscall_64+0x33/0x40 [ 1994.662890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.663981] RIP: 0033:0x7f6ebd7dfb19 [ 1994.664773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.668630] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.670223] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 1994.671724] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1994.673230] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1994.674731] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1994.676246] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x1100, 0x0, &(0x7f0000001080)) 22:13:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="a32a40cdfdb64f63c652e41a4f0637d1098c30639bb95c7cf55856e4c60d77f9a1bf965da226fbe4d231af1fb367c47a5590313ee7aad01f1aa68ad28bf0812d50767a8b5aeb47823326379132442bd887d1fce7bbf4f6a5b6adb406869c6a735e7e42878d3a3ca348cbb400ea01ef5e9c5c9712b936bf4be368582af0013406256466db0ff2fd762a14133c5aa5d3b7b344a26becf1a830f350148ef5112ffdeeee2311576b35186ed8e4e78b7e9ef8607f11c339952a71dbf5551f77c1e4", 0xbf}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000200)="79900344e6d3ff0d51e316376a147e9871c5c979343c1e898bf2d8fbacb3d21428ca879ee43a86a32579ae2f979e13082fe56744b5650b1acf75885b49b52d4bedee0b7c36600d6014f56b8a56bbd9439c25b3c8c92b2481f693ef4acf7f8f2aa6029711db0a5d12e9d8db366afe27cf6504186df7495d1a0ea2cfbce5f6b9408fc2eb1e580562d5d0dc6e215a58b458f11ae1ccc7210b750f26167c9a06440a0f64cdce3191a91e2f52d0a28ec8128dfc929e52647e4a09af4449d1c11d3c962fa05b2ab961eb7c58ed1b5386", 0xcd}, {&(0x7f0000000300)="975fff2750c5d49a1589ce43a2d4189c7fa0935807418238dc15595af09db5f1b8acecca0dbdd3aa339faaea0b66d2ef15df6918f72189fb641be50cb43caab6b5be6f9f6c3d9fda074248924aad65641f2fe8290f5037bc77e359b8f5708accd422bc3bce32866a0d472264f1d7b2e5a775162dc3dfda60adb07323453b3e33d90860382027fe94977d520556ad6658a48952acb9e872731177ef72acff86fc5bf0af409915215e0ebaed4b496add569438dccb48979bf37acd45fafcb3f46f8ff2893d037354690da1e5fb51bdf46db56d0f3922ace718ec08c8d513f7a96a06f437fe7e504410e3aaa761d3cc", 0xee}, {&(0x7f0000000400)="1bac44dc37093a8bdd95c04b4c7728deb2d381614b9330a73074ec4f6e646ae43d16addb564b700588e84c85296252d823e85e0c072b84273bb2b6f20257ebb10490552338aed4df39c40f50e776c5ec8b0a7e2b337b2ecf1ccf2aaf20", 0x5d}, {&(0x7f0000000480)="e5b2c0b4fb32b009053036b65c05d09a379dc10ef6dbb55b7044d8c9b8a920f746feb291eeaa474fe51123603414b9245cc5dc9b24a600b63215ec337409b8c4dd4d460c20355078aeb5bd19d446d71e6e0386e8d771fe65ea739c267e13", 0x5e}, {&(0x7f0000000500)="8e947a1fb846d8bde984ea5d730c3cfb7d923154b26a6902298faf29fee25e9a6ec09e10d3695e782c3bb62b0190936936d965462edeabdc539755a2214f6d9d051309db632de8bee0125ffb9c15c17688a48e395218dd5b997ab7058c07ebc9d12c86c320640c1651cf4504c75584c609decee7cc5a971b058253ca3472b7a6f11aefb6255bd6f8de407e048f537d4f56f4d36d425d19280b862c8d7da56547b5c4df17b0d41cea6f56d2250ebffb5e0d03858996473ad748d20bcef884712d90a502912eb8cbb5cb34767eaa62cce4100b706498dde6f9cf1d89322329998e74bcfd", 0xe3}, {&(0x7f0000000600)="1c9c3fca28dd2abf77337c", 0xb}], 0x6, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xf0}}], 0x2, 0x4004811) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) 22:13:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 56) 22:13:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 39) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:13:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 52) 22:13:02 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x60ffffffffff, 0x0, 0x0) 22:13:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000) 22:13:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 57) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2007.186091] FAULT_INJECTION: forcing a failure. [ 2007.186091] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.188614] CPU: 1 PID: 9983 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2007.190108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.191877] Call Trace: [ 2007.192446] dump_stack+0x107/0x167 [ 2007.193219] should_fail.cold+0x5/0xa [ 2007.194028] ? create_object.isra.0+0x3a/0xa30 [ 2007.194990] should_failslab+0x5/0x20 [ 2007.195795] kmem_cache_alloc+0x5b/0x310 [ 2007.196094] FAULT_INJECTION: forcing a failure. [ 2007.196094] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.196655] ? mark_held_locks+0x9e/0xe0 [ 2007.196682] create_object.isra.0+0x3a/0xa30 [ 2007.200783] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.201861] kmem_cache_alloc+0x159/0x310 [ 2007.202743] xas_alloc+0x336/0x440 [ 2007.203522] xas_create+0x34a/0x10d0 [ 2007.204359] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2007.205504] xas_store+0x8c/0x1c40 [ 2007.206296] __xa_store+0x164/0x2d0 [ 2007.207070] ? xa_delete_node+0x280/0x280 [ 2007.207950] ? trace_hardirqs_on+0x5b/0x180 [ 2007.208871] xa_store+0x31/0x50 [ 2007.209592] __io_uring_add_tctx_node+0x1cf/0x520 [ 2007.210612] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2007.211711] ? alloc_fd+0x2e7/0x670 [ 2007.212525] io_uring_setup+0x1fbb/0x2980 [ 2007.213431] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2007.214491] ? wait_for_completion_io+0x270/0x270 [ 2007.215535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.216684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.217809] do_syscall_64+0x33/0x40 [ 2007.218621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.219741] RIP: 0033:0x7ff6be2aab19 [ 2007.220560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.224491] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2007.226099] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 2007.227598] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2007.229131] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2007.230650] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2007.232171] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2007.233728] CPU: 0 PID: 9990 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2007.235206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.236982] Call Trace: [ 2007.237571] dump_stack+0x107/0x167 [ 2007.238359] should_fail.cold+0x5/0xa [ 2007.239190] ? xas_alloc+0x336/0x440 [ 2007.239982] should_failslab+0x5/0x20 [ 2007.240808] kmem_cache_alloc+0x5b/0x310 [ 2007.241681] xas_alloc+0x336/0x440 [ 2007.242445] xas_create+0x34a/0x10d0 [ 2007.243261] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2007.244389] xas_store+0x8c/0x1c40 [ 2007.244847] FAULT_INJECTION: forcing a failure. [ 2007.244847] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.245182] __xa_store+0x164/0x2d0 [ 2007.248254] ? xa_delete_node+0x280/0x280 [ 2007.249166] ? trace_hardirqs_on+0x5b/0x180 [ 2007.250107] xa_store+0x31/0x50 [ 2007.250820] __io_uring_add_tctx_node+0x1cf/0x520 [ 2007.251844] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2007.252956] ? alloc_fd+0x2e7/0x670 [ 2007.253753] io_uring_setup+0x1fbb/0x2980 [ 2007.254646] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2007.255729] ? wait_for_completion_io+0x270/0x270 [ 2007.256805] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.257920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.259029] do_syscall_64+0x33/0x40 [ 2007.259819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.260915] RIP: 0033:0x7fc72ff08b19 [ 2007.261704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.265596] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2007.267211] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2007.268728] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2007.270238] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2007.271767] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2007.273301] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2007.274884] CPU: 1 PID: 9992 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2007.276352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.278127] Call Trace: [ 2007.278693] dump_stack+0x107/0x167 [ 2007.279468] should_fail.cold+0x5/0xa [ 2007.280291] ? xas_alloc+0x336/0x440 [ 2007.281087] should_failslab+0x5/0x20 [ 2007.281902] kmem_cache_alloc+0x5b/0x310 [ 2007.282777] xas_alloc+0x336/0x440 [ 2007.283537] xas_create+0x34a/0x10d0 [ 2007.284348] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2007.285464] xas_store+0x8c/0x1c40 [ 2007.286235] __xa_store+0x164/0x2d0 [ 2007.287007] ? xa_delete_node+0x280/0x280 [ 2007.287897] ? trace_hardirqs_on+0x5b/0x180 [ 2007.288833] xa_store+0x31/0x50 [ 2007.289552] __io_uring_add_tctx_node+0x1cf/0x520 [ 2007.290599] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2007.291701] ? alloc_fd+0x2e7/0x670 [ 2007.292493] io_uring_setup+0x1fbb/0x2980 [ 2007.293392] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2007.294466] ? wait_for_completion_io+0x270/0x270 [ 2007.295517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.296634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.297738] do_syscall_64+0x33/0x40 [ 2007.298536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.299622] RIP: 0033:0x7f89589a3b19 [ 2007.300423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.304337] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2007.305980] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 2007.307501] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2007.309018] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2007.310545] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2007.312053] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 2007.325402] FAULT_INJECTION: forcing a failure. [ 2007.325402] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.327869] CPU: 1 PID: 9996 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2007.329347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.331095] Call Trace: [ 2007.331663] dump_stack+0x107/0x167 [ 2007.332444] should_fail.cold+0x5/0xa [ 2007.333253] ? create_object.isra.0+0x3a/0xa30 [ 2007.334240] should_failslab+0x5/0x20 [ 2007.335046] kmem_cache_alloc+0x5b/0x310 [ 2007.335907] ? mark_held_locks+0x9e/0xe0 [ 2007.336782] create_object.isra.0+0x3a/0xa30 [ 2007.337724] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.338813] kmem_cache_alloc+0x159/0x310 [ 2007.339700] xas_alloc+0x336/0x440 [ 2007.340475] xas_create+0x34a/0x10d0 [ 2007.341288] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2007.342402] xas_store+0x8c/0x1c40 [ 2007.343177] __xa_store+0x164/0x2d0 [ 2007.343955] ? xa_delete_node+0x280/0x280 [ 2007.344847] ? trace_hardirqs_on+0x5b/0x180 [ 2007.345770] xa_store+0x31/0x50 [ 2007.346474] __io_uring_add_tctx_node+0x1cf/0x520 [ 2007.347504] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2007.348626] ? alloc_fd+0x2e7/0x670 [ 2007.349410] io_uring_setup+0x1fbb/0x2980 [ 2007.350302] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2007.351394] ? wait_for_completion_io+0x270/0x270 [ 2007.352446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.353554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.354651] do_syscall_64+0x33/0x40 [ 2007.355441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.356536] RIP: 0033:0x7f6ebd7dfb19 [ 2007.357339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.361259] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2007.362887] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 2007.364404] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2007.365906] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 22:13:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="000000cb40000062725d5d696c653000330f62d87d47516a7bac049cd27a0d05"]) r4 = socket(0xb, 0x2, 0x36d8) r5 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x20000) getsockname$netlink(r5, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000440)=""/58, 0x3a) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r7) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x6, r7}, {0x2, 0x4, 0xee00}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x5, r8}], {}, [{0x8, 0x2, 0xee00}, {0x8, 0x7, 0xee01}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x4}, 0x4) openat(r3, &(0x7f0000000100)='./file0\x00', 0x208800, 0xc0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r2, 0x0, 0x0, 0x0, 0x40, 0x0, {0x1, r6}}, 0x4) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 2007.367423] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2007.369152] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2007.378338] FAULT_INJECTION: forcing a failure. [ 2007.378338] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.380929] CPU: 0 PID: 9999 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2007.382405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.384172] Call Trace: [ 2007.384763] dump_stack+0x107/0x167 [ 2007.385560] should_fail.cold+0x5/0xa [ 2007.386382] ? create_object.isra.0+0x3a/0xa30 [ 2007.387358] should_failslab+0x5/0x20 [ 2007.388174] kmem_cache_alloc+0x5b/0x310 [ 2007.389068] create_object.isra.0+0x3a/0xa30 [ 2007.389999] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.391093] kmem_cache_alloc+0x159/0x310 [ 2007.391995] xas_alloc+0x336/0x440 [ 2007.392785] xas_create+0x34a/0x10d0 [ 2007.393619] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2007.394764] xas_store+0x8c/0x1c40 [ 2007.395562] __xa_store+0x164/0x2d0 [ 2007.396355] ? xa_delete_node+0x280/0x280 [ 2007.397261] ? trace_hardirqs_on+0x5b/0x180 [ 2007.398199] xa_store+0x31/0x50 [ 2007.398928] __io_uring_add_tctx_node+0x1cf/0x520 [ 2007.399961] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2007.401101] ? alloc_fd+0x2e7/0x670 [ 2007.401925] io_uring_setup+0x1fbb/0x2980 [ 2007.402851] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2007.403940] ? wait_for_completion_io+0x270/0x270 [ 2007.405031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.406176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.407296] do_syscall_64+0x33/0x40 [ 2007.408105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.409210] RIP: 0033:0x7fc72ff08b19 [ 2007.410021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.413945] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2007.415574] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2007.417092] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2007.418608] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2007.420119] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2007.421635] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x1200, 0x0, &(0x7f0000001080)) 22:13:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 53) 22:13:02 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7f8e4a0f0000, 0x0, 0x0) [ 2007.590770] FAULT_INJECTION: forcing a failure. [ 2007.590770] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.593387] CPU: 1 PID: 10013 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2007.594885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.596668] Call Trace: [ 2007.597246] dump_stack+0x107/0x167 [ 2007.598040] should_fail.cold+0x5/0xa [ 2007.598867] ? xas_alloc+0x336/0x440 [ 2007.599664] should_failslab+0x5/0x20 [ 2007.600486] kmem_cache_alloc+0x5b/0x310 [ 2007.601364] xas_alloc+0x336/0x440 [ 2007.602137] xas_create+0x34a/0x10d0 [ 2007.602941] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2007.604064] xas_store+0x8c/0x1c40 [ 2007.604843] __xa_store+0x164/0x2d0 [ 2007.605620] ? xa_delete_node+0x280/0x280 [ 2007.606525] ? trace_hardirqs_on+0x5b/0x180 [ 2007.607467] xa_store+0x31/0x50 [ 2007.608172] __io_uring_add_tctx_node+0x1cf/0x520 [ 2007.609203] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2007.610336] ? alloc_fd+0x2e7/0x670 [ 2007.611123] io_uring_setup+0x1fbb/0x2980 [ 2007.612013] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2007.613096] ? wait_for_completion_io+0x270/0x270 [ 2007.614139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.615258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.616371] do_syscall_64+0x33/0x40 [ 2007.617152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.618261] RIP: 0033:0x7ff6be2aab19 [ 2007.619052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.622996] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2007.624636] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 