lowpath.constprop.0+0x2320/0x2320 [ 1036.257577] create_object.isra.0+0x3a/0xa30 20:27:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r3}}, 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1036.258545] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1036.259829] kmem_cache_alloc_trace+0x151/0x320 [ 1036.260832] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1036.262023] io_uring_setup+0x14f6/0x2980 [ 1036.262920] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1036.263999] ? wait_for_completion_io+0x270/0x270 [ 1036.265079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1036.266209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1036.267318] do_syscall_64+0x33/0x40 [ 1036.268110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1036.269218] RIP: 0033:0x7f2e9760cb19 [ 1036.270025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1036.273925] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1036.275762] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1036.277649] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1036.279427] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1036.280938] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1036.282468] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1036.286928] FAULT_INJECTION: forcing a failure. [ 1036.286928] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.289397] CPU: 0 PID: 7612 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1036.290879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1036.292682] Call Trace: [ 1036.293267] dump_stack+0x107/0x167 [ 1036.294061] should_fail.cold+0x5/0xa [ 1036.294869] ? perf_event_mmap+0x51a/0xd90 [ 1036.295843] should_failslab+0x5/0x20 [ 1036.296683] kmem_cache_alloc_trace+0x55/0x320 [ 1036.297677] perf_event_mmap+0x51a/0xd90 [ 1036.298562] ? perf_event_namespaces+0x50/0x50 [ 1036.299595] ? vma_link+0x619/0x820 [ 1036.300396] mmap_region+0x3a6/0x1500 [ 1036.301239] do_mmap+0x868/0x1370 [ 1036.302007] vm_mmap_pgoff+0x198/0x1f0 [ 1036.302847] ? randomize_page+0xb0/0xb0 [ 1036.303750] ksys_mmap_pgoff+0x41c/0x560 [ 1036.304628] ? find_mergeable_anon_vma+0x250/0x250 [ 1036.305693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1036.306815] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1036.307962] do_syscall_64+0x33/0x40 [ 1036.308771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1036.309871] RIP: 0033:0x7f1e40f33b19 [ 1036.310678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1036.314638] RSP: 002b:00007f1e3e4a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1036.316296] RAX: ffffffffffffffda RBX: 00007f1e41046f60 RCX: 00007f1e40f33b19 [ 1036.317815] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1036.319370] RBP: 00007f1e3e4a91d0 R08: 0000000000000003 R09: 0000000000000000 [ 1036.320900] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1036.322440] R13: 00007ffefbb2825f R14: 00007f1e3e4a9300 R15: 0000000000022000 20:27:49 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) 20:27:49 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x200000000000000) 20:27:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r3}}, 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:28:05 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000005, 0x31, 0xffffffffffffffff, 0x0) 20:28:05 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000200), 0xc, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="47b894f90ba1024923ce7053b9b4ffe5db34a4b2b7353135db0f2b2cbce46aaa25a86783af2aa828d3f2205912fab50e8be5c71d481ae64880e0e495786e6c48ff5b8b0995dd45575cf64502ff652387161770965941a42d024257e1aa42011e9d4b38157dacb70ec1f355b1199bc6520c683b710662cebfd26a9bede2528576c985d7d64d8aa189c73a3ba109cdbb6c1245851597d8f9543a249d0600cbf255605bc852bc97b91f72d0a11795b94f5ef3c483f20997041729e57a7e1a7096412b76f61e9f0460d2999b20a3eb055401d470df5a2d714d910d83a29cee0ae3e8b6"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x105142, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x54000, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x8001, 0x1d87) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f00000003c0)=""/210, 0xd2) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) sendfile(r1, r4, 0x0, 0x1) r5 = accept(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0)=0x88, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x20d315) 20:28:05 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) [ 1051.831535] FAULT_INJECTION: forcing a failure. [ 1051.831535] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.834199] CPU: 0 PID: 7645 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1051.835639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.837369] Call Trace: [ 1051.837930] dump_stack+0x107/0x167 [ 1051.838694] should_fail.cold+0x5/0xa [ 1051.839501] ? vm_area_dup+0x78/0x290 [ 1051.840296] should_failslab+0x5/0x20 [ 1051.841095] kmem_cache_alloc+0x5b/0x310 [ 1051.841962] vm_area_dup+0x78/0x290 [ 1051.842731] ? __lock_acquire+0xbb1/0x5b00 [ 1051.843645] ? perf_trace_lock+0xac/0x490 [ 1051.844511] ? SOFTIRQ_verbose+0x10/0x10 [ 1051.845372] ? __lockdep_reset_lock+0x180/0x180 [ 1051.846354] ? vm_area_alloc+0x110/0x110 [ 1051.847214] ? find_held_lock+0x2c/0x110 [ 1051.848088] ? get_mm_exe_file+0x139/0x310 [ 1051.848970] ? lock_downgrade+0x6d0/0x6d0 [ 1051.849852] ? down_write_nested+0xe4/0x160 [ 1051.850760] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1051.851841] ? get_mm_exe_file+0x162/0x310 [ 1051.852741] copy_process+0x298b/0x78b0 [ 1051.853575] ? SOFTIRQ_verbose+0x10/0x10 [ 1051.854467] ? __cleanup_sighand+0xb0/0xb0 [ 1051.855390] ? _copy_from_user+0xfb/0x1b0 [ 1051.856268] kernel_clone+0xe7/0x980 [ 1051.857052] ? __lockdep_reset_lock+0x180/0x180 [ 1051.858029] ? create_io_thread+0xf0/0xf0 [ 1051.858914] ? ksys_write+0x21a/0x260 [ 1051.859722] ? lock_downgrade+0x6d0/0x6d0 [ 1051.860606] __do_sys_clone3+0x1e5/0x320 [ 1051.861460] ? __do_sys_clone+0x110/0x110 [ 1051.862364] ? rcu_read_lock_any_held+0x75/0xa0 [ 1051.863340] ? vfs_write+0x354/0xb10 [ 1051.864121] ? fput_many+0x2f/0x1a0 [ 1051.864890] ? ksys_write+0x1a9/0x260 [ 1051.865690] ? __ia32_sys_read+0xb0/0xb0 [ 1051.866552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1051.867673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1051.868749] ? trace_hardirqs_on+0x5b/0x180 [ 1051.869669] do_syscall_64+0x33/0x40 [ 1051.870461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1051.871551] RIP: 0033:0x7f3a69dacb19 [ 1051.872336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1051.876213] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1051.877821] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1051.879337] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1051.880845] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1051.882334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1051.883832] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1051.893032] FAULT_INJECTION: forcing a failure. [ 1051.893032] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.895462] CPU: 0 PID: 7656 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1051.896904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.898661] Call Trace: [ 1051.899230] dump_stack+0x107/0x167 [ 1051.900022] should_fail.cold+0x5/0xa [ 1051.900837] ? create_object.isra.0+0x3a/0xa30 [ 1051.901808] should_failslab+0x5/0x20 [ 1051.902612] kmem_cache_alloc+0x5b/0x310 [ 1051.903483] create_object.isra.0+0x3a/0xa30 [ 1051.904416] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1051.905506] kmem_cache_alloc_trace+0x151/0x320 [ 1051.906494] perf_event_mmap+0x51a/0xd90 [ 1051.907368] ? perf_event_namespaces+0x50/0x50 [ 1051.908359] ? vma_link+0x619/0x820 [ 1051.909134] mmap_region+0x3a6/0x1500 [ 1051.909960] do_mmap+0x868/0x1370 [ 1051.910706] vm_mmap_pgoff+0x198/0x1f0 [ 1051.911575] ? randomize_page+0xb0/0xb0 [ 1051.912430] ksys_mmap_pgoff+0x41c/0x560 [ 1051.913287] ? find_mergeable_anon_vma+0x250/0x250 [ 1051.914319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1051.915728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1051.916812] do_syscall_64+0x33/0x40 [ 1051.917597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1051.918669] RIP: 0033:0x7f1e40f33b19 [ 1051.919462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1051.923361] RSP: 002b:00007f1e3e4a9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1051.924947] RAX: ffffffffffffffda RBX: 00007f1e41046f60 RCX: 00007f1e40f33b19 [ 1051.926447] RDX: 000000000100000e RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1051.927945] RBP: 00007f1e3e4a91d0 R08: 0000000000000003 R09: 0000000000000000 [ 1051.929441] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1051.930932] R13: 00007ffefbb2825f R14: 00007f1e3e4a9300 R15: 0000000000022000 20:28:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 20:28:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 6) 20:28:05 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0xfeffffff00000000) 20:28:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 16) 20:28:05 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1051.945872] FAULT_INJECTION: forcing a failure. [ 1051.945872] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.948496] CPU: 1 PID: 7657 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1051.950075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.952080] Call Trace: [ 1051.952708] dump_stack+0x107/0x167 [ 1051.953618] should_fail.cold+0x5/0xa [ 1051.954582] ? create_object.isra.0+0x3a/0xa30 [ 1051.955675] should_failslab+0x5/0x20 [ 1051.956591] kmem_cache_alloc+0x5b/0x310 [ 1051.957602] create_object.isra.0+0x3a/0xa30 [ 1051.958658] kmemleak_alloc_percpu+0xa0/0x100 [ 1051.959770] pcpu_alloc+0x4e2/0x1240 [ 1051.960672] ? io_async_queue_proc+0x80/0x80 [ 1051.961716] percpu_ref_init+0x31/0x3d0 [ 1051.962672] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1051.963967] io_uring_setup+0x14f6/0x2980 [ 1051.964975] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1051.966176] ? wait_for_completion_io+0x270/0x270 [ 1051.967391] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1051.968640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1051.969862] do_syscall_64+0x33/0x40 [ 1051.970748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1051.971941] RIP: 0033:0x7f2e9760cb19 [ 1051.972824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1051.977262] RSP: 002b:00007f2e94b61108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1051.979080] RAX: ffffffffffffffda RBX: 00007f2e97720020 RCX: 00007f2e9760cb19 [ 1051.980746] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1051.982438] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1051.984170] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1051.985885] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:28:05 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0xffffffff00000000) 20:28:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3002, 0x0, 0x13, r0, 0x0) 20:28:05 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000006, 0x31, 0xffffffffffffffff, 0x0) 20:28:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) (fail_nth: 7) 20:28:05 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:28:05 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29) 20:28:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3003, 0x0, 0x13, r0, 0x0) [ 1052.115669] FAULT_INJECTION: forcing a failure. [ 1052.115669] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.118347] CPU: 1 PID: 7671 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1052.119934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1052.121843] Call Trace: [ 1052.122470] dump_stack+0x107/0x167 [ 1052.123325] should_fail.cold+0x5/0xa [ 1052.124225] ? create_object.isra.0+0x3a/0xa30 [ 1052.125299] should_failslab+0x5/0x20 [ 1052.126201] kmem_cache_alloc+0x5b/0x310 [ 1052.127157] create_object.isra.0+0x3a/0xa30 [ 1052.128187] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1052.129348] kmem_cache_alloc+0x159/0x310 [ 1052.130241] vm_area_dup+0x78/0x290 [ 1052.131124] ? __lock_acquire+0xbb1/0x5b00 [ 1052.132176] ? perf_trace_lock+0xac/0x490 [ 1052.133187] ? SOFTIRQ_verbose+0x10/0x10 [ 1052.134176] ? __lockdep_reset_lock+0x180/0x180 [ 1052.135281] ? vm_area_alloc+0x110/0x110 [ 1052.136115] ? find_held_lock+0x2c/0x110 [ 1052.136954] ? get_mm_exe_file+0x139/0x310 [ 1052.137822] ? lock_downgrade+0x6d0/0x6d0 [ 1052.138680] ? down_write_nested+0xe4/0x160 [ 1052.139569] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1052.140616] ? get_mm_exe_file+0x162/0x310 [ 1052.141482] copy_process+0x298b/0x78b0 [ 1052.142290] ? SOFTIRQ_verbose+0x10/0x10 [ 1052.143161] ? __cleanup_sighand+0xb0/0xb0 [ 1052.144052] ? _copy_from_user+0xfb/0x1b0 [ 1052.144910] kernel_clone+0xe7/0x980 [ 1052.145670] ? __lockdep_reset_lock+0x180/0x180 [ 1052.146625] ? create_io_thread+0xf0/0xf0 [ 1052.147501] ? ksys_write+0x21a/0x260 [ 1052.148278] ? lock_downgrade+0x6d0/0x6d0 [ 1052.149128] __do_sys_clone3+0x1e5/0x320 [ 1052.149951] ? __do_sys_clone+0x110/0x110 [ 1052.150823] ? rcu_read_lock_any_held+0x75/0xa0 [ 1052.151776] ? vfs_write+0x354/0xb10 [ 1052.152541] ? fput_many+0x2f/0x1a0 [ 1052.153282] ? ksys_write+0x1a9/0x260 [ 1052.154051] ? __ia32_sys_read+0xb0/0xb0 [ 1052.154892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1052.155975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1052.157021] ? trace_hardirqs_on+0x5b/0x180 [ 1052.157906] do_syscall_64+0x33/0x40 [ 1052.158671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1052.159722] RIP: 0033:0x7f3a69dacb19 [ 1052.160484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1052.164225] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1052.165773] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1052.167227] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1052.168684] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1052.170132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1052.171597] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1052.185556] FAULT_INJECTION: forcing a failure. 20:28:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x14, 0x13, 0xc21, 0x0, 0x0, {0x1b, 0x0, 0x2}}, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) [ 1052.185556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.188259] CPU: 1 PID: 7669 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1052.189649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1052.191320] Call Trace: [ 1052.191868] dump_stack+0x107/0x167 [ 1052.192612] should_fail.cold+0x5/0xa [ 1052.193397] _copy_to_user+0x2e/0x180 [ 1052.194176] simple_read_from_buffer+0xcc/0x160 [ 1052.195124] proc_fail_nth_read+0x198/0x230 20:28:05 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1052.196014] ? proc_sessionid_read+0x230/0x230 [ 1052.197075] ? security_file_permission+0xb1/0xe0 [ 1052.198067] ? proc_sessionid_read+0x230/0x230 [ 1052.198989] vfs_read+0x228/0x620 [ 1052.199717] ksys_read+0x12d/0x260 [ 1052.200443] ? vfs_write+0xb10/0xb10 [ 1052.201202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1052.202267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1052.203317] do_syscall_64+0x33/0x40 [ 1052.204086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1052.205116] RIP: 0033:0x7f1e40ee669c [ 1052.205866] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1052.209583] RSP: 002b:00007f1e3e4a9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.211127] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 00007f1e40ee669c [ 1052.212580] RDX: 000000000000000f RSI: 00007f1e3e4a91e0 RDI: 0000000000000004 [ 1052.214026] RBP: 00007f1e3e4a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1052.215494] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1052.216944] R13: 00007ffefbb2825f R14: 00007f1e3e4a9300 R15: 0000000000022000 [ 1066.565052] FAULT_INJECTION: forcing a failure. [ 1066.565052] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.568233] CPU: 1 PID: 7691 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1066.570165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1066.572500] Call Trace: [ 1066.573258] dump_stack+0x107/0x167 [ 1066.574305] should_fail.cold+0x5/0xa [ 1066.575371] ? vm_area_dup+0x78/0x290 [ 1066.576467] should_failslab+0x5/0x20 [ 1066.577564] kmem_cache_alloc+0x5b/0x310 [ 1066.578664] vm_area_dup+0x78/0x290 [ 1066.579674] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1066.580923] ? lock_downgrade+0x6d0/0x6d0 [ 1066.582027] ? copy_page_range+0x24e9/0x3800 [ 1066.583242] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1066.584504] ? avc_has_extended_perms+0xf40/0xf40 [ 1066.585799] ? vm_area_alloc+0x110/0x110 [ 1066.586881] ? find_held_lock+0x2c/0x110 [ 1066.587990] ? selinux_vm_enough_memory+0x114/0x180 [ 1066.589431] ? selinux_sb_statfs+0x250/0x250 [ 1066.590630] ? percpu_counter_add_batch+0x8b/0x140 [ 1066.591986] ? __vm_enough_memory+0x184/0x360 [ 1066.593240] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1066.594700] copy_process+0x298b/0x78b0 [ 1066.595838] ? SOFTIRQ_verbose+0x10/0x10 [ 1066.597030] ? __cleanup_sighand+0xb0/0xb0 [ 1066.598191] ? _copy_from_user+0xfb/0x1b0 [ 1066.599389] kernel_clone+0xe7/0x980 [ 1066.600421] ? __lockdep_reset_lock+0x180/0x180 [ 1066.601662] ? create_io_thread+0xf0/0xf0 [ 1066.602797] ? ksys_write+0x21a/0x260 [ 1066.603835] ? lock_downgrade+0x6d0/0x6d0 [ 1066.604948] __do_sys_clone3+0x1e5/0x320 [ 1066.606032] ? __do_sys_clone+0x110/0x110 [ 1066.607175] ? rcu_read_lock_any_held+0x75/0xa0 [ 1066.608420] ? vfs_write+0x354/0xb10 [ 1066.609423] ? fput_many+0x2f/0x1a0 [ 1066.610387] ? ksys_write+0x1a9/0x260 20:28:19 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30) 20:28:19 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000007, 0x31, 0xffffffffffffffff, 0x0) 20:28:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 20:28:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 17) 20:28:20 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:28:20 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x4a03, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000100)={"852873f300000000100000f9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:28:20 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r0, r1/1000+60000}, {0x77359400}}) 20:28:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3004, 0x0, 0x13, r0, 0x0) [ 1066.611403] ? __ia32_sys_read+0xb0/0xb0 [ 1066.612960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1066.614293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1066.615425] ? trace_hardirqs_on+0x5b/0x180 [ 1066.616556] do_syscall_64+0x33/0x40 [ 1066.617395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1066.618717] RIP: 0033:0x7f3a69dacb19 [ 1066.619700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1066.623563] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1066.625519] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1066.627349] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1066.629188] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1066.629428] FAULT_INJECTION: forcing a failure. [ 1066.629428] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.630993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1066.635211] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1066.637102] CPU: 0 PID: 7700 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1066.638630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1066.640357] Call Trace: [ 1066.640914] dump_stack+0x107/0x167 [ 1066.641678] should_fail.cold+0x5/0xa [ 1066.642481] ? create_object.isra.0+0x3a/0xa30 [ 1066.643428] should_failslab+0x5/0x20 [ 1066.644250] kmem_cache_alloc+0x5b/0x310 [ 1066.645122] create_object.isra.0+0x3a/0xa30 [ 1066.646066] kmemleak_alloc_percpu+0xa0/0x100 [ 1066.647024] pcpu_alloc+0x4e2/0x1240 [ 1066.647845] ? io_async_queue_proc+0x80/0x80 [ 1066.648781] percpu_ref_init+0x31/0x3d0 [ 1066.649631] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1066.650783] io_uring_setup+0x14f6/0x2980 [ 1066.651680] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1066.652747] ? wait_for_completion_io+0x270/0x270 [ 1066.653795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1066.654910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1066.656014] do_syscall_64+0x33/0x40 [ 1066.656811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1066.657900] RIP: 0033:0x7f2e9760cb19 [ 1066.658698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1066.662638] RSP: 002b:00007f2e94b61108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1066.664274] RAX: ffffffffffffffda RBX: 00007f2e97720020 RCX: 00007f2e9760cb19 [ 1066.665795] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1066.667307] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1066.668838] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1066.670358] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:28:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3005, 0x0, 0x13, r0, 0x0) 20:28:20 executing program 7: getsockname$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0xbd4, 0xbb19, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 20:28:20 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) 20:28:20 executing program 3: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) sendmsg$inet6(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="3f6074f4ee2051977906f719f48c56edf31cd12ef4fa94d1159e235a1eb8f9636cb555e1fa43c0c97c4fd71044506b1325df6f41e077a64a76637438442147a655ac4310f81159e0ec5c3b19ce", 0x4d}, {&(0x7f0000000100)="d69f520f6b4e956cf523da66d0694dadc83f3344e1f6d5c93a213a129dbec4039a863f9d153626c43404121d2258951650773ae24696a1b69dd963a923516ca3722c758fca604f55967abd9dbcd489b1352c19e17ed4879c4b33bef843ff87bd0694c567efe22549fcc1da9968d60f9c78046384f8", 0x75}, {&(0x7f0000000000)="758374ddd5872c90106853ce", 0xc}, {&(0x7f0000000180)}], 0x4}, 0x4010) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=@v2={0x0, 0x0, 0x0, 0x100}, 0x9, 0x0) 20:28:20 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:28:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x100000e, 0x13, r0, 0x0) 20:28:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3006, 0x0, 0x13, r0, 0x0) 20:28:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 18) [ 1066.948694] FAULT_INJECTION: forcing a failure. [ 1066.948694] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.951261] CPU: 0 PID: 7726 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1066.952729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1066.954470] Call Trace: [ 1066.955033] dump_stack+0x107/0x167 [ 1066.955815] should_fail.cold+0x5/0xa [ 1066.956616] ? percpu_ref_init+0xd8/0x3d0 [ 1066.957481] should_failslab+0x5/0x20 [ 1066.958281] kmem_cache_alloc_trace+0x55/0x320 [ 1066.959249] ? io_async_queue_proc+0x80/0x80 [ 1066.960181] percpu_ref_init+0xd8/0x3d0 [ 1066.961028] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1066.962166] io_uring_setup+0x14f6/0x2980 [ 1066.963044] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1066.964107] ? wait_for_completion_io+0x270/0x270 [ 1066.965142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1066.966243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1066.967326] do_syscall_64+0x33/0x40 [ 1066.968114] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1066.969188] RIP: 0033:0x7f2e9760cb19 [ 1066.969967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1066.973825] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1066.975420] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1066.976921] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1066.978412] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1066.979918] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1066.981408] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:28:35 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:28:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x100000e, 0x13, r0, 0x0) 20:28:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 19) 20:28:35 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x32af, &(0x7f0000000000)={0x0, 0x7ddb, 0x10, 0x3, 0xc}, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000100), 0x0, 0x4) 20:28:35 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) 20:28:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3007, 0x0, 0x13, r0, 0x0) 20:28:35 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31) 20:28:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000001c0)="02000000160000000478", 0xa, 0x800}], 0x0, &(0x7f00000000c0)) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 1082.445003] FAULT_INJECTION: forcing a failure. [ 1082.445003] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.447447] CPU: 1 PID: 7743 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1082.448885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.450616] Call Trace: [ 1082.450976] FAULT_INJECTION: forcing a failure. [ 1082.450976] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.451170] dump_stack+0x107/0x167 [ 1082.451201] should_fail.cold+0x5/0xa [ 1082.455372] ? create_object.isra.0+0x3a/0xa30 [ 1082.456339] should_failslab+0x5/0x20 [ 1082.457137] kmem_cache_alloc+0x5b/0x310 [ 1082.457995] create_object.isra.0+0x3a/0xa30 [ 1082.458916] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.459994] kmem_cache_alloc_trace+0x151/0x320 [ 1082.460971] ? io_async_queue_proc+0x80/0x80 [ 1082.461901] percpu_ref_init+0xd8/0x3d0 [ 1082.462739] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1082.463882] io_uring_setup+0x14f6/0x2980 [ 1082.464759] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1082.465817] ? wait_for_completion_io+0x270/0x270 [ 1082.466853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.467960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.469043] do_syscall_64+0x33/0x40 [ 1082.469828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.470894] RIP: 0033:0x7f2e9760cb19 [ 1082.471690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.475531] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1082.477127] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1082.478615] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1082.480108] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1082.481592] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1082.483080] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1082.484641] CPU: 0 PID: 7745 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1082.486408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.488446] Call Trace: [ 1082.489037] dump_stack+0x107/0x167 [ 1082.489838] should_fail.cold+0x5/0xa [ 1082.490672] ? create_object.isra.0+0x3a/0xa30 [ 1082.491789] should_failslab+0x5/0x20 [ 1082.491839] loop3: detected capacity change from 0 to 16776704 [ 1082.492766] kmem_cache_alloc+0x5b/0x310 [ 1082.492808] create_object.isra.0+0x3a/0xa30 [ 1082.496295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.497681] kmem_cache_alloc+0x159/0x310 [ 1082.498821] vm_area_dup+0x78/0x290 [ 1082.499845] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1082.501100] ? lock_downgrade+0x6d0/0x6d0 [ 1082.502130] ? copy_page_range+0x24e9/0x3800 [ 1082.503184] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1082.504295] ? avc_has_extended_perms+0xf40/0xf40 [ 1082.505551] ? vm_area_alloc+0x110/0x110 [ 1082.506609] ? find_held_lock+0x2c/0x110 [ 1082.507633] ? selinux_vm_enough_memory+0x114/0x180 [ 1082.508874] ? selinux_sb_statfs+0x250/0x250 [ 1082.509952] ? percpu_counter_add_batch+0x8b/0x140 [ 1082.511157] ? __vm_enough_memory+0x184/0x360 [ 1082.512304] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1082.513678] copy_process+0x298b/0x78b0 [ 1082.514649] ? SOFTIRQ_verbose+0x10/0x10 [ 1082.515633] ? __cleanup_sighand+0xb0/0xb0 [ 1082.516710] ? _copy_from_user+0xfb/0x1b0 [ 1082.517840] kernel_clone+0xe7/0x980 [ 1082.518851] ? __lockdep_reset_lock+0x180/0x180 [ 1082.520125] ? create_io_thread+0xf0/0xf0 [ 1082.521288] ? ksys_write+0x21a/0x260 [ 1082.522324] ? lock_downgrade+0x6d0/0x6d0 [ 1082.523454] __do_sys_clone3+0x1e5/0x320 [ 1082.524568] ? __do_sys_clone+0x110/0x110 [ 1082.525711] ? rcu_read_lock_any_held+0x75/0xa0 [ 1082.526837] ? vfs_write+0x354/0xb10 [ 1082.527859] ? fput_many+0x2f/0x1a0 [ 1082.528695] ? ksys_write+0x1a9/0x260 [ 1082.529620] ? __ia32_sys_read+0xb0/0xb0 [ 1082.530576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.531989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.533345] ? trace_hardirqs_on+0x5b/0x180 [ 1082.534484] do_syscall_64+0x33/0x40 [ 1082.535473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.536835] RIP: 0033:0x7f3a69dacb19 [ 1082.537819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.542654] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1082.544608] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1082.546337] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1082.548145] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1082.549881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.551798] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1082.563776] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 30724)! [ 1082.566009] EXT4-fs (loop3): group descriptors corrupted! 20:28:36 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x4010, 0xffffffffffffffff, 0x0) 20:28:36 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000a, 0x31, 0xffffffffffffffff, 0x0) [ 1082.621305] loop3: detected capacity change from 0 to 16776704 20:28:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 20) [ 1082.670442] FAULT_INJECTION: forcing a failure. [ 1082.670442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.672951] CPU: 0 PID: 7759 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1082.674386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.676130] Call Trace: [ 1082.676688] dump_stack+0x107/0x167 [ 1082.677453] should_fail.cold+0x5/0xa [ 1082.678261] _copy_to_user+0x2e/0x180 [ 1082.679069] io_uring_setup+0x11b5/0x2980 [ 1082.679957] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1082.681021] ? wait_for_completion_io+0x270/0x270 [ 1082.682065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.683176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.684269] do_syscall_64+0x33/0x40 [ 1082.685058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.686134] RIP: 0033:0x7f2e9760cb19 [ 1082.686918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.690808] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1082.692416] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1082.693917] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1082.695424] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1082.696933] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1082.698430] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1082.703447] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 30724)! [ 1082.705620] EXT4-fs (loop3): group descriptors corrupted! 20:28:36 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:28:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x100000e, 0x13, r0, 0x0) 20:28:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x7fffdf005000, 0x0, 0x13, r0, 0x0) 20:28:36 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000001, 0x1010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x7316, &(0x7f0000000000)={0x0, 0x2f78, 0x2, 0x1, 0x19b}, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x100000f, 0x4000010, r2, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r4, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x8000, 0x3, &(0x7f0000000200)="f0ffc579974ff0aa248d555532c4cd331da9b4870014ca30b587b62d62cfcbc3da16fa86c342afc06c411929e95d73a83295e4334b82cb7a5f28bf6d237f25a6d6af1ed8da88737a5c6937f6ae502a4f77647676fb5b4fa42500ffbc1777eac7d9ed9cacdfacfefcdaa5b2c67fd8a604b48cd46b142356b4def764ee041ab0020fb85dbae5", 0x7, 0x0, 0x1, {0x2, r5}}, 0xfd4) r6 = dup3(r2, r2, 0x0) dup2(r2, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r7, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x7) 20:28:36 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000b, 0x31, 0xffffffffffffffff, 0x0) 20:28:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="200000001100210c08807f6100"/23, @ANYRES32, @ANYBLOB="04000080"], 0x20}}, 0x0) 20:28:50 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1096.774741] FAULT_INJECTION: forcing a failure. [ 1096.774741] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.776393] CPU: 1 PID: 7787 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1096.777313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.778395] Call Trace: [ 1096.778752] dump_stack+0x107/0x167 [ 1096.779248] should_fail.cold+0x5/0xa [ 1096.779752] ? anon_vma_clone+0xdc/0x590 [ 1096.780285] should_failslab+0x5/0x20 [ 1096.780792] kmem_cache_alloc+0x5b/0x310 [ 1096.781323] anon_vma_clone+0xdc/0x590 [ 1096.781830] anon_vma_fork+0x82/0x640 [ 1096.782320] ? __vm_enough_memory+0x184/0x360 [ 1096.782909] copy_process+0x72cd/0x78b0 [ 1096.783429] ? SOFTIRQ_verbose+0x10/0x10 [ 1096.783989] ? __cleanup_sighand+0xb0/0xb0 [ 1096.784557] ? _copy_from_user+0xfb/0x1b0 [ 1096.785116] kernel_clone+0xe7/0x980 [ 1096.785605] ? __lockdep_reset_lock+0x180/0x180 [ 1096.786211] ? create_io_thread+0xf0/0xf0 [ 1096.786759] ? ksys_write+0x21a/0x260 [ 1096.787255] ? lock_downgrade+0x6d0/0x6d0 [ 1096.787798] __do_sys_clone3+0x1e5/0x320 [ 1096.788353] ? __do_sys_clone+0x110/0x110 [ 1096.788922] ? rcu_read_lock_any_held+0x75/0xa0 [ 1096.789533] ? vfs_write+0x354/0xb10 [ 1096.790030] ? fput_many+0x2f/0x1a0 [ 1096.790509] ? ksys_write+0x1a9/0x260 [ 1096.791024] ? __ia32_sys_read+0xb0/0xb0 [ 1096.791570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.792286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.792952] ? trace_hardirqs_on+0x5b/0x180 [ 1096.793525] do_syscall_64+0x33/0x40 [ 1096.794022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.794687] RIP: 0033:0x7f3a69dacb19 [ 1096.795175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.797593] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1096.798605] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1096.799555] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1096.800510] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.801428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.802345] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:28:50 executing program 3: prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x7) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) 20:28:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)=0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x5, {{0xa, 0x4e21, 0x4, @mcast2, 0x2}}}, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1c}}, './file1\x00'}) io_uring_enter(r1, 0x72, 0x1120, 0x0, &(0x7f0000000240)={[0x81]}, 0x8) syz_io_uring_setup(0x4486, &(0x7f0000000000)={0x0, 0x2835, 0x1, 0x0, 0x259}, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x2) mkdirat(r2, &(0x7f0000000000)='./file1\x00', 0x0) openat(r2, &(0x7f0000000280)='./file1\x00', 0x40, 0x1) 20:28:50 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32) 20:28:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x13, r0, 0x0) 20:28:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x100000e, 0x13, r0, 0x0) 20:28:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 21) 20:28:50 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x2) [ 1096.816790] FAULT_INJECTION: forcing a failure. [ 1096.816790] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.819206] CPU: 0 PID: 7795 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1096.820659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.822430] Call Trace: [ 1096.822988] dump_stack+0x107/0x167 [ 1096.823769] should_fail.cold+0x5/0xa [ 1096.824577] ? __d_alloc+0x2a/0x990 [ 1096.825335] should_failslab+0x5/0x20 [ 1096.826130] kmem_cache_alloc+0x5b/0x310 [ 1096.826985] __d_alloc+0x2a/0x990 [ 1096.827727] ? find_held_lock+0x2c/0x110 [ 1096.828595] d_alloc_pseudo+0x19/0x70 [ 1096.829389] alloc_file_pseudo+0xce/0x250 [ 1096.830247] ? trace_hardirqs_on+0x5b/0x180 [ 1096.831136] ? alloc_file+0x5a0/0x5a0 [ 1096.831968] anon_inode_getfile+0xc8/0x1f0 20:28:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) [ 1096.832867] io_uring_setup+0x138b/0x2980 [ 1096.833858] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1096.834936] ? wait_for_completion_io+0x270/0x270 [ 1096.835989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.837086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.838178] do_syscall_64+0x33/0x40 [ 1096.838977] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.840068] RIP: 0033:0x7f2e9760cb19 [ 1096.840849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.844679] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1096.846275] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1096.847771] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1096.849267] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1096.850762] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1096.852256] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:28:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) 20:28:50 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5331, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) 20:28:50 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x2000) 20:28:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4005, 0x100000e, 0x13, r0, 0x0) 20:28:50 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33) 20:28:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) 20:28:50 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 20:28:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 22) 20:28:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) [ 1097.012864] FAULT_INJECTION: forcing a failure. [ 1097.012864] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.014278] CPU: 1 PID: 7819 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1097.015103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.016099] Call Trace: [ 1097.016420] dump_stack+0x107/0x167 [ 1097.016865] should_fail.cold+0x5/0xa [ 1097.017331] ? create_object.isra.0+0x3a/0xa30 [ 1097.017888] should_failslab+0x5/0x20 [ 1097.018339] kmem_cache_alloc+0x5b/0x310 [ 1097.018821] create_object.isra.0+0x3a/0xa30 [ 1097.019351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1097.019982] kmem_cache_alloc+0x159/0x310 [ 1097.020475] __d_alloc+0x2a/0x990 [ 1097.020889] ? find_held_lock+0x2c/0x110 [ 1097.021381] d_alloc_pseudo+0x19/0x70 [ 1097.021832] alloc_file_pseudo+0xce/0x250 [ 1097.022326] ? trace_hardirqs_on+0x5b/0x180 [ 1097.022837] ? alloc_file+0x5a0/0x5a0 [ 1097.023310] anon_inode_getfile+0xc8/0x1f0 [ 1097.023828] io_uring_setup+0x138b/0x2980 [ 1097.024336] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1097.024942] ? wait_for_completion_io+0x270/0x270 [ 1097.025541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.026159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.026767] do_syscall_64+0x33/0x40 [ 1097.027214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.027827] RIP: 0033:0x7f2e9760cb19 [ 1097.028274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.030467] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1097.031379] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1097.032209] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1097.033048] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1097.033894] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1097.034722] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1097.040684] FAULT_INJECTION: forcing a failure. [ 1097.040684] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.043409] CPU: 0 PID: 7820 Comm: syz-executor.5 Not tainted 5.10.253 #1 20:28:50 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x396a, &(0x7f0000000000)={0x0, 0xb4ef, 0x2, 0x2, 0x386}, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x2, &(0x7f0000000100)="e611e9bade8e4a54e9f78030757ec47aa1fdf7f17356fdc07be76f42fb2770beb2c0d176c55245ded00c1960bb6ae90f9cd974a2a1f9b63a1f8751b459b362951f662740bcf097a376c099b7a8ef127945eb840d2a073f7405bcb9a93b9ea3600a94", 0x20, 0x0, 0x0, {0x2}}, 0x9b) [ 1097.045000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.046863] Call Trace: [ 1097.047421] dump_stack+0x107/0x167 [ 1097.048201] should_fail.cold+0x5/0xa [ 1097.049006] should_failslab+0x5/0x20 [ 1097.049796] kmem_cache_alloc_bulk+0x4b/0x320 [ 1097.050746] io_submit_sqes+0x6fe4/0x8610 [ 1097.051650] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1097.052715] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1097.053721] ? find_held_lock+0x2c/0x110 [ 1097.054579] ? io_submit_sqes+0x8610/0x8610 [ 1097.055495] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1097.056525] ? wait_for_completion_io+0x270/0x270 [ 1097.057536] ? rcu_read_lock_any_held+0x75/0xa0 [ 1097.058514] ? vfs_write+0x354/0xb10 [ 1097.059286] ? fput_many+0x2f/0x1a0 [ 1097.060056] ? ksys_write+0x1a9/0x260 [ 1097.060855] ? __ia32_sys_read+0xb0/0xb0 [ 1097.061707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.062791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.063879] do_syscall_64+0x33/0x40 [ 1097.064673] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.065739] RIP: 0033:0x7f1930b6db19 [ 1097.066521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.070382] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1097.071996] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1097.073509] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1097.074994] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.076470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.077961] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 20:28:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 23) 20:28:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4006, 0x100000e, 0x13, r0, 0x0) [ 1097.110783] FAULT_INJECTION: forcing a failure. [ 1097.110783] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.113276] CPU: 0 PID: 7827 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1097.114714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.115253] FAULT_INJECTION: forcing a failure. [ 1097.115253] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.116486] Call Trace: [ 1097.116511] dump_stack+0x107/0x167 [ 1097.116537] should_fail.cold+0x5/0xa [ 1097.119914] ? create_object.isra.0+0x3a/0xa30 [ 1097.120872] should_failslab+0x5/0x20 [ 1097.121670] kmem_cache_alloc+0x5b/0x310 [ 1097.122530] create_object.isra.0+0x3a/0xa30 [ 1097.123453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1097.124520] kmem_cache_alloc+0x159/0x310 [ 1097.125421] anon_vma_clone+0xdc/0x590 [ 1097.126257] anon_vma_fork+0x82/0x640 [ 1097.127050] ? __vm_enough_memory+0x184/0x360 [ 1097.128011] copy_process+0x72cd/0x78b0 [ 1097.128839] ? SOFTIRQ_verbose+0x10/0x10 [ 1097.129726] ? __cleanup_sighand+0xb0/0xb0 [ 1097.130640] ? _copy_from_user+0xfb/0x1b0 [ 1097.131524] kernel_clone+0xe7/0x980 [ 1097.132309] ? __lockdep_reset_lock+0x180/0x180 [ 1097.133286] ? create_io_thread+0xf0/0xf0 [ 1097.134164] ? ksys_write+0x21a/0x260 [ 1097.134946] ? lock_downgrade+0x6d0/0x6d0 [ 1097.135819] __do_sys_clone3+0x1e5/0x320 [ 1097.136673] ? __do_sys_clone+0x110/0x110 [ 1097.137570] ? rcu_read_lock_any_held+0x75/0xa0 [ 1097.138528] ? vfs_write+0x354/0xb10 [ 1097.139309] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1097.140263] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1097.141381] ? ksys_write+0x1a9/0x260 [ 1097.142177] ? __ia32_sys_read+0xb0/0xb0 [ 1097.143031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.144126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.145204] ? trace_hardirqs_on+0x5b/0x180 [ 1097.146121] do_syscall_64+0x33/0x40 [ 1097.146916] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.147996] RIP: 0033:0x7f3a69dacb19 [ 1097.148759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.152632] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1097.154241] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1097.155732] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1097.157225] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.158707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.160212] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1097.161733] CPU: 1 PID: 7830 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1097.162552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.163524] Call Trace: [ 1097.163847] dump_stack+0x107/0x167 [ 1097.164274] should_fail.cold+0x5/0xa [ 1097.164715] ? __alloc_file+0x21/0x320 [ 1097.165165] should_failslab+0x5/0x20 [ 1097.165601] kmem_cache_alloc+0x5b/0x310 [ 1097.166071] __alloc_file+0x21/0x320 [ 1097.166500] alloc_empty_file+0x6d/0x170 [ 1097.166971] alloc_file+0x5e/0x5a0 [ 1097.167386] alloc_file_pseudo+0x16a/0x250 [ 1097.167885] ? alloc_file+0x5a0/0x5a0 [ 1097.168333] anon_inode_getfile+0xc8/0x1f0 [ 1097.168818] io_uring_setup+0x138b/0x2980 [ 1097.169301] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1097.169888] ? wait_for_completion_io+0x270/0x270 [ 1097.170460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.171068] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.171662] do_syscall_64+0x33/0x40 [ 1097.172094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.172688] RIP: 0033:0x7f2e9760cb19 [ 1097.173122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.175251] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1097.176127] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1097.176956] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1097.177765] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1097.178584] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1097.179399] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:29:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x100000e, 0x13, r0, 0x0) 20:29:06 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x80000) 20:29:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 24) 20:29:06 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34) [ 1113.050652] FAULT_INJECTION: forcing a failure. [ 1113.050652] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.052191] CPU: 0 PID: 7849 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1113.053076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.054144] Call Trace: [ 1113.054491] dump_stack+0x107/0x167 [ 1113.054961] should_fail.cold+0x5/0xa [ 1113.055453] ? create_object.isra.0+0x3a/0xa30 [ 1113.056063] should_failslab+0x5/0x20 [ 1113.056554] kmem_cache_alloc+0x5b/0x310 [ 1113.057082] create_object.isra.0+0x3a/0xa30 [ 1113.057650] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1113.058324] kmem_cache_alloc+0x159/0x310 [ 1113.058854] __alloc_file+0x21/0x320 [ 1113.059330] alloc_empty_file+0x6d/0x170 [ 1113.059857] alloc_file+0x5e/0x5a0 [ 1113.060327] alloc_file_pseudo+0x16a/0x250 [ 1113.060889] ? alloc_file+0x5a0/0x5a0 [ 1113.061390] anon_inode_getfile+0xc8/0x1f0 [ 1113.061938] io_uring_setup+0x138b/0x2980 [ 1113.062477] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1113.063140] ? wait_for_completion_io+0x270/0x270 [ 1113.063785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1113.064484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1113.065154] do_syscall_64+0x33/0x40 [ 1113.065648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1113.066314] RIP: 0033:0x7f2e9760cb19 [ 1113.066793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.069197] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1113.069937] FAULT_INJECTION: forcing a failure. [ 1113.069937] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.070179] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1113.070188] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1113.070195] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1113.070202] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1113.070219] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1113.077144] CPU: 1 PID: 7857 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1113.078600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.080371] Call Trace: [ 1113.080944] dump_stack+0x107/0x167 [ 1113.081722] should_fail.cold+0x5/0xa [ 1113.082541] ? anon_vma_fork+0xf1/0x640 [ 1113.083386] should_failslab+0x5/0x20 [ 1113.084211] kmem_cache_alloc+0x5b/0x310 [ 1113.085078] anon_vma_fork+0xf1/0x640 [ 1113.085887] ? __vm_enough_memory+0x184/0x360 [ 1113.086846] copy_process+0x72cd/0x78b0 [ 1113.087918] ? SOFTIRQ_verbose+0x10/0x10 [ 1113.088940] ? __cleanup_sighand+0xb0/0xb0 20:29:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x13, r0, 0x0) 20:29:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000001280), 0x9, 0x4000) r4 = syz_open_dev$mouse(&(0x7f00000012c0), 0x81, 0x200000) sendmsg$unix(r1, &(0x7f0000001340)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f00000000c0)="553ad43b9a8052923eea57115f484c3246f8bbea7f344fffc941ed884e43ec388d4ce441059f020c07c4b4df56e248b1b9ff4e7b57eac16b6af932e908eb205de5274e79e1d90a6e474f66f29f8599408bc0b078b669ee6199e567302aed0b469ac6b179c5ae69ae52606e68d8b37f74f839c18277ee6180b9cdca1f1d5dd94e8e4a926fe3e4856d856fe08771098d3a1576e224722d39b5fcd1fd184952eca244358d87819c47beb8d0c57933a367e3378fd24bebbd2f1b0b05069710c675c4c94465d8baee6cd9f7ae825d38d1447840889e1c3975a5441101ae7157e8672fad98c9", 0xe3}], 0x2, &(0x7f0000001300)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r3]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x24040084}, 0x4000080) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:29:06 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 20:29:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)=0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x5, {{0xa, 0x4e21, 0x4, @mcast2, 0x2}}}, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1c}}, './file1\x00'}) io_uring_enter(r1, 0x72, 0x1120, 0x0, &(0x7f0000000240)={[0x81]}, 0x8) syz_io_uring_setup(0x4486, &(0x7f0000000000)={0x0, 0x2835, 0x1, 0x0, 0x259}, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x2) mkdirat(r2, &(0x7f0000000000)='./file1\x00', 0x0) openat(r2, &(0x7f0000000280)='./file1\x00', 0x40, 0x1) [ 1113.089921] ? _copy_from_user+0xfb/0x1b0 [ 1113.090555] FAULT_INJECTION: forcing a failure. [ 1113.090555] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.090840] kernel_clone+0xe7/0x980 [ 1113.090863] ? __lockdep_reset_lock+0x180/0x180 [ 1113.094001] ? create_io_thread+0xf0/0xf0 [ 1113.094890] ? ksys_write+0x21a/0x260 [ 1113.095699] ? lock_downgrade+0x6d0/0x6d0 [ 1113.096591] __do_sys_clone3+0x1e5/0x320 [ 1113.097446] ? __do_sys_clone+0x110/0x110 [ 1113.098345] ? rcu_read_lock_any_held+0x75/0xa0 [ 1113.099327] ? vfs_write+0x354/0xb10 [ 1113.100137] ? fput_many+0x2f/0x1a0 [ 1113.100908] ? ksys_write+0x1a9/0x260 [ 1113.101711] ? __ia32_sys_read+0xb0/0xb0 [ 1113.102577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1113.103697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1113.104791] ? trace_hardirqs_on+0x5b/0x180 [ 1113.105726] do_syscall_64+0x33/0x40 [ 1113.106533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1113.107643] RIP: 0033:0x7f3a69dacb19 [ 1113.108455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.112447] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1113.114092] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1113.115644] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1113.117193] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.118723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1113.120271] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1113.121841] CPU: 0 PID: 7860 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1113.122724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.123777] Call Trace: [ 1113.124131] dump_stack+0x107/0x167 [ 1113.124601] should_fail.cold+0x5/0xa [ 1113.125089] ? create_object.isra.0+0x3a/0xa30 [ 1113.125671] should_failslab+0x5/0x20 [ 1113.126157] kmem_cache_alloc+0x5b/0x310 [ 1113.126676] create_object.isra.0+0x3a/0xa30 [ 1113.127237] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1113.127886] kmem_cache_alloc_bulk+0x168/0x320 [ 1113.128479] io_submit_sqes+0x6fe4/0x8610 [ 1113.129025] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1113.129660] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1113.130278] ? find_held_lock+0x2c/0x110 [ 1113.130801] ? io_submit_sqes+0x8610/0x8610 [ 1113.131359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1113.131987] ? wait_for_completion_io+0x270/0x270 [ 1113.132617] ? rcu_read_lock_any_held+0x75/0xa0 [ 1113.133210] ? vfs_write+0x354/0xb10 [ 1113.133687] ? fput_many+0x2f/0x1a0 [ 1113.134155] ? ksys_write+0x1a9/0x260 [ 1113.134637] ? __ia32_sys_read+0xb0/0xb0 [ 1113.135154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1113.135820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1113.136501] do_syscall_64+0x33/0x40 [ 1113.136973] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1113.137619] RIP: 0033:0x7f1930b6db19 [ 1113.138089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.140406] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1113.141371] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1113.142275] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1113.143180] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.144086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.144991] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 20:29:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 25) 20:29:06 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x200000) 20:29:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x13, r0, 0x0) 20:29:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf003000, 0x100000e, 0x13, r0, 0x0) 20:29:06 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x3000008, 0x12, 0xffffffffffffffff, 0x10000000) 20:29:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000a40)) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_io_uring_setup(0x5e13, &(0x7f00000003c0)={0x0, 0xea53, 0x10, 0x1, 0x2b3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000580)=0x0) io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2}, 0x0]) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r3 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0, 0x800}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x80, 0x190, 0x1}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0xfffff001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="e5aab034a1bcaf4f48cb76482f77d431866efd7c25deac9a306c5a877ea274a6dc2380fc063b822b30ca281696a8cbf3a7fb34e342083fca1f205657d187599d3535", 0x42, 0x84, 0x0, {0x0, r10}}, 0xb0d9) io_uring_enter(r3, 0x58ab, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1113.262971] FAULT_INJECTION: forcing a failure. [ 1113.262971] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.264415] CPU: 0 PID: 7868 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1113.265209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.266171] Call Trace: [ 1113.266492] dump_stack+0x107/0x167 [ 1113.266922] should_fail.cold+0x5/0xa [ 1113.267368] ? security_file_alloc+0x34/0x170 [ 1113.267890] should_failslab+0x5/0x20 [ 1113.268356] kmem_cache_alloc+0x5b/0x310 [ 1113.268838] security_file_alloc+0x34/0x170 [ 1113.269353] __alloc_file+0xb7/0x320 [ 1113.269790] alloc_empty_file+0x6d/0x170 [ 1113.270266] alloc_file+0x5e/0x5a0 [ 1113.270683] alloc_file_pseudo+0x16a/0x250 [ 1113.271173] ? alloc_file+0x5a0/0x5a0 [ 1113.271630] anon_inode_getfile+0xc8/0x1f0 [ 1113.272139] io_uring_setup+0x138b/0x2980 [ 1113.272623] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1113.273211] ? wait_for_completion_io+0x270/0x270 [ 1113.273794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1113.274404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1113.275002] do_syscall_64+0x33/0x40 [ 1113.275437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1113.276035] RIP: 0033:0x7f2e9760cb19 [ 1113.276467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.278586] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1113.279464] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1113.280293] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1113.281116] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1113.281941] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1113.282762] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:29:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x30, 0x13, r0, 0x0) 20:29:06 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35) [ 1113.323152] FAULT_INJECTION: forcing a failure. [ 1113.323152] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.324463] CPU: 0 PID: 7881 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1113.325238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.326176] Call Trace: [ 1113.326485] dump_stack+0x107/0x167 [ 1113.326901] should_fail.cold+0x5/0xa [ 1113.327339] ? create_object.isra.0+0x3a/0xa30 [ 1113.327854] should_failslab+0x5/0x20 [ 1113.328300] kmem_cache_alloc+0x5b/0x310 [ 1113.328769] create_object.isra.0+0x3a/0xa30 [ 1113.329263] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1113.329839] kmem_cache_alloc+0x159/0x310 [ 1113.330319] anon_vma_clone+0xdc/0x590 [ 1113.330770] anon_vma_fork+0x82/0x640 [ 1113.331207] ? __vm_enough_memory+0x184/0x360 [ 1113.331718] copy_process+0x72cd/0x78b0 [ 1113.332177] ? SOFTIRQ_verbose+0x10/0x10 [ 1113.332656] ? __cleanup_sighand+0xb0/0xb0 [ 1113.333150] ? _copy_from_user+0xfb/0x1b0 [ 1113.333620] kernel_clone+0xe7/0x980 [ 1113.334041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1113.334631] ? create_io_thread+0xf0/0xf0 [ 1113.335114] __do_sys_clone3+0x1e5/0x320 [ 1113.335573] ? __do_sys_clone+0x110/0x110 [ 1113.336064] ? rcu_read_lock_any_held+0x75/0xa0 [ 1113.336587] ? vfs_write+0x354/0xb10 [ 1113.337007] ? fput_many+0x2f/0x1a0 [ 1113.337417] ? ksys_write+0x1a9/0x260 [ 1113.337842] ? __ia32_sys_read+0xb0/0xb0 [ 1113.338303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1113.338894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1113.339472] ? trace_hardirqs_on+0x5b/0x180 [ 1113.339961] do_syscall_64+0x33/0x40 [ 1113.340394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1113.340971] RIP: 0033:0x7f3a69dacb19 [ 1113.341389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1113.343446] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1113.344303] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1113.345107] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1113.345905] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.346712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1113.347521] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:29:20 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 20:29:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 26) 20:29:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300, 0x13, r0, 0x0) 20:29:20 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ioctl$FIONCLEX(r4, 0x5450) r5 = syz_io_uring_setup(0x74eb, &(0x7f0000000000)={0x0, 0xa592, 0x2, 0x2, 0x2f5}, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000180)={0x40002000}) syz_io_uring_submit(r3, r6, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0x2, 0x4000, @fd_index=0x2, 0x5565eeaf, &(0x7f0000000100)="4406f986f106fe509fff7c881af7459e5963170b77b447cfb1f54ce9cc322ba12a3ea30bd4a1d693937a2415a60d221a895c35ae8c", 0x35, 0x8, 0x1, {0x0, r7}}, 0x8000) 20:29:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x100000e, 0x13, r0, 0x0) 20:29:20 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36) 20:29:20 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x800000) 20:29:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) syz_open_procfs(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r1, r0, 0x0, 0x500000001) 20:29:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x500, 0x13, r0, 0x0) [ 1126.782759] FAULT_INJECTION: forcing a failure. [ 1126.782759] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.785728] CPU: 0 PID: 7910 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1126.787410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.789461] Call Trace: [ 1126.790124] dump_stack+0x107/0x167 [ 1126.791032] should_fail.cold+0x5/0xa [ 1126.791978] ? create_object.isra.0+0x3a/0xa30 [ 1126.793062] should_failslab+0x5/0x20 [ 1126.793840] kmem_cache_alloc+0x5b/0x310 [ 1126.794673] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1126.795819] create_object.isra.0+0x3a/0xa30 [ 1126.796738] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.797816] kmem_cache_alloc+0x159/0x310 [ 1126.798704] security_file_alloc+0x34/0x170 [ 1126.799610] __alloc_file+0xb7/0x320 20:29:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0) [ 1126.800541] alloc_empty_file+0x6d/0x170 [ 1126.801420] alloc_file+0x5e/0x5a0 [ 1126.802156] alloc_file_pseudo+0x16a/0x250 [ 1126.803023] ? alloc_file+0x5a0/0x5a0 [ 1126.803840] anon_inode_getfile+0xc8/0x1f0 [ 1126.804744] io_uring_setup+0x138b/0x2980 [ 1126.805612] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1126.806657] ? wait_for_completion_io+0x270/0x270 [ 1126.807855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.809142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.810397] do_syscall_64+0x33/0x40 [ 1126.811298] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.812549] RIP: 0033:0x7f2e9760cb19 [ 1126.813456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.817958] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1126.819822] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1126.821580] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1126.823320] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1126.825088] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1126.826831] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1126.844049] FAULT_INJECTION: forcing a failure. [ 1126.844049] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.846919] CPU: 0 PID: 7913 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1126.848577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.850581] Call Trace: [ 1126.851251] dump_stack+0x107/0x167 [ 1126.852155] should_fail.cold+0x5/0xa [ 1126.853103] ? create_object.isra.0+0x3a/0xa30 [ 1126.854222] should_failslab+0x5/0x20 [ 1126.855172] kmem_cache_alloc+0x5b/0x310 [ 1126.856182] ? mark_held_locks+0x9e/0xe0 [ 1126.857199] create_object.isra.0+0x3a/0xa30 [ 1126.858282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.859554] kmem_cache_alloc_bulk+0x168/0x320 [ 1126.860707] io_submit_sqes+0x6fe4/0x8610 [ 1126.861785] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.863014] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.864211] ? find_held_lock+0x2c/0x110 [ 1126.865215] ? io_submit_sqes+0x8610/0x8610 20:29:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x600, 0x13, r0, 0x0) [ 1126.866283] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1126.867638] ? wait_for_completion_io+0x270/0x270 [ 1126.868840] ? rcu_read_lock_any_held+0x75/0xa0 [ 1126.869963] ? vfs_write+0x354/0xb10 [ 1126.870888] ? fput_many+0x2f/0x1a0 [ 1126.871770] ? ksys_write+0x1a9/0x260 [ 1126.872696] ? __ia32_sys_read+0xb0/0xb0 [ 1126.873685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.874946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.876204] do_syscall_64+0x33/0x40 [ 1126.877092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.878325] RIP: 0033:0x7f1930b6db19 [ 1126.879220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.883612] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1126.885446] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1126.887168] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1126.888887] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.890593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.892287] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1126.902538] FAULT_INJECTION: forcing a failure. 