2007.626169] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2007.627685] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2007.629221] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2007.630737] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 57) 22:13:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 54) 22:13:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000000)=0x9, 0x4) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:13:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:13:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 41) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:13:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000) 22:13:17 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7f8e4a2f0000, 0x0, 0x0) [ 2022.613547] FAULT_INJECTION: forcing a failure. [ 2022.613547] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.618653] CPU: 0 PID: 10028 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2022.620486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.622653] Call Trace: [ 2022.623351] dump_stack+0x107/0x167 [ 2022.624312] should_fail.cold+0x5/0xa [ 2022.624528] FAULT_INJECTION: forcing a failure. [ 2022.624528] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.625347] ? xas_alloc+0x336/0x440 [ 2022.625383] should_failslab+0x5/0x20 [ 2022.629840] kmem_cache_alloc+0x5b/0x310 [ 2022.630912] xas_alloc+0x336/0x440 [ 2022.631846] xas_create+0x34a/0x10d0 [ 2022.632875] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.634247] xas_store+0x8c/0x1c40 [ 2022.635212] __xa_store+0x164/0x2d0 [ 2022.636169] ? xa_delete_node+0x280/0x280 [ 2022.637299] ? trace_hardirqs_on+0x5b/0x180 [ 2022.638445] xa_store+0x31/0x50 [ 2022.639310] __io_uring_add_tctx_node+0x1cf/0x520 [ 2022.640590] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2022.641944] ? alloc_fd+0x2e7/0x670 [ 2022.642920] io_uring_setup+0x1fbb/0x2980 [ 2022.644016] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2022.645243] ? wait_for_completion_io+0x270/0x270 [ 2022.646117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.647026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.647927] do_syscall_64+0x33/0x40 [ 2022.648598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.649483] RIP: 0033:0x7fc72ff08b19 [ 2022.650127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.653315] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2022.654627] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2022.655858] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2022.657112] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2022.658337] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2022.659563] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2022.660872] CPU: 1 PID: 10032 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2022.662522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.664432] Call Trace: [ 2022.665081] dump_stack+0x107/0x167 [ 2022.665932] should_fail.cold+0x5/0xa [ 2022.666813] ? xas_alloc+0x336/0x440 [ 2022.667668] should_failslab+0x5/0x20 [ 2022.668557] kmem_cache_alloc+0x5b/0x310 [ 2022.669507] xas_alloc+0x336/0x440 22:13:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x1300, 0x0, &(0x7f0000001080)) [ 2022.670334] xas_create+0x34a/0x10d0 [ 2022.671348] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.672537] xas_store+0x8c/0x1c40 [ 2022.673382] __xa_store+0x164/0x2d0 [ 2022.674233] ? xa_delete_node+0x280/0x280 [ 2022.675202] ? trace_hardirqs_on+0x5b/0x180 [ 2022.676209] xa_store+0x31/0x50 [ 2022.676985] __io_uring_add_tctx_node+0x1cf/0x520 [ 2022.678103] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2022.679311] ? alloc_fd+0x2e7/0x670 [ 2022.680169] io_uring_setup+0x1fbb/0x2980 [ 2022.681156] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2022.682326] ? wait_for_completion_io+0x270/0x270 [ 2022.683468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.684687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.685882] do_syscall_64+0x33/0x40 [ 2022.686744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.687930] RIP: 0033:0x7f6ebd7dfb19 [ 2022.688799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.693057] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2022.694812] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 2022.696464] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2022.698111] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2022.699758] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2022.701409] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2022.708568] FAULT_INJECTION: forcing a failure. [ 2022.708568] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.710470] FAULT_INJECTION: forcing a failure. [ 2022.710470] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.710493] CPU: 1 PID: 10037 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2022.710505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.710513] Call Trace: [ 2022.710540] dump_stack+0x107/0x167 [ 2022.710566] should_fail.cold+0x5/0xa [ 2022.718232] ? create_object.isra.0+0x3a/0xa30 [ 2022.719285] should_failslab+0x5/0x20 [ 2022.720165] kmem_cache_alloc+0x5b/0x310 [ 2022.721110] ? mark_held_locks+0x9e/0xe0 [ 2022.722052] create_object.isra.0+0x3a/0xa30 [ 2022.723063] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.724239] kmem_cache_alloc+0x159/0x310 [ 2022.725215] xas_alloc+0x336/0x440 [ 2022.726040] xas_create+0x34a/0x10d0 [ 2022.726915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.728126] xas_store+0x8c/0x1c40 [ 2022.728972] __xa_store+0x164/0x2d0 [ 2022.729816] ? xa_delete_node+0x280/0x280 [ 2022.730782] ? trace_hardirqs_on+0x5b/0x180 [ 2022.731785] xa_store+0x31/0x50 [ 2022.732559] __io_uring_add_tctx_node+0x1cf/0x520 [ 2022.733672] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2022.734875] ? alloc_fd+0x2e7/0x670 [ 2022.735729] io_uring_setup+0x1fbb/0x2980 [ 2022.736705] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2022.737872] ? wait_for_completion_io+0x270/0x270 [ 2022.739010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.740221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.741430] do_syscall_64+0x33/0x40 [ 2022.742291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.743473] RIP: 0033:0x7ff6be2aab19 [ 2022.744335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.748582] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2022.750336] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 2022.751979] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2022.753630] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2022.755273] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2022.756929] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2022.758606] CPU: 0 PID: 10035 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2022.759793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.761228] Call Trace: [ 2022.761689] dump_stack+0x107/0x167 [ 2022.762310] should_fail.cold+0x5/0xa [ 2022.762961] ? create_object.isra.0+0x3a/0xa30 [ 2022.763735] should_failslab+0x5/0x20 [ 2022.764389] kmem_cache_alloc+0x5b/0x310 [ 2022.765112] ? mark_held_locks+0x9e/0xe0 [ 2022.765816] create_object.isra.0+0x3a/0xa30 [ 2022.766574] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.767454] kmem_cache_alloc+0x159/0x310 [ 2022.768170] xas_alloc+0x336/0x440 [ 2022.768801] xas_create+0x34a/0x10d0 [ 2022.769443] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.770308] xas_store+0x8c/0x1c40 [ 2022.770928] __xa_store+0x164/0x2d0 [ 2022.771529] ? xa_delete_node+0x280/0x280 [ 2022.772234] ? trace_hardirqs_on+0x5b/0x180 [ 2022.772998] xa_store+0x31/0x50 [ 2022.773559] __io_uring_add_tctx_node+0x1cf/0x520 [ 2022.774369] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2022.775244] ? alloc_fd+0x2e7/0x670 [ 2022.775875] io_uring_setup+0x1fbb/0x2980 [ 2022.776606] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2022.777472] ? wait_for_completion_io+0x270/0x270 [ 2022.778321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.779206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.780085] do_syscall_64+0x33/0x40 [ 2022.780738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.781598] RIP: 0033:0x7f89589a3b19 [ 2022.782227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.785324] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2022.786601] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 2022.787801] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2022.789019] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2022.790222] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2022.791416] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 42) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 2022.831094] FAULT_INJECTION: forcing a failure. [ 2022.831094] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.833032] CPU: 0 PID: 10046 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2022.834166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.835528] Call Trace: [ 2022.835968] dump_stack+0x107/0x167 [ 2022.836595] should_fail.cold+0x5/0xa [ 2022.837229] ? create_object.isra.0+0x3a/0xa30 [ 2022.837981] should_failslab+0x5/0x20 [ 2022.838610] kmem_cache_alloc+0x5b/0x310 [ 2022.839282] ? mark_held_locks+0x9e/0xe0 [ 2022.839960] create_object.isra.0+0x3a/0xa30 [ 2022.840699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.841544] kmem_cache_alloc+0x159/0x310 [ 2022.842243] xas_alloc+0x336/0x440 [ 2022.842835] xas_create+0x34a/0x10d0 [ 2022.843473] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.844346] xas_store+0x8c/0x1c40 [ 2022.844972] __xa_store+0x164/0x2d0 [ 2022.845580] ? xa_delete_node+0x280/0x280 [ 2022.846276] ? trace_hardirqs_on+0x5b/0x180 [ 2022.847002] xa_store+0x31/0x50 [ 2022.847552] __io_uring_add_tctx_node+0x1cf/0x520 [ 2022.848350] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2022.849232] ? alloc_fd+0x2e7/0x670 [ 2022.849861] io_uring_setup+0x1fbb/0x2980 [ 2022.850560] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2022.851399] ? wait_for_completion_io+0x270/0x270 [ 2022.852228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.853118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.853972] do_syscall_64+0x33/0x40 [ 2022.854588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.855433] RIP: 0033:0x7fc72ff08b19 [ 2022.856040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.859058] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2022.860300] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2022.861493] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2022.862654] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2022.863816] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2022.864998] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 43) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:13:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7f8e4b0f0000, 0x0, 0x0) 22:13:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 55) 22:13:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 58) 22:13:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x1400, 0x0, &(0x7f0000001080)) 22:13:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 59) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:13:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:13:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x60ffffffffff) [ 2038.015567] FAULT_INJECTION: forcing a failure. [ 2038.015567] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.017519] FAULT_INJECTION: forcing a failure. [ 2038.017519] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.018606] CPU: 1 PID: 10063 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2038.022633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.024758] Call Trace: [ 2038.025441] dump_stack+0x107/0x167 [ 2038.026386] should_fail.cold+0x5/0xa [ 2038.027359] ? xas_alloc+0x336/0x440 [ 2038.028317] should_failslab+0x5/0x20 [ 2038.029307] kmem_cache_alloc+0x5b/0x310 [ 2038.030352] xas_alloc+0x336/0x440 [ 2038.031265] xas_create+0x34a/0x10d0 [ 2038.032242] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.033592] xas_store+0x8c/0x1c40 [ 2038.034520] __xa_store+0x164/0x2d0 [ 2038.035449] ? xa_delete_node+0x280/0x280 [ 2038.036516] ? trace_hardirqs_on+0x5b/0x180 [ 2038.037538] xa_store+0x31/0x50 [ 2038.038241] __io_uring_add_tctx_node+0x1cf/0x520 [ 2038.039260] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2038.040367] ? alloc_fd+0x2e7/0x670 [ 2038.041162] io_uring_setup+0x1fbb/0x2980 [ 2038.042061] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.043134] ? wait_for_completion_io+0x270/0x270 [ 2038.044180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.045305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.046414] do_syscall_64+0x33/0x40 [ 2038.047216] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.048302] RIP: 0033:0x7f6ebd7dfb19 [ 2038.049101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.053007] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.054628] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 2038.056141] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2038.057662] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2038.059173] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2038.060692] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2038.062248] CPU: 0 PID: 10066 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2038.063728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.065482] Call Trace: [ 2038.066053] dump_stack+0x107/0x167 [ 2038.066834] should_fail.cold+0x5/0xa [ 2038.067646] ? create_object.isra.0+0x3a/0xa30 [ 2038.068628] should_failslab+0x5/0x20 [ 2038.069440] kmem_cache_alloc+0x5b/0x310 [ 2038.070301] ? mark_held_locks+0x9e/0xe0 [ 2038.071168] create_object.isra.0+0x3a/0xa30 [ 2038.072102] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.073194] kmem_cache_alloc+0x159/0x310 [ 2038.074085] xas_alloc+0x336/0x440 [ 2038.074848] xas_create+0x34a/0x10d0 [ 2038.075657] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.075987] FAULT_INJECTION: forcing a failure. [ 2038.075987] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.076773] xas_store+0x8c/0x1c40 [ 2038.076831] __xa_store+0x164/0x2d0 [ 2038.080646] ? xa_delete_node+0x280/0x280 [ 2038.081540] ? trace_hardirqs_on+0x5b/0x180 [ 2038.082472] xa_store+0x31/0x50 [ 2038.083184] __io_uring_add_tctx_node+0x1cf/0x520 [ 2038.084199] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2038.085311] ? alloc_fd+0x2e7/0x670 [ 2038.086103] io_uring_setup+0x1fbb/0x2980 [ 2038.087001] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.088063] ? wait_for_completion_io+0x270/0x270 [ 2038.089136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.090258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.091354] do_syscall_64+0x33/0x40 [ 2038.092140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.093231] RIP: 0033:0x7ff6be2aab19 [ 2038.094017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.097879] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.099477] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 2038.100981] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2038.102487] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2038.103979] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2038.105487] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2038.107046] CPU: 1 PID: 10070 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2038.108525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.110296] Call Trace: [ 2038.110862] dump_stack+0x107/0x167 [ 2038.111642] should_fail.cold+0x5/0xa [ 2038.112455] ? xas_alloc+0x336/0x440 [ 2038.113249] should_failslab+0x5/0x20 [ 2038.114063] kmem_cache_alloc+0x5b/0x310 [ 2038.114931] xas_alloc+0x336/0x440 [ 2038.115696] xas_create+0x34a/0x10d0 [ 2038.116503] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.117624] xas_store+0x8c/0x1c40 [ 2038.118411] __xa_store+0x164/0x2d0 [ 2038.119195] ? xa_delete_node+0x280/0x280 [ 2038.120087] ? trace_hardirqs_on+0x5b/0x180 [ 2038.121014] xa_store+0x31/0x50 [ 2038.121720] __io_uring_add_tctx_node+0x1cf/0x520 [ 2038.122744] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2038.123858] ? alloc_fd+0x2e7/0x670 [ 2038.124654] io_uring_setup+0x1fbb/0x2980 [ 2038.125545] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.126624] ? wait_for_completion_io+0x270/0x270 [ 2038.127679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.128805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.129899] do_syscall_64+0x33/0x40 [ 2038.130699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.131798] RIP: 0033:0x7f89589a3b19 [ 2038.132592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.136518] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.138148] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 2038.139658] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2038.141177] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2038.142685] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2038.144195] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2038.153978] FAULT_INJECTION: forcing a failure. [ 2038.153978] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.156392] CPU: 1 PID: 10069 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2038.157864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.159627] Call Trace: [ 2038.160192] dump_stack+0x107/0x167 [ 2038.160979] should_fail.cold+0x5/0xa [ 2038.161793] ? create_object.isra.0+0x3a/0xa30 [ 2038.162761] should_failslab+0x5/0x20 [ 2038.163571] kmem_cache_alloc+0x5b/0x310 [ 2038.164449] ? mark_held_locks+0x9e/0xe0 [ 2038.165334] create_object.isra.0+0x3a/0xa30 [ 2038.166266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.167353] kmem_cache_alloc+0x159/0x310 [ 2038.168229] xas_alloc+0x336/0x440 [ 2038.169000] xas_create+0x34a/0x10d0 [ 2038.169803] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.170922] xas_store+0x8c/0x1c40 [ 2038.171702] __xa_store+0x164/0x2d0 [ 2038.172478] ? xa_delete_node+0x280/0x280 [ 2038.173375] ? trace_hardirqs_on+0x5b/0x180 [ 2038.174298] xa_store+0x31/0x50 [ 2038.175003] __io_uring_add_tctx_node+0x1cf/0x520 [ 2038.176030] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2038.177143] ? alloc_fd+0x2e7/0x670 [ 2038.177927] io_uring_setup+0x1fbb/0x2980 [ 2038.178817] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.179889] ? wait_for_completion_io+0x270/0x270 [ 2038.180945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.182063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.183156] do_syscall_64+0x33/0x40 [ 2038.183946] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.185036] RIP: 0033:0x7fc72ff08b19 [ 2038.185823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.189726] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.191343] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2038.192862] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2038.194371] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2038.195876] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2038.197410] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x1500, 0x0, &(0x7f0000001080)) 22:13:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x7f1631153000) 22:13:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 59) 22:13:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 44) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:13:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r2}) dup3(r2, r1, 0x80000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2000}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'tunl0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001000000180000001c4458ff6f48449a997508b5dd1be3ce12e994e153763277056020212530f9dbe4f7d2e43cba2ac6c75c80cb38aad4fad9f0edd123377f67b3034130f4883163a750a5d38f1aea31187f63cd278ad0dc955e682f79cec9f1ff083cebec55d9c0670a891f149ce317824fb6c7a8ac2dfc26e6719c99d694ab80e2edf1889d867ea6a8b4be3dfe185f9f1f5a2bc52448efdeda9c4469dc0b1ba3708e6e552eadaebf251cf762bcde212fb57c36f8eef9520e76a095aef3992f80f027d3c1c0f4a5b34d559f8e", @ANYRES32=r0, @ANYBLOB="07000000050000002e2f66696c653000"]) openat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x3) 22:13:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 60) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2038.329660] FAULT_INJECTION: forcing a failure. [ 2038.329660] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.332113] CPU: 0 PID: 10083 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2038.333591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.335339] Call Trace: [ 2038.335903] dump_stack+0x107/0x167 [ 2038.336693] should_fail.cold+0x5/0xa [ 2038.337507] ? xas_alloc+0x336/0x440 [ 2038.338299] should_failslab+0x5/0x20 [ 2038.339110] kmem_cache_alloc+0x5b/0x310 [ 2038.339984] xas_alloc+0x336/0x440 [ 2038.340697] FAULT_INJECTION: forcing a failure. [ 2038.340697] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.340763] xas_create+0x34a/0x10d0 [ 2038.343940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.345066] xas_store+0x8c/0x1c40 [ 2038.345850] __xa_store+0x164/0x2d0 [ 2038.346626] ? xa_delete_node+0x280/0x280 [ 2038.347520] ? trace_hardirqs_on+0x5b/0x180 [ 2038.348445] xa_store+0x31/0x50 [ 2038.349204] __io_uring_add_tctx_node+0x1cf/0x520 [ 2038.350228] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2038.351327] ? alloc_fd+0x2e7/0x670 [ 2038.352123] io_uring_setup+0x1fbb/0x2980 [ 2038.353027] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.354097] ? wait_for_completion_io+0x270/0x270 [ 2038.355158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.356271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.357373] do_syscall_64+0x33/0x40 [ 2038.358171] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.359250] RIP: 0033:0x7f6ebd7dfb19 [ 2038.360032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.363907] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.365528] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 2038.367041] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2038.368538] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2038.370055] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2038.371558] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2038.373117] CPU: 1 PID: 10086 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2038.374594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.376351] Call Trace: [ 2038.376934] dump_stack+0x107/0x167 [ 2038.377711] should_fail.cold+0x5/0xa [ 2038.378522] ? create_object.isra.0+0x3a/0xa30 [ 2038.379491] should_failslab+0x5/0x20 22:13:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x1700, 0x0, &(0x7f0000001080)) 22:13:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7f8e4b2f0000, 0x0, 0x0) [ 2038.380491] kmem_cache_alloc+0x5b/0x310 [ 2038.381412] ? mark_held_locks+0x9e/0xe0 [ 2038.382282] create_object.isra.0+0x3a/0xa30 [ 2038.383210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.384289] kmem_cache_alloc+0x159/0x310 [ 2038.385189] xas_alloc+0x336/0x440 [ 2038.385950] xas_create+0x34a/0x10d0 [ 2038.386750] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.387860] xas_store+0x8c/0x1c40 [ 2038.388635] __xa_store+0x164/0x2d0 [ 2038.389418] ? xa_delete_node+0x280/0x280 [ 2038.390315] ? trace_hardirqs_on+0x5b/0x180 [ 2038.391243] xa_store+0x31/0x50 [ 2038.391948] __io_uring_add_tctx_node+0x1cf/0x520 [ 2038.392976] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2038.394087] ? alloc_fd+0x2e7/0x670 [ 2038.394872] io_uring_setup+0x1fbb/0x2980 [ 2038.395762] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.396853] ? wait_for_completion_io+0x270/0x270 [ 2038.397910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.399029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.400123] do_syscall_64+0x33/0x40 [ 2038.400921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.402012] RIP: 0033:0x7fc72ff08b19 [ 2038.402799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.406718] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.408331] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2038.409859] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2038.411373] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2038.412891] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2038.414421] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 56) [ 2038.465660] FAULT_INJECTION: forcing a failure. [ 2038.465660] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.468113] CPU: 0 PID: 10094 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2038.469593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.471334] Call Trace: [ 2038.471903] dump_stack+0x107/0x167 [ 2038.472698] should_fail.cold+0x5/0xa [ 2038.473512] ? create_object.isra.0+0x3a/0xa30 [ 2038.474481] should_failslab+0x5/0x20 [ 2038.475289] kmem_cache_alloc+0x5b/0x310 [ 2038.476158] ? mark_held_locks+0x9e/0xe0 [ 2038.477034] create_object.isra.0+0x3a/0xa30 [ 2038.477964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.479056] kmem_cache_alloc+0x159/0x310 [ 2038.479952] xas_alloc+0x336/0x440 [ 2038.480729] xas_create+0x34a/0x10d0 [ 2038.481546] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.482666] xas_store+0x8c/0x1c40 [ 2038.483458] __xa_store+0x164/0x2d0 [ 2038.484244] ? xa_delete_node+0x280/0x280 [ 2038.485164] ? trace_hardirqs_on+0x5b/0x180 [ 2038.486097] xa_store+0x31/0x50 [ 2038.486810] __io_uring_add_tctx_node+0x1cf/0x520 [ 2038.487843] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2038.488032] FAULT_INJECTION: forcing a failure. [ 2038.488032] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.488954] ? alloc_fd+0x2e7/0x670 [ 2038.489002] io_uring_setup+0x1fbb/0x2980 [ 2038.489043] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.489061] ? wait_for_completion_io+0x270/0x270 [ 2038.489130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.489153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.489185] do_syscall_64+0x33/0x40 [ 2038.489207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.489222] RIP: 0033:0x7f89589a3b19 [ 2038.489241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 22:13:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) setsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000040)="57905e1efef346bdc2e731aa9eb226032272c1e69bb9f265", 0x18) bind$packet(r0, &(0x7f0000000000)={0x11, 0x19, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 2038.489253] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.489276] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 22:13:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x6000000, 0x0, &(0x7f0000001080)) [ 2038.489289] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2038.489302] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2038.489315] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2038.489327] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2038.519022] CPU: 1 PID: 10098 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2038.520743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.522800] Call Trace: [ 2038.523463] dump_stack+0x107/0x167 22:13:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x7f1631353000) [ 2038.524369] should_fail.cold+0x5/0xa [ 2038.525506] ? create_object.isra.0+0x3a/0xa30 [ 2038.526653] should_failslab+0x5/0x20 [ 2038.527587] kmem_cache_alloc+0x5b/0x310 [ 2038.528587] ? mark_held_locks+0x9e/0xe0 [ 2038.529593] create_object.isra.0+0x3a/0xa30 [ 2038.530653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.531894] kmem_cache_alloc+0x159/0x310 [ 2038.532915] xas_alloc+0x336/0x440 [ 2038.533778] xas_create+0x34a/0x10d0 [ 2038.534698] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.535982] xas_store+0x8c/0x1c40 [ 2038.536878] __xa_store+0x164/0x2d0 [ 2038.537759] ? xa_delete_node+0x280/0x280 [ 2038.538772] ? trace_hardirqs_on+0x5b/0x180 [ 2038.539828] xa_store+0x31/0x50 [ 2038.540649] __io_uring_add_tctx_node+0x1cf/0x520 [ 2038.541832] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2038.543101] ? alloc_fd+0x2e7/0x670 [ 2038.544006] io_uring_setup+0x1fbb/0x2980 [ 2038.545039] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.546290] ? wait_for_completion_io+0x270/0x270 [ 2038.547495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.548780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.550044] do_syscall_64+0x33/0x40 [ 2038.550956] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.552203] RIP: 0033:0x7ff6be2aab19 [ 2038.553110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.557544] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.559384] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 2038.561365] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2038.563075] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2038.564802] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2038.566867] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x7ffffffff000, 0x0, 0x0) 22:13:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8000000, 0x0, &(0x7f0000001080)) 22:13:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 60) [ 2038.765438] FAULT_INJECTION: forcing a failure. [ 2038.765438] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.768078] CPU: 0 PID: 10116 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2038.769556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.771293] Call Trace: [ 2038.771857] dump_stack+0x107/0x167 [ 2038.772647] should_fail.cold+0x5/0xa [ 2038.773458] ? create_object.isra.0+0x3a/0xa30 [ 2038.774428] should_failslab+0x5/0x20 [ 2038.775242] kmem_cache_alloc+0x5b/0x310 [ 2038.776099] ? mark_held_locks+0x9e/0xe0 [ 2038.776982] create_object.isra.0+0x3a/0xa30 [ 2038.777907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.778988] kmem_cache_alloc+0x159/0x310 [ 2038.779883] xas_alloc+0x336/0x440 [ 2038.780657] xas_create+0x34a/0x10d0 [ 2038.781470] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.782593] xas_store+0x8c/0x1c40 [ 2038.783381] __xa_store+0x164/0x2d0 [ 2038.784168] ? xa_delete_node+0x280/0x280 [ 2038.785081] ? trace_hardirqs_on+0x5b/0x180 [ 2038.786033] xa_store+0x31/0x50 [ 2038.786745] __io_uring_add_tctx_node+0x1cf/0x520 [ 2038.787767] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2038.788893] ? alloc_fd+0x2e7/0x670 [ 2038.789692] io_uring_setup+0x1fbb/0x2980 [ 2038.790594] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.791657] ? wait_for_completion_io+0x270/0x270 [ 2038.792742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.793850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.794960] do_syscall_64+0x33/0x40 [ 2038.795752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.796853] RIP: 0033:0x7f6ebd7dfb19 [ 2038.797640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.801510] RSP: 002b:00007f6ebad55108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.803111] RAX: ffffffffffffffda RBX: 00007f6ebd8f2f60 RCX: 00007f6ebd7dfb19 [ 2038.804624] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2038.806124] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2038.807623] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2038.809113] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:13:48 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 61) 22:13:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 45) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:13:48 executing program 5: socket$packet(0x11, 0x3, 0x300) 22:13:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9000000, 0x0, &(0x7f0000001080)) 22:13:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 57) 22:13:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x7f1632153000) 22:13:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 61) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:13:48 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) [ 2053.334229] FAULT_INJECTION: forcing a failure. [ 2053.334229] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.338365] CPU: 1 PID: 10136 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2053.340154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.342292] Call Trace: [ 2053.342974] dump_stack+0x107/0x167 [ 2053.343909] should_fail.cold+0x5/0xa [ 2053.344898] ? xas_alloc+0x336/0x440 [ 2053.345857] should_failslab+0x5/0x20 [ 2053.346830] kmem_cache_alloc+0x5b/0x310 [ 2053.347879] xas_alloc+0x336/0x440 [ 2053.348803] xas_create+0x34a/0x10d0 [ 2053.349772] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2053.351120] xas_store+0x8c/0x1c40 [ 2053.352056] __xa_store+0x164/0x2d0 [ 2053.353001] ? xa_delete_node+0x280/0x280 [ 2053.354069] ? trace_hardirqs_on+0x5b/0x180 [ 2053.355181] xa_store+0x31/0x50 [ 2053.356027] __io_uring_add_tctx_node+0x1cf/0x520 [ 2053.357268] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2053.358485] ? alloc_fd+0x2e7/0x670 [ 2053.359267] io_uring_setup+0x1fbb/0x2980 [ 2053.360158] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2053.361235] ? wait_for_completion_io+0x270/0x270 [ 2053.362280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.363384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.364480] do_syscall_64+0x33/0x40 [ 2053.365279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.366361] RIP: 0033:0x7ff6be2aab19 [ 2053.367152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.371061] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2053.372674] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 2053.374194] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2053.375700] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2053.377220] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2053.378735] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2053.382347] FAULT_INJECTION: forcing a failure. [ 2053.382347] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.384938] CPU: 1 PID: 10135 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2053.386406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.388161] Call Trace: [ 2053.388724] dump_stack+0x107/0x167 [ 2053.389517] should_fail.cold+0x5/0xa [ 2053.390330] ? vm_area_dup+0x78/0x290 [ 2053.391147] should_failslab+0x5/0x20 [ 2053.391957] kmem_cache_alloc+0x5b/0x310 [ 2053.392844] vm_area_dup+0x78/0x290 [ 2053.393621] ? lock_release+0x680/0x680 [ 2053.394466] ? mark_lock+0xf5/0x2df0 [ 2053.395265] ? lock_chain_count+0x20/0x20 [ 2053.396148] ? mark_lock+0xf5/0x2df0 [ 2053.396963] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2053.398081] ? lock_chain_count+0x20/0x20 [ 2053.398970] ? mark_lock+0xf5/0x2df0 [ 2053.399769] ? vm_area_alloc+0x110/0x110 [ 2053.400638] ? __lock_acquire+0x1657/0x5b00 [ 2053.401584] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2053.402700] ? SOFTIRQ_verbose+0x10/0x10 [ 2053.403564] ? vmacache_find+0x55/0x2a0 [ 2053.404408] __split_vma+0xa8/0x4e0 [ 2053.405195] __do_munmap+0x365/0x1260 [ 2053.406009] ? arch_get_unmapped_area+0x450/0x450 [ 2053.407037] ? lock_release+0x680/0x680 [ 2053.407884] mmap_region+0x7cc/0x1500 [ 2053.408716] do_mmap+0x868/0x1370 [ 2053.409470] vm_mmap_pgoff+0x198/0x1f0 [ 2053.410302] ? randomize_page+0xb0/0xb0 [ 2053.411162] ksys_mmap_pgoff+0x41c/0x560 [ 2053.412028] ? find_mergeable_anon_vma+0x250/0x250 [ 2053.413083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.414192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.415287] do_syscall_64+0x33/0x40 [ 2053.416085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.417178] RIP: 0033:0x7f89589a3b62 22:13:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps\x00') sendfile(r2, r3, 0x0, 0x100000001) r4 = openat(r2, &(0x7f0000000280)='./file1\x00', 0x115000, 0x0) sendfile(r1, r4, 0x0, 0x100000001) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0x7, 0x2, 0x6, 0x3f, 0x6}, 0x1c) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) [ 2053.417976] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2053.422109] RSP: 002b:00007f8955f190f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2053.423726] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f89589a3b62 [ 2053.425248] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2053.426767] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2053.428284] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2053.429815] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2053.437475] FAULT_INJECTION: forcing a failure. [ 2053.437475] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.441085] CPU: 1 PID: 10139 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2053.442565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.444330] Call Trace: [ 2053.444912] dump_stack+0x107/0x167 [ 2053.445690] should_fail.cold+0x5/0xa [ 2053.446510] ? create_object.isra.0+0x3a/0xa30 [ 2053.447488] should_failslab+0x5/0x20 [ 2053.448303] kmem_cache_alloc+0x5b/0x310 [ 2053.449172] ? mark_held_locks+0x9e/0xe0 [ 2053.450042] create_object.isra.0+0x3a/0xa30 [ 2053.450978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2053.452066] kmem_cache_alloc+0x159/0x310 [ 2053.452968] xas_alloc+0x336/0x440 [ 2053.453733] xas_create+0x34a/0x10d0 [ 2053.454536] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2053.455656] xas_store+0x8c/0x1c40 [ 2053.456435] __xa_store+0x164/0x2d0 [ 2053.457228] ? xa_delete_node+0x280/0x280 [ 2053.458122] ? trace_hardirqs_on+0x5b/0x180 [ 2053.459044] xa_store+0x31/0x50 [ 2053.459745] __io_uring_add_tctx_node+0x1cf/0x520 [ 2053.460785] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2053.461895] ? alloc_fd+0x2e7/0x670 [ 2053.462684] io_uring_setup+0x1fbb/0x2980 [ 2053.463572] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2053.464647] ? wait_for_completion_io+0x270/0x270 [ 2053.465705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.466823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.467922] do_syscall_64+0x33/0x40 [ 2053.468711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.469819] RIP: 0033:0x7fc72ff08b19 [ 2053.470611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.474518] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2053.476134] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2053.477658] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2053.479174] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2053.480685] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2053.482498] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2053.489344] FAULT_INJECTION: forcing a failure. [ 2053.489344] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.491829] CPU: 1 PID: 10143 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2053.493313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.495082] Call Trace: [ 2053.495648] dump_stack+0x107/0x167 [ 2053.496427] should_fail.cold+0x5/0xa [ 2053.497254] ? vm_area_dup+0x78/0x290 [ 2053.498164] should_failslab+0x5/0x20 [ 2053.499037] kmem_cache_alloc+0x5b/0x310 [ 2053.499903] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2053.501035] vm_area_dup+0x78/0x290 [ 2053.501822] ? mark_lock+0xf5/0x2df0 [ 2053.502627] ? lock_chain_count+0x20/0x20 [ 2053.503516] ? mark_lock+0xf5/0x2df0 [ 2053.504323] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2053.505447] ? lock_chain_count+0x20/0x20 [ 2053.506329] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2053.507277] ? trace_hardirqs_on+0x5b/0x180 [ 2053.508198] ? mark_lock+0xf5/0x2df0 [ 2053.509001] ? vm_area_alloc+0x110/0x110 [ 2053.509867] ? __lock_acquire+0x1657/0x5b00 [ 2053.510811] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2053.511926] ? SOFTIRQ_verbose+0x10/0x10 [ 2053.512801] ? vmacache_find+0x55/0x2a0 [ 2053.513646] __split_vma+0xa8/0x4e0 [ 2053.514431] __do_munmap+0x365/0x1260 [ 2053.515245] ? arch_get_unmapped_area+0x450/0x450 [ 2053.516272] ? lock_release+0x680/0x680 [ 2053.517139] mmap_region+0x7cc/0x1500 [ 2053.517964] do_mmap+0x868/0x1370 [ 2053.518717] vm_mmap_pgoff+0x198/0x1f0 [ 2053.519544] ? randomize_page+0xb0/0xb0 [ 2053.520412] ksys_mmap_pgoff+0x41c/0x560 [ 2053.521292] ? find_mergeable_anon_vma+0x250/0x250 [ 2053.522341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.523450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.524543] do_syscall_64+0x33/0x40 [ 2053.525340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.526421] RIP: 0033:0x7f6ebd7dfb62 [ 2053.527207] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2053.531105] RSP: 002b:00007f6ebad550f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2053.532719] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6ebd7dfb62 [ 2053.534226] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2053.535728] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2053.537243] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2053.538754] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 58) 22:14:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x7f1632353000) 22:14:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40041, 0x0) r4 = eventfd2(0x80, 0x80003) r5 = signalfd4(r4, &(0x7f0000000240), 0x8, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x10002002}) syz_io_uring_setup(0x3caa, &(0x7f0000000100)={0x0, 0x9c0c, 0x4, 0x5, 0x5c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) sendto$packet(r1, &(0x7f0000000000)="17e5578c98b600df70c5995d132aa5adcba3821d91f095c81b454d5669e4922c1d20d83010ac149eb0779ebf9d", 0x2d, 0x2404c004, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x4, 0x6, @random="6e3bebe1cb98"}, 0x14) recvmsg$unix(r3, &(0x7f0000001980)={&(0x7f00000016c0), 0x6e, &(0x7f0000001840)=[{&(0x7f0000001740)=""/191, 0xbf}, {&(0x7f0000001800)=""/7, 0x7}], 0x2, &(0x7f0000001880)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x140) r7 = syz_mount_image$tmpfs(&(0x7f00000019c0), &(0x7f0000001a00)='./file1\x00', 0xd8e4, 0x2, &(0x7f0000001c00)=[{&(0x7f0000001a40)="fafdc36bb00b71bb1709ab2f64a89bce80d52e708ee271f1dccb6699ddf0a18bfb50325d9891442cb716ea1ef13dbdac87da6f0a221a7de3171cbd525c9c7bf1f910abf3333c108bfdbff6956a9b557accbcd1c7c73f52dfa59d33da1af263b599cfa8a5064dab144b340085d3112c9b3200633a62fd102dd20b1335452942f342904398ec3f", 0x86, 0x5}, {&(0x7f0000001b00)="648680f1b6c2158240259f7a5d6e06d670014bc812de0872f0ab8180bdfc504ec0e7542b5840c77dfda1a910ab673ad23d3b57a6a7e8ce59e879b9e7fa8d85d34761ae1ecfd8b67ea49d7c24929926dcfc45d9e48f933735aaf23ed9512e36de634a79367f59b815db356e66c0ffbdc8c7a37ff55d372d6916a4e2f445ae476991146c7d2f4077e5a0f086be8cdc2e9cbad71a7d531332ed04a937e21a24082f021c9eecc409f91ff637a759b84b4641e7f6b80a4b70d1d4d71b02044fbaaba4b49a45f25376884d09", 0xc9, 0x3}], 0xa0000, &(0x7f0000001c40)={[{@size={'size', 0x3d, [0x6d, 0x70, 0x6d, 0x6b, 0x34, 0x36, 0x74, 0x6d]}}, {@size={'size', 0x3d, [0x31, 0x38]}}, {@uid={'uid', 0x3d, 0xee01}}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, '/dev/vcsa\x00'}}]}) r8 = syz_open_procfs(0x0, &(0x7f0000001cc0)='setgroups\x00') r9 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, 0xffffffffffffffff) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r10) sendmsg$unix(r3, &(0x7f0000001dc0)={&(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)="c9b4018521389ded5257fdca005965dd5ad6c07d127864c82a09e7771b45e935a54d5aaed5a848288546aefac8780564260cdfe5da71dc9f0d34e81ad11cc6ffb3d94685e9fa755ebc54e6ca3ed053ba96da9883d0da314126698a3cd08f6557b676", 0x62}], 0x1, &(0x7f0000001d00)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, r7, r8, r1]}}, @rights={{0x1c, 0x1, 0x1, [r3, r9, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, 0xee00}}}], 0xa8, 0x4000000}, 0x40) 22:14:03 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xb0ff2000000000, 0x0, 0x0) 22:14:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 62) 22:14:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 46) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:14:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 62) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:14:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa000000, 0x0, &(0x7f0000001080)) [ 2068.274077] FAULT_INJECTION: forcing a failure. [ 2068.274077] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.276475] CPU: 1 PID: 10166 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2068.278009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.279793] Call Trace: [ 2068.280372] dump_stack+0x107/0x167 [ 2068.281186] should_fail.cold+0x5/0xa [ 2068.282010] ? create_object.isra.0+0x3a/0xa30 [ 2068.283012] should_failslab+0x5/0x20 [ 2068.283836] kmem_cache_alloc+0x5b/0x310 [ 2068.284531] FAULT_INJECTION: forcing a failure. [ 2068.284531] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.284709] create_object.isra.0+0x3a/0xa30 [ 2068.288080] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.289188] kmem_cache_alloc+0x159/0x310 [ 2068.290089] vm_area_dup+0x78/0x290 [ 2068.290878] ? lock_release+0x680/0x680 [ 2068.291727] ? mark_lock+0xf5/0x2df0 [ 2068.292547] ? lock_chain_count+0x20/0x20 [ 2068.293454] ? mark_lock+0xf5/0x2df0 [ 2068.294263] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.295383] ? lock_chain_count+0x20/0x20 [ 2068.296294] ? mark_lock+0xf5/0x2df0 [ 2068.297109] ? vm_area_alloc+0x110/0x110 [ 2068.297990] ? __lock_acquire+0x1657/0x5b00 [ 2068.298936] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.300055] ? SOFTIRQ_verbose+0x10/0x10 [ 2068.300961] ? vmacache_find+0x55/0x2a0 [ 2068.301824] __split_vma+0xa8/0x4e0 [ 2068.302605] __do_munmap+0x365/0x1260 [ 2068.303432] ? arch_get_unmapped_area+0x450/0x450 [ 2068.304466] ? lock_release+0x680/0x680 [ 2068.305341] mmap_region+0x7cc/0x1500 [ 2068.306190] do_mmap+0x868/0x1370 [ 2068.306949] vm_mmap_pgoff+0x198/0x1f0 [ 2068.307787] ? randomize_page+0xb0/0xb0 [ 2068.308656] ksys_mmap_pgoff+0x41c/0x560 [ 2068.309547] ? find_mergeable_anon_vma+0x250/0x250 [ 2068.310617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.311740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.312860] do_syscall_64+0x33/0x40 [ 2068.313664] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.314757] RIP: 0033:0x7f6ebd7dfb62 [ 2068.315570] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2068.319544] RSP: 002b:00007f6ebad550f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2068.321197] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6ebd7dfb62 [ 2068.322734] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2068.324324] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2068.325875] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2068.327414] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2068.328979] CPU: 0 PID: 10169 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2068.330493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.332265] Call Trace: [ 2068.332910] dump_stack+0x107/0x167 [ 2068.333444] FAULT_INJECTION: forcing a failure. [ 2068.333444] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.333908] should_fail.cold+0x5/0xa [ 2068.333940] ? create_object.isra.0+0x3a/0xa30 [ 2068.338085] should_failslab+0x5/0x20 [ 2068.338907] kmem_cache_alloc+0x5b/0x310 [ 2068.339780] ? mark_held_locks+0x9e/0xe0 [ 2068.340663] create_object.isra.0+0x3a/0xa30 [ 2068.341620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.342720] kmem_cache_alloc+0x159/0x310 [ 2068.343625] xas_alloc+0x336/0x440 [ 2068.344395] xas_create+0x34a/0x10d0 [ 2068.345234] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.346360] xas_store+0x8c/0x1c40 [ 2068.347157] __xa_store+0x164/0x2d0 [ 2068.347950] ? xa_delete_node+0x280/0x280 [ 2068.348860] ? trace_hardirqs_on+0x5b/0x180 [ 2068.349821] xa_store+0x31/0x50 [ 2068.350542] __io_uring_add_tctx_node+0x1cf/0x520 [ 2068.351582] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2068.352692] ? alloc_fd+0x2e7/0x670 [ 2068.353507] io_uring_setup+0x1fbb/0x2980 [ 2068.354407] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2068.355480] ? wait_for_completion_io+0x270/0x270 [ 2068.356550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.357678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.358783] do_syscall_64+0x33/0x40 [ 2068.359575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.360657] RIP: 0033:0x7ff6be2aab19 [ 2068.361457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.365350] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2068.366961] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 