20:29:20 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x1000000) [ 1126.902538] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.905707] CPU: 0 PID: 7915 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1126.907342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.909327] Call Trace: [ 1126.909970] dump_stack+0x107/0x167 [ 1126.910853] should_fail.cold+0x5/0xa [ 1126.911759] ? anon_vma_fork+0xf1/0x640 [ 1126.912726] should_failslab+0x5/0x20 [ 1126.913644] kmem_cache_alloc+0x5b/0x310 [ 1126.914637] anon_vma_fork+0xf1/0x640 [ 1126.915555] ? __vm_enough_memory+0x184/0x360 [ 1126.916641] copy_process+0x72cd/0x78b0 [ 1126.917599] ? SOFTIRQ_verbose+0x10/0x10 [ 1126.918629] ? __cleanup_sighand+0xb0/0xb0 [ 1126.919674] ? _copy_from_user+0xfb/0x1b0 [ 1126.920681] kernel_clone+0xe7/0x980 [ 1126.921585] ? __lockdep_reset_lock+0x180/0x180 [ 1126.922694] ? create_io_thread+0xf0/0xf0 [ 1126.923707] ? ksys_write+0x21a/0x260 [ 1126.924623] ? lock_downgrade+0x6d0/0x6d0 [ 1126.925623] __do_sys_clone3+0x1e5/0x320 [ 1126.926597] ? __do_sys_clone+0x110/0x110 [ 1126.927613] ? rcu_read_lock_any_held+0x75/0xa0 [ 1126.928721] ? vfs_write+0x354/0xb10 [ 1126.929596] ? fput_many+0x2f/0x1a0 [ 1126.930480] ? ksys_write+0x1a9/0x260 [ 1126.931400] ? __ia32_sys_read+0xb0/0xb0 [ 1126.932396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.933636] ? syscall_enter_from_user_mode+0x1d/0x50 20:29:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2) [ 1126.934871] ? trace_hardirqs_on+0x5b/0x180 [ 1126.936014] do_syscall_64+0x33/0x40 [ 1126.936935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.938171] RIP: 0033:0x7f3a69dacb19 [ 1126.939061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.943407] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1126.945221] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1126.946934] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1126.948673] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.950348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.952063] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:29:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x700, 0x13, r0, 0x0) 20:29:20 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x2000000) 20:29:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3) [ 1127.128465] FAULT_INJECTION: forcing a failure. [ 1127.128465] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.129919] CPU: 1 PID: 7942 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1127.130743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1127.131753] Call Trace: [ 1127.132072] dump_stack+0x107/0x167 [ 1127.132528] should_fail.cold+0x5/0xa [ 1127.132995] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1127.133618] should_failslab+0x5/0x20 [ 1127.134075] kmem_cache_alloc_trace+0x55/0x320 [ 1127.134631] io_uring_alloc_task_context+0x99/0x6a0 [ 1127.135229] ? io_import_iovec+0x1120/0x1120 [ 1127.135761] ? lock_downgrade+0x6d0/0x6d0 [ 1127.136273] ? do_raw_spin_lock+0x121/0x260 [ 1127.136784] ? rwlock_bug.part.0+0x90/0x90 [ 1127.137278] __io_uring_add_tctx_node+0x2c6/0x520 [ 1127.137853] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1127.138495] ? alloc_fd+0x2e7/0x670 [ 1127.138935] io_uring_setup+0x1fbb/0x2980 [ 1127.139444] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1127.140053] ? wait_for_completion_io+0x270/0x270 [ 1127.140636] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1127.141267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1127.141878] do_syscall_64+0x33/0x40 [ 1127.142322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1127.142937] RIP: 0033:0x7f2e9760cb19 [ 1127.143378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1127.145591] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1127.146486] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1127.147361] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1127.148219] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1127.149065] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1127.149907] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:29:20 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 20:29:20 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) 20:29:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 27) 20:29:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x13, r0, 0x0) [ 1127.207686] FAULT_INJECTION: forcing a failure. [ 1127.207686] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.210486] CPU: 0 PID: 7948 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1127.212110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1127.214074] Call Trace: [ 1127.214714] dump_stack+0x107/0x167 [ 1127.215582] should_fail.cold+0x5/0xa [ 1127.216490] ? create_object.isra.0+0x3a/0xa30 [ 1127.217578] should_failslab+0x5/0x20 [ 1127.218491] kmem_cache_alloc+0x5b/0x310 [ 1127.219453] ? mark_held_locks+0x9e/0xe0 [ 1127.220436] create_object.isra.0+0x3a/0xa30 [ 1127.221474] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1127.222681] kmem_cache_alloc_bulk+0x168/0x320 [ 1127.223808] io_submit_sqes+0x6fe4/0x8610 [ 1127.224867] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1127.226099] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1127.227269] ? find_held_lock+0x2c/0x110 [ 1127.228273] ? io_submit_sqes+0x8610/0x8610 [ 1127.229341] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1127.230509] ? wait_for_completion_io+0x270/0x270 [ 1127.231690] ? rcu_read_lock_any_held+0x75/0xa0 [ 1127.232820] ? vfs_write+0x354/0xb10 [ 1127.233729] ? fput_many+0x2f/0x1a0 [ 1127.234610] ? ksys_write+0x1a9/0x260 [ 1127.235517] ? __ia32_sys_read+0xb0/0xb0 [ 1127.236510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1127.237771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1127.239011] do_syscall_64+0x33/0x40 [ 1127.239881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1127.241082] RIP: 0033:0x7f1930b6db19 [ 1127.241962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1127.246266] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1127.248043] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1127.249728] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1127.251383] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1127.253051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.254724] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 20:29:37 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) 20:29:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 1144.003378] FAULT_INJECTION: forcing a failure. [ 1144.003378] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.006696] CPU: 1 PID: 7957 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1144.008440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1144.010960] Call Trace: [ 1144.011757] dump_stack+0x107/0x167 [ 1144.012890] should_fail.cold+0x5/0xa [ 1144.014063] ? create_object.isra.0+0x3a/0xa30 [ 1144.015320] should_failslab+0x5/0x20 [ 1144.016338] kmem_cache_alloc+0x5b/0x310 [ 1144.017371] create_object.isra.0+0x3a/0xa30 [ 1144.018457] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1144.019727] kmem_cache_alloc+0x159/0x310 [ 1144.020787] anon_vma_fork+0x1ff/0x640 [ 1144.021767] copy_process+0x72cd/0x78b0 [ 1144.022750] ? SOFTIRQ_verbose+0x10/0x10 [ 1144.023805] ? __cleanup_sighand+0xb0/0xb0 [ 1144.024708] FAULT_INJECTION: forcing a failure. [ 1144.024708] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.024912] ? _copy_from_user+0xfb/0x1b0 [ 1144.028230] kernel_clone+0xe7/0x980 [ 1144.029193] ? __lockdep_reset_lock+0x180/0x180 [ 1144.030365] ? create_io_thread+0xf0/0xf0 [ 1144.031424] ? ksys_write+0x21a/0x260 [ 1144.032439] ? lock_downgrade+0x6d0/0x6d0 [ 1144.033496] __do_sys_clone3+0x1e5/0x320 [ 1144.034514] ? __do_sys_clone+0x110/0x110 [ 1144.035591] ? rcu_read_lock_any_held+0x75/0xa0 [ 1144.036773] ? vfs_write+0x354/0xb10 [ 1144.037714] ? fput_many+0x2f/0x1a0 [ 1144.038633] ? ksys_write+0x1a9/0x260 [ 1144.039612] ? __ia32_sys_read+0xb0/0xb0 [ 1144.040659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1144.041971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1144.043259] ? trace_hardirqs_on+0x5b/0x180 [ 1144.044356] do_syscall_64+0x33/0x40 [ 1144.045293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1144.046579] RIP: 0033:0x7f3a69dacb19 [ 1144.047501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1144.052023] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1144.053923] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1144.055688] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1144.057479] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1144.059246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1144.061022] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1144.062827] CPU: 0 PID: 7962 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1144.064274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1144.066033] Call Trace: [ 1144.066593] dump_stack+0x107/0x167 [ 1144.067371] should_fail.cold+0x5/0xa [ 1144.068177] ? create_object.isra.0+0x3a/0xa30 [ 1144.069143] should_failslab+0x5/0x20 [ 1144.069941] kmem_cache_alloc+0x5b/0x310 [ 1144.070799] create_object.isra.0+0x3a/0xa30 [ 1144.071712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1144.072796] kmem_cache_alloc_trace+0x151/0x320 [ 1144.073781] io_uring_alloc_task_context+0x99/0x6a0 [ 1144.074827] ? io_import_iovec+0x1120/0x1120 [ 1144.075747] ? lock_downgrade+0x6d0/0x6d0 [ 1144.076622] ? do_raw_spin_lock+0x121/0x260 [ 1144.077526] ? rwlock_bug.part.0+0x90/0x90 [ 1144.078417] __io_uring_add_tctx_node+0x2c6/0x520 [ 1144.079422] ? io_uring_alloc_task_context+0x6a0/0x6a0 20:29:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000, 0x13, r0, 0x0) 20:29:37 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x5000)=nil, 0x5000, 0x4000001, 0x8010, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000000), 0x1, 0x0, 0x0, {0x0, r1}}, 0xfe000000) 20:29:37 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0xfeffffff) 20:29:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4) 20:29:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001fc0), 0xd, 0x28000040) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 20:29:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 28) [ 1144.080534] ? alloc_fd+0x2e7/0x670 [ 1144.082154] io_uring_setup+0x1fbb/0x2980 [ 1144.083126] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1144.084267] ? wait_for_completion_io+0x270/0x270 [ 1144.085389] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1144.086560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1144.087725] do_syscall_64+0x33/0x40 [ 1144.088565] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1144.089709] RIP: 0033:0x7f2e9760cb19 [ 1144.090545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1144.094663] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1144.096376] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1144.097965] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1144.099581] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1144.100966] FAULT_INJECTION: forcing a failure. [ 1144.100966] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.101187] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1144.101200] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1144.108107] CPU: 1 PID: 7965 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1144.109783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1144.111827] Call Trace: [ 1144.112475] dump_stack+0x107/0x167 [ 1144.113367] should_fail.cold+0x5/0xa [ 1144.114295] ? create_object.isra.0+0x3a/0xa30 [ 1144.115402] should_failslab+0x5/0x20 [ 1144.116329] kmem_cache_alloc+0x5b/0x310 [ 1144.117322] ? mark_held_locks+0x9e/0xe0 [ 1144.118306] create_object.isra.0+0x3a/0xa30 [ 1144.119366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1144.120604] kmem_cache_alloc_bulk+0x168/0x320 [ 1144.121722] io_submit_sqes+0x6fe4/0x8610 [ 1144.122770] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1144.123971] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1144.125169] ? find_held_lock+0x2c/0x110 [ 1144.126167] ? io_submit_sqes+0x8610/0x8610 [ 1144.127230] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1144.128413] ? wait_for_completion_io+0x270/0x270 [ 1144.129593] ? rcu_read_lock_any_held+0x75/0xa0 [ 1144.130724] ? vfs_write+0x354/0xb10 [ 1144.131642] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1144.132783] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1144.134103] ? ksys_write+0x1a9/0x260 [ 1144.135031] ? __ia32_sys_read+0xb0/0xb0 [ 1144.136044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1144.137341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1144.138627] do_syscall_64+0x33/0x40 [ 1144.139550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1144.140830] RIP: 0033:0x7f1930b6db19 [ 1144.141755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1144.145860] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1144.147439] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1144.148932] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1144.150431] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1144.151922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.153427] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 20:29:37 executing program 3: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0xf3, 0x80, @buffer={0x0, 0xa0, &(0x7f0000000000)=""/160}, &(0x7f0000000180)="4518af0ca06a687a6d6d1f47cd29b5321425e46f4a5ea5ce83c45e92347b04adfdd9b73fc43798a3b0c814b899187a1f7dbabe33b542c3bcd80062f514ff68c526bba63cea868a5ffd8307353fca134b91ec3e40eb7ae361c3e5602d28b5f85b6c0eded248491947d9a84f380670cb20cb30adaa0faa44d5541e4ca1088c0dc77a1f64696799a4592cfdd1ad25acf5d128ce1ebe789520eecb095f8b30f4377c608e26040a7bec5eaf07e1c2a90dd581dcf41fbf652b219c91a1e4339abc740761205a81919ed5fb171f9cffb759a569c4e5905b0c042eb32c495db3a2578bb97c29285da030ff5876871726864da99523edd6", &(0x7f0000000280)=""/72, 0x52, 0x10001, 0x1, &(0x7f00000000c0)}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd/4\x00') 20:29:37 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0xfffffffe) 20:29:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800000, 0x13, r0, 0x0) 20:29:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 20:29:51 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x20, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x15, 0x80, 0x4, 0x0, 0x3, 0x81120, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0xf34}, 0x1000, 0x3, 0x7, 0x9, 0x9, 0x809, 0x1, 0x0, 0x99, 0x0, 0x1}, r1, 0x2, 0xffffffffffffffff, 0x8) r2 = syz_io_uring_setup(0x1657, &(0x7f0000000100)={0x0, 0xfdb3, 0x0, 0x3, 0x46, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index, 0x100000000, 0x0, 0x20, 0x2, 0x1, {0x0, r7}}, 0xdefb) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r8}}, 0x101) 20:29:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5) [ 1158.204686] FAULT_INJECTION: forcing a failure. [ 1158.204686] name failslab, interval 1, probability 0, space 0, times 0 20:29:51 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d85, &(0x7f00000000c0)={0x0, 0x6c72, 0x1, 0x1, 0x14e}, &(0x7f0000fee000/0xe000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r2 = syz_io_uring_setup(0x1329, &(0x7f0000000240)={0x0, 0x86f9, 0x1, 0x3, 0x95}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0xb276) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x4a04) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f0000000380), 0x0, 0x4) fsetxattr$security_capability(r6, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x4, 0xffffff47}, {0xe07, 0x7fffffff}], 0xee01}, 0x18, 0x1) 20:29:51 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x80000000000) 20:29:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 29) 20:29:51 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) [ 1158.206055] CPU: 1 PID: 7996 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1158.207057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1158.208078] Call Trace: [ 1158.208389] dump_stack+0x107/0x167 [ 1158.208816] should_fail.cold+0x5/0xa [ 1158.209263] ? create_object.isra.0+0x3a/0xa30 [ 1158.209785] should_failslab+0x5/0x20 [ 1158.210225] kmem_cache_alloc+0x5b/0x310 [ 1158.210692] create_object.isra.0+0x3a/0xa30 [ 1158.211199] kmemleak_alloc_percpu+0xa0/0x100 [ 1158.211719] pcpu_alloc+0x4e2/0x1240 [ 1158.212160] __percpu_counter_init+0x10d/0x2d0 [ 1158.212702] io_uring_alloc_task_context+0xcc/0x6a0 [ 1158.213429] ? io_import_iovec+0x1120/0x1120 [ 1158.214189] ? lock_downgrade+0x6d0/0x6d0 [ 1158.214906] ? do_raw_spin_lock+0x121/0x260 [ 1158.215650] ? rwlock_bug.part.0+0x90/0x90 [ 1158.216387] __io_uring_add_tctx_node+0x2c6/0x520 [ 1158.217226] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1158.218128] ? alloc_fd+0x2e7/0x670 [ 1158.218803] io_uring_setup+0x1fbb/0x2980 [ 1158.219572] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1158.219920] FAULT_INJECTION: forcing a failure. [ 1158.219920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1158.220441] ? wait_for_completion_io+0x270/0x270 [ 1158.220490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1158.220508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1158.220531] do_syscall_64+0x33/0x40 [ 1158.226357] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1158.227240] RIP: 0033:0x7f2e9760cb19 [ 1158.227883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1158.231049] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1158.232378] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1158.233614] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1158.234844] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1158.236071] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1158.237212] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1158.238049] CPU: 0 PID: 7999 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1158.239627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1158.241523] Call Trace: [ 1158.242125] dump_stack+0x107/0x167 [ 1158.242960] should_fail.cold+0x5/0xa [ 1158.243836] __alloc_pages_nodemask+0x182/0x600 [ 1158.244893] ? __lockdep_reset_lock+0x180/0x180 [ 1158.245950] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1158.247323] ? copy_page_range+0x28d9/0x3800 [ 1158.248320] alloc_pages_current+0x187/0x280 [ 1158.249323] get_zeroed_page+0x14/0xb0 [ 1158.250205] __pud_alloc+0x33/0x270 [ 1158.251032] copy_page_range+0x2c99/0x3800 [ 1158.251987] ? perf_trace_lock+0xac/0x490 [ 1158.252995] ? lock_chain_count+0x20/0x20 [ 1158.253946] ? find_held_lock+0x2c/0x110 [ 1158.254873] ? anon_vma_fork+0x462/0x640 [ 1158.255801] ? lock_downgrade+0x6d0/0x6d0 [ 1158.256766] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1158.258029] ? up_write+0x191/0x550 [ 1158.258856] ? vm_iomap_memory+0x190/0x190 [ 1158.259819] ? downgrade_write+0x3a0/0x3a0 [ 1158.260795] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1158.262033] ? __vma_link_rb+0x540/0x700 [ 1158.262974] copy_process+0x7658/0x78b0 [ 1158.263878] ? SOFTIRQ_verbose+0x10/0x10 [ 1158.264860] ? __cleanup_sighand+0xb0/0xb0 [ 1158.265852] ? _copy_from_user+0xfb/0x1b0 [ 1158.266805] kernel_clone+0xe7/0x980 [ 1158.267650] ? __lockdep_reset_lock+0x180/0x180 [ 1158.268715] ? create_io_thread+0xf0/0xf0 [ 1158.269678] ? ksys_write+0x21a/0x260 [ 1158.270547] ? lock_downgrade+0x6d0/0x6d0 [ 1158.271498] __do_sys_clone3+0x1e5/0x320 [ 1158.272422] ? __do_sys_clone+0x110/0x110 [ 1158.273401] ? rcu_read_lock_any_held+0x75/0xa0 [ 1158.274458] ? vfs_write+0x354/0xb10 [ 1158.275307] ? fput_many+0x2f/0x1a0 [ 1158.276131] ? ksys_write+0x1a9/0x260 [ 1158.277002] ? __ia32_sys_read+0xb0/0xb0 [ 1158.277933] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1158.279125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1158.280292] ? trace_hardirqs_on+0x5b/0x180 [ 1158.281290] do_syscall_64+0x33/0x40 [ 1158.282139] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1158.283305] RIP: 0033:0x7f3a69dacb19 [ 1158.284150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1158.288340] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1158.290077] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1158.291697] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1158.293302] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.294902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1158.296497] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1158.298993] FAULT_INJECTION: forcing a failure. [ 1158.298993] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.301499] CPU: 0 PID: 7991 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1158.303029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1158.304888] Call Trace: [ 1158.305480] dump_stack+0x107/0x167 [ 1158.306312] should_fail.cold+0x5/0xa [ 1158.307175] ? create_object.isra.0+0x3a/0xa30 20:29:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6) [ 1158.308199] should_failslab+0x5/0x20 [ 1158.309561] kmem_cache_alloc+0x5b/0x310 [ 1158.310514] ? mark_held_locks+0x9e/0xe0 [ 1158.311366] create_object.isra.0+0x3a/0xa30 [ 1158.312288] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1158.313370] kmem_cache_alloc_bulk+0x168/0x320 [ 1158.314331] io_submit_sqes+0x6fe4/0x8610 [ 1158.315241] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1158.316291] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1158.317317] ? find_held_lock+0x2c/0x110 [ 1158.318174] ? io_submit_sqes+0x8610/0x8610 [ 1158.319090] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1158.320177] ? wait_for_completion_io+0x270/0x270 [ 1158.321201] ? rcu_read_lock_any_held+0x75/0xa0 [ 1158.322173] ? vfs_write+0x354/0xb10 [ 1158.322954] ? fput_many+0x2f/0x1a0 [ 1158.323716] ? ksys_write+0x1a9/0x260 [ 1158.324518] ? __ia32_sys_read+0xb0/0xb0 [ 1158.325375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1158.326480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1158.327564] do_syscall_64+0x33/0x40 [ 1158.328344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1158.329427] RIP: 0033:0x7f1930b6db19 [ 1158.330208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1158.334052] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1158.335644] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1158.337147] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1158.338641] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.340143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.341652] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1171.980377] FAULT_INJECTION: forcing a failure. [ 1171.980377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1171.982956] CPU: 0 PID: 8016 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1171.984453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1171.986282] Call Trace: [ 1171.986881] dump_stack+0x107/0x167 [ 1171.987706] should_fail.cold+0x5/0xa [ 1171.988578] __alloc_pages_nodemask+0x182/0x600 [ 1171.989647] ? lock_acquire+0x197/0x470 [ 1171.990538] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1171.991872] ? lock_downgrade+0x6d0/0x6d0 [ 1171.992801] ? do_raw_spin_lock+0x121/0x260 [ 1171.993789] alloc_pages_current+0x187/0x280 [ 1171.994772] __pmd_alloc+0x37/0x630 [ 1171.995581] copy_page_range+0x2bd0/0x3800 [ 1171.996531] ? perf_trace_lock+0xac/0x490 [ 1171.997464] ? lock_chain_count+0x20/0x20 [ 1171.998378] ? find_held_lock+0x2c/0x110 [ 1171.999283] ? anon_vma_fork+0x462/0x640 [ 1172.000191] ? up_write+0x191/0x550 [ 1172.001010] ? vm_iomap_memory+0x190/0x190 [ 1172.001946] ? downgrade_write+0x3a0/0x3a0 [ 1172.002893] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1172.004108] ? __vma_link_rb+0x540/0x700 [ 1172.005020] copy_process+0x7658/0x78b0 [ 1172.005911] ? SOFTIRQ_verbose+0x10/0x10 [ 1172.006855] ? __cleanup_sighand+0xb0/0xb0 [ 1172.007815] ? _copy_from_user+0xfb/0x1b0 [ 1172.008769] kernel_clone+0xe7/0x980 [ 1172.009696] ? __lockdep_reset_lock+0x180/0x180 [ 1172.010866] ? create_io_thread+0xf0/0xf0 [ 1172.011824] ? ksys_write+0x21a/0x260 [ 1172.012621] ? lock_downgrade+0x6d0/0x6d0 [ 1172.013485] __do_sys_clone3+0x1e5/0x320 [ 1172.014317] ? __do_sys_clone+0x110/0x110 [ 1172.015198] ? rcu_read_lock_any_held+0x75/0xa0 [ 1172.016159] ? vfs_write+0x354/0xb10 [ 1172.016934] ? fput_many+0x2f/0x1a0 [ 1172.017678] ? ksys_write+0x1a9/0x260 [ 1172.018453] ? __ia32_sys_read+0xb0/0xb0 [ 1172.019281] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1172.020348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1172.021589] ? trace_hardirqs_on+0x5b/0x180 [ 1172.022469] do_syscall_64+0x33/0x40 [ 1172.023223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.024264] RIP: 0033:0x7f3a69dacb19 [ 1172.025035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.028760] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1172.030326] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1172.031766] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1172.033221] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.034679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.036125] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:30:05 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) 20:30:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 30) 20:30:05 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 20:30:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7) 20:30:05 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x20000000000000) 20:30:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2}, 0x4) pipe2(&(0x7f0000000100), 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000080)) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x1f, 0xeed}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0xc5b, 0x2925, 0x0, &(0x7f00000000c0)={[0x77]}, 0x8) 20:30:05 executing program 3: semget(0x1, 0x3, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = syz_io_uring_complete(r1) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000140), 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) socket$inet_icmp(0x2, 0x2, 0x1) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) fcntl$notify(r5, 0x402, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x203080, 0x100, 0x10}, &(0x7f0000000180)='./file0\x00', 0x18}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) fcntl$lock(r4, 0x6, &(0x7f0000000080)={0x0, 0x1, 0x1ff, 0x2, r6}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000440)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 20:30:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x0) 20:30:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x0) 20:30:05 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x80000000000000) [ 1172.078929] FAULT_INJECTION: forcing a failure. [ 1172.078929] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.080466] CPU: 1 PID: 8035 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1172.081370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.082444] Call Trace: [ 1172.082794] dump_stack+0x107/0x167 [ 1172.083276] should_fail.cold+0x5/0xa [ 1172.083784] ? create_object.isra.0+0x3a/0xa30 [ 1172.084386] should_failslab+0x5/0x20 [ 1172.084897] kmem_cache_alloc+0x5b/0x310 [ 1172.085428] create_object.isra.0+0x3a/0xa30 [ 1172.086012] kmemleak_alloc_percpu+0xa0/0x100 [ 1172.086611] pcpu_alloc+0x4e2/0x1240 [ 1172.087122] __percpu_counter_init+0x10d/0x2d0 [ 1172.087739] io_uring_alloc_task_context+0xcc/0x6a0 [ 1172.088401] ? io_import_iovec+0x1120/0x1120 [ 1172.088991] ? lock_downgrade+0x6d0/0x6d0 [ 1172.089536] ? do_raw_spin_lock+0x121/0x260 [ 1172.090084] ? rwlock_bug.part.0+0x90/0x90 [ 1172.090632] __io_uring_add_tctx_node+0x2c6/0x520 [ 1172.091258] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1172.091930] ? alloc_fd+0x2e7/0x670 [ 1172.092420] io_uring_setup+0x1fbb/0x2980 [ 1172.092973] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1172.093639] ? wait_for_completion_io+0x270/0x270 [ 1172.094278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1172.094962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1172.095631] do_syscall_64+0x33/0x40 [ 1172.096119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.096794] RIP: 0033:0x7f2e9760cb19 [ 1172.097275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.099933] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1172.100911] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1172.101813] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1172.102726] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1172.103630] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1172.104542] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1172.107568] FAULT_INJECTION: forcing a failure. [ 1172.107568] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.109106] CPU: 1 PID: 8034 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1172.109964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.111016] Call Trace: [ 1172.111364] dump_stack+0x107/0x167 [ 1172.111841] should_fail.cold+0x5/0xa [ 1172.112324] ? create_object.isra.0+0x3a/0xa30 [ 1172.112920] should_failslab+0x5/0x20 [ 1172.113411] kmem_cache_alloc+0x5b/0x310 [ 1172.113934] ? mark_held_locks+0x9e/0xe0 [ 1172.114469] create_object.isra.0+0x3a/0xa30 [ 1172.115051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1172.115700] kmem_cache_alloc_bulk+0x168/0x320 [ 1172.116298] io_submit_sqes+0x6fe4/0x8610 [ 1172.116862] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1172.117500] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1172.118136] ? find_held_lock+0x2c/0x110 [ 1172.118665] ? io_submit_sqes+0x8610/0x8610 [ 1172.119222] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1172.119842] ? wait_for_completion_io+0x270/0x270 [ 1172.120466] ? rcu_read_lock_any_held+0x75/0xa0 [ 1172.121060] ? vfs_write+0x354/0xb10 [ 1172.121538] ? fput_many+0x2f/0x1a0 [ 1172.121998] ? ksys_write+0x1a9/0x260 [ 1172.122485] ? __ia32_sys_read+0xb0/0xb0 [ 1172.123015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1172.123729] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1172.124429] do_syscall_64+0x33/0x40 [ 1172.124932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.125597] RIP: 0033:0x7f1930b6db19 [ 1172.126063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.128488] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1172.129452] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1172.130349] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1172.131262] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.132187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.133161] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 20:30:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8) 20:30:05 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x29e5, 0xfe08, 0x1, &(0x7f0000000000)={[0x2]}, 0x8) 20:30:05 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x100000000000000) 20:30:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x13, r0, 0x0) 20:30:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000000, 0x13, r0, 0x0) 20:30:05 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x200000000000000) 20:30:05 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40) 20:30:05 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd, 0x2, &(0x7f0000000000), 0x0, 0xd, 0x1, {0x0, r4}}, 0x5) 20:30:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 31) 20:30:05 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 20:30:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10) [ 1172.348166] FAULT_INJECTION: forcing a failure. [ 1172.348166] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.349557] CPU: 1 PID: 8057 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1172.350338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.351272] Call Trace: [ 1172.351578] dump_stack+0x107/0x167 [ 1172.351991] should_fail.cold+0x5/0xa [ 1172.352419] ? create_object.isra.0+0x3a/0xa30 [ 1172.352537] FAULT_INJECTION: forcing a failure. [ 1172.352537] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.352950] should_failslab+0x5/0x20 [ 1172.352961] kmem_cache_alloc+0x5b/0x310 [ 1172.352974] ? mark_held_locks+0x9e/0xe0 [ 1172.352994] create_object.isra.0+0x3a/0xa30 [ 1172.357337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1172.357908] kmem_cache_alloc_bulk+0x168/0x320 [ 1172.358427] io_submit_sqes+0x6fe4/0x8610 [ 1172.358919] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1172.359481] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1172.360022] ? find_held_lock+0x2c/0x110 [ 1172.360481] ? io_submit_sqes+0x8610/0x8610 [ 1172.360983] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1172.361525] ? wait_for_completion_io+0x270/0x270 [ 1172.362074] ? rcu_read_lock_any_held+0x75/0xa0 [ 1172.362592] ? vfs_write+0x354/0xb10 [ 1172.363010] ? fput_many+0x2f/0x1a0 [ 1172.363418] ? ksys_write+0x1a9/0x260 [ 1172.363848] ? __ia32_sys_read+0xb0/0xb0 [ 1172.364309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1172.364911] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1172.365494] do_syscall_64+0x33/0x40 [ 1172.365913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.366485] RIP: 0033:0x7f1930b6db19 [ 1172.366900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.368968] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1172.369822] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1172.370623] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1172.371424] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.372225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.373040] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1172.373867] CPU: 0 PID: 8059 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1172.375429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.377282] Call Trace: [ 1172.377882] dump_stack+0x107/0x167 [ 1172.378706] should_fail.cold+0x5/0xa [ 1172.379561] ? __pmd_alloc+0x94/0x630 [ 1172.380408] should_failslab+0x5/0x20 [ 1172.381270] kmem_cache_alloc+0x5b/0x310 [ 1172.382184] __pmd_alloc+0x94/0x630 [ 1172.382992] copy_page_range+0x2bd0/0x3800 [ 1172.383939] ? perf_trace_lock+0xac/0x490 [ 1172.384865] ? lock_chain_count+0x20/0x20 [ 1172.385787] ? find_held_lock+0x2c/0x110 [ 1172.386693] ? anon_vma_fork+0x462/0x640 [ 1172.387616] ? up_write+0x191/0x550 [ 1172.388424] ? vm_iomap_memory+0x190/0x190 [ 1172.389368] ? downgrade_write+0x3a0/0x3a0 [ 1172.390308] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1172.391518] ? __vma_link_rb+0x540/0x700 [ 1172.392429] copy_process+0x7658/0x78b0 [ 1172.393312] ? SOFTIRQ_verbose+0x10/0x10 [ 1172.394272] ? __cleanup_sighand+0xb0/0xb0 [ 1172.395230] ? _copy_from_user+0xfb/0x1b0 [ 1172.396148] kernel_clone+0xe7/0x980 [ 1172.396978] ? __lockdep_reset_lock+0x180/0x180 [ 1172.398001] ? create_io_thread+0xf0/0xf0 [ 1172.398925] ? ksys_write+0x21a/0x260 [ 1172.399760] ? lock_downgrade+0x6d0/0x6d0 [ 1172.400685] __do_sys_clone3+0x1e5/0x320 [ 1172.401574] ? __do_sys_clone+0x110/0x110 [ 1172.402510] ? rcu_read_lock_any_held+0x75/0xa0 [ 1172.403518] ? vfs_write+0x354/0xb10 [ 1172.404334] ? fput_many+0x2f/0x1a0 [ 1172.405138] ? ksys_write+0x1a9/0x260 [ 1172.405968] ? __ia32_sys_read+0xb0/0xb0 [ 1172.406870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1172.408026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1172.409149] ? trace_hardirqs_on+0x5b/0x180 [ 1172.410087] do_syscall_64+0x33/0x40 [ 1172.410895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.412004] RIP: 0033:0x7f3a69dacb19 [ 1172.412826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.416808] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1172.418456] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1172.420008] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1172.421561] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.423095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.424635] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1172.435751] FAULT_INJECTION: forcing a failure. [ 1172.435751] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.437089] CPU: 1 PID: 8058 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1172.437864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.438803] Call Trace: [ 1172.439109] dump_stack+0x107/0x167 [ 1172.439526] should_fail.cold+0x5/0xa [ 1172.439967] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1172.440564] should_failslab+0x5/0x20 [ 1172.441003] kmem_cache_alloc_trace+0x55/0x320 [ 1172.441524] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1172.442101] ? io_import_iovec+0x1120/0x1120 [ 1172.442613] ? lock_downgrade+0x6d0/0x6d0 [ 1172.443084] ? do_raw_spin_lock+0x121/0x260 [ 1172.443573] ? rwlock_bug.part.0+0x90/0x90 [ 1172.444059] __io_uring_add_tctx_node+0x2c6/0x520 [ 1172.444617] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1172.445218] ? alloc_fd+0x2e7/0x670 [ 1172.445641] io_uring_setup+0x1fbb/0x2980 [ 1172.446118] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1172.446700] ? wait_for_completion_io+0x270/0x270 [ 1172.447268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1172.447870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1172.448455] do_syscall_64+0x33/0x40 [ 1172.448891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.449474] RIP: 0033:0x7f2e9760cb19 [ 1172.449898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.451985] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1172.452857] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1172.453665] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1172.454473] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1172.455287] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1172.456098] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:30:22 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0xfeffffff00000000) 20:30:22 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41) 20:30:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60) 20:30:22 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000000, 0x13, r0, 0x0) 20:30:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 20:30:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x40, r2, 0x201, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x210, 0x0, 0x2bbc10918b1d8cf9, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x154, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xa0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffff801}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xff0484a0dc9ff68c}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5b}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20b8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x40000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 20:30:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 32) 20:30:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000630000000500000000000000000000000000000000000000000000000000000000000000000047000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be53eb852ee803a65012a3ad1ba07db872d4eb5d5143a9f9c8797bf73ad6bd2f9ca70f44e1b911d3e9d424d2b06b128c1a8a1a3c470aa7f4a3dadb48578dab6045c939d1ca7b8839d55a091e7ecb34eee34d1187f120ee2a277f59874c1fc77bf6489d9b8e1215968a267561e7e6d1321d1ae3c8ac24933283aaa78740a8a4aaa70976d2966d210e7ee821a06c00ea03103f443229123f994f209b5ba85abdd3f7252dcec835bb6f3c72ec346bf11a25fd8983584400e0fcc583b376bde176fda228559233f7d4f5b7375e56d981209e233e4935e8f0d9d3dc6d86cd991cf5a6363fa23dc3ec3046decaa3941829274d0dc598134fb91db27e00492f7446cd9af2e8c32b0d753746d25b5d5e120c2b75716a93d144bc77113b838d12b49ca1d02d2b5db2104691a02e5138cdb39296429bfde6c6988b43c0363d6f8e339a0376c1e4dbef4496109338a98777fbe73619b8854fd3f1aab3d5d9f4ecd6cb5df4a4db559b2f2bf3b7e178a184992bb0a723b1aa576d7f6a292b59829e3661067aeb6fc97642d5f8cf1fe4e2ace36c45bf00778a71461c7db7"], 0x110) [ 1188.808924] FAULT_INJECTION: forcing a failure. [ 1188.808924] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.811438] CPU: 0 PID: 8080 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1188.812888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.814270] FAULT_INJECTION: forcing a failure. [ 1188.814270] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.814621] Call Trace: [ 1188.814651] dump_stack+0x107/0x167 [ 1188.818246] should_fail.cold+0x5/0xa [ 1188.819057] ? create_object.isra.0+0x3a/0xa30 [ 1188.820012] should_failslab+0x5/0x20 [ 1188.820821] kmem_cache_alloc+0x5b/0x310 [ 1188.821673] ? mark_held_locks+0x9e/0xe0 [ 1188.822530] create_object.isra.0+0x3a/0xa30 [ 1188.823449] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.824522] kmem_cache_alloc_bulk+0x168/0x320 [ 1188.825505] io_submit_sqes+0x6fe4/0x8610 [ 1188.826415] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.827457] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.828475] ? find_held_lock+0x2c/0x110 [ 1188.829343] ? io_submit_sqes+0x8610/0x8610 [ 1188.830258] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1188.831274] ? wait_for_completion_io+0x270/0x270 [ 1188.832291] ? rcu_read_lock_any_held+0x75/0xa0 [ 1188.833270] ? vfs_write+0x354/0xb10 [ 1188.834058] ? fput_many+0x2f/0x1a0 [ 1188.834820] ? ksys_write+0x1a9/0x260 [ 1188.835616] ? __ia32_sys_read+0xb0/0xb0 [ 1188.836474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.837586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.838674] do_syscall_64+0x33/0x40 [ 1188.839457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.840532] RIP: 0033:0x7f1930b6db19 [ 1188.841323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.845209] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1188.846809] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1188.848312] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1188.849814] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.851297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.852736] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1188.854278] CPU: 1 PID: 8085 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1188.855314] FAULT_INJECTION: forcing a failure. [ 1188.855314] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.855723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.855730] Call Trace: [ 1188.855759] dump_stack+0x107/0x167 [ 1188.861070] should_fail.cold+0x5/0xa [ 1188.861879] ? create_object.isra.0+0x3a/0xa30 [ 1188.862835] should_failslab+0x5/0x20 [ 1188.863634] kmem_cache_alloc+0x5b/0x310 [ 1188.864498] create_object.isra.0+0x3a/0xa30 [ 1188.865419] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.866500] kmem_cache_alloc+0x159/0x310 [ 1188.867378] __pmd_alloc+0x94/0x630 [ 1188.868148] copy_page_range+0x2bd0/0x3800 [ 1188.869040] ? perf_trace_lock+0xac/0x490 [ 1188.869912] ? lock_chain_count+0x20/0x20 [ 1188.870795] ? find_held_lock+0x2c/0x110 [ 1188.871654] ? anon_vma_fork+0x462/0x640 [ 1188.872525] ? up_write+0x191/0x550 [ 1188.873294] ? vm_iomap_memory+0x190/0x190 [ 1188.874180] ? downgrade_write+0x3a0/0x3a0 [ 1188.875073] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1188.876204] ? __vma_link_rb+0x540/0x700 [ 1188.877081] copy_process+0x7658/0x78b0 [ 1188.877912] ? SOFTIRQ_verbose+0x10/0x10 [ 1188.878801] ? __cleanup_sighand+0xb0/0xb0 [ 1188.879709] ? _copy_from_user+0xfb/0x1b0 [ 1188.880589] kernel_clone+0xe7/0x980 [ 1188.881380] ? __lockdep_reset_lock+0x180/0x180 [ 1188.882367] ? create_io_thread+0xf0/0xf0 [ 1188.883247] ? ksys_write+0x21a/0x260 [ 1188.884043] ? lock_downgrade+0x6d0/0x6d0 [ 1188.884932] __do_sys_clone3+0x1e5/0x320 [ 1188.885785] ? __do_sys_clone+0x110/0x110 [ 1188.886672] ? rcu_read_lock_any_held+0x75/0xa0 [ 1188.887633] ? vfs_write+0x354/0xb10 [ 1188.888407] ? fput_many+0x2f/0x1a0 [ 1188.889176] ? ksys_write+0x1a9/0x260 [ 1188.889971] ? __ia32_sys_read+0xb0/0xb0 [ 1188.890823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.891922] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.893006] ? trace_hardirqs_on+0x5b/0x180 [ 1188.893910] do_syscall_64+0x33/0x40 [ 1188.894694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.895773] RIP: 0033:0x7f3a69dacb19 [ 1188.896554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.900396] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1188.902005] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1188.903502] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1188.904999] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.906486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.907973] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1188.909503] CPU: 0 PID: 8082 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1188.910968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.912720] Call Trace: [ 1188.913284] dump_stack+0x107/0x167 [ 1188.914053] should_fail.cold+0x5/0xa [ 1188.914860] ? create_object.isra.0+0x3a/0xa30 [ 1188.915822] should_failslab+0x5/0x20 [ 1188.916619] kmem_cache_alloc+0x5b/0x310 [ 1188.917484] create_object.isra.0+0x3a/0xa30 [ 1188.918409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.919488] kmem_cache_alloc_trace+0x151/0x320 [ 1188.920470] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1188.920582] netlink: 'syz-executor.7': attribute type 6 has an invalid length. [ 1188.921540] ? io_import_iovec+0x1120/0x1120 [ 1188.921561] ? lock_downgrade+0x6d0/0x6d0 [ 1188.921587] ? do_raw_spin_lock+0x121/0x260 [ 1188.923124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1188.924007] ? rwlock_bug.part.0+0x90/0x90 [ 1188.928350] __io_uring_add_tctx_node+0x2c6/0x520 [ 1188.929386] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1188.930483] ? alloc_fd+0x2e7/0x670 [ 1188.931273] io_uring_setup+0x1fbb/0x2980 [ 1188.932158] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1188.933227] ? wait_for_completion_io+0x270/0x270 [ 1188.934274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.935368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.936459] do_syscall_64+0x33/0x40 [ 1188.937251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.938329] RIP: 0033:0x7f2e9760cb19 [ 1188.939107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.942954] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1188.944554] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1188.946058] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1188.947562] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1188.949075] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1188.950578] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1188.954621] netlink: 'syz-executor.7': attribute type 6 has an invalid length. [ 1188.956338] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 20:30:22 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0xffffffff00000000) 20:30:22 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000700)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r1, @ANYBLOB="08000000000000003100ed8d515816d4f63370a2248d8ca4ca80ca7423cbb0780b16a2d65618c968c99447c1cb99068153de629257f0c07e388a9636e71d4674e6c77a3454d07f94345e723b0000008000000000f54fb41bb2959e998bbd500a89512c1ccb53e106d8d039c87a26f1aa5506c12e5ae903917c14cd08ad5f3aca65e48cd10c59"]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r5 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300)) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x3028, 0x0, 0xfffffffc, 0x2, 0x1, 0x0, 0x90, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x6}}, './file1\x00'}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000800)={0x1, 0x0, "17f042"}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 20:30:22 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6000000, 0x13, r0, 0x0) 20:30:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x300) [ 1189.032796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:30:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 20:30:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x7, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) [ 1189.095727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.097363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.099252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1189.126940] FAULT_INJECTION: forcing a failure. [ 1189.126940] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.129363] CPU: 0 PID: 8103 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1189.130794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.132542] Call Trace: [ 1189.133108] dump_stack+0x107/0x167 [ 1189.133880] should_fail.cold+0x5/0xa [ 1189.134697] ? create_io_worker+0xe8/0x690 [ 1189.135585] should_failslab+0x5/0x20 [ 1189.136385] kmem_cache_alloc_node_trace+0x59/0x340 [ 1189.137475] create_io_worker+0xe8/0x690 [ 1189.138345] io_wqe_enqueue+0x69e/0xbe0 [ 1189.139183] ? create_worker_cb+0x260/0x260 [ 1189.140098] ? io_prep_async_work+0x340/0x550 [ 1189.141055] io_queue_async_work+0x26b/0x4f0 [ 1189.141988] __io_queue_sqe+0x5cc/0x9d0 [ 1189.142833] ? io_issue_sqe+0x7850/0x7850 [ 1189.143719] ? kmem_cache_alloc_bulk+0x182/0x320 [ 1189.144724] io_submit_sqes+0x44a8/0x8610 [ 1189.145643] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1189.146688] __do_sys_io_uring_enter+0x6b2/0x1890 20:30:22 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0xc, 0x31, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x2, 0x140851, r0, 0x0) r2 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x2) mkdirat(r2, &(0x7f0000000000)='./file1\x00', 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x80, 0x400}, 0x1) [ 1189.147712] ? find_held_lock+0x2c/0x110 [ 1189.148771] ? io_submit_sqes+0x8610/0x8610 [ 1189.149708] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1189.150725] ? wait_for_completion_io+0x270/0x270 [ 1189.151746] ? rcu_read_lock_any_held+0x75/0xa0 [ 1189.152717] ? vfs_write+0x354/0xb10 [ 1189.153510] ? fput_many+0x2f/0x1a0 [ 1189.154274] ? ksys_write+0x1a9/0x260 [ 1189.155076] ? __ia32_sys_read+0xb0/0xb0 [ 1189.155935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.157048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.158141] do_syscall_64+0x33/0x40 [ 1189.158929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.160012] RIP: 0033:0x7f1930b6db19 [ 1189.160974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.164850] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1189.166453] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1189.167947] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1189.169446] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.170944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1189.172448] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 20:30:36 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 20:30:36 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 20:30:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7000000, 0x13, r0, 0x0) 20:30:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 33) 20:30:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x500) 20:30:37 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42) 20:30:37 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x3, 0x2, 0xe}) 20:30:37 executing program 3: r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000500)}, 0x10000, 0x6, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x3ad) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e0008a7d9b8f2dbe70ad1a52", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) mknodat$null(r4, &(0x7f0000000040)='./file1\x00', 0x400, 0x103) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index, 0x7fffffff, &(0x7f0000000280)="320028a2c353075805cc2915ca20ca1d75d2f0d23ffb097318fb1bce1bc2d174e4249dfc4f6ed00dbaf8e40917784e01d27e6d8d6bee6c9f704b25c02409333b5148b7c33b1249a2fcd893e23d4fadaa54deda1a6760ba3f741adfc1028be8d4e96310", 0x63, 0x10, 0x1}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000380)={0x0, @aes128}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0xef, 0x90, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001000000230000004d3d9cb9d7eea1c04e0eece9eb", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/file0\x00']) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508) fstat(r2, &(0x7f0000000680)) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000440)=@random="21975dd6c863658d2f134e541306c1de79858c580b97af", 0x17, 0x1) [ 1203.590906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1203.597515] FAULT_INJECTION: forcing a failure. [ 1203.597515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1203.600110] CPU: 0 PID: 8133 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1203.601584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1203.603336] Call Trace: [ 1203.603903] dump_stack+0x107/0x167 [ 1203.604675] should_fail.cold+0x5/0xa [ 1203.605492] __alloc_pages_nodemask+0x182/0x600 [ 1203.606483] ? lock_acquire+0x197/0x470 [ 1203.607333] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1203.608601] ? lock_downgrade+0x6d0/0x6d0 [ 1203.609481] ? do_raw_spin_lock+0x121/0x260 [ 1203.610415] alloc_pages_current+0x187/0x280 [ 1203.611343] __pmd_alloc+0x37/0x630 [ 1203.612125] copy_page_range+0x2bd0/0x3800 [ 1203.613019] ? perf_trace_lock+0xac/0x490 [ 1203.613902] ? lock_chain_count+0x20/0x20 [ 1203.614783] ? find_held_lock+0x2c/0x110 [ 1203.615653] ? anon_vma_fork+0x462/0x640 [ 1203.616532] ? up_write+0x191/0x550 [ 1203.617326] ? vm_iomap_memory+0x190/0x190 [ 1203.618222] ? downgrade_write+0x3a0/0x3a0 [ 1203.619131] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1203.620280] ? __vma_link_rb+0x540/0x700 [ 1203.621165] copy_process+0x7658/0x78b0 [ 1203.622028] ? SOFTIRQ_verbose+0x10/0x10 [ 1203.622942] ? __cleanup_sighand+0xb0/0xb0 [ 1203.623878] ? _copy_from_user+0xfb/0x1b0 [ 1203.624764] kernel_clone+0xe7/0x980 [ 1203.625620] ? __lockdep_reset_lock+0x180/0x180 [ 1203.626614] ? create_io_thread+0xf0/0xf0 [ 1203.627513] ? ksys_write+0x21a/0x260 [ 1203.628327] ? lock_downgrade+0x6d0/0x6d0 [ 1203.629232] __do_sys_clone3+0x1e5/0x320 [ 1203.630088] ? __do_sys_clone+0x110/0x110 [ 1203.630998] ? rcu_read_lock_any_held+0x75/0xa0 [ 1203.631983] ? vfs_write+0x354/0xb10 [ 1203.632779] ? fput_many+0x2f/0x1a0 [ 1203.633558] ? ksys_write+0x1a9/0x260 [ 1203.634362] ? __ia32_sys_read+0xb0/0xb0 [ 1203.635238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1203.636350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1203.637460] ? trace_hardirqs_on+0x5b/0x180 [ 1203.638387] do_syscall_64+0x33/0x40 [ 1203.639188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1203.640283] RIP: 0033:0x7f3a69dacb19 [ 1203.641080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1203.645005] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1203.646643] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1203.648151] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1203.649667] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.651181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1203.652693] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1203.658514] FAULT_INJECTION: forcing a failure. [ 1203.658514] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.660921] CPU: 0 PID: 8132 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1203.662394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1203.664147] Call Trace: [ 1203.664711] dump_stack+0x107/0x167 [ 1203.665497] should_fail.cold+0x5/0xa [ 1203.666307] ? create_object.isra.0+0x3a/0xa30 [ 1203.667276] should_failslab+0x5/0x20 [ 1203.668084] kmem_cache_alloc+0x5b/0x310 [ 1203.668962] create_object.isra.0+0x3a/0xa30 [ 1203.669892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1203.670974] kmem_cache_alloc_trace+0x151/0x320 [ 1203.671965] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1203.673042] ? io_import_iovec+0x1120/0x1120 [ 1203.673970] ? lock_downgrade+0x6d0/0x6d0 [ 1203.674853] ? do_raw_spin_lock+0x121/0x260 [ 1203.675764] ? rwlock_bug.part.0+0x90/0x90 [ 1203.676657] __io_uring_add_tctx_node+0x2c6/0x520 [ 1203.677696] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1203.678804] ? alloc_fd+0x2e7/0x670 [ 1203.679598] io_uring_setup+0x1fbb/0x2980 [ 1203.680480] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1203.681558] ? wait_for_completion_io+0x270/0x270 [ 1203.682617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1203.683726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1203.684814] do_syscall_64+0x33/0x40 [ 1203.685602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1203.686683] RIP: 0033:0x7f2e9760cb19 [ 1203.687468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1203.691353] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1203.692971] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1203.694479] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1203.695989] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1203.697498] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1203.699014] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1203.705331] FAULT_INJECTION: forcing a failure. [ 1203.705331] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.707736] CPU: 0 PID: 8131 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1203.709184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1203.710947] Call Trace: [ 1203.711507] dump_stack+0x107/0x167 [ 1203.712277] should_fail.cold+0x5/0xa [ 1203.713108] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1203.714215] should_failslab+0x5/0x20 [ 1203.715024] __kmalloc_node+0x76/0x420 [ 1203.715864] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1203.716946] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1203.718002] kmem_cache_alloc_bulk+0x182/0x320 [ 1203.718984] io_submit_sqes+0x6fe4/0x8610 [ 1203.719898] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1203.720955] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1203.721983] ? find_held_lock+0x2c/0x110 [ 1203.722845] ? io_submit_sqes+0x8610/0x8610 [ 1203.723760] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1203.724777] ? wait_for_completion_io+0x270/0x270 [ 1203.725815] ? rcu_read_lock_any_held+0x75/0xa0 [ 1203.726791] ? vfs_write+0x354/0xb10 [ 1203.727579] ? fput_many+0x2f/0x1a0 [ 1203.728342] ? ksys_write+0x1a9/0x260 [ 1203.729148] ? __ia32_sys_read+0xb0/0xb0 [ 1203.730014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1203.731108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1203.732202] do_syscall_64+0x33/0x40 [ 1203.732997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1203.734100] RIP: 0033:0x7f1930b6db19 [ 1203.734882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1203.738737] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1203.740331] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1203.741851] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1203.743367] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.744869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1203.746401] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 20:30:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7fffffffffffc, 0x13, r0, 0x0) 20:30:37 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, 0xffffffffffffffff, 0x0) 20:30:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600) 20:30:37 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0xbce1) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000) io_uring_enter(r0, 0x2ce7, 0xe661, 0x2, &(0x7f0000000000)={[0x7fff]}, 0x8) 20:30:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'user.', '\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x801, 0x0, 0x0, {0xb, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000200)={0x1, 0x4, 0x1}) 20:30:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x30000000000000, 0x13, r0, 0x0) [ 1206.182218] wlan1: Trigger new scan to find an IBSS to join [ 1209.190247] wlan1: Trigger new scan to find an IBSS to join [ 1212.199219] wlan1: Trigger new scan to find an IBSS to join [ 1212.955650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.957901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 20:30:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x700) 20:30:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) dup3(r0, r0, 0x80000) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000fc0)="7587", 0x2}, {&(0x7f0000000000)="14aaf048617c4bfa4baf8c3b6f4e81119928f4be7eb07dbb2d8fb5074f2f4697bbf8e776503517564d2133d5f3a99dc17d46e240340bac69c5da6eeb281e7f0b77ed0536707edee9a972b92dc1a5606c778b7d84d118edd5200f051514aa885b40a838c9f4211b11baf37ad7f19bb3ed367646cf2ed19185c194559a4b15380225dc8d76683e031692ba4680e0e4cbde4521daa6e1901ee8004981b5fd20680e8da559810e0260f4eea5b9190ad53fbb7d21"}, {&(0x7f0000000180)="21339b77e5b3ff05c05ef94f4ac0a65376872dcc1b64b5ad9366406de1cd322f0d2b84d9261fae2b18f5624fd25fb540fdd88260a0699ff5a7281cafb9b558714b514d95cc11fcd41de85e3fdb313b422a32bbcbf7107ccd65dfcfe796b9f9612614eca2350935a168eed04fdcd509319765c8388fb701c32e5a42af5aa96530bdbdf8484f5dd28de4985be6d13b9c4d5827a74321a4fe6f49f6d8c5debe9ffb4eb94fe27ef9de7de509d30b460fceb5e1a9a01461af35f8051610dbad034aa01135ab12cfaa5f311e084f3853ecabdbb4b42620db31d5b9086265d6235902ec06ca33a6f584cab8d1b40271da"}], 0x1, 0x0, 0x5d}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8840) 20:30:51 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r2, 0xebd, 0x0, 0x0, 0x4, 0x1}, 0x101) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r9}}, 0x0) syz_io_uring_setup(0x3b03, &(0x7f0000000080)={0x0, 0x5f6a, 0x8, 0x0, 0x1b9, 0x0, r6}, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r10, &(0x7f0000000040)={0x8000001a}, r0, 0x1, 0x0, 0x0, {0x0, r9}}, 0x0) r11 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r14}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r14}}, 0xffff6e06) 20:30:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 20:30:51 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 43) 20:30:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x80000000000000, 0x13, r0, 0x0) 20:30:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 34) [ 1217.860456] FAULT_INJECTION: forcing a failure. [ 1217.860456] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.862929] CPU: 0 PID: 8174 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1217.864404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.866174] Call Trace: [ 1217.866738] dump_stack+0x107/0x167 [ 1217.867515] should_fail.cold+0x5/0xa [ 1217.868338] ? ptlock_alloc+0x1d/0x70 [ 1217.869164] should_failslab+0x5/0x20 [ 1217.869969] kmem_cache_alloc+0x5b/0x310 [ 1217.870837] ptlock_alloc+0x1d/0x70 [ 1217.871626] pte_alloc_one+0x68/0x1a0 [ 1217.872446] __pte_alloc+0x1d/0x330 [ 1217.873242] copy_page_range+0x1b62/0x3800 [ 1217.874155] ? perf_trace_lock+0xac/0x490 20:30:51 executing program 7: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0xe000)=nil, 0xe000, 0x2000000, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x76b, &(0x7f0000000080)={0x0, 0xe2ab, 0x2, 0x2, 0xa1}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0xe57, 0x80) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x22c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}, 0x300, 0x0, 0x8000, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, r6, 0xa, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x2, 0x2, 0x0, 0x20, 0x0, 0x200, 0x284b, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000400), 0x8}, 0x40, 0x1, 0x4, 0x3, 0x20, 0x3, 0x8f7e, 0x0, 0x100, 0x0, 0x8}, r6, 0x9, r2, 0x9) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x2, 0x21c4c152e2039250, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7, 0x0, 0x2}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000600)=@can={0x1d, r10}, 0x0, 0x0, 0x1}, 0x1) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(r8, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r11, 0x80, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x80000001) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r2, 0x0, &(0x7f00000001c0)="4ed53a22338bf6f8", 0x8, 0x20004005, 0x0, {0x0, r7}}, 0x100) [ 1217.875042] ? find_held_lock+0x2c/0x110 [ 1217.876081] ? anon_vma_fork+0x462/0x640 [ 1217.876978] ? up_write+0x191/0x550 [ 1217.877771] ? vm_iomap_memory+0x190/0x190 [ 1217.878678] ? downgrade_write+0x3a0/0x3a0 [ 1217.879589] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1217.880745] ? __vma_link_rb+0x540/0x700 [ 1217.881614] copy_process+0x7658/0x78b0 [ 1217.882451] ? SOFTIRQ_verbose+0x10/0x10 [ 1217.883365] ? __cleanup_sighand+0xb0/0xb0 [ 1217.884301] ? _copy_from_user+0xfb/0x1b0 [ 1217.885212] kernel_clone+0xe7/0x980 [ 1217.886006] ? __lockdep_reset_lock+0x180/0x180 [ 1217.887118] ? create_io_thread+0xf0/0xf0 [ 1217.887155] ? ksys_write+0x21a/0x260 [ 1217.887175] ? lock_downgrade+0x6d0/0x6d0 [ 1217.887201] __do_sys_clone3+0x1e5/0x320 [ 1217.887220] ? __do_sys_clone+0x110/0x110 [ 1217.887264] ? rcu_read_lock_any_held+0x75/0xa0 [ 1217.887278] ? vfs_write+0x354/0xb10 [ 1217.887299] ? fput_many+0x2f/0x1a0 [ 1217.887316] ? ksys_write+0x1a9/0x260 [ 1217.887333] ? __ia32_sys_read+0xb0/0xb0 [ 1217.887359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.887380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.887396] ? trace_hardirqs_on+0x5b/0x180 [ 1217.887420] do_syscall_64+0x33/0x40 [ 1217.887440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.887453] RIP: 0033:0x7f3a69dacb19 [ 1217.887474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.887485] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1217.887506] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1217.887516] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1217.887527] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1217.887538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.887549] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1217.890803] FAULT_INJECTION: forcing a failure. 20:30:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000000000, 0x13, r0, 0x0) [ 1217.890803] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.890818] CPU: 1 PID: 8171 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1217.890825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.890830] Call Trace: [ 1217.890850] dump_stack+0x107/0x167 [ 1217.890866] should_fail.cold+0x5/0xa [ 1217.890885] ? copy_process+0x5e5/0x78b0 [ 1217.890906] should_failslab+0x5/0x20 [ 1217.890926] kmem_cache_alloc_node+0x55/0x330 [ 1217.890948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.890974] copy_process+0x5e5/0x78b0 [ 1217.891004] ? stack_trace_save+0x8c/0xc0 [ 1217.891027] ? stack_trace_consume_entry+0x160/0x160 [ 1217.891066] ? kasan_save_stack+0x32/0x40 [ 1217.891092] ? __cleanup_sighand+0xb0/0xb0 [ 1217.891110] ? do_syscall_64+0x33/0x40 [ 1217.891131] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.891155] ? __lockdep_reset_lock+0x180/0x180 [ 1217.891174] ? lock_acquire+0x197/0x470 [ 1217.891194] ? create_object.isra.0+0x3ad/0xa30 [ 1217.891215] ? lock_release+0x680/0x680 [ 1217.891226] ? find_held_lock+0x2c/0x110 [ 1217.891246] ? io_wqe_dec_running+0x220/0x220 [ 1217.891260] create_io_thread+0xb6/0xf0 [ 1217.891272] ? pidfd_prepare+0x80/0x80 [ 1217.891284] ? mark_held_locks+0x9e/0xe0 [ 1217.891301] ? io_wqe_dec_running+0x220/0x220 [ 1217.891324] ? __init_swait_queue_head+0xc6/0x150 [ 1217.891341] create_io_worker+0x23a/0x690 [ 1217.891358] io_wqe_enqueue+0x69e/0xbe0 [ 1217.891375] ? create_worker_cb+0x260/0x260 [ 1217.891392] ? io_prep_async_work+0x340/0x550 [ 1217.891412] io_queue_async_work+0x26b/0x4f0 [ 1217.891431] __io_queue_sqe+0x5cc/0x9d0 [ 1217.891449] ? io_issue_sqe+0x7850/0x7850 [ 1217.891469] ? kmem_cache_alloc_bulk+0x182/0x320 [ 1217.891487] io_submit_sqes+0x44a8/0x8610 [ 1217.891524] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1217.891536] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1217.891551] ? find_held_lock+0x2c/0x110 [ 1217.891568] ? io_submit_sqes+0x8610/0x8610 [ 1217.891586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1217.891601] ? wait_for_completion_io+0x270/0x270 [ 1217.891616] ? rcu_read_lock_any_held+0x75/0xa0 [ 1217.891625] ? vfs_write+0x354/0xb10 [ 1217.891638] ? fput_many+0x2f/0x1a0 [ 1217.891650] ? ksys_write+0x1a9/0x260 [ 1217.891660] ? __ia32_sys_read+0xb0/0xb0 [ 1217.891676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.891689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.891705] do_syscall_64+0x33/0x40 [ 1217.891718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.891727] RIP: 0033:0x7f1930b6db19 [ 1217.891738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.891745] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1217.891760] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1217.891767] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1217.891774] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1217.891781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.891788] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1217.893357] FAULT_INJECTION: forcing a failure. [ 1217.893357] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.988700] CPU: 0 PID: 8177 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1217.988711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.988717] Call Trace: [ 1217.988739] dump_stack+0x107/0x167 [ 1217.988762] should_fail.cold+0x5/0xa [ 1217.988783] ? create_object.isra.0+0x3a/0xa30 [ 1217.988800] should_failslab+0x5/0x20 [ 1217.988819] kmem_cache_alloc+0x5b/0x310 20:30:51 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58c4, 0x7, 0x2, &(0x7f0000000000)={[0x80]}, 0x8) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x48, 0x28, 0x400, 0x70bd2b, 0x25dfdbfc, {0x12}, [@typed={0xa, 0x32, 0x0, 0x0, @str='.!\x83*.\xe6'}, @generic="3230d0ab78db05a7db5177f8a450df0396887409d49dacbbb3a1e2ec450a3dea3c8b27f81c60"]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8804) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0xb6, &(0x7f0000000240)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x52}, 0x5}}, 0x6) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x4962, 0x82e4, 0x0, &(0x7f0000000080)={[0xb53]}, 0x8) [ 1217.988846] create_object.isra.0+0x3a/0xa30 20:30:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000) [ 1217.988862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1217.988887] __kmalloc+0x16e/0x390 20:30:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000000000000, 0x13, r0, 0x0) 20:30:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 1217.988916] io_wq_create+0xeb/0xc00 [ 1217.988947] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1217.988969] ? io_import_iovec+0x1120/0x1120 [ 1217.988990] ? io_apoll_task_func+0x2d0/0x2d0 [ 1217.989006] ? __io_req_find_next+0x300/0x300 [ 1217.989020] ? do_raw_spin_lock+0x121/0x260 [ 1217.989038] ? rwlock_bug.part.0+0x90/0x90 [ 1217.989070] __io_uring_add_tctx_node+0x2c6/0x520 20:30:51 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366ee578400080820000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000000040)={[{@numtail}]}) stat(&(0x7f0000000280)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005f40)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file1\x00'}) fchownat(r0, &(0x7f0000005f00)='./file1\x00', r3, r2, 0x800) setreuid(0x0, r1) r4 = openat(r0, &(0x7f0000000240)='./file1/file0\x00', 0x391301, 0x4) recvmmsg$unix(r4, &(0x7f0000006f80)=[{{&(0x7f00000002c0)=@abs, 0x0, &(0x7f0000001700)=[{&(0x7f0000000340)=""/154}, {&(0x7f0000000400)=""/14}, {&(0x7f0000000440)=""/4096}, {&(0x7f0000001440)=""/106}, {&(0x7f00000014c0)=""/29}, {&(0x7f0000001500)=""/162}, {&(0x7f00000015c0)=""/143}, {&(0x7f0000001680)=""/89}], 0x0, &(0x7f0000001780)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f00000017c0)=@abs, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001840)=""/22}, {&(0x7f0000001880)=""/6}, {&(0x7f00000018c0)=""/186}, {&(0x7f0000001980)=""/166}, {&(0x7f0000001a40)=""/18}, {&(0x7f0000001a80)=""/216}], 0x0, &(0x7f0000001c00)=[@cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000001c80)=@abs, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001d00)=""/170}, {&(0x7f0000001dc0)=""/144}, {&(0x7f0000001e80)=""/4096}, {&(0x7f0000002e80)=""/20}, {&(0x7f0000002ec0)=""/6}, {&(0x7f0000002f00)=""/27}]}}, {{&(0x7f0000002fc0)=@abs, 0x0, &(0x7f0000003080)=[{&(0x7f0000003040)=""/54}], 0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bbaa26ff"], 0xe}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003100)=""/233}, {&(0x7f0000003200)=""/122}, {&(0x7f0000003280)=""/15}, {&(0x7f00000032c0)=""/224}, {&(0x7f00000033c0)=""/116}, {&(0x7f0000003440)=""/167}]}}, {{&(0x7f0000003580), 0x0, &(0x7f0000003800)=[{&(0x7f0000003600)=""/26}, {&(0x7f0000003640)}, {&(0x7f0000003680)=""/75}, {&(0x7f0000003700)=""/234}], 0x0, &(0x7f0000005d40)=[@cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000003900)=""/158}, {&(0x7f00000039c0)=""/4096}, {&(0x7f00000049c0)=""/244}, {&(0x7f0000004ac0)=""/80}, {&(0x7f0000004b40)=""/239}, {&(0x7f0000004c40)=""/4096}, {&(0x7f0000005f80)=""/4096}]}}], 0x9, 0x10061, &(0x7f0000005e40)={0x0, 0x989680}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005e80), &(0x7f0000005ec0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01565087b59eda2e3b0016e1", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB='./file0\x00']) fchownat(r0, &(0x7f0000000080)='./file0\x00', r1, r6, 0x400) r7 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x2) r8 = accept4$inet(r5, &(0x7f0000005cc0)={0x2, 0x0, @loopback}, &(0x7f0000005d00)=0x10, 0x0) write$binfmt_elf64(r8, &(0x7f0000007140)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x7, 0x4, 0x2, 0x7, 0x2, 0x3e, 0x2, 0x7f, 0x40, 0x3ba, 0x8, 0x3, 0x38, 0x2, 0x8, 0x0, 0x8}, [{0x70000000, 0x7, 0xfffffffffffffff7, 0x6, 0x8001, 0x9, 0x100000000, 0x8001}, {0x3, 0x10001, 0x2d37, 0x100, 0x8f45, 0x6, 0x6, 0x280000}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9b0) mkdirat(r7, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(r7, &(0x7f0000000140)='./file0\x00', 0x85) [ 1217.989101] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1217.989117] ? alloc_fd+0x2e7/0x670 [ 1217.989150] io_uring_setup+0x1fbb/0x2980 [ 1217.989180] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1217.989195] ? wait_for_completion_io+0x270/0x270 [ 1217.989242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 20:30:51 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) syz_io_uring_submit(r0, r3, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x20002000}, r5, 0x3, 0x0, 0x1}, 0x9) 20:30:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000000000000, 0x13, r0, 0x0) 20:30:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000) [ 1217.989261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.989285] do_syscall_64+0x33/0x40 [ 1217.989304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.989316] RIP: 0033:0x7f2e9760cb19 20:30:51 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 44) [ 1217.989333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.989344] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1217.989364] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1217.989375] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1217.989386] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 20:30:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 20:30:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x400000000000000, 0x13, r0, 0x0) [ 1217.989397] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1217.989408] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:30:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) [ 1218.094503] FAULT_INJECTION: forcing a failure. [ 1218.094503] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.094525] CPU: 0 PID: 8201 Comm: syz-executor.5 Not tainted 5.10.253 #1 20:30:51 executing program 3: r0 = syz_io_uring_setup(0x64ec, &(0x7f0000000080)={0x0, 0x64ed, 0x2, 0x0, 0x26f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x6, 0x40010, r1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366ee578400080820000200008000f8000020004000000000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000000040)={[{@shortname_mixed}, {@utf8no}, {@fat=@nfs_nostale_ro}]}) [ 1218.094535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.094542] Call Trace: [ 1218.094568] dump_stack+0x107/0x167 [ 1218.094591] should_fail.cold+0x5/0xa [ 1218.094613] ? create_object.isra.0+0x3a/0xa30 [ 1218.094632] should_failslab+0x5/0x20 [ 1218.094650] kmem_cache_alloc+0x5b/0x310 [ 1218.094678] create_object.isra.0+0x3a/0xa30 [ 1218.094694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1218.094721] kmem_cache_alloc_node+0x169/0x330 [ 1218.094741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.094767] copy_process+0x5e5/0x78b0 [ 1218.094796] ? stack_trace_save+0x8c/0xc0 [ 1218.094817] ? stack_trace_consume_entry+0x160/0x160 [ 1218.094849] ? kasan_save_stack+0x32/0x40 [ 1218.094874] ? __cleanup_sighand+0xb0/0xb0 [ 1218.094890] ? do_syscall_64+0x33/0x40 [ 1218.094909] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.094930] ? __lockdep_reset_lock+0x180/0x180 [ 1218.094949] ? lock_acquire+0x197/0x470 [ 1218.094966] ? create_object.isra.0+0x3ad/0xa30 [ 1218.094990] ? lock_release+0x680/0x680 [ 1218.095007] ? find_held_lock+0x2c/0x110 [ 1218.095036] ? io_wqe_dec_running+0x220/0x220 [ 1218.095063] create_io_thread+0xb6/0xf0 [ 1218.095082] ? pidfd_prepare+0x80/0x80 [ 1218.095100] ? mark_held_locks+0x9e/0xe0 [ 1218.095125] ? io_wqe_dec_running+0x220/0x220 [ 1218.095160] ? __init_swait_queue_head+0xc6/0x150 [ 1218.095185] create_io_worker+0x23a/0x690 [ 1218.095211] io_wqe_enqueue+0x69e/0xbe0 [ 1218.095238] ? create_worker_cb+0x260/0x260 [ 1218.095263] ? io_prep_async_work+0x340/0x550 [ 1218.095293] io_queue_async_work+0x26b/0x4f0 [ 1218.095322] __io_queue_sqe+0x5cc/0x9d0 [ 1218.095350] ? io_issue_sqe+0x7850/0x7850 [ 1218.095381] ? kmem_cache_alloc_bulk+0x182/0x320 [ 1218.095408] io_submit_sqes+0x44a8/0x8610 [ 1218.095464] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1218.095482] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1218.095506] ? find_held_lock+0x2c/0x110 [ 1218.095533] ? io_submit_sqes+0x8610/0x8610 [ 1218.095561] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1218.095584] ? wait_for_completion_io+0x270/0x270 [ 1218.095606] ? rcu_read_lock_any_held+0x75/0xa0 [ 1218.095619] ? vfs_write+0x354/0xb10 [ 1218.095640] ? fput_many+0x2f/0x1a0 [ 1218.095657] ? ksys_write+0x1a9/0x260 [ 1218.095673] ? __ia32_sys_read+0xb0/0xb0 [ 1218.095698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.095718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.095742] do_syscall_64+0x33/0x40 [ 1218.095762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.095775] RIP: 0033:0x7f1930b6db19 [ 1218.095793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.095803] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1218.095825] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1218.095835] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1218.095846] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.095856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.095867] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1218.140226] loop3: detected capacity change from 0 to 4096 [ 1218.145500] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1218.145893] FAT-fs (loop3): FAT read failed (blocknr 32) [ 1218.185803] FAULT_INJECTION: forcing a failure. [ 1218.185803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1218.185818] CPU: 1 PID: 8216 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1218.185824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.185828] Call Trace: [ 1218.185845] dump_stack+0x107/0x167 [ 1218.185859] should_fail.cold+0x5/0xa [ 1218.185875] __alloc_pages_nodemask+0x182/0x600 [ 1218.185887] ? lock_downgrade+0x6d0/0x6d0 [ 1218.185901] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1218.185914] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1218.185931] ? kmem_cache_alloc_node+0x2bc/0x330 [ 1218.185942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.185957] copy_process+0x62b/0x78b0 [ 1218.185974] ? stack_trace_save+0x8c/0xc0 [ 1218.185986] ? stack_trace_consume_entry+0x160/0x160 [ 1218.186005] ? kasan_save_stack+0x32/0x40 [ 1218.186019] ? __cleanup_sighand+0xb0/0xb0 [ 1218.186029] ? do_syscall_64+0x33/0x40 [ 1218.186040] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.186058] ? __lockdep_reset_lock+0x180/0x180 [ 1218.186071] ? lock_acquire+0x197/0x470 [ 1218.186086] ? create_object.isra.0+0x3ad/0xa30 [ 1218.186104] ? lock_release+0x680/0x680 [ 1218.186117] ? find_held_lock+0x2c/0x110 [ 1218.186138] ? io_wqe_dec_running+0x220/0x220 [ 1218.186154] create_io_thread+0xb6/0xf0 [ 1218.186166] ? pidfd_prepare+0x80/0x80 [ 1218.186178] ? mark_held_locks+0x9e/0xe0 [ 1218.186194] ? io_wqe_dec_running+0x220/0x220 [ 1218.186218] ? __init_swait_queue_head+0xc6/0x150 [ 1218.186238] create_io_worker+0x23a/0x690 [ 1218.186256] io_wqe_enqueue+0x69e/0xbe0 [ 1218.186272] ? create_worker_cb+0x260/0x260 [ 1218.186289] ? io_prep_async_work+0x340/0x550 [ 1218.186307] io_queue_async_work+0x26b/0x4f0 [ 1218.186324] __io_queue_sqe+0x5cc/0x9d0 [ 1218.186345] ? io_issue_sqe+0x7850/0x7850 [ 1218.186363] ? kmem_cache_alloc_bulk+0x182/0x320 [ 1218.186378] io_submit_sqes+0x44a8/0x8610 [ 1218.186410] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1218.186422] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1218.186436] ? find_held_lock+0x2c/0x110 [ 1218.186452] ? io_submit_sqes+0x8610/0x8610 [ 1218.186468] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1218.186481] ? wait_for_completion_io+0x270/0x270 [ 1218.186494] ? rcu_read_lock_any_held+0x75/0xa0 [ 1218.186502] ? vfs_write+0x354/0xb10 [ 1218.186514] ? fput_many+0x2f/0x1a0 [ 1218.186525] ? ksys_write+0x1a9/0x260 [ 1218.186536] ? __ia32_sys_read+0xb0/0xb0 [ 1218.186550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.186562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.186575] do_syscall_64+0x33/0x40 [ 1218.186587] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.186594] RIP: 0033:0x7f1930b6db19 [ 1218.186607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.186613] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1218.186626] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1218.186632] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1218.186640] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.186647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.186655] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1218.195769] loop3: detected capacity change from 0 to 4096 [ 1218.198592] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1218.198901] FAT-fs (loop3): FAT read failed (blocknr 32) [ 1218.200689] FAULT_INJECTION: forcing a failure. [ 1218.200689] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.200711] CPU: 0 PID: 8218 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1218.200722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.200728] Call Trace: [ 1218.200753] dump_stack+0x107/0x167 [ 1218.200777] should_fail.cold+0x5/0xa [ 1218.200799] ? create_object.isra.0+0x3a/0xa30 [ 1218.200818] should_failslab+0x5/0x20 [ 1218.200844] kmem_cache_alloc+0x5b/0x310 [ 1218.200873] create_object.isra.0+0x3a/0xa30 [ 1218.200889] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1218.200916] kmem_cache_alloc+0x159/0x310 [ 1218.200946] ptlock_alloc+0x1d/0x70 [ 1218.200967] pte_alloc_one+0x68/0x1a0 [ 1218.200988] __pte_alloc+0x1d/0x330 [ 1218.201014] copy_page_range+0x1b62/0x3800 [ 1218.201034] ? perf_trace_lock+0xac/0x490 [ 1218.201062] ? find_held_lock+0x2c/0x110 [ 1218.201102] ? anon_vma_fork+0x462/0x640 [ 1218.201147] ? up_write+0x191/0x550 [ 1218.201167] ? vm_iomap_memory+0x190/0x190 [ 1218.201185] ? downgrade_write+0x3a0/0x3a0 [ 1218.201209] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1218.201233] ? __vma_link_rb+0x540/0x700 [ 1218.201262] copy_process+0x7658/0x78b0 [ 1218.201279] ? SOFTIRQ_verbose+0x10/0x10 [ 1218.201340] ? __cleanup_sighand+0xb0/0xb0 [ 1218.201385] ? _copy_from_user+0xfb/0x1b0 [ 1218.201416] kernel_clone+0xe7/0x980 [ 1218.201434] ? __lockdep_reset_lock+0x180/0x180 [ 1218.201456] ? create_io_thread+0xf0/0xf0 [ 1218.201491] ? ksys_write+0x21a/0x260 [ 1218.201511] ? lock_downgrade+0x6d0/0x6d0 [ 1218.201536] __do_sys_clone3+0x1e5/0x320 [ 1218.201555] ? __do_sys_clone+0x110/0x110 [ 1218.201600] ? rcu_read_lock_any_held+0x75/0xa0 [ 1218.201613] ? vfs_write+0x354/0xb10 [ 1218.201634] ? fput_many+0x2f/0x1a0 [ 1218.201651] ? ksys_write+0x1a9/0x260 [ 1218.201668] ? __ia32_sys_read+0xb0/0xb0 [ 1218.201694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.201715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.201731] ? trace_hardirqs_on+0x5b/0x180 [ 1218.201754] do_syscall_64+0x33/0x40 [ 1218.201775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.201787] RIP: 0033:0x7f3a69dacb19 [ 1218.201806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.201816] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1218.201838] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1218.201849] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1218.201860] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.201871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.201881] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1218.271541] FAULT_INJECTION: forcing a failure. [ 1218.271541] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.271562] CPU: 1 PID: 8224 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1218.271572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.271578] Call Trace: [ 1218.271606] dump_stack+0x107/0x167 [ 1218.271628] should_fail.cold+0x5/0xa [ 1218.271657] ? __delayacct_tsk_init+0x1b/0x80 [ 1218.271685] should_failslab+0x5/0x20 [ 1218.271711] kmem_cache_alloc+0x5b/0x310 [ 1218.271755] __delayacct_tsk_init+0x1b/0x80 [ 1218.271781] copy_process+0x3399/0x78b0 [ 1218.271821] ? stack_trace_save+0x8c/0xc0 [ 1218.271848] ? stack_trace_consume_entry+0x160/0x160 [ 1218.271904] ? __cleanup_sighand+0xb0/0xb0 [ 1218.271928] ? do_syscall_64+0x33/0x40 [ 1218.271954] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.271985] ? __lockdep_reset_lock+0x180/0x180 [ 1218.272010] ? lock_acquire+0x197/0x470 [ 1218.272036] ? create_object.isra.0+0x3ad/0xa30 [ 1218.272069] ? lock_release+0x680/0x680 [ 1218.272090] ? find_held_lock+0x2c/0x110 [ 1218.272120] ? io_wqe_dec_running+0x220/0x220 [ 1218.272140] create_io_thread+0xb6/0xf0 [ 1218.272158] ? pidfd_prepare+0x80/0x80 [ 1218.272178] ? mark_held_locks+0x9e/0xe0 [ 1218.272206] ? io_wqe_dec_running+0x220/0x220 [ 1218.272243] ? __init_swait_queue_head+0xc6/0x150 [ 1218.272269] create_io_worker+0x23a/0x690 [ 1218.272296] io_wqe_enqueue+0x69e/0xbe0 [ 1218.272324] ? create_worker_cb+0x260/0x260 [ 1218.272351] ? io_prep_async_work+0x340/0x550 [ 1218.272382] io_queue_async_work+0x26b/0x4f0 [ 1218.272410] __io_queue_sqe+0x5cc/0x9d0 [ 1218.272437] ? io_issue_sqe+0x7850/0x7850 [ 1218.272466] ? kmem_cache_alloc_bulk+0x182/0x320 [ 1218.272492] io_submit_sqes+0x44a8/0x8610 [ 1218.272546] ? __do_sys_io_uring_enter+0x6b2/0x1890 