2068.368462] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2068.369974] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2068.371477] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2068.372985] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2068.374551] CPU: 1 PID: 10168 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2068.376071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.377825] Call Trace: [ 2068.378387] dump_stack+0x107/0x167 [ 2068.379155] should_fail.cold+0x5/0xa [ 2068.379963] ? ___slab_alloc+0x155/0x700 [ 2068.380814] ? create_object.isra.0+0x3a/0xa30 [ 2068.381775] should_failslab+0x5/0x20 [ 2068.382575] kmem_cache_alloc+0x5b/0x310 [ 2068.383434] create_object.isra.0+0x3a/0xa30 [ 2068.384394] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.385498] kmem_cache_alloc+0x159/0x310 [ 2068.385526] xas_alloc+0x336/0x440 [ 2068.385549] xas_create+0x34a/0x10d0 [ 2068.385583] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.389125] xas_store+0x8c/0x1c40 [ 2068.389910] __xa_store+0x164/0x2d0 [ 2068.390684] ? xa_delete_node+0x280/0x280 [ 2068.391592] ? trace_hardirqs_on+0x5b/0x180 [ 2068.392547] xa_store+0x31/0x50 [ 2068.393412] __io_uring_add_tctx_node+0x1cf/0x520 [ 2068.394541] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2068.395662] ? alloc_fd+0x2e7/0x670 [ 2068.396462] io_uring_setup+0x1fbb/0x2980 [ 2068.397382] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2068.398484] ? wait_for_completion_io+0x270/0x270 [ 2068.399542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.400664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.401805] do_syscall_64+0x33/0x40 [ 2068.402614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.403712] RIP: 0033:0x7f89589a3b19 [ 2068.404513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.408471] RSP: 002b:00007f8955f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2068.410130] RAX: ffffffffffffffda RBX: 00007f8958ab6f60 RCX: 00007f89589a3b19 [ 2068.411660] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2068.413205] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2068.414740] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2068.416291] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:03 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xf0ff1f00000000, 0x0, 0x0) [ 2068.432095] loop5: detected capacity change from 0 to 55296 [ 2068.442799] FAULT_INJECTION: forcing a failure. [ 2068.442799] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.445406] CPU: 1 PID: 10163 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2068.446920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.448694] Call Trace: [ 2068.449285] dump_stack+0x107/0x167 [ 2068.450096] should_fail.cold+0x5/0xa [ 2068.450928] ? create_object.isra.0+0x3a/0xa30 [ 2068.451924] should_failslab+0x5/0x20 [ 2068.452731] kmem_cache_alloc+0x5b/0x310 [ 2068.453620] ? mark_held_locks+0x9e/0xe0 [ 2068.454517] create_object.isra.0+0x3a/0xa30 [ 2068.455469] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.456568] kmem_cache_alloc+0x159/0x310 [ 2068.457488] xas_alloc+0x336/0x440 [ 2068.458282] xas_create+0x34a/0x10d0 [ 2068.459099] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.460229] xas_store+0x8c/0x1c40 [ 2068.461050] __xa_store+0x164/0x2d0 [ 2068.461857] ? xa_delete_node+0x280/0x280 [ 2068.462759] ? trace_hardirqs_on+0x5b/0x180 [ 2068.463702] xa_store+0x31/0x50 [ 2068.464428] __io_uring_add_tctx_node+0x1cf/0x520 [ 2068.465480] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2068.466615] ? alloc_fd+0x2e7/0x670 [ 2068.467426] io_uring_setup+0x1fbb/0x2980 [ 2068.468331] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2068.469434] ? wait_for_completion_io+0x270/0x270 [ 2068.470507] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.471633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.472749] do_syscall_64+0x33/0x40 [ 2068.473571] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.474682] RIP: 0033:0x7fc72ff08b19 [ 2068.475482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.479453] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2068.481110] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2068.482653] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e 22:14:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 59) [ 2068.484195] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2068.485980] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2068.487552] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb000000, 0x0, &(0x7f0000001080)) [ 2068.597332] FAULT_INJECTION: forcing a failure. [ 2068.597332] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.599861] CPU: 0 PID: 10181 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2068.601456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.603204] Call Trace: [ 2068.603776] dump_stack+0x107/0x167 [ 2068.604558] should_fail.cold+0x5/0xa [ 2068.605381] ? xas_alloc+0x336/0x440 [ 2068.606176] should_failslab+0x5/0x20 [ 2068.606988] kmem_cache_alloc+0x5b/0x310 [ 2068.607868] xas_alloc+0x336/0x440 [ 2068.608649] xas_create+0x34a/0x10d0 [ 2068.609479] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.610616] xas_store+0x8c/0x1c40 [ 2068.611413] __xa_store+0x164/0x2d0 [ 2068.612208] ? xa_delete_node+0x280/0x280 [ 2068.613125] ? trace_hardirqs_on+0x5b/0x180 [ 2068.614074] xa_store+0x31/0x50 [ 2068.614794] __io_uring_add_tctx_node+0x1cf/0x520 [ 2068.615832] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2068.616964] ? alloc_fd+0x2e7/0x670 [ 2068.617776] io_uring_setup+0x1fbb/0x2980 [ 2068.618687] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2068.619776] ? wait_for_completion_io+0x270/0x270 [ 2068.620864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.621997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.623124] do_syscall_64+0x33/0x40 [ 2068.623929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.625043] RIP: 0033:0x7ff6be2aab19 [ 2068.625848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.629789] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2068.631424] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 2068.632969] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2068.634494] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2068.636018] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2068.637558] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 63) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:14:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 63) 22:14:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 47) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:14:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x7ffffffff000) [ 2068.714517] FAULT_INJECTION: forcing a failure. [ 2068.714517] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.717054] CPU: 0 PID: 10187 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2068.718519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.720257] Call Trace: [ 2068.720818] dump_stack+0x107/0x167 [ 2068.721601] should_fail.cold+0x5/0xa [ 2068.722414] ? create_object.isra.0+0x3a/0xa30 [ 2068.723379] should_failslab+0x5/0x20 [ 2068.724181] kmem_cache_alloc+0x5b/0x310 [ 2068.725063] create_object.isra.0+0x3a/0xa30 [ 2068.725981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.727060] kmem_cache_alloc+0x159/0x310 [ 2068.727953] vm_area_dup+0x78/0x290 [ 2068.728743] ? mark_lock+0xf5/0x2df0 [ 2068.729551] ? perf_tp_event+0x5ce/0xc00 [ 2068.730425] ? lock_chain_count+0x20/0x20 [ 2068.731321] ? perf_event_switch_output+0x7d0/0x7d0 [ 2068.732381] ? lock_chain_count+0x20/0x20 [ 2068.733278] ? mark_lock+0xf5/0x2df0 [ 2068.734080] ? vm_area_alloc+0x110/0x110 [ 2068.734942] ? __lock_acquire+0x1657/0x5b00 [ 2068.736087] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.737236] ? SOFTIRQ_verbose+0x10/0x10 [ 2068.738096] ? vmacache_find+0x55/0x2a0 [ 2068.738938] __split_vma+0xa8/0x4e0 [ 2068.739714] __do_munmap+0x365/0x1260 [ 2068.740531] ? arch_get_unmapped_area+0x450/0x450 [ 2068.741575] ? lock_release+0x680/0x680 [ 2068.742431] mmap_region+0x7cc/0x1500 [ 2068.743279] do_mmap+0x868/0x1370 [ 2068.744040] vm_mmap_pgoff+0x198/0x1f0 [ 2068.744892] ? randomize_page+0xb0/0xb0 [ 2068.745791] ksys_mmap_pgoff+0x41c/0x560 [ 2068.746675] ? find_mergeable_anon_vma+0x250/0x250 [ 2068.747759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.748889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.750018] do_syscall_64+0x33/0x40 [ 2068.750821] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.751921] RIP: 0033:0x7f89589a3b62 [ 2068.752721] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2068.756637] RSP: 002b:00007f8955f190f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2068.758280] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f89589a3b62 [ 2068.759805] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2068.761339] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2068.762865] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2068.764389] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2068.780919] FAULT_INJECTION: forcing a failure. [ 2068.780919] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.783345] CPU: 0 PID: 10191 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2068.783520] FAULT_INJECTION: forcing a failure. [ 2068.783520] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.784823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.784832] Call Trace: [ 2068.784859] dump_stack+0x107/0x167 [ 2068.784889] should_fail.cold+0x5/0xa [ 2068.790975] ? anon_vma_clone+0xdc/0x590 [ 2068.791846] should_failslab+0x5/0x20 [ 2068.792661] kmem_cache_alloc+0x5b/0x310 [ 2068.793558] anon_vma_clone+0xdc/0x590 [ 2068.794413] __split_vma+0x17c/0x4e0 [ 2068.795225] __do_munmap+0x365/0x1260 [ 2068.796048] ? arch_get_unmapped_area+0x450/0x450 [ 2068.797107] ? lock_release+0x680/0x680 [ 2068.797970] mmap_region+0x7cc/0x1500 [ 2068.798824] do_mmap+0x868/0x1370 [ 2068.799591] vm_mmap_pgoff+0x198/0x1f0 [ 2068.800440] ? randomize_page+0xb0/0xb0 [ 2068.801333] ksys_mmap_pgoff+0x41c/0x560 [ 2068.802215] ? find_mergeable_anon_vma+0x250/0x250 [ 2068.803273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.804402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.805523] do_syscall_64+0x33/0x40 [ 2068.806325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.807420] RIP: 0033:0x7f6ebd7dfb62 [ 2068.808217] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2068.812140] RSP: 002b:00007f6ebad550f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2068.813775] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6ebd7dfb62 [ 2068.815300] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2068.816827] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2068.818357] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2068.819878] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2068.821467] CPU: 1 PID: 10192 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2068.822862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.824491] Call Trace: [ 2068.825049] dump_stack+0x107/0x167 [ 2068.825760] should_fail.cold+0x5/0xa [ 2068.826519] ? xas_alloc+0x336/0x440 [ 2068.827258] should_failslab+0x5/0x20 [ 2068.828027] kmem_cache_alloc+0x5b/0x310 [ 2068.828853] xas_alloc+0x336/0x440 [ 2068.829563] xas_create+0x34a/0x10d0 [ 2068.830315] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.831351] xas_store+0x8c/0x1c40 [ 2068.832073] __xa_store+0x164/0x2d0 [ 2068.832792] ? xa_delete_node+0x280/0x280 [ 2068.833634] ? trace_hardirqs_on+0x5b/0x180 [ 2068.834502] xa_store+0x31/0x50 [ 2068.835169] __io_uring_add_tctx_node+0x1cf/0x520 [ 2068.836121] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2068.837174] ? alloc_fd+0x2e7/0x670 [ 2068.837908] io_uring_setup+0x1fbb/0x2980 22:14:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 60) [ 2068.838731] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2068.839975] ? wait_for_completion_io+0x270/0x270 [ 2068.840972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.842007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.843018] do_syscall_64+0x33/0x40 [ 2068.843736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.844740] RIP: 0033:0x7fc72ff08b19 22:14:04 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) [ 2068.845489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.849227] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2068.850945] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2068.852643] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2068.854196] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2068.855581] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2068.856991] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xc000000, 0x0, &(0x7f0000001080)) [ 2068.966944] FAULT_INJECTION: forcing a failure. [ 2068.966944] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.969362] CPU: 1 PID: 10202 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2068.970814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.972592] Call Trace: [ 2068.973162] dump_stack+0x107/0x167 [ 2068.973839] should_fail.cold+0x5/0xa [ 2068.974533] ? xas_alloc+0x336/0x440 [ 2068.975222] should_failslab+0x5/0x20 [ 2068.975916] kmem_cache_alloc+0x5b/0x310 [ 2068.976658] xas_alloc+0x336/0x440 [ 2068.977338] xas_create+0x34a/0x10d0 [ 2068.978045] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.978996] xas_store+0x8c/0x1c40 [ 2068.979648] __xa_store+0x164/0x2d0 [ 2068.980310] ? xa_delete_node+0x280/0x280 [ 2068.981090] ? trace_hardirqs_on+0x5b/0x180 [ 2068.981885] xa_store+0x31/0x50 [ 2068.982484] __io_uring_add_tctx_node+0x1cf/0x520 [ 2068.983360] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2068.984311] ? alloc_fd+0x2e7/0x670 [ 2068.985008] io_uring_setup+0x1fbb/0x2980 [ 2068.985748] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2068.986658] ? wait_for_completion_io+0x270/0x270 [ 2068.987556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.988506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.989458] do_syscall_64+0x33/0x40 [ 2068.990141] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.991064] RIP: 0033:0x7ff6be2aab19 [ 2068.991724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.995163] RSP: 002b:00007ff6bb820108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2068.996530] RAX: ffffffffffffffda RBX: 00007ff6be3bdf60 RCX: 00007ff6be2aab19 [ 2068.997833] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2068.999115] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2069.000386] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2069.001683] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:14:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:14:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 61) [ 2080.831034] FAULT_INJECTION: forcing a failure. [ 2080.831034] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.832776] CPU: 0 PID: 10215 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2080.833690] FAULT_INJECTION: forcing a failure. [ 2080.833690] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.833785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.833800] Call Trace: [ 2080.837706] dump_stack+0x107/0x167 [ 2080.838234] should_fail.cold+0x5/0xa [ 2080.838786] ? create_object.isra.0+0x3a/0xa30 [ 2080.839437] should_failslab+0x5/0x20 [ 2080.839981] kmem_cache_alloc+0x5b/0x310 [ 2080.840567] ? mark_held_locks+0x9e/0xe0 [ 2080.841175] create_object.isra.0+0x3a/0xa30 [ 2080.841804] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2080.842529] kmem_cache_alloc+0x159/0x310 [ 2080.843138] xas_alloc+0x336/0x440 [ 2080.843657] xas_create+0x34a/0x10d0 [ 2080.844220] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2080.844975] xas_store+0x8c/0x1c40 [ 2080.845445] __xa_store+0x164/0x2d0 [ 2080.845872] ? xa_delete_node+0x280/0x280 [ 2080.846359] ? trace_hardirqs_on+0x5b/0x180 [ 2080.846868] xa_store+0x31/0x50 [ 2080.847258] __io_uring_add_tctx_node+0x1cf/0x520 [ 2080.847819] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2080.848429] ? alloc_fd+0x2e7/0x670 [ 2080.848869] io_uring_setup+0x1fbb/0x2980 [ 2080.849372] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2080.849960] ? wait_for_completion_io+0x270/0x270 [ 2080.850542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.851150] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.851755] do_syscall_64+0x33/0x40 [ 2080.852190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2080.852782] RIP: 0033:0x7fc72ff08b19 [ 2080.853230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2080.855348] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2080.856239] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2080.857077] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2080.857897] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2080.858717] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2080.859547] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2080.860406] CPU: 1 PID: 10213 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2080.861862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.863557] Call Trace: [ 2080.864101] dump_stack+0x107/0x167 [ 2080.864852] should_fail.cold+0x5/0xa [ 2080.865649] ? create_object.isra.0+0x3a/0xa30 [ 2080.866592] should_failslab+0x5/0x20 [ 2080.867388] kmem_cache_alloc+0x5b/0x310 [ 2080.868224] create_object.isra.0+0x3a/0xa30 [ 2080.869140] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2080.870206] kmem_cache_alloc+0x159/0x310 [ 2080.871061] anon_vma_clone+0xdc/0x590 [ 2080.871870] __split_vma+0x17c/0x4e0 [ 2080.872632] __do_munmap+0x365/0x1260 [ 2080.873436] ? arch_get_unmapped_area+0x450/0x450 [ 2080.874425] ? lock_release+0x680/0x680 [ 2080.875241] mmap_region+0x7cc/0x1500 [ 2080.876038] do_mmap+0x868/0x1370 [ 2080.876755] vm_mmap_pgoff+0x198/0x1f0 [ 2080.877575] ? randomize_page+0xb0/0xb0 [ 2080.878425] ksys_mmap_pgoff+0x41c/0x560 [ 2080.879257] ? find_mergeable_anon_vma+0x250/0x250 [ 2080.880275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.881353] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.882411] do_syscall_64+0x33/0x40 22:14:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x301531167f0000) 22:14:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe000000, 0x0, &(0x7f0000001080)) 22:14:16 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 22:14:16 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) lseek(r0, 0x4d6, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r4 = syz_io_uring_setup(0x7d07, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) r6 = accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80000) signalfd4(r6, &(0x7f0000000100)={[0x7]}, 0x8, 0x80000) r7 = dup3(r4, r3, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2007, @fd=r1, 0x3, 0x0, 0x0, 0x7, 0x1, {0x2, r5}}, 0x8001) 22:14:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 64) [ 2080.883173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2080.884595] RIP: 0033:0x7f89589a3b62 [ 2080.885383] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2080.889172] RSP: 002b:00007f8955f190f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2080.890730] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f89589a3b62 [ 2080.892179] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2080.893651] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2080.895105] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2080.896562] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2080.911326] FAULT_INJECTION: forcing a failure. [ 2080.911326] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.912726] CPU: 0 PID: 10224 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2080.913534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.914489] Call Trace: [ 2080.914808] dump_stack+0x107/0x167 [ 2080.915222] FAULT_INJECTION: forcing a failure. [ 2080.915222] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.916499] should_fail.cold+0x5/0xa [ 2080.916951] ? create_object.isra.0+0x3a/0xa30 [ 2080.917487] should_failslab+0x5/0x20 [ 2080.917932] kmem_cache_alloc+0x5b/0x310 [ 2080.918411] create_object.isra.0+0x3a/0xa30 [ 2080.918919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2080.919512] kmem_cache_alloc+0x159/0x310 [ 2080.920000] anon_vma_clone+0xdc/0x590 [ 2080.920464] __split_vma+0x17c/0x4e0 [ 2080.920906] __do_munmap+0x365/0x1260 [ 2080.921361] ? arch_get_unmapped_area+0x450/0x450 [ 2080.921928] ? lock_release+0x680/0x680 [ 2080.922396] mmap_region+0x7cc/0x1500 [ 2080.922856] do_mmap+0x868/0x1370 [ 2080.923272] vm_mmap_pgoff+0x198/0x1f0 [ 2080.923730] ? randomize_page+0xb0/0xb0 [ 2080.924212] ksys_mmap_pgoff+0x41c/0x560 [ 2080.924686] ? find_mergeable_anon_vma+0x250/0x250 [ 2080.925264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.925870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.926471] do_syscall_64+0x33/0x40 [ 2080.926905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2080.927498] RIP: 0033:0x7f6ebd7dfb62 [ 2080.927939] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2080.930071] RSP: 002b:00007f6ebad550f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2080.930957] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6ebd7dfb62 [ 2080.931782] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2080.932607] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2080.933440] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2080.934264] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2080.935128] CPU: 1 PID: 10227 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2080.936623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.938380] Call Trace: [ 2080.938938] dump_stack+0x107/0x167 [ 2080.939709] should_fail.cold+0x5/0xa [ 2080.940520] ? vm_area_dup+0x78/0x290 [ 2080.941334] should_failslab+0x5/0x20 [ 2080.942141] kmem_cache_alloc+0x5b/0x310 [ 2080.943003] vm_area_dup+0x78/0x290 [ 2080.943774] ? lock_release+0x680/0x680 [ 2080.944618] ? mark_lock+0xf5/0x2df0 [ 2080.945428] ? lock_chain_count+0x20/0x20 [ 2080.946303] ? mark_lock+0xf5/0x2df0 [ 2080.947096] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2080.948174] ? lock_chain_count+0x20/0x20 [ 2080.949055] ? mark_lock+0xf5/0x2df0 [ 2080.949838] ? vm_area_alloc+0x110/0x110 [ 2080.950711] ? __lock_acquire+0x1657/0x5b00 22:14:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xf000000, 0x0, &(0x7f0000001080)) [ 2080.951639] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2080.952922] ? SOFTIRQ_verbose+0x10/0x10 [ 2080.953803] ? vmacache_find+0x55/0x2a0 [ 2080.954641] __split_vma+0xa8/0x4e0 [ 2080.955411] __do_munmap+0x365/0x1260 [ 2080.956214] ? arch_get_unmapped_area+0x450/0x450 [ 2080.957240] ? lock_release+0x680/0x680 [ 2080.958086] mmap_region+0x7cc/0x1500 [ 2080.958894] do_mmap+0x868/0x1370 [ 2080.959638] vm_mmap_pgoff+0x198/0x1f0 [ 2080.960453] ? randomize_page+0xb0/0xb0 [ 2080.961316] ksys_mmap_pgoff+0x41c/0x560 [ 2080.962178] ? find_mergeable_anon_vma+0x250/0x250 [ 2080.963215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.964297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.965398] do_syscall_64+0x33/0x40 [ 2080.966168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2080.967229] RIP: 0033:0x7ff6be2aab62 [ 2080.967996] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 22:14:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 49) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 2080.971888] RSP: 002b:00007ff6bb8200f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2080.973592] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff6be2aab62 [ 2080.975095] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2080.976597] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2080.978099] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2080.979601] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2081.008548] FAULT_INJECTION: forcing a failure. [ 2081.008548] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.010020] CPU: 0 PID: 10232 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2081.010823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.011787] Call Trace: [ 2081.012104] dump_stack+0x107/0x167 [ 2081.012532] should_fail.cold+0x5/0xa [ 2081.012979] ? xas_alloc+0x336/0x440 [ 2081.013427] should_failslab+0x5/0x20 [ 2081.013870] kmem_cache_alloc+0x5b/0x310 [ 2081.014350] xas_alloc+0x336/0x440 [ 2081.014770] xas_create+0x34a/0x10d0 [ 2081.015224] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2081.015838] xas_store+0x8c/0x1c40 [ 2081.016269] __xa_store+0x164/0x2d0 [ 2081.016695] ? xa_delete_node+0x280/0x280 [ 2081.017192] ? trace_hardirqs_on+0x5b/0x180 [ 2081.017707] xa_store+0x31/0x50 [ 2081.018102] __io_uring_add_tctx_node+0x1cf/0x520 [ 2081.018664] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2081.019270] ? alloc_fd+0x2e7/0x670 [ 2081.019708] io_uring_setup+0x1fbb/0x2980 [ 2081.020206] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2081.020794] ? wait_for_completion_io+0x270/0x270 [ 2081.021384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.022004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.022610] do_syscall_64+0x33/0x40 [ 2081.023045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.023647] RIP: 0033:0x7fc72ff08b19 [ 2081.024079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2081.026220] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2081.027103] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2081.027930] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2081.028765] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2081.029599] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2081.030424] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="6a060020f29a7b00000000ee2e2f66696c65300005f7ad5026f81a73de1fe682286c5fcb58e7f31e20112c53da0d68fc63a25bbefe082321162ba29df2e4e4869fff8715c93b2f8171d965f98b905b5efd36f2dd318dc75b8df7e28e412aa79a6db7d8cbed7e602b8590aebc73b85de48df56a83971c1a7dc9f1e40ae4afc51ef0faf2e72b9fa43b04000af6553df3f87ec449000000"]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x448281, 0xb) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, 0xffffffffffffffff) dup2(r4, r5) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r7 = syz_io_uring_setup(0x7d07, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) r9 = dup3(r7, r6, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[r5, r5], 0x2, 0x0, 0x1, {0x0, r8}}, 0x4000) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:14:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11000000, 0x0, &(0x7f0000001080)) 22:14:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x301532167f0000) [ 2081.091154] device lo entered promiscuous mode 22:14:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:14:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 65) 22:14:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x12000000, 0x0, &(0x7f0000001080)) 22:14:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 62) [ 2081.139100] device lo left promiscuous mode [ 2081.156193] device lo entered promiscuous mode 22:14:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 65) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2081.169055] FAULT_INJECTION: forcing a failure. [ 2081.169055] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.170472] CPU: 0 PID: 10250 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2081.171277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.172237] Call Trace: [ 2081.172556] dump_stack+0x107/0x167 [ 2081.172986] should_fail.cold+0x5/0xa [ 2081.173445] ? create_object.isra.0+0x3a/0xa30 [ 2081.173973] should_failslab+0x5/0x20 [ 2081.174419] kmem_cache_alloc+0x5b/0x310 [ 2081.174895] ? mark_held_locks+0x9e/0xe0 [ 2081.175380] create_object.isra.0+0x3a/0xa30 [ 2081.175892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2081.176490] kmem_cache_alloc+0x159/0x310 [ 2081.176983] xas_alloc+0x336/0x440 [ 2081.177421] xas_create+0x34a/0x10d0 [ 2081.177868] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2081.178478] xas_store+0x8c/0x1c40 [ 2081.178910] __xa_store+0x164/0x2d0 [ 2081.179336] ? xa_delete_node+0x280/0x280 [ 2081.179831] ? trace_hardirqs_on+0x5b/0x180 [ 2081.180343] xa_store+0x31/0x50 [ 2081.180736] __io_uring_add_tctx_node+0x1cf/0x520 [ 2081.181304] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2081.181911] ? alloc_fd+0x2e7/0x670 [ 2081.182351] io_uring_setup+0x1fbb/0x2980 [ 2081.182847] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2081.183436] ? wait_for_completion_io+0x270/0x270 [ 2081.184021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.184632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.185245] do_syscall_64+0x33/0x40 [ 2081.185681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.186281] RIP: 0033:0x7fc72ff08b19 [ 2081.186713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2081.188842] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2081.189736] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2081.190566] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2081.191393] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2081.192221] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2081.192357] FAULT_INJECTION: forcing a failure. [ 2081.192357] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.193052] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2081.197161] CPU: 1 PID: 10254 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2081.198605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.200355] Call Trace: [ 2081.200926] dump_stack+0x107/0x167 [ 2081.201702] should_fail.cold+0x5/0xa [ 2081.202504] ? vm_area_dup+0x78/0x290 [ 2081.203301] should_failslab+0x5/0x20 [ 2081.204103] kmem_cache_alloc+0x5b/0x310 [ 2081.204965] vm_area_dup+0x78/0x290 [ 2081.205744] ? lock_release+0x680/0x680 [ 2081.206592] ? mark_lock+0xf5/0x2df0 [ 2081.207391] ? lock_chain_count+0x20/0x20 [ 2081.208263] ? mark_lock+0xf5/0x2df0 [ 2081.209057] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2081.210168] ? lock_chain_count+0x20/0x20 [ 2081.211056] ? mark_lock+0xf5/0x2df0 [ 2081.211843] ? vm_area_alloc+0x110/0x110 [ 2081.212709] ? __lock_acquire+0x1657/0x5b00 [ 2081.213645] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2081.214746] ? SOFTIRQ_verbose+0x10/0x10 [ 2081.215598] ? vmacache_find+0x55/0x2a0 [ 2081.216450] __split_vma+0xa8/0x4e0 [ 2081.217231] __do_munmap+0x365/0x1260 [ 2081.218049] ? arch_get_unmapped_area+0x450/0x450 [ 2081.219074] ? lock_release+0x680/0x680 [ 2081.219924] mmap_region+0x7cc/0x1500 [ 2081.220748] do_mmap+0x868/0x1370 [ 2081.221502] vm_mmap_pgoff+0x198/0x1f0 [ 2081.222339] ? randomize_page+0xb0/0xb0 [ 2081.223196] ksys_mmap_pgoff+0x41c/0x560 [ 2081.224064] ? find_mergeable_anon_vma+0x250/0x250 [ 2081.225117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.226237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.227332] do_syscall_64+0x33/0x40 [ 2081.228125] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.229223] RIP: 0033:0x7ff6be2aab62 [ 2081.230013] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2081.233914] RSP: 002b:00007ff6bb8200f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2081.235542] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff6be2aab62 [ 2081.237048] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2081.238564] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2081.240076] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2081.241592] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2081.247864] device lo left promiscuous mode [ 2081.256610] FAULT_INJECTION: forcing a failure. [ 2081.256610] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.257927] CPU: 0 PID: 10258 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2081.258724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.259682] Call Trace: [ 2081.259992] dump_stack+0x107/0x167 [ 2081.260412] should_fail.cold+0x5/0xa [ 2081.260854] ? vm_area_alloc+0x1c/0x110 [ 2081.261321] should_failslab+0x5/0x20 [ 2081.261765] kmem_cache_alloc+0x5b/0x310 [ 2081.262243] vm_area_alloc+0x1c/0x110 [ 2081.262682] mmap_region+0x982/0x1500 [ 2081.263131] do_mmap+0x868/0x1370 [ 2081.263543] vm_mmap_pgoff+0x198/0x1f0 [ 2081.263997] ? randomize_page+0xb0/0xb0 [ 2081.264465] ksys_mmap_pgoff+0x41c/0x560 [ 2081.264939] ? find_mergeable_anon_vma+0x250/0x250 [ 2081.265523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.266137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.266736] do_syscall_64+0x33/0x40 [ 2081.267166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.267758] RIP: 0033:0x7f6ebd7dfb62 [ 2081.268189] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2081.270338] RSP: 002b:00007f6ebad340f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2081.271216] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6ebd7dfb62 [ 2081.272038] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2081.272863] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2081.273696] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2081.274524] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2081.286870] FAULT_INJECTION: forcing a failure. [ 2081.286870] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.288210] CPU: 0 PID: 10261 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2081.289022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.289997] Call Trace: [ 2081.290305] dump_stack+0x107/0x167 [ 2081.290736] should_fail.cold+0x5/0xa [ 2081.291183] ? vm_area_alloc+0x1c/0x110 [ 2081.291651] should_failslab+0x5/0x20 [ 2081.292098] kmem_cache_alloc+0x5b/0x310 [ 2081.292577] vm_area_alloc+0x1c/0x110 [ 2081.293023] mmap_region+0x982/0x1500 [ 2081.293494] do_mmap+0x868/0x1370 [ 2081.293914] vm_mmap_pgoff+0x198/0x1f0 [ 2081.294377] ? randomize_page+0xb0/0xb0 [ 2081.294866] ksys_mmap_pgoff+0x41c/0x560 [ 2081.295341] ? find_mergeable_anon_vma+0x250/0x250 [ 2081.295923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.296532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.297157] do_syscall_64+0x33/0x40 [ 2081.297598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.298203] RIP: 0033:0x7f89589a3b62 22:14:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13000000, 0x0, &(0x7f0000001080)) 22:14:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x303531167f0000) [ 2081.298640] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2081.301023] RSP: 002b:00007f8955f190f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2081.301926] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f89589a3b62 [ 2081.302755] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2081.303589] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2081.304424] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2081.305265] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:16 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0xffffffffff600000, 0x0, 0x0) 22:14:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 63) 22:14:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 51) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:14:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x14000000, 0x0, &(0x7f0000001080)) [ 2081.378763] FAULT_INJECTION: forcing a failure. [ 2081.378763] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.381084] FAULT_INJECTION: forcing a failure. [ 2081.381084] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.381351] CPU: 1 PID: 10271 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2081.383942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.385702] Call Trace: [ 2081.386262] dump_stack+0x107/0x167 [ 2081.387040] should_fail.cold+0x5/0xa [ 2081.387848] ? xas_alloc+0x336/0x440 [ 2081.388642] should_failslab+0x5/0x20 [ 2081.389455] kmem_cache_alloc+0x5b/0x310 [ 2081.390323] xas_alloc+0x336/0x440 [ 2081.391078] xas_create+0x34a/0x10d0 [ 2081.391879] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2081.392996] xas_store+0x8c/0x1c40 [ 2081.393776] __xa_store+0x164/0x2d0 [ 2081.394555] ? xa_delete_node+0x280/0x280 [ 2081.395446] ? trace_hardirqs_on+0x5b/0x180 [ 2081.396375] xa_store+0x31/0x50 [ 2081.397086] __io_uring_add_tctx_node+0x1cf/0x520 [ 2081.398114] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2081.399225] ? alloc_fd+0x2e7/0x670 [ 2081.400009] io_uring_setup+0x1fbb/0x2980 [ 2081.400898] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2081.401978] ? wait_for_completion_io+0x270/0x270 [ 2081.403029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.404142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.405244] do_syscall_64+0x33/0x40 [ 2081.406034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.407119] RIP: 0033:0x7fc72ff08b19 [ 2081.407905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2081.411815] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2081.413443] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2081.414948] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2081.416461] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2081.417978] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2081.419488] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2081.421015] CPU: 0 PID: 10273 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2081.421844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2081.422798] Call Trace: [ 2081.423116] dump_stack+0x107/0x167 [ 2081.423544] should_fail.cold+0x5/0xa [ 2081.423997] ? anon_vma_clone+0xdc/0x590 [ 2081.424487] should_failslab+0x5/0x20 [ 2081.424938] kmem_cache_alloc+0x5b/0x310 [ 2081.425430] anon_vma_clone+0xdc/0x590 [ 2081.425896] __split_vma+0x17c/0x4e0 [ 2081.426336] __do_munmap+0x365/0x1260 [ 2081.426783] ? arch_get_unmapped_area+0x450/0x450 [ 2081.427344] ? lock_release+0x680/0x680 [ 2081.427812] mmap_region+0x7cc/0x1500 [ 2081.428273] do_mmap+0x868/0x1370 [ 2081.428690] vm_mmap_pgoff+0x198/0x1f0 [ 2081.429163] ? randomize_page+0xb0/0xb0 [ 2081.429647] ksys_mmap_pgoff+0x41c/0x560 [ 2081.430127] ? find_mergeable_anon_vma+0x250/0x250 [ 2081.430698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2081.431309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2081.431909] do_syscall_64+0x33/0x40 [ 2081.432346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2081.432943] RIP: 0033:0x7ff6be2aab62 [ 2081.433384] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2081.435502] RSP: 002b:00007ff6bb8200f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2081.436377] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff6be2aab62 [ 2081.437210] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2081.438033] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2081.438861] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2081.439680] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2096.604326] FAULT_INJECTION: forcing a failure. [ 2096.604326] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.606153] CPU: 0 PID: 10287 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2096.607075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.608173] Call Trace: [ 2096.608529] dump_stack+0x107/0x167 [ 2096.609023] should_fail.cold+0x5/0xa [ 2096.609548] ? create_object.isra.0+0x3a/0xa30 [ 2096.610159] should_failslab+0x5/0x20 [ 2096.610666] kmem_cache_alloc+0x5b/0x310 [ 2096.611214] create_object.isra.0+0x3a/0xa30 [ 2096.611800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.612488] kmem_cache_alloc+0x159/0x310 [ 2096.613057] vm_area_alloc+0x1c/0x110 [ 2096.613580] mmap_region+0x982/0x1500 [ 2096.614110] do_mmap+0x868/0x1370 [ 2096.614591] vm_mmap_pgoff+0x198/0x1f0 [ 2096.615120] ? randomize_page+0xb0/0xb0 [ 2096.615682] ksys_mmap_pgoff+0x41c/0x560 [ 2096.616231] ? find_mergeable_anon_vma+0x250/0x250 [ 2096.616821] FAULT_INJECTION: forcing a failure. [ 2096.616821] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.616896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.620335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.621025] do_syscall_64+0x33/0x40 [ 2096.621529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.622203] RIP: 0033:0x7f6ebd7dfb62 [ 2096.622696] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2096.625101] RSP: 002b:00007f6ebad550f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2096.626111] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6ebd7dfb62 [ 2096.627037] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2096.627976] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2096.628898] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2096.629848] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2096.630802] CPU: 1 PID: 10293 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2096.632473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.634470] Call Trace: [ 2096.635109] dump_stack+0x107/0x167 [ 2096.635987] should_fail.cold+0x5/0xa [ 2096.636906] ? create_object.isra.0+0x3a/0xa30 22:14:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r0, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:14:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 52) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:14:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 66) 22:14:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 66) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 22:14:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x303532167f0000) 22:14:31 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 22:14:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 64) 22:14:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x15000000, 0x0, &(0x7f0000001080)) [ 2096.638167] should_failslab+0x5/0x20 [ 2096.639139] kmem_cache_alloc+0x5b/0x310 [ 2096.640113] create_object.isra.0+0x3a/0xa30 [ 2096.640427] FAULT_INJECTION: forcing a failure. [ 2096.640427] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.641162] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.641194] kmem_cache_alloc+0x159/0x310 [ 2096.644762] vm_area_alloc+0x1c/0x110 [ 2096.645687] mmap_region+0x982/0x1500 [ 2096.646620] do_mmap+0x868/0x1370 [ 2096.647458] vm_mmap_pgoff+0x198/0x1f0 [ 2096.648389] ? randomize_page+0xb0/0xb0 [ 2096.649365] ksys_mmap_pgoff+0x41c/0x560 [ 2096.650337] ? find_mergeable_anon_vma+0x250/0x250 [ 2096.651513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.652768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.654025] do_syscall_64+0x33/0x40 [ 2096.654917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.656165] RIP: 0033:0x7f89589a3b62 [ 2096.657075] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2096.661488] RSP: 002b:00007f8955f190f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2096.663304] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f89589a3b62 [ 2096.665005] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2096.666717] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2096.668401] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2096.670096] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2096.671809] CPU: 0 PID: 10290 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2096.672716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.673791] Call Trace: [ 2096.674127] dump_stack+0x107/0x167 [ 2096.674599] should_fail.cold+0x5/0xa [ 2096.675094] ? create_object.isra.0+0x3a/0xa30 [ 2096.675679] should_failslab+0x5/0x20 [ 2096.676175] kmem_cache_alloc+0x5b/0x310 [ 2096.676712] create_object.isra.0+0x3a/0xa30 [ 2096.677280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.677934] kmem_cache_alloc+0x159/0x310 [ 2096.678475] anon_vma_clone+0xdc/0x590 [ 2096.678986] __split_vma+0x17c/0x4e0 [ 2096.679473] __do_munmap+0x365/0x1260 [ 2096.679972] ? arch_get_unmapped_area+0x450/0x450 [ 2096.680603] ? lock_release+0x680/0x680 [ 2096.681125] mmap_region+0x7cc/0x1500 [ 2096.681647] do_mmap+0x868/0x1370 [ 2096.682116] vm_mmap_pgoff+0x198/0x1f0 [ 2096.682625] ? randomize_page+0xb0/0xb0 [ 2096.683158] ksys_mmap_pgoff+0x41c/0x560 [ 2096.683688] ? find_mergeable_anon_vma+0x250/0x250 [ 2096.684328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.685005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.685679] do_syscall_64+0x33/0x40 [ 2096.686156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.686815] RIP: 0033:0x7ff6be2aab62 [ 2096.687291] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2096.689591] RSP: 002b:00007ff6bb8200f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2096.690576] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff6be2aab62 [ 2096.691490] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2096.692400] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2096.693317] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2096.694220] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2096.701121] FAULT_INJECTION: forcing a failure. [ 2096.701121] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.702680] CPU: 0 PID: 10300 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2096.703569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.704613] Call Trace: [ 2096.704959] dump_stack+0x107/0x167 [ 2096.705440] should_fail.cold+0x5/0xa [ 2096.705934] ? create_object.isra.0+0x3a/0xa30 [ 2096.706523] should_failslab+0x5/0x20 [ 2096.707022] kmem_cache_alloc+0x5b/0x310 [ 2096.707545] ? mark_held_locks+0x9e/0xe0 [ 2096.708073] create_object.isra.0+0x3a/0xa30 [ 2096.708634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.709300] kmem_cache_alloc+0x159/0x310 [ 2096.709846] xas_alloc+0x336/0x440 [ 2096.710308] xas_create+0x34a/0x10d0 [ 2096.710805] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2096.711483] xas_store+0x8c/0x1c40 [ 2096.711960] __xa_store+0x164/0x2d0 [ 2096.712431] ? xa_delete_node+0x280/0x280 [ 2096.712974] ? trace_hardirqs_on+0x5b/0x180 [ 2096.713542] xa_store+0x31/0x50 [ 2096.713972] __io_uring_add_tctx_node+0x1cf/0x520 [ 2096.714587] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2096.715254] ? alloc_fd+0x2e7/0x670 [ 2096.715733] io_uring_setup+0x1fbb/0x2980 [ 2096.716274] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2096.716919] ? wait_for_completion_io+0x270/0x270 [ 2096.717568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.718235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.718908] do_syscall_64+0x33/0x40 [ 2096.719380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.720025] RIP: 0033:0x7fc72ff08b19 [ 2096.720496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.722807] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2096.723764] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2096.724656] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2096.725550] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2096.726445] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2096.727324] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x17000000, 0x0, &(0x7f0000001080)) 22:14:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000001080)) 22:14:46 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x60ff) 22:14:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) 22:14:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 53) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 22:14:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 67) 22:14:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 65) 22:14:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 22:14:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 67) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2111.435584] FAULT_INJECTION: forcing a failure. [ 2111.435584] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.437317] CPU: 0 PID: 10318 Comm: syz-executor.2 Not tainted 5.10.252 #1 [ 2111.438354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.439586] Call Trace: [ 2111.439983] dump_stack+0x107/0x167 [ 2111.440551] should_fail.cold+0x5/0xa [ 2111.441118] ? create_object.isra.0+0x3a/0xa30 [ 2111.441803] should_failslab+0x5/0x20 [ 2111.442376] kmem_cache_alloc+0x5b/0x310 [ 2111.443003] create_object.isra.0+0x3a/0xa30 [ 2111.443650] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2111.444416] kmem_cache_alloc+0x159/0x310 [ 2111.445056] vm_area_alloc+0x1c/0x110 [ 2111.445634] mmap_region+0x982/0x1500 [ 2111.446230] do_mmap+0x868/0x1370 [ 2111.446761] vm_mmap_pgoff+0x198/0x1f0 [ 2111.447345] ? randomize_page+0xb0/0xb0 [ 2111.447958] ksys_mmap_pgoff+0x41c/0x560 [ 2111.448587] ? find_mergeable_anon_vma+0x250/0x250 [ 2111.449334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.450130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.450921] do_syscall_64+0x33/0x40 [ 2111.451485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.451855] FAULT_INJECTION: forcing a failure. [ 2111.451855] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.452250] RIP: 0033:0x7f6ebd7dfb62 [ 2111.452272] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2111.457876] RSP: 002b:00007f6ebad550f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2111.459005] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6ebd7dfb62 [ 2111.460058] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2111.461106] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2111.462157] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2111.463197] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2111.464284] CPU: 1 PID: 10314 Comm: syz-executor.4 Not tainted 5.10.252 #1 [ 2111.465763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.467513] Call Trace: [ 2111.468076] dump_stack+0x107/0x167 [ 2111.468849] should_fail.cold+0x5/0xa [ 2111.469669] ? create_object.isra.0+0x3a/0xa30 [ 2111.470637] should_failslab+0x5/0x20 [ 2111.471439] kmem_cache_alloc+0x5b/0x310 [ 2111.472301] ? mark_held_locks+0x9e/0xe0 [ 2111.473161] create_object.isra.0+0x3a/0xa30 [ 2111.473936] FAULT_INJECTION: forcing a failure. [ 2111.473936] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.474095] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2111.474123] kmem_cache_alloc+0x159/0x310 [ 2111.477696] xas_alloc+0x336/0x440 [ 2111.478444] xas_create+0x34a/0x10d0 [ 2111.479239] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.480360] xas_store+0x8c/0x1c40 [ 2111.481128] __xa_store+0x164/0x2d0 [ 2111.481927] ? xa_delete_node+0x280/0x280 [ 2111.482814] ? trace_hardirqs_on+0x5b/0x180 [ 2111.483730] xa_store+0x31/0x50 [ 2111.484433] __io_uring_add_tctx_node+0x1cf/0x520 [ 2111.485480] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2111.486602] ? alloc_fd+0x2e7/0x670 [ 2111.487378] io_uring_setup+0x1fbb/0x2980 [ 2111.488257] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2111.489328] ? wait_for_completion_io+0x270/0x270 [ 2111.490377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.491478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.492568] do_syscall_64+0x33/0x40 [ 2111.493352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.494441] RIP: 0033:0x7fc72ff08b19 [ 2111.495234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.499098] RSP: 002b:00007fc72d47e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2111.500688] RAX: ffffffffffffffda RBX: 00007fc73001bf60 RCX: 00007fc72ff08b19 [ 2111.502186] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 2111.503675] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 2111.505165] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 2111.506676] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2111.508200] CPU: 0 PID: 10323 Comm: syz-executor.6 Not tainted 5.10.252 #1 [ 2111.509209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.510472] Call Trace: [ 2111.510942] dump_stack+0x107/0x167 [ 2111.511475] should_fail.cold+0x5/0xa [ 2111.512031] ? anon_vma_clone+0xdc/0x590 [ 2111.512623] should_failslab+0x5/0x20 [ 2111.513172] kmem_cache_alloc+0x5b/0x310 [ 2111.513794] anon_vma_clone+0xdc/0x590 [ 2111.514376] __split_vma+0x17c/0x4e0 [ 2111.514925] __do_munmap+0x365/0x1260 [ 2111.515489] ? arch_get_unmapped_area+0x450/0x450 [ 2111.516197] ? lock_release+0x680/0x680 [ 2111.516790] mmap_region+0x7cc/0x1500 [ 2111.517362] do_mmap+0x868/0x1370 [ 2111.517891] vm_mmap_pgoff+0x198/0x1f0 [ 2111.518462] ? randomize_page+0xb0/0xb0 [ 2111.519061] ksys_mmap_pgoff+0x41c/0x560 [ 2111.519663] ? find_mergeable_anon_vma+0x250/0x250 [ 2111.520377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.521135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.521893] do_syscall_64+0x33/0x40 [ 2111.522429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.523174] RIP: 0033:0x7ff6be2aab62 [ 2111.523712] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2111.526383] RSP: 002b:00007ff6bb8200f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2111.527499] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff6be2aab62 [ 2111.527546] FAULT_INJECTION: forcing a failure. [ 2111.527546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2111.528524] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2111.528533] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2111.528543] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2111.528552] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2111.537206] CPU: 1 PID: 10325 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2111.538668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.540417] Call Trace: [ 2111.540978] dump_stack+0x107/0x167 [ 2111.541757] should_fail.cold+0x5/0xa [ 2111.542568] __alloc_pages_nodemask+0x182/0x600 [ 2111.543552] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2111.544825] ? walk_mem_res+0x170/0x170 [ 2111.545686] alloc_pages_current+0x187/0x280 [ 2111.546615] pte_alloc_one+0x16/0x1a0 [ 2111.547419] __pte_alloc+0x1d/0x330 [ 2111.548190] remap_pfn_range_internal+0x9a3/0xf60 [ 2111.549268] ? lookup_memtype+0x5b/0x200 [ 2111.550146] ? apply_to_existing_page_range+0x40/0x40 [ 2111.551243] remap_pfn_range+0xcd/0x160 [ 2111.552084] ? remap_pfn_range_notrack+0x70/0x70 [ 2111.553127] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2111.554236] io_uring_mmap+0x398/0x530 [ 2111.555062] mmap_file+0x5e/0xe0 [ 2111.555780] mmap_region+0xc4d/0x1500 [ 2111.556604] do_mmap+0x868/0x1370 [ 2111.557348] vm_mmap_pgoff+0x198/0x1f0 [ 2111.558185] ? randomize_page+0xb0/0xb0 [ 2111.559042] ksys_mmap_pgoff+0x41c/0x560 [ 2111.559911] ? find_mergeable_anon_vma+0x250/0x250 [ 2111.560955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.562076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.563177] do_syscall_64+0x33/0x40 [ 2111.563968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.565055] RIP: 0033:0x7f89589a3b62 [ 2111.565846] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2111.569747] RSP: 002b:00007f8955f190f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2111.571360] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f89589a3b62 [ 2111.572876] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2111.574389] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2111.575897] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2111.577413] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xb0ff2000000000) 22:14:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000001080)=0x6) [ 2111.654812] ------------[ cut here ]------------ [ 2111.655576] WARNING: CPU: 0 PID: 10325 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2111.656893] Modules linked in: [ 2111.657368] CPU: 0 PID: 10325 Comm: syz-executor.3 Not tainted 5.10.252 #1 [ 2111.658384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.659590] RIP: 0010:get_pat_info+0x216/0x270 [ 2111.660261] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 b1 88 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 9a 88 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 b5 a5 5a 00 e9 [ 2111.662899] RSP: 0018:ffff8880194f7890 EFLAGS: 00010216 [ 2111.663651] RAX: 0000000000017215 RBX: ffff888019437200 RCX: ffffc900007ef000 [ 2111.664678] RDX: 0000000000040000 RSI: ffffffff81125466 RDI: 0000000000000007 [ 2111.665736] RBP: ffff8880194f7948 R08: 0000000000000000 R09: ffff8880194f7818 [ 2111.666783] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2111.668334] R13: 1ffff1100329ef12 R14: 0000000000000000 R15: ffff888019437250 [ 2111.671610] FS: 00007f8955f19700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2111.675665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2111.676496] CR2: 00007f1630930718 CR3: 00000000211ee000 CR4: 0000000000350ef0 [ 2111.677521] Call Trace: [ 2111.677929] ? pgprot_writethrough+0xc0/0xc0 [ 2111.678542] ? finish_task_switch+0x126/0x5d0 [ 2111.679193] ? finish_task_switch+0xef/0x5d0 [ 2111.679855] untrack_pfn+0xdc/0x240 [ 2111.680365] ? track_pfn_insert+0x150/0x150 [ 2111.681006] ? lock_downgrade+0x6d0/0x6d0 [ 2111.681594] ? uprobe_munmap+0x1c/0x560 [ 2111.682193] unmap_single_vma+0x1bc/0x300 [ 2111.682810] zap_page_range_single+0x2ce/0x450 [ 2111.683450] ? unmap_single_vma+0x300/0x300 [ 2111.684088] ? remap_pfn_range_internal+0xc56/0xf60 [ 2111.684825] ? lookup_memtype+0x5b/0x200 [ 2111.685423] ? apply_to_existing_page_range+0x40/0x40 [ 2111.686214] remap_pfn_range+0x139/0x160 [ 2111.686819] ? remap_pfn_range_notrack+0x70/0x70 [ 2111.687484] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2111.688247] io_uring_mmap+0x398/0x530 [ 2111.688831] mmap_file+0x5e/0xe0 [ 2111.689308] mmap_region+0xc4d/0x1500 [ 2111.689901] do_mmap+0x868/0x1370 [ 2111.690403] vm_mmap_pgoff+0x198/0x1f0 [ 2111.690987] ? randomize_page+0xb0/0xb0 [ 2111.691572] ksys_mmap_pgoff+0x41c/0x560 [ 2111.692169] ? find_mergeable_anon_vma+0x250/0x250 [ 2111.692887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.693627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.694386] do_syscall_64+0x33/0x40 [ 2111.694939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.695670] RIP: 0033:0x7f89589a3b62 [ 2111.696212] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2111.698773] RSP: 002b:00007f8955f190f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2111.699847] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f89589a3b62 [ 2111.700859] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2111.701897] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2111.702957] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2111.703965] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2111.706315] irq event stamp: 1489 [ 2111.707014] hardirqs last enabled at (1625): [] console_unlock+0x92d/0xb40 [ 2111.708222] hardirqs last disabled at (1634): [] console_unlock+0x839/0xb40 [ 2111.709444] softirqs last enabled at (1622): [] asm_call_irq_on_stack+0x12/0x20 [ 2111.710722] softirqs last disabled at (1497): [] asm_call_irq_on_stack+0x12/0x20 [ 2111.711968] ---[ end trace 6d57bd8abe55c8c7 ]--- 22:14:46 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x0, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 22:14:46 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 22:14:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 68) 22:14:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 66) [ 2111.767474] FAULT_INJECTION: forcing a failure. [ 2111.767474] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2111.770091] CPU: 1 PID: 10342 Comm: syz-executor.2 Tainted: G W 5.10.252 #1 [ 2111.771840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.773599] Call Trace: [ 2111.774166] dump_stack+0x107/0x167 [ 2111.774943] should_fail.cold+0x5/0xa [ 2111.775756] __alloc_pages_nodemask+0x182/0x600 [ 2111.776743] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2111.778049] ? walk_mem_res+0x170/0x170 [ 2111.778901] alloc_pages_current+0x187/0x280 [ 2111.779835] pte_alloc_one+0x16/0x1a0 [ 2111.780647] __pte_alloc+0x1d/0x330 [ 2111.781438] remap_pfn_range_internal+0x9a3/0xf60 [ 2111.782491] ? lookup_memtype+0x5b/0x200 [ 2111.783363] ? apply_to_existing_page_range+0x40/0x40 [ 2111.784210] FAULT_INJECTION: forcing a failure. [ 2111.784210] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.784460] remap_pfn_range+0xcd/0x160 [ 2111.786775] ? remap_pfn_range_notrack+0x70/0x70 [ 2111.787785] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2111.788886] io_uring_mmap+0x398/0x530 [ 2111.789740] mmap_file+0x5e/0xe0 [ 2111.790466] mmap_region+0xc4d/0x1500 [ 2111.791290] do_mmap+0x868/0x1370 [ 2111.792035] vm_mmap_pgoff+0x198/0x1f0 [ 2111.792864] ? randomize_page+0xb0/0xb0 [ 2111.793791] ksys_mmap_pgoff+0x41c/0x560 [ 2111.794693] ? find_mergeable_anon_vma+0x250/0x250 [ 2111.795735] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.796843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.797965] do_syscall_64+0x33/0x40 [ 2111.798751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.799834] RIP: 0033:0x7f6ebd7dfb62 [ 2111.800661] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2111.804619] RSP: 002b:00007f6ebad550f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2111.806331] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f6ebd7dfb62 [ 2111.807842] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2111.809389] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2111.810959] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2111.812465] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 [ 2111.814063] CPU: 0 PID: 10345 Comm: syz-executor.6 Tainted: G W 5.10.252 #1 [ 2111.815229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.816361] Call Trace: [ 2111.816722] dump_stack+0x107/0x167 [ 2111.817251] should_fail.cold+0x5/0xa [ 2111.817777] ? create_object.isra.0+0x3a/0xa30 [ 2111.818388] should_failslab+0x5/0x20 [ 2111.818892] kmem_cache_alloc+0x5b/0x310 [ 2111.819438] create_object.isra.0+0x3a/0xa30 [ 2111.820017] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2111.820730] kmem_cache_alloc+0x159/0x310 [ 2111.821327] vm_area_alloc+0x1c/0x110 [ 2111.821840] mmap_region+0x982/0x1500 [ 2111.822364] do_mmap+0x868/0x1370 [ 2111.822837] vm_mmap_pgoff+0x198/0x1f0 [ 2111.823363] ? randomize_page+0xb0/0xb0 [ 2111.823911] ksys_mmap_pgoff+0x41c/0x560 [ 2111.824498] ? find_mergeable_anon_vma+0x250/0x250 [ 2111.825168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.825888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.826576] do_syscall_64+0x33/0x40 [ 2111.827070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.827740] RIP: 0033:0x7ff6be2aab62 [ 2111.828231] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2111.830650] RSP: 002b:00007ff6bb8200f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2111.831653] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff6be2aab62 [ 2111.832636] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 [ 2111.833585] RBP: 0000000020ffb000 R08: 0000000000000005 R09: 0000000000000000 [ 2111.834520] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 2111.835453] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ffb000 22:14:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000001080)=0x8) 22:14:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x3, [0x6, 0x6, 0x0, 0x8, 0xffff, 0xff]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2400e800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xf0ff1f00000000) VM DIAGNOSIS: 22:14:47 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e8271 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff8880194f72a0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000020 R13=0000000000000020 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e82c8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8955f19700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1630930718 CR3=00000000211ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000a74a120e RBX=00000000b4d50900 RCX=0000000000000800 RDX=ffff888016e97aec RSI=0000000000000001 RDI=0000000021d5aa0e RBP=ffffffff816cb4c7 RSP=ffff888016e97a48 R8 =000000009a816440 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888016e97a98 R13=000000000000000b R14=000000000000000b R15=ffff88800d84b300 RIP=ffffffff81fe5c79 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1cd3c8d8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e7e75de528 CR3=000000000f06a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=7269762f736563697665642f7379732f XMM01=636f6c622f6c6175747269762f736563 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=000055e7e75a1cf0ffffffff00000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000