20:30:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 35) 20:30:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x500000000000000, 0x13, r0, 0x0) 20:30:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000) [ 1218.272564] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1218.272587] ? find_held_lock+0x2c/0x110 [ 1218.272613] ? io_submit_sqes+0x8610/0x8610 [ 1218.272640] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1218.272662] ? wait_for_completion_io+0x270/0x270 [ 1218.272685] ? rcu_read_lock_any_held+0x75/0xa0 [ 1218.272700] ? vfs_write+0x354/0xb10 [ 1218.272722] ? fput_many+0x2f/0x1a0 [ 1218.272738] ? ksys_write+0x1a9/0x260 [ 1218.272754] ? __ia32_sys_read+0xb0/0xb0 [ 1218.272777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.272797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.272822] do_syscall_64+0x33/0x40 [ 1218.272841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.272854] RIP: 0033:0x7f1930b6db19 [ 1218.272871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:30:51 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) 20:30:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 20:30:51 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 45) [ 1218.272881] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1218.272900] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1218.272910] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1218.272921] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.272932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.272943] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1218.335255] loop3: detected capacity change from 0 to 131072 [ 1218.597424] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1218.597705] FAULT_INJECTION: forcing a failure. [ 1218.597705] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1218.601516] CPU: 0 PID: 8241 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1218.602972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.604727] Call Trace: [ 1218.605296] dump_stack+0x107/0x167 [ 1218.606078] should_fail.cold+0x5/0xa [ 1218.606895] __alloc_pages_nodemask+0x182/0x600 [ 1218.607901] ? lock_acquire+0x197/0x470 [ 1218.608744] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1218.610028] ? lock_downgrade+0x6d0/0x6d0 [ 1218.610909] ? do_raw_spin_lock+0x121/0x260 [ 1218.611843] alloc_pages_current+0x187/0x280 [ 1218.612785] __pmd_alloc+0x37/0x630 [ 1218.613579] copy_page_range+0x2bd0/0x3800 [ 1218.614479] ? perf_trace_lock+0xac/0x490 [ 1218.615372] ? lock_chain_count+0x20/0x20 [ 1218.616253] ? find_held_lock+0x2c/0x110 [ 1218.617122] ? anon_vma_fork+0x462/0x640 [ 1218.618012] ? up_write+0x191/0x550 [ 1218.618789] ? vm_iomap_memory+0x190/0x190 [ 1218.619688] ? downgrade_write+0x3a0/0x3a0 [ 1218.620593] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1218.621753] ? __vma_link_rb+0x540/0x700 [ 1218.622628] copy_process+0x7658/0x78b0 [ 1218.623471] ? SOFTIRQ_verbose+0x10/0x10 [ 1218.624385] ? __cleanup_sighand+0xb0/0xb0 [ 1218.625315] ? _copy_from_user+0xfb/0x1b0 [ 1218.626200] kernel_clone+0xe7/0x980 [ 1218.626988] ? __lockdep_reset_lock+0x180/0x180 [ 1218.627978] ? create_io_thread+0xf0/0xf0 [ 1218.628870] ? ksys_write+0x21a/0x260 [ 1218.629694] ? lock_downgrade+0x6d0/0x6d0 [ 1218.630577] __do_sys_clone3+0x1e5/0x320 [ 1218.631438] ? __do_sys_clone+0x110/0x110 [ 1218.632339] ? rcu_read_lock_any_held+0x75/0xa0 [ 1218.633324] ? vfs_write+0x354/0xb10 [ 1218.634106] ? fput_many+0x2f/0x1a0 [ 1218.634878] ? ksys_write+0x1a9/0x260 [ 1218.635693] ? __ia32_sys_read+0xb0/0xb0 [ 1218.636566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.637698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.638796] ? trace_hardirqs_on+0x5b/0x180 [ 1218.639721] do_syscall_64+0x33/0x40 [ 1218.640515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.641616] RIP: 0033:0x7f3a69dacb19 [ 1218.642409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.646335] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1218.647969] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1218.649486] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1218.651002] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.652510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.654030] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:30:52 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1218.728999] FAULT_INJECTION: forcing a failure. [ 1218.728999] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.731426] CPU: 0 PID: 8249 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1218.732876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.734669] Call Trace: [ 1218.735231] dump_stack+0x107/0x167 [ 1218.736021] should_fail.cold+0x5/0xa [ 1218.736829] ? create_object.isra.0+0x3a/0xa30 [ 1218.737800] should_failslab+0x5/0x20 [ 1218.738608] kmem_cache_alloc+0x5b/0x310 [ 1218.739464] ? create_object.isra.0+0x3ad/0xa30 [ 1218.740458] create_object.isra.0+0x3a/0xa30 [ 1218.741402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1218.742490] __kmalloc_node+0x1ae/0x420 [ 1218.743345] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1218.744418] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1218.745482] ? trace_hardirqs_on+0x5b/0x180 [ 1218.746394] kmem_cache_alloc_node+0x181/0x330 [ 1218.747369] copy_process+0x5e5/0x78b0 [ 1218.748216] ? stack_trace_save+0x8c/0xc0 [ 1218.749109] ? stack_trace_consume_entry+0x160/0x160 [ 1218.750195] ? kasan_save_stack+0x32/0x40 [ 1218.751075] ? __cleanup_sighand+0xb0/0xb0 [ 1218.751965] ? do_syscall_64+0x33/0x40 [ 1218.752794] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.753936] ? __lockdep_reset_lock+0x180/0x180 [ 1218.754941] ? lock_acquire+0x197/0x470 [ 1218.755776] ? create_object.isra.0+0x3ad/0xa30 [ 1218.756763] ? lock_release+0x680/0x680 [ 1218.757613] ? find_held_lock+0x2c/0x110 [ 1218.758492] ? io_wqe_dec_running+0x220/0x220 [ 1218.759442] create_io_thread+0xb6/0xf0 [ 1218.759679] FAULT_INJECTION: forcing a failure. [ 1218.759679] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.760277] ? pidfd_prepare+0x80/0x80 [ 1218.760297] ? mark_held_locks+0x9e/0xe0 [ 1218.760324] ? io_wqe_dec_running+0x220/0x220 [ 1218.764764] ? __init_swait_queue_head+0xc6/0x150 [ 1218.765803] create_io_worker+0x23a/0x690 [ 1218.766676] io_wqe_enqueue+0x69e/0xbe0 [ 1218.767522] ? create_worker_cb+0x260/0x260 [ 1218.768447] ? io_prep_async_work+0x340/0x550 [ 1218.769418] io_queue_async_work+0x26b/0x4f0 [ 1218.770346] __io_queue_sqe+0x5cc/0x9d0 [ 1218.771207] ? io_issue_sqe+0x7850/0x7850 [ 1218.772105] ? kmem_cache_alloc_bulk+0x182/0x320 [ 1218.773099] io_submit_sqes+0x44a8/0x8610 [ 1218.774007] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1218.775060] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1218.776076] ? find_held_lock+0x2c/0x110 [ 1218.776937] ? io_submit_sqes+0x8610/0x8610 [ 1218.777859] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1218.778880] ? wait_for_completion_io+0x270/0x270 [ 1218.779897] ? rcu_read_lock_any_held+0x75/0xa0 [ 1218.780867] ? vfs_write+0x354/0xb10 [ 1218.781658] ? fput_many+0x2f/0x1a0 [ 1218.782426] ? ksys_write+0x1a9/0x260 [ 1218.783229] ? __ia32_sys_read+0xb0/0xb0 [ 1218.784098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.785207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.786313] do_syscall_64+0x33/0x40 [ 1218.787102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.788192] RIP: 0033:0x7f1930b6db19 [ 1218.788975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.792837] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1218.794435] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1218.795950] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1218.797480] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.798998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.800518] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1218.802084] CPU: 1 PID: 8252 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1218.803187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.804486] Call Trace: [ 1218.804911] dump_stack+0x107/0x167 [ 1218.805488] should_fail.cold+0x5/0xa [ 1218.806078] ? io_wq_create+0x6ef/0xc00 [ 1218.806690] should_failslab+0x5/0x20 [ 1218.807273] kmem_cache_alloc_node_trace+0x59/0x340 [ 1218.808052] io_wq_create+0x6ef/0xc00 [ 1218.808664] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1218.809458] ? io_import_iovec+0x1120/0x1120 [ 1218.810149] ? io_apoll_task_func+0x2d0/0x2d0 [ 1218.810875] ? __io_req_find_next+0x300/0x300 [ 1218.811571] ? do_raw_spin_lock+0x121/0x260 [ 1218.812260] ? rwlock_bug.part.0+0x90/0x90 [ 1218.812943] __io_uring_add_tctx_node+0x2c6/0x520 [ 1218.813697] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1218.814521] ? alloc_fd+0x2e7/0x670 [ 1218.815098] io_uring_setup+0x1fbb/0x2980 [ 1218.815757] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1218.816565] ? wait_for_completion_io+0x270/0x270 [ 1218.817342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1218.818156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1218.818958] do_syscall_64+0x33/0x40 [ 1218.819551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1218.820351] RIP: 0033:0x7f2e9760cb19 [ 1218.820914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.823669] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1218.824831] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1218.825913] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1218.826975] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1218.828070] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1218.829184] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:31:09 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x4000010, 0xffffffffffffffff, 0x0) 20:31:09 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000003, 0x80010, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x6447, 0x9d5f, 0x0, &(0x7f00000000c0), 0x8) r0 = eventfd(0x8001) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000040)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000080)=0x7) eventfd(0x3f) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) [ 1236.212850] FAULT_INJECTION: forcing a failure. [ 1236.212850] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.215340] CPU: 0 PID: 8263 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1236.216789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1236.218558] Call Trace: [ 1236.219125] dump_stack+0x107/0x167 [ 1236.219906] should_fail.cold+0x5/0xa [ 1236.220721] ? create_object.isra.0+0x3a/0xa30 [ 1236.221701] should_failslab+0x5/0x20 [ 1236.222509] kmem_cache_alloc+0x5b/0x310 [ 1236.223380] create_object.isra.0+0x3a/0xa30 [ 1236.224312] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1236.225403] kmem_cache_alloc+0x159/0x310 [ 1236.226294] vm_area_dup+0x78/0x290 [ 1236.227079] ? _cond_resched+0x10/0x30 [ 1236.227905] ? copy_page_range+0x24e9/0x3800 [ 1236.228886] ? vm_area_alloc+0x110/0x110 [ 1236.229764] ? up_write+0x191/0x550 [ 1236.230537] ? vm_iomap_memory+0x190/0x190 [ 1236.231440] ? downgrade_write+0x3a0/0x3a0 [ 1236.232342] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1236.233503] ? __vma_link_rb+0x540/0x700 [ 1236.234375] copy_process+0x298b/0x78b0 [ 1236.235219] ? SOFTIRQ_verbose+0x10/0x10 [ 1236.236123] ? __cleanup_sighand+0xb0/0xb0 [ 1236.237047] ? _copy_from_user+0xfb/0x1b0 [ 1236.237947] kernel_clone+0xe7/0x980 [ 1236.238738] ? __lockdep_reset_lock+0x180/0x180 [ 1236.239726] ? create_io_thread+0xf0/0xf0 [ 1236.240620] ? ksys_write+0x21a/0x260 [ 1236.241481] ? lock_downgrade+0x6d0/0x6d0 [ 1236.242367] __do_sys_clone3+0x1e5/0x320 [ 1236.243226] ? __do_sys_clone+0x110/0x110 [ 1236.244128] ? rcu_read_lock_any_held+0x75/0xa0 [ 1236.245102] ? vfs_write+0x354/0xb10 [ 1236.245908] ? fput_many+0x2f/0x1a0 20:31:09 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 46) 20:31:09 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000040), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0xf522424fa10e6a3, 0x0) stat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 20:31:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000) 20:31:09 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x600000000000000, 0x13, r0, 0x0) 20:31:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 36) 20:31:09 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) [ 1236.246676] ? ksys_write+0x1a9/0x260 [ 1236.247716] ? __ia32_sys_read+0xb0/0xb0 [ 1236.248591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1236.249713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1236.250812] ? trace_hardirqs_on+0x5b/0x180 [ 1236.251733] do_syscall_64+0x33/0x40 [ 1236.252526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1236.253618] RIP: 0033:0x7f3a69dacb19 [ 1236.254410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1236.258352] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1236.259981] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1236.261517] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1236.263070] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1236.264625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1236.266176] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1236.283628] FAULT_INJECTION: forcing a failure. [ 1236.283628] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.286365] CPU: 1 PID: 8272 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1236.287951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1236.289880] Call Trace: [ 1236.290503] dump_stack+0x107/0x167 [ 1236.291370] should_fail.cold+0x5/0xa [ 1236.292262] ? create_object.isra.0+0x3a/0xa30 [ 1236.293333] should_failslab+0x5/0x20 [ 1236.294218] kmem_cache_alloc+0x5b/0x310 [ 1236.295019] FAULT_INJECTION: forcing a failure. [ 1236.295019] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.295159] ? io_wq_create+0x114/0xc00 [ 1236.295188] create_object.isra.0+0x3a/0xa30 [ 1236.295213] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1236.300687] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1236.301880] io_wq_create+0x6ef/0xc00 [ 1236.302776] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1236.303951] ? io_import_iovec+0x1120/0x1120 [ 1236.304968] ? io_apoll_task_func+0x2d0/0x2d0 [ 1236.306021] ? __io_req_find_next+0x300/0x300 [ 1236.307053] ? do_raw_spin_lock+0x121/0x260 [ 1236.308048] ? rwlock_bug.part.0+0x90/0x90 [ 1236.309033] __io_uring_add_tctx_node+0x2c6/0x520 [ 1236.310162] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1236.311370] ? alloc_fd+0x2e7/0x670 [ 1236.312227] io_uring_setup+0x1fbb/0x2980 [ 1236.313198] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1236.314376] ? wait_for_completion_io+0x270/0x270 [ 1236.315525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1236.316737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1236.317942] do_syscall_64+0x33/0x40 [ 1236.318809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1236.319992] RIP: 0033:0x7f2e9760cb19 [ 1236.320855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1236.325127] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1236.326889] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1236.328537] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1236.330203] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1236.331852] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1236.333506] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1236.335187] CPU: 0 PID: 8273 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1236.336672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1236.338465] Call Trace: [ 1236.339041] dump_stack+0x107/0x167 [ 1236.339831] should_fail.cold+0x5/0xa [ 1236.340656] ? alloc_pid+0xd7/0xd30 [ 1236.341451] should_failslab+0x5/0x20 [ 1236.342278] kmem_cache_alloc+0x5b/0x310 [ 1236.343167] alloc_pid+0xd7/0xd30 [ 1236.343933] ? copy_namespaces+0x1ca/0x4f0 [ 1236.344854] copy_process+0x3b8b/0x78b0 [ 1236.345737] ? stack_trace_save+0x8c/0xc0 [ 1236.346639] ? stack_trace_consume_entry+0x160/0x160 [ 1236.347765] ? __cleanup_sighand+0xb0/0xb0 [ 1236.348680] ? do_syscall_64+0x33/0x40 [ 1236.349536] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1236.350697] ? __lockdep_reset_lock+0x180/0x180 [ 1236.351706] ? lock_acquire+0x197/0x470 [ 1236.352568] ? create_object.isra.0+0x3ad/0xa30 [ 1236.353588] ? lock_release+0x680/0x680 [ 1236.354450] ? find_held_lock+0x2c/0x110 [ 1236.355341] ? io_wqe_dec_running+0x220/0x220 [ 1236.356313] create_io_thread+0xb6/0xf0 [ 1236.357174] ? pidfd_prepare+0x80/0x80 [ 1236.358025] ? mark_held_locks+0x9e/0xe0 [ 1236.358910] ? io_wqe_dec_running+0x220/0x220 [ 1236.359896] ? __init_swait_queue_head+0xc6/0x150 [ 1236.360944] create_io_worker+0x23a/0x690 [ 1236.361860] io_wqe_enqueue+0x69e/0xbe0 [ 1236.362729] ? create_worker_cb+0x260/0x260 [ 1236.363669] ? io_prep_async_work+0x340/0x550 [ 1236.364650] io_queue_async_work+0x26b/0x4f0 [ 1236.365620] __io_queue_sqe+0x5cc/0x9d0 [ 1236.366489] ? io_issue_sqe+0x7850/0x7850 [ 1236.367399] ? kmem_cache_alloc_bulk+0x182/0x320 [ 1236.368434] io_submit_sqes+0x44a8/0x8610 [ 1236.369379] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1236.370449] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1236.371486] ? find_held_lock+0x2c/0x110 [ 1236.372365] ? io_submit_sqes+0x8610/0x8610 [ 1236.373307] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1236.374345] ? wait_for_completion_io+0x270/0x270 [ 1236.375388] ? rcu_read_lock_any_held+0x75/0xa0 [ 1236.376381] ? vfs_write+0x354/0xb10 [ 1236.377182] ? fput_many+0x2f/0x1a0 [ 1236.377968] ? ksys_write+0x1a9/0x260 [ 1236.378787] ? __ia32_sys_read+0xb0/0xb0 [ 1236.379662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1236.380787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1236.381905] do_syscall_64+0x33/0x40 [ 1236.382704] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1236.383802] RIP: 0033:0x7f1930b6db19 [ 1236.384602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1236.388510] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1236.390145] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1236.391671] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1236.393197] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1236.394719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1236.396245] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 20:31:09 executing program 0: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "11c0eb11bb"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4810) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:31:27 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 20:31:27 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x10d8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2000000, 0x24010, r0, 0x8000000) 20:31:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000) 20:31:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x700000000000000, 0x13, r0, 0x0) 20:31:27 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x1, 0x4006050, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000400)=""/175, 0xaf}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) getsockname$unix(r8, &(0x7f0000000500), &(0x7f0000000580)=0x6e) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r1, 0xdf, {0x0, r1}, 0x0, 0x2, 0xaeadfeb2ca5deb61, {0x0, r6, r7}}, 0x6) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r1, 0x1, 0x7f, 0x3, 0xe}, 0x9b) 20:31:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 37) 20:31:27 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 47) 20:31:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8000, 0x0, 0x0, 0x4, 0x10000000000000, 0x2000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xe1, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x44420, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0xffff, 0x0, 0x4, 0x5e18c1db, 0x401, 0x956, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080), 0x14) r1 = pidfd_open(0x0, 0x0) readv(r1, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000006c0)=""/149, 0x95}, {&(0x7f0000000780)=""/112, 0x70}, {&(0x7f0000000800)=""/129, 0x81}], 0x9) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$tun(r2, 0x0, 0x0) bind$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0xffff}}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000280)={0x24, @none={0x0, 0x3}}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x5c00, 0x0}}], 0x324, 0x0) [ 1254.387764] FAULT_INJECTION: forcing a failure. [ 1254.387764] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.389994] CPU: 1 PID: 8300 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1254.391305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1254.391674] FAULT_INJECTION: forcing a failure. [ 1254.391674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1254.392888] Call Trace: [ 1254.392915] dump_stack+0x107/0x167 [ 1254.392939] should_fail.cold+0x5/0xa [ 1254.397988] ? create_object.isra.0+0x3a/0xa30 [ 1254.398866] should_failslab+0x5/0x20 [ 1254.399595] kmem_cache_alloc+0x5b/0x310 [ 1254.400384] ? io_wq_create+0x114/0xc00 [ 1254.401143] create_object.isra.0+0x3a/0xa30 [ 1254.401986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1254.402955] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1254.403947] io_wq_create+0x6ef/0xc00 [ 1254.404686] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1254.405659] ? io_import_iovec+0x1120/0x1120 [ 1254.406511] ? io_apoll_task_func+0x2d0/0x2d0 [ 1254.407356] ? __io_req_find_next+0x300/0x300 [ 1254.408208] ? do_raw_spin_lock+0x121/0x260 [ 1254.409024] ? rwlock_bug.part.0+0x90/0x90 [ 1254.409861] __io_uring_add_tctx_node+0x2c6/0x520 [ 1254.410779] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1254.411778] ? alloc_fd+0x2e7/0x670 [ 1254.412477] io_uring_setup+0x1fbb/0x2980 [ 1254.413267] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1254.414239] ? wait_for_completion_io+0x270/0x270 [ 1254.415183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1254.416191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1254.417175] do_syscall_64+0x33/0x40 [ 1254.417893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1254.418864] RIP: 0033:0x7f2e9760cb19 [ 1254.419572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1254.423072] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1254.424503] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1254.425854] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1254.427209] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1254.428547] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1254.429891] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1254.431280] CPU: 0 PID: 8293 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1254.432898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1254.434841] Call Trace: [ 1254.435464] dump_stack+0x107/0x167 [ 1254.436325] should_fail.cold+0x5/0xa [ 1254.437232] __alloc_pages_nodemask+0x182/0x600 [ 1254.438328] ? lock_downgrade+0x6d0/0x6d0 [ 1254.439313] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1254.440719] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1254.441946] ? kmem_cache_alloc_node+0x2bc/0x330 [ 1254.443055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1254.444291] copy_process+0x62b/0x78b0 [ 1254.445199] ? stack_trace_save+0x8c/0xc0 [ 1254.446167] ? stack_trace_consume_entry+0x160/0x160 [ 1254.447347] ? kasan_save_stack+0x32/0x40 [ 1254.448312] ? __cleanup_sighand+0xb0/0xb0 [ 1254.449286] ? do_syscall_64+0x33/0x40 [ 1254.450194] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1254.451429] ? __lockdep_reset_lock+0x180/0x180 [ 1254.452495] ? lock_acquire+0x197/0x470 [ 1254.453413] ? create_object.isra.0+0x3ad/0xa30 [ 1254.454515] ? lock_release+0x680/0x680 [ 1254.455427] ? find_held_lock+0x2c/0x110 [ 1254.456379] ? io_wqe_dec_running+0x220/0x220 [ 1254.457424] create_io_thread+0xb6/0xf0 [ 1254.458356] ? pidfd_prepare+0x80/0x80 [ 1254.459258] ? mark_held_locks+0x9e/0xe0 [ 1254.460204] ? io_wqe_dec_running+0x220/0x220 [ 1254.461268] ? __init_swait_queue_head+0xc6/0x150 [ 1254.462384] create_io_worker+0x23a/0x690 [ 1254.463351] io_wqe_enqueue+0x69e/0xbe0 [ 1254.464279] ? create_worker_cb+0x260/0x260 [ 1254.465277] ? io_prep_async_work+0x340/0x550 [ 1254.466316] io_queue_async_work+0x26b/0x4f0 [ 1254.467325] __io_queue_sqe+0x5cc/0x9d0 [ 1254.468243] ? io_issue_sqe+0x7850/0x7850 [ 1254.469208] ? kmem_cache_alloc_bulk+0x182/0x320 [ 1254.470302] io_submit_sqes+0x44a8/0x8610 [ 1254.471290] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1254.472421] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1254.473525] ? find_held_lock+0x2c/0x110 [ 1254.474455] ? io_submit_sqes+0x8610/0x8610 [ 1254.475440] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1254.476556] ? wait_for_completion_io+0x270/0x270 [ 1254.477665] ? rcu_read_lock_any_held+0x75/0xa0 [ 1254.478729] ? vfs_write+0x354/0xb10 [ 1254.479575] ? fput_many+0x2f/0x1a0 [ 1254.480400] ? ksys_write+0x1a9/0x260 [ 1254.481260] ? __ia32_sys_read+0xb0/0xb0 [ 1254.482197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1254.483388] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1254.484574] do_syscall_64+0x33/0x40 [ 1254.485412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1254.486575] RIP: 0033:0x7f1930b6db19 [ 1254.487414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1254.491526] RSP: 002b:00007f192e0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1254.493228] RAX: ffffffffffffffda RBX: 00007f1930c80f60 RCX: 00007f1930b6db19 [ 1254.494836] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1254.496436] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1254.498040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1254.499640] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 20:31:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff) [ 1254.509607] Unsupported ieee802154 address type: 0 [ 1254.516260] FAULT_INJECTION: forcing a failure. [ 1254.516260] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.518810] CPU: 0 PID: 8305 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1254.520339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1254.522211] Call Trace: [ 1254.522801] dump_stack+0x107/0x167 [ 1254.523618] should_fail.cold+0x5/0xa [ 1254.524463] ? vm_area_dup+0x78/0x290 [ 1254.525308] should_failslab+0x5/0x20 [ 1254.526161] kmem_cache_alloc+0x5b/0x310 [ 1254.527059] ? lock_downgrade+0x6d0/0x6d0 [ 1254.527985] vm_area_dup+0x78/0x290 [ 1254.528804] ? _cond_resched+0x10/0x30 [ 1254.529667] ? copy_page_range+0x24e9/0x3800 [ 1254.530689] ? vm_area_alloc+0x110/0x110 [ 1254.531597] ? up_write+0x191/0x550 [ 1254.532411] ? vm_iomap_memory+0x190/0x190 [ 1254.533347] ? downgrade_write+0x3a0/0x3a0 [ 1254.534296] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1254.535501] ? __vma_link_rb+0x540/0x700 [ 1254.536411] copy_process+0x298b/0x78b0 [ 1254.537290] ? SOFTIRQ_verbose+0x10/0x10 [ 1254.538239] ? __cleanup_sighand+0xb0/0xb0 [ 1254.539201] ? _copy_from_user+0xfb/0x1b0 [ 1254.540128] kernel_clone+0xe7/0x980 [ 1254.540958] ? __lockdep_reset_lock+0x180/0x180 [ 1254.541987] ? create_io_thread+0xf0/0xf0 [ 1254.542913] ? ksys_write+0x21a/0x260 [ 1254.543747] ? lock_downgrade+0x6d0/0x6d0 [ 1254.544662] __do_sys_clone3+0x1e5/0x320 [ 1254.545565] ? __do_sys_clone+0x110/0x110 [ 1254.546502] ? rcu_read_lock_any_held+0x75/0xa0 [ 1254.547513] ? vfs_write+0x354/0xb10 [ 1254.548334] ? fput_many+0x2f/0x1a0 [ 1254.549127] ? ksys_write+0x1a9/0x260 [ 1254.550007] ? __ia32_sys_read+0xb0/0xb0 [ 1254.550902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1254.552051] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1254.553175] ? trace_hardirqs_on+0x5b/0x180 [ 1254.554133] do_syscall_64+0x33/0x40 [ 1254.554951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1254.556071] RIP: 0033:0x7f3a69dacb19 [ 1254.556883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1254.560867] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1254.562521] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1254.564079] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1254.565630] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1254.567185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1254.568743] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1254.586965] ieee802154 phy0 wpan0: encryption failed: -22 20:31:27 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x3809, &(0x7f0000001300)={0x0, 0x493a, 0x4, 0x1, 0x9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001380), &(0x7f00000013c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14, 0x80800) io_uring_enter(r0, 0x14ef, 0x4975, 0x2, &(0x7f00000010c0)={[0x6]}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000001080)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r5, 0x0, &(0x7f0000000080)="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", 0x1000, 0x20000000}, 0x9) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xe0, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfc}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8f3e4bd594c24804}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) 20:31:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xfcffffffffff0700, 0x13, r0, 0x0) [ 1254.637728] ieee802154 phy0 wpan0: encryption failed: -22 20:31:28 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x14aa, 0x5bd, 0x1, &(0x7f0000000040)={[0x2]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0xa, 0x31, r0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) signalfd4(r2, &(0x7f00000000c0)={[0x6]}, 0x8, 0xc0000) 20:31:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000) 20:31:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 38) [ 1254.721920] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.746817] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.755440] FAULT_INJECTION: forcing a failure. [ 1254.755440] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.756990] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.757164] CPU: 1 PID: 8324 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1254.757172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1254.757177] Call Trace: [ 1254.757198] dump_stack+0x107/0x167 [ 1254.757214] should_fail.cold+0x5/0xa [ 1254.757231] ? create_object.isra.0+0x3a/0xa30 [ 1254.757245] should_failslab+0x5/0x20 [ 1254.757259] kmem_cache_alloc+0x5b/0x310 [ 1254.757278] create_object.isra.0+0x3a/0xa30 [ 1254.764639] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1254.765389] kmem_cache_alloc_trace+0x151/0x320 [ 1254.766091] __io_uring_add_tctx_node+0x15c/0x520 [ 1254.766802] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1254.767574] ? alloc_fd+0x2e7/0x670 [ 1254.768122] io_uring_setup+0x1fbb/0x2980 [ 1254.768741] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1254.769490] ? wait_for_completion_io+0x270/0x270 [ 1254.770225] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1254.770995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1254.771751] do_syscall_64+0x33/0x40 [ 1254.772296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1254.773048] RIP: 0033:0x7f2e9760cb19 [ 1254.773607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1254.776307] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1254.777432] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1254.778481] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1254.779521] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1254.780576] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1254.781625] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:31:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x2) 20:31:28 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 48) [ 1254.841931] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.863601] FAULT_INJECTION: forcing a failure. [ 1254.863601] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.865257] CPU: 1 PID: 8330 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1254.866214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1254.867350] Call Trace: [ 1254.867720] dump_stack+0x107/0x167 [ 1254.868230] should_fail.cold+0x5/0xa [ 1254.868761] ? create_object.isra.0+0x3a/0xa30 [ 1254.869393] should_failslab+0x5/0x20 [ 1254.869920] kmem_cache_alloc+0x5b/0x310 [ 1254.870481] create_object.isra.0+0x3a/0xa30 [ 1254.871083] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1254.871784] kmem_cache_alloc+0x159/0x310 [ 1254.872356] ? lock_downgrade+0x6d0/0x6d0 [ 1254.872939] vm_area_dup+0x78/0x290 [ 1254.873452] ? _cond_resched+0x10/0x30 [ 1254.874011] ? copy_page_range+0x24e9/0x3800 [ 1254.874642] ? vm_area_alloc+0x110/0x110 [ 1254.875198] ? up_write+0x191/0x550 [ 1254.875700] ? vm_iomap_memory+0x190/0x190 [ 1254.876277] ? downgrade_write+0x3a0/0x3a0 [ 1254.876855] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1254.877605] ? __vma_link_rb+0x540/0x700 [ 1254.878165] copy_process+0x298b/0x78b0 [ 1254.878706] ? SOFTIRQ_verbose+0x10/0x10 [ 1254.879290] ? __cleanup_sighand+0xb0/0xb0 [ 1254.879894] ? _copy_from_user+0xfb/0x1b0 [ 1254.880479] kernel_clone+0xe7/0x980 [ 1254.880984] ? __lockdep_reset_lock+0x180/0x180 [ 1254.881622] ? create_io_thread+0xf0/0xf0 [ 1254.882200] ? ksys_write+0x21a/0x260 [ 1254.882717] ? lock_downgrade+0x6d0/0x6d0 [ 1254.883281] __do_sys_clone3+0x1e5/0x320 [ 1254.883834] ? __do_sys_clone+0x110/0x110 [ 1254.884430] ? rcu_read_lock_any_held+0x75/0xa0 [ 1254.885061] ? vfs_write+0x354/0xb10 [ 1254.885586] ? fput_many+0x2f/0x1a0 [ 1254.886094] ? ksys_write+0x1a9/0x260 [ 1254.886617] ? __ia32_sys_read+0xb0/0xb0 [ 1254.887181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1254.887893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1254.888600] ? trace_hardirqs_on+0x5b/0x180 [ 1254.889195] do_syscall_64+0x33/0x40 [ 1254.889715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1254.890421] RIP: 0033:0x7f3a69dacb19 [ 1254.890938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1254.893454] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1254.894511] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1254.895466] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1254.896427] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1254.897398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1254.898381] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1254.927403] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.944812] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.991800] ieee802154 phy0 wpan0: encryption failed: -22 20:31:28 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 20:31:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x2000000) 20:31:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 39) 20:31:28 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_setup(0x7089, &(0x7f0000000180)={0x0, 0xf5df, 0x20, 0x2, 0x2fb, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r5, r3, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000740)=""/196, 0xc4}], 0x4, &(0x7f0000000880)=""/62, 0x3e}, 0x0, 0xc0000120, 0x0, {0x3}}, 0x8001) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r0, r3, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x800, 0x100}, 0x6) 20:31:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x3) 20:31:28 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000001500)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r2, 0x0, &(0x7f0000001480)="5811b3bed2fbc195a9d2be271e53aab9ae3418b81ee10898daf19a882b7738a10670cd44b8fcaffad18942b7e8be61004ce886cfb74daa65c130de37933e9316ca2f9e3e60d849a2abfe9d613ae7bb", 0x4f, 0x841, 0x0, {0x0, r3}}, 0x2) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x47e3, &(0x7f0000000000)={0x0, 0x594b, 0x39, 0x1, 0xe}, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000001540), &(0x7f00000000c0)=0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$rtc(&(0x7f0000000180), 0x7fff, 0x400) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000000480)={{r10}, r11, 0x1e, @inherit={0x68, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000000404000000000000000100000000000000d1f0692a000000002100000000000000ff010000000000000400000000000000030000000000000001000000000000000100000000000000ff0f00000000000005000000000000001f00000000000000"]}, @name="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"}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x40000011}, r9, 0x1, 0x0, 0x1}, 0x1000) [ 1255.065224] FAULT_INJECTION: forcing a failure. [ 1255.065224] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.067894] CPU: 0 PID: 8344 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1255.069316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1255.071074] Call Trace: [ 1255.071630] dump_stack+0x107/0x167 [ 1255.072401] should_fail.cold+0x5/0xa [ 1255.073205] ? xas_alloc+0x336/0x440 [ 1255.074017] should_failslab+0x5/0x20 [ 1255.074822] kmem_cache_alloc+0x5b/0x310 [ 1255.075673] ? stack_trace_consume_entry+0x160/0x160 [ 1255.076749] xas_alloc+0x336/0x440 [ 1255.077514] xas_create+0x34a/0x10d0 [ 1255.078306] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1255.079401] xas_store+0x8c/0x1c40 [ 1255.080163] __xa_store+0x164/0x2d0 [ 1255.080934] ? xa_delete_node+0x280/0x280 [ 1255.081814] ? trace_hardirqs_on+0x5b/0x180 [ 1255.082737] xa_store+0x31/0x50 [ 1255.083429] __io_uring_add_tctx_node+0x1cf/0x520 [ 1255.084452] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1255.085553] ? alloc_fd+0x2e7/0x670 [ 1255.086336] io_uring_setup+0x1fbb/0x2980 [ 1255.087210] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1255.088273] ? wait_for_completion_io+0x270/0x270 [ 1255.089313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1255.090439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1255.091508] do_syscall_64+0x33/0x40 [ 1255.092295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1255.093147] FAULT_INJECTION: forcing a failure. [ 1255.093147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.093372] RIP: 0033:0x7f2e9760cb19 [ 1255.095585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1255.099451] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1255.101064] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1255.102572] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1255.104062] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1255.105550] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1255.107044] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1255.108584] CPU: 1 PID: 8346 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1255.109390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1255.110365] Call Trace: [ 1255.110687] dump_stack+0x107/0x167 [ 1255.111115] should_fail.cold+0x5/0xa [ 1255.111562] _copy_to_user+0x2e/0x180 [ 1255.112013] simple_read_from_buffer+0xcc/0x160 [ 1255.112563] proc_fail_nth_read+0x198/0x230 [ 1255.113070] ? proc_sessionid_read+0x230/0x230 [ 1255.113623] ? security_file_permission+0xb1/0xe0 [ 1255.114190] ? proc_sessionid_read+0x230/0x230 [ 1255.114741] vfs_read+0x228/0x620 [ 1255.115147] ksys_read+0x12d/0x260 [ 1255.115564] ? vfs_write+0xb10/0xb10 [ 1255.116006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1255.116070] ieee802154 phy0 wpan0: encryption failed: -22 [ 1255.116616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1255.116641] do_syscall_64+0x33/0x40 [ 1255.118817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1255.119414] RIP: 0033:0x7f1930b2069c [ 1255.119854] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1255.121983] RSP: 002b:00007f192e0e3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1255.122875] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f1930b2069c [ 1255.123697] RDX: 000000000000000f RSI: 00007f192e0e31e0 RDI: 0000000000000004 [ 1255.124062] FAULT_INJECTION: forcing a failure. [ 1255.124062] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.124526] RBP: 00007f192e0e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1255.124534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1255.124541] R13: 00007ffe4cc1b7af R14: 00007f192e0e3300 R15: 0000000000022000 [ 1255.131622] CPU: 0 PID: 8349 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1255.133050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1255.134812] Call Trace: 20:31:28 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 49) [ 1255.135368] dump_stack+0x107/0x167 [ 1255.136302] should_fail.cold+0x5/0xa [ 1255.137113] ? vm_area_dup+0x78/0x290 [ 1255.137920] should_failslab+0x5/0x20 [ 1255.138741] kmem_cache_alloc+0x5b/0x310 [ 1255.139612] vm_area_dup+0x78/0x290 [ 1255.140392] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1255.141381] ? lock_downgrade+0x6d0/0x6d0 [ 1255.142279] ? copy_page_range+0x24e9/0x3800 [ 1255.143199] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1255.144324] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1255.145310] ? avc_has_extended_perms+0xf40/0xf40 [ 1255.146341] ? lock_downgrade+0x6d0/0x6d0 [ 1255.147213] ? vm_area_alloc+0x110/0x110 [ 1255.148085] ? selinux_vm_enough_memory+0x114/0x180 [ 1255.149131] ? selinux_sb_statfs+0x250/0x250 [ 1255.150067] ? up_write+0x191/0x550 [ 1255.150863] ? percpu_counter_add_batch+0x8b/0x140 [ 1255.151903] ? __vm_enough_memory+0x184/0x360 [ 1255.152843] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1255.153950] copy_process+0x298b/0x78b0 [ 1255.154857] ? __cleanup_sighand+0xb0/0xb0 [ 1255.155791] ? _copy_from_user+0xfb/0x1b0 [ 1255.156691] kernel_clone+0xe7/0x980 [ 1255.157508] ? __lockdep_reset_lock+0x180/0x180 [ 1255.158500] ? create_io_thread+0xf0/0xf0 [ 1255.159403] ? ksys_write+0x21a/0x260 [ 1255.160211] ? lock_downgrade+0x6d0/0x6d0 [ 1255.161093] __do_sys_clone3+0x1e5/0x320 [ 1255.161956] ? __do_sys_clone+0x110/0x110 [ 1255.162860] ? rcu_read_lock_any_held+0x75/0xa0 [ 1255.163838] ? vfs_write+0x354/0xb10 [ 1255.164632] ? fput_many+0x2f/0x1a0 [ 1255.165402] ? ksys_write+0x1a9/0x260 [ 1255.166226] ? __ia32_sys_read+0xb0/0xb0 [ 1255.167090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1255.168204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1255.169291] ? trace_hardirqs_on+0x5b/0x180 [ 1255.170214] do_syscall_64+0x33/0x40 [ 1255.171001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1255.172079] RIP: 0033:0x7f3a69dacb19 [ 1255.172865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1255.176760] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1255.178383] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1255.179900] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1255.181408] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1255.182935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1255.184439] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1255.235366] Unsupported ieee802154 address type: 0 20:31:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x3000000) [ 1269.762725] FAULT_INJECTION: forcing a failure. [ 1269.762725] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.764741] CPU: 0 PID: 8369 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1269.765527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1269.766538] Call Trace: [ 1269.766928] dump_stack+0x107/0x167 [ 1269.767353] should_fail.cold+0x5/0xa [ 1269.767808] ? create_object.isra.0+0x3a/0xa30 [ 1269.768328] should_failslab+0x5/0x20 [ 1269.768775] kmem_cache_alloc+0x5b/0x310 [ 1269.769239] create_object.isra.0+0x3a/0xa30 [ 1269.769757] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1269.770342] kmem_cache_alloc+0x159/0x310 [ 1269.770823] ? lock_downgrade+0x6d0/0x6d0 [ 1269.771301] vm_area_dup+0x78/0x290 [ 1269.771733] ? copy_page_range+0x24e9/0x3800 [ 1269.772271] ? vm_area_alloc+0x110/0x110 [ 1269.772737] ? vm_iomap_memory+0x190/0x190 [ 1269.773234] ? __vma_link_rb+0x540/0x700 [ 1269.773704] copy_process+0x298b/0x78b0 [ 1269.774159] ? SOFTIRQ_verbose+0x10/0x10 [ 1269.774651] ? __cleanup_sighand+0xb0/0xb0 [ 1269.775159] ? _copy_from_user+0xfb/0x1b0 [ 1269.775651] kernel_clone+0xe7/0x980 [ 1269.776081] ? __lockdep_reset_lock+0x180/0x180 [ 1269.776626] ? create_io_thread+0xf0/0xf0 [ 1269.777106] ? ksys_write+0x21a/0x260 [ 1269.777547] ? lock_downgrade+0x6d0/0x6d0 [ 1269.778050] __do_sys_clone3+0x1e5/0x320 [ 1269.778522] ? __do_sys_clone+0x110/0x110 [ 1269.779029] ? rcu_read_lock_any_held+0x75/0xa0 [ 1269.779557] ? vfs_write+0x354/0xb10 [ 1269.779977] ? fput_many+0x2f/0x1a0 [ 1269.780384] ? ksys_write+0x1a9/0x260 [ 1269.780808] ? __ia32_sys_read+0xb0/0xb0 [ 1269.781269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1269.781874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1269.782473] ? trace_hardirqs_on+0x5b/0x180 [ 1269.782976] do_syscall_64+0x33/0x40 [ 1269.783421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1269.784022] RIP: 0033:0x7f3a69dacb19 [ 1269.784452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1269.786580] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1269.787469] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1269.788272] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1269.789067] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1269.789866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1269.790663] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1269.802459] FAULT_INJECTION: forcing a failure. [ 1269.802459] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.803846] CPU: 0 PID: 8368 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1269.804687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1269.805612] Call Trace: [ 1269.805921] dump_stack+0x107/0x167 [ 1269.806336] should_fail.cold+0x5/0xa [ 1269.806775] ? create_object.isra.0+0x3a/0xa30 [ 1269.807305] should_failslab+0x5/0x20 [ 1269.807747] kmem_cache_alloc+0x5b/0x310 [ 1269.808207] create_object.isra.0+0x3a/0xa30 [ 1269.808710] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1269.809299] kmem_cache_alloc+0x159/0x310 [ 1269.809794] xas_alloc+0x336/0x440 [ 1269.810212] xas_create+0x34a/0x10d0 [ 1269.810652] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1269.811260] xas_store+0x8c/0x1c40 [ 1269.811681] __xa_store+0x164/0x2d0 [ 1269.812105] ? xa_delete_node+0x280/0x280 [ 1269.812592] ? trace_hardirqs_on+0x5b/0x180 [ 1269.813079] xa_store+0x31/0x50 [ 1269.813456] __io_uring_add_tctx_node+0x1cf/0x520 [ 1269.814002] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1269.814584] ? alloc_fd+0x2e7/0x670 [ 1269.815018] io_uring_setup+0x1fbb/0x2980 [ 1269.815506] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1269.816088] ? wait_for_completion_io+0x270/0x270 [ 1269.816667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1269.817266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1269.817862] do_syscall_64+0x33/0x40 [ 1269.818278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1269.818857] RIP: 0033:0x7f2e9760cb19 [ 1269.819276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1269.821328] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1269.822188] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1269.822988] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1269.823788] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1269.824586] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1269.825393] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1269.836648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.837580] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1269.851343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.852008] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 20:31:43 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000340)) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x420900, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x6b9c1654f9821148, &(0x7f00000016c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '+\\\''}}, {@nodevmap}, {@aname={'aname', 0x3d, '\x00'}}, {@debug={'debug', 0x3d, 0x8}}, {@nodevmap}], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, '/'}}, {@fowner_gt={'fowner>', 0xee01}}, {@hash}, {@subj_type={'subj_type', 0x3d, '/dev/sr0\x00'}}, {@uid_lt={'uid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x1d}}]}}) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5, 0x3, 0x5be8, 0x0, 0x200}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') getdents(r5, &(0x7f0000000280)=""/203, 0xcb) getdents(r5, &(0x7f0000000140)=""/157, 0x9d) getdents(r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000001800)=ANY=[@ANYBLOB="ef4129e2de712303d0000040574841a71b8aee18c5", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf2509000000"], 0x14}}, 0x20040000) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="0fc41d2f1f5d8f03c0500a6482176bc621b92b4e8ab25109e8b1f68fbfdded5d5e87ecfef9c675f930d9e449adb346af4a738d4956ce3bd413c19f315eca9a13a036", 0x42}, {&(0x7f00000014c0)="1e98b3559d5add9b4c10d2b617bbe6250a1a868784a4bc20790fb5f2350f77d72626e6a05b445d13d0f5ed30a5cf8aab1c1b7bdc1224a0f939db29bc0b145bbf6b39dd436cd43d9de3001c86bc8b175697514d471c5cac49937f5b39c081ae94ed3b3fa8d13a75f5cede617753040e4e81e094d7a737ba58242b581ca4bfea8585223a50b073865484158669e937a6f89f699ee813499ba2109ce0a22ba8567601f204008c462b70e0f2db0dcb16607dd54988074dba9b79ef10e64b9500eec27518ce18991eafe0168caa1eea55386d8e74", 0xd2}, {&(0x7f00000015c0)="fb50f04eaeac07cca521a63d234d774321807a9fcae5f5d7f8bb1d8aea92c389b3fde9e030715c0e1de3d818909e8d653e54f767f5406721e239916b424b2fbe138c3135a95447e55be580d0357bcd126054fa91729fa610d0b581a18c7928b4fd4b3e42833373657da2147b52f79ac329da6b9fbce6936f523bc02a2e902c1de316726976854bc0517e2a0219ee9a8445d3b132a9c29ecc85a270b9265f59ad69609fcb8e53c46ef601bd61c17c5ecacc770c8cd1f94fcba22c67f029e02ac9ada6c36b929f5e5e70de274bac67678cb2ac839a5125ee41c8b8", 0xda}], 0x4) getpgrp(0x0) 20:31:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 40) 20:31:43 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0xffffffffffffffff, &(0x7f0000000040)=0x321b, 0xb83, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x5e23, &(0x7f0000000400)={0x0, 0x5a6d, 0x8, 0x2, 0x181}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x2, 0x0, r5, &(0x7f00000004c0), &(0x7f00000005c0)='./file0\x00', 0x10, 0x6000, 0x1}, 0x7) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x4, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x242, 0x7}}, './file0\x00'}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x3) 20:31:43 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 50) 20:31:43 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000020070112956cfc841da8f80a4f04ad26ba2631e9a3b927f4a660730ebc5ff11300078008"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:31:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4) 20:31:43 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1269.862191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.862903] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1269.877289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.877976] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1269.880461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.881220] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1269.894394] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1269.894518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.897250] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1269.899855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.901172] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1269.909869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.910808] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 1269.912476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.913366] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1269.931748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.932536] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1269.934192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.934991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.951493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.952515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.953436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.963582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.964630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.975413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.977265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.978341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.979257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.981218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.990512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.991423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.993115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.994338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.995139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.996028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1269.996946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.003852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.004866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.005966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.010370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.011209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.012241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.013004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.014408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.015405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.016239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.017001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.018025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.018936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.019904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.020802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.021776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.022686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.023642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.024529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.025691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.026666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.027572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.028536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.029435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.030416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.031282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.032002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.033218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.034251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.035019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.036004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.037195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.038015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.039196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.039980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.041453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.042589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.043593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.044527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.045508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.046457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.047464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.048385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.049458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.050405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.051415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.052351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.053346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.054051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.055012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.055921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.057200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.058346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.059153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.060136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.060979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.062184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.063007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.063955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.065192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.066304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.067040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.068002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.068906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.070028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.072183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.072976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.074267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.075042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.076348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.077053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.078036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.078941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.080049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.080957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.082231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.083017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.084161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.085259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.086270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.087041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.088233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.088984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.090241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.091028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.092227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.093002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.094202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.094997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.096176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.096979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.098225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.099017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.100165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.101254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.102283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.103043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.104211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.104979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.106300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.107240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.107996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.108999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.109919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.111024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.112000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.112943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.114178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.115298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.116030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.116995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.117929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.119023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.119955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.120905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.122123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.123034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.123971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.124932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.125871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.127212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.128016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.128970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.130159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.131267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.132035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.132998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.133924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.135039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.135968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.136921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.138141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.139286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.140028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.140994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.141908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.143011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.143933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.144877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.146039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.147295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.148037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.149000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.149933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.151041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.151963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.152919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.154139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.155284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.156030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.156982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.157917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.159010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.159941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.160888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.162046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.163017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.163972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.164936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.165867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.166961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.167877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.168826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.169965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.170935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.171897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.173905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.174830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.175946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.176872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.177839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.179030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.180249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.180997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.182283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.183351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.184043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.185012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.185928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.187176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.188338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.189121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.190025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.190936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.192038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.192955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.193913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.195138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.196310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.197041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.198013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.198934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.200024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.200947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.201899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.203155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.204294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.205029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.205996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.206903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.208005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.208927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.209887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.211040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.212298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.213050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.214020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.214926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.216037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.216968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.217926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.219148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.220294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.221040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.222025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.222942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.224134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.225302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.226042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.227257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.228036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.229183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.230015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.231207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.232004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.233169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.233984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.235228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.236167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.237008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.238180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.238997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.240159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.241345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.242147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.243275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.244037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.245218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.246017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.247228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.248010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.249173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.249996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.251242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.252025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.253187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.254002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.255154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.256247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.257249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.258005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.259274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.260049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.261208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.262015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.263182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.264280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.265271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.266027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.267300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.268040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.269211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.270015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.271177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.272279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.273291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.274052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.276181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.277201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.277991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.279187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.280360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.281334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.282307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.283021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.284341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.285152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.286031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.286943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.288148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.289259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.290030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.290935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.292149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.293298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.294039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.295224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.295981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.297325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.298266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.299005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.300253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.301028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.302020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.302946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.304155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.305263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.306133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.306950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.308259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.309035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.310210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.311009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.312296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.313032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.314000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.314917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.316177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.317291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.318048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.319010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.319952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.321050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.321977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.322932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.324148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.325288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.326041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.327006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.327933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.329041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.330026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.330974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.332218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.333314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.334041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.335001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.335936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.337046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.337962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.338918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.340133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.341284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.342238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.342992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.344195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.345330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.346239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.346996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.348250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.349040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.350225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.350989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.352146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.352982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.354138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.354958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.356190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.357283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.358022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.359025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.359946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.361051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.361963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.362911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1270.363860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:31:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000) 20:31:57 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000b00)={0x0, r1, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001e00)={0x4, [{r3}, {r4, r2}, {r7, r2}, {r4, r6}, {r1, r2}, {r0, r5}, {r1, r2}, {r0, r2}, {r7, r2}, {r0, r5}, {r0, r2}, {r0, r2}, {r1, r2}, {0x0, r6}, {r4, r5}, {r7, r6}, {r1, r5}, {r1, r2}, {r1, r5}, {0x0, r5}, {0x0, r2}, {r7, r2}, {r3, r5}, {r1, r5}, {0x0, r6}, {r0, r6}, {r3, r5}, {r1, r6}, {r7, r2}, {r3}, {r4, r2}, {r4, r5}, {r0, r5}, {r1, r6}, {r3, r5}, {r3, r6}, {r1, r6}, {r3, r2}, {}, {r4}, {r1, r6}, {r7, r2}, {0x0, r2}, {r7, r2}, {r3, r2}, {0x0, r5}, {r7, r2}, {r1, r2}, {r3, r2}, {0x0, r2}, {0x0, r5}, {r1, r6}, {r1, r6}, {r7, r6}, {r7, r5}, {r1, r6}, {0x0, r2}, {r4}, {r4, r6}, {r4, r5}, {r0, r5}, {r0, r5}, {r3, r6}, {r3, r2}, {r3, r2}, {r1}, {r4, r6}, {r7, r5}, {r3, r6}, {r0, r5}, {r7, r2}, {r4, r5}, {r1, r6}, {r3, r2}, {r4, r5}, {r7, r2}, {r4, r2}, {r0, r6}, {r1, r6}, {r4, r6}, {r4, r5}, {r7, r6}, {r0, r5}, {0x0, r2}, {r4, r6}, {r7, r5}, {r3, r6}, {r4, r5}, {r0, r5}, {r0, r5}, {0x0, r6}, {r3, r6}, {r7, r5}, {r4, r6}, {r1, r2}, {r1, r2}, {0x0, r2}, {r4, r5}, {r4}, {r7, r2}, {r7, r6}, {r3, r2}, {r0, r5}, {r7, r2}, {r3, r6}, {r0, r5}, {r0, r2}, {r3, r5}, {r1, r2}, {r1, r5}, {r3, r2}, {r4, r5}, {r0, r5}, {r7, r6}, {r4, r5}, {r3, r2}, {r3, r2}, {r4, r2}, {r4}, {r3, r5}, {r3}, {0x0, r6}, {r3, r5}, {r0, r2}, {r7, r6}, {r0, r2}, {r4, r2}, {r4, r2}, {r1, r2}, {r7, r2}, {r3, r6}, {r1, r2}, {r3}, {r1, r5}, {r7, r5}, {0x0, r5}, {r0, r6}, {r7, r6}, {r4, r6}, {r3, r2}, {r7, r5}, {r4, r5}, {r7}, {0x0, r6}, {r3}, {r7, r6}, {r1, r6}, {r1, r2}, {r0, r5}, {r1, r6}, {r3}, {r0, r2}, {r1, r2}, {r1, r2}, {0x0, r5}, {r1, r2}, {r3}, {r1, r5}, {r0, r5}, {r3, r5}, {r7, r2}, {r1, r5}, {r7, r2}, {r1, r2}, {r3, r2}, {r1, r2}, {r1, r5}, {r7, r2}, {r4, r5}, {r1, r2}, {r1, r5}, {r0, r2}, {r0}, {r3, r2}, {r0, r2}, {r4, r6}, {r4, r5}, {r1, r2}, {r4, r6}, {r7, r5}, {r7, r5}, {r0, r5}, {r7, r6}, {0x0, r6}, {r3, r6}, {r4}, {r0, r2}, {r4, r6}, {r1, r5}, {r4, r5}, {r3}, {r4, r2}, {r3, r5}, {r0, r2}, {r0, r2}, {r0, r5}, {r1, r6}, {r1, r5}, {r1, r2}, {r3, r5}, {r1}, {r0, r6}, {r7}, {r0, r6}, {r3, r2}, {r4, r6}, {r0, r6}, {r0, r2}, {r7}, {0x0, r6}, {r3, r2}, {r1, r2}, {r3, r5}, {r0, r2}, {r1, r6}, {r4, r5}, {r0}, {r7, r5}, {0x0, r5}, {r3, r2}, {r7, r2}, {r4, r5}, {r3}, {r3, r5}, {r0, r2}, {r4, r2}, {r4, r5}, {r0, r6}, {r3, r6}, {r4, r2}, {r0, r6}, {r1, r5}, {r3, r5}, {r3, r2}, {r1, r5}, {r4, r5}, {r3, r5}, {r1, r5}, {r3, r2}, {r4, r5}, {0x0, r6}, {r4, r6}, {r3, r6}, {r1, r2}, {0x0, r6}, {r7, r6}, {0x0, r5}, {r7, r5}, {r4, r6}, {0x0, r5}, {r0, r2}, {r4, r2}, {r7, r5}, {r4}, {r4, r2}], 0x80, "254022138a4c2a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000047740)) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) ioctl$BTRFS_IOC_SET_FEATURES(r9, 0x40309439, &(0x7f0000000040)={0x2, 0x1, 0x4}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x0, &(0x7f0000013b00)) 20:31:57 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 51) 20:31:57 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x2) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b15676f6b8d56865c4b855cc75aecf0000000000000000000000000000000000000000000000000055df1343cdc9a03d5ca343a32d8e00"/302], 0x24) io_uring_enter(0xffffffffffffffff, 0x4881, 0xfb20, 0x2, &(0x7f0000000000)={[0x70]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x0) 20:31:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:31:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x5) 20:31:57 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x2e8, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1a1100, 0x110) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x2, 0x0, r6, &(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x4, 0x100}, 0x8) io_uring_enter(r1, 0x5d7a, 0xb6c7, 0x0, &(0x7f0000000040)={[0x5]}, 0x8) 20:31:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 41) [ 1284.382674] FAULT_INJECTION: forcing a failure. [ 1284.382674] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.384322] CPU: 1 PID: 8396 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1284.385253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1284.386389] Call Trace: [ 1284.386773] dump_stack+0x107/0x167 [ 1284.387273] should_fail.cold+0x5/0xa [ 1284.387794] ? anon_vma_clone+0xdc/0x590 [ 1284.388346] should_failslab+0x5/0x20 [ 1284.388866] kmem_cache_alloc+0x5b/0x310 [ 1284.389425] anon_vma_clone+0xdc/0x590 [ 1284.389973] anon_vma_fork+0x82/0x640 [ 1284.390495] ? __vm_enough_memory+0x184/0x360 [ 1284.391109] copy_process+0x72cd/0x78b0 [ 1284.391679] ? __cleanup_sighand+0xb0/0xb0 [ 1284.392285] ? _copy_from_user+0xfb/0x1b0 [ 1284.392855] kernel_clone+0xe7/0x980 [ 1284.393366] ? __lockdep_reset_lock+0x180/0x180 [ 1284.394005] ? create_io_thread+0xf0/0xf0 [ 1284.394579] ? ksys_write+0x21a/0x260 [ 1284.395099] ? lock_downgrade+0x6d0/0x6d0 [ 1284.395667] __do_sys_clone3+0x1e5/0x320 [ 1284.396219] ? __do_sys_clone+0x110/0x110 [ 1284.396805] ? rcu_read_lock_any_held+0x75/0xa0 [ 1284.397069] FAULT_INJECTION: forcing a failure. [ 1284.397069] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.397430] ? vfs_write+0x354/0xb10 [ 1284.397450] ? fput_many+0x2f/0x1a0 [ 1284.401077] ? ksys_write+0x1a9/0x260 [ 1284.401591] ? __ia32_sys_read+0xb0/0xb0 [ 1284.402156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1284.402866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1284.403558] ? trace_hardirqs_on+0x5b/0x180 [ 1284.404146] do_syscall_64+0x33/0x40 [ 1284.404653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1284.405345] RIP: 0033:0x7f3a69dacb19 [ 1284.405865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1284.408330] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1284.409357] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1284.410363] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1284.411321] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.412280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1284.413242] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1284.414240] CPU: 0 PID: 8399 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1284.415885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1284.417863] Call Trace: [ 1284.418495] dump_stack+0x107/0x167 [ 1284.419367] should_fail.cold+0x5/0xa [ 1284.420279] ? xas_alloc+0x336/0x440 [ 1284.421166] should_failslab+0x5/0x20 [ 1284.422080] kmem_cache_alloc+0x5b/0x310 [ 1284.423059] xas_alloc+0x336/0x440 [ 1284.423910] xas_create+0x34a/0x10d0 [ 1284.424812] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1284.426065] xas_store+0x8c/0x1c40 [ 1284.426931] __xa_store+0x164/0x2d0 [ 1284.427795] ? xa_delete_node+0x280/0x280 [ 1284.428793] ? trace_hardirqs_on+0x5b/0x180 [ 1284.429836] xa_store+0x31/0x50 [ 1284.430620] __io_uring_add_tctx_node+0x1cf/0x520 [ 1284.431760] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1284.432995] ? alloc_fd+0x2e7/0x670 [ 1284.433886] io_uring_setup+0x1fbb/0x2980 [ 1284.434876] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1284.436086] ? wait_for_completion_io+0x270/0x270 [ 1284.437266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1284.438517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1284.439737] do_syscall_64+0x33/0x40 [ 1284.440617] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1284.441837] RIP: 0033:0x7f2e9760cb19 [ 1284.442714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1284.447009] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1284.448791] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1284.450459] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1284.452126] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1284.453801] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1284.455471] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:31:57 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:31:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x6) [ 1284.536309] loop3: detected capacity change from 0 to 524288 [ 1284.566018] EXT4-fs warning (device loop3): ext4_enable_quotas:6508: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1284.569874] EXT4-fs (loop3): mount failed [ 1300.674437] FAULT_INJECTION: forcing a failure. 20:32:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x5000000) 20:32:14 executing program 0: r0 = syz_io_uring_setup(0x31ff, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0xa, 0x197}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x110, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x3000006, 0x4000010, r0, 0x0) 20:32:14 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000003d40)={'ip6tnl0\x00', &(0x7f0000003cc0)={'ip6_vti0\x00', 0x0, 0x4, 0xf9, 0x7, 0x0, 0x0, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0x7, 0x7}}) r1 = accept(0xffffffffffffffff, &(0x7f0000003d80)=@ax25={{0x3, @null}, [@default, @rose, @netrom, @netrom, @netrom, @netrom, @remote, @rose]}, &(0x7f0000003e00)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000003ec0)={'syztnl2\x00', &(0x7f0000003e40)={'syztnl0\x00', r0, 0x29, 0x6, 0x0, 0x81, 0x36, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8, 0x6, 0x3ff}}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000056c0)={'syztnl2\x00', &(0x7f0000005680)={'syztnl2\x00', 0x0, 0x20, 0x7, 0x0, 0x3, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x67, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop]}}}}}) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000057c0)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005780)={&(0x7f0000005700)=ANY=[@ANYBLOB="ff030010", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf250100000008000b00", @ANYRES32=0x0, @ANYBLOB="050003000000000014000700fc02000000000000000000000000000108000b00", @ANYRES32=r4, @ANYBLOB="14000900fc01000000000000000000000000000114000900fe80000000aa61c431ea5ee9ad90ef8c"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = gettid() clock_gettime(0x0, &(0x7f0000008280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x248, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfff}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x153}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3f}, {0xc, 0x90, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffff8}, {0xc, 0x90, 0x10001}}]}, 0x248}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) clock_gettime(0x0, 0x0) clone3(&(0x7f000000c040)={0x140941000, &(0x7f0000005800), &(0x7f0000005840), 0x0, {}, &(0x7f00000058c0)=""/76, 0x4c, &(0x7f0000005940)=""/157, &(0x7f0000008300)=[0x0, 0x0, r5, 0x0, 0x0], 0x5}, 0x58) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r9, 0x5, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x340, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x2a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf2, 0x4, "13e4dc526b6eccbc8276a676518a896fee988f44ff4359fdb824ea9e33a53cca50360f8f22eb138bc11e8537b2260b157ccfe9c65027a85de91e175dfcf9422b1ba8389df5dde4fa0f765e23998d6f6065333f2b2747c0849302d317a2df21b642d6f49c1f8433997680419714559b235b3eb1b1f8ce8ea695d9c2183974ab3932d0c98ea26d326ff8cbeabc8f0910491b452d3449bbe2d624dae5e3793054701756e960fc7691c52c72400e34fa2600358db96e2dab5dd9cf9c2674b684a54fa2a1e3dc7ebea7507a802d8d30c7f4ffc3c425360f14b94cbd53043102cbef75923f48b21cecb8c4144a15fc5399"}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69cd}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{}\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.@^[-}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff08c6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "7bbd1097dc4aafb34283386b1adf3481c06b8675ee595f2c0fb9468ca4d293a1ad667f57541fb9616ab7f6da7fd873cbb3fe"}, @ETHTOOL_A_BITSET_MASK={0x70, 0x5, "365c868612931cc5f03461c1952f002a20fd7bf7283bcb7e687c2a2130d7d3cc42d840299aaa2cacd1fb92434b65cb2997bbb93c65b9be498e4ef2200c8c13e4b302774980a07104cabb7e08e25e859777ab78d9eb6187b0f9675e403dd64a0ade4a19e075786ca53cbe6fa2"}, @ETHTOOL_A_BITSET_MASK={0x20, 0x5, "6a8e2828ee2a7fb6b225369081c66b7edc66bea5389d4f3b056c628f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "3e3859b8d0ea66dc00225ffecc3462649648559442d8f82e4d75443935a8177c157d0398c65971598dcbab89d5"}]}, @ETHTOOL_A_EEE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4000040}, 0xa4) 20:32:14 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 52) 20:32:14 executing program 7: r0 = syz_io_uring_complete(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pread64(r1, &(0x7f0000000200)=""/193, 0xc1, 0xa93) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x40000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:32:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) 20:32:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 42) 20:32:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x7) [ 1300.674437] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.677474] CPU: 1 PID: 8437 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1300.678931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1300.680638] Call Trace: [ 1300.681198] dump_stack+0x107/0x167 [ 1300.681976] should_fail.cold+0x5/0xa [ 1300.682788] ? vm_area_dup+0x78/0x290 [ 1300.683586] should_failslab+0x5/0x20 [ 1300.684383] kmem_cache_alloc+0x5b/0x310 [ 1300.685226] ? lock_downgrade+0x6d0/0x6d0 [ 1300.686118] vm_area_dup+0x78/0x290 [ 1300.687071] ? copy_page_range+0x24e9/0x3800 [ 1300.688038] ? vm_area_alloc+0x110/0x110 [ 1300.688892] ? vm_iomap_memory+0x190/0x190 [ 1300.689783] ? __vma_link_rb+0x540/0x700 [ 1300.690651] copy_process+0x298b/0x78b0 [ 1300.691474] ? SOFTIRQ_verbose+0x10/0x10 [ 1300.692352] ? __cleanup_sighand+0xb0/0xb0 [ 1300.693261] ? _copy_from_user+0xfb/0x1b0 [ 1300.694329] kernel_clone+0xe7/0x980 [ 1300.695105] ? __lockdep_reset_lock+0x180/0x180 [ 1300.696083] ? create_io_thread+0xf0/0xf0 [ 1300.696643] FAULT_INJECTION: forcing a failure. [ 1300.696643] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.696964] ? ksys_write+0x21a/0x260 [ 1300.700245] ? lock_downgrade+0x6d0/0x6d0 [ 1300.701164] __do_sys_clone3+0x1e5/0x320 [ 1300.702015] ? __do_sys_clone+0x110/0x110 [ 1300.702909] ? rcu_read_lock_any_held+0x75/0xa0 [ 1300.703865] ? vfs_write+0x354/0xb10 [ 1300.704652] ? fput_many+0x2f/0x1a0 [ 1300.705402] ? ksys_write+0x1a9/0x260 [ 1300.706207] ? __ia32_sys_read+0xb0/0xb0 [ 1300.707056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1300.708149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1300.709201] ? trace_hardirqs_on+0x5b/0x180 [ 1300.710302] do_syscall_64+0x33/0x40 [ 1300.711079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1300.712140] RIP: 0033:0x7f3a69dacb19 [ 1300.713073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1300.716875] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1300.718451] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1300.719905] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1300.721360] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1300.722836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1300.724305] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1300.725806] CPU: 0 PID: 8443 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1300.727268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1300.729006] Call Trace: [ 1300.729562] dump_stack+0x107/0x167 [ 1300.730337] should_fail.cold+0x5/0xa [ 1300.731141] ? create_object.isra.0+0x3a/0xa30 [ 1300.732087] should_failslab+0x5/0x20 [ 1300.732882] kmem_cache_alloc+0x5b/0x310 [ 1300.733737] ? mark_held_locks+0x9e/0xe0 [ 1300.734605] create_object.isra.0+0x3a/0xa30 [ 1300.735530] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1300.736593] kmem_cache_alloc+0x159/0x310 [ 1300.737470] xas_alloc+0x336/0x440 [ 1300.738230] xas_create+0x34a/0x10d0 [ 1300.739018] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1300.740115] xas_store+0x8c/0x1c40 [ 1300.740879] __xa_store+0x164/0x2d0 [ 1300.741643] ? xa_delete_node+0x280/0x280 [ 1300.742526] ? trace_hardirqs_on+0x5b/0x180 [ 1300.743446] xa_store+0x31/0x50 [ 1300.744147] __io_uring_add_tctx_node+0x1cf/0x520 [ 1300.745149] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1300.746251] ? alloc_fd+0x2e7/0x670 [ 1300.747026] io_uring_setup+0x1fbb/0x2980 [ 1300.747911] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1300.748972] ? wait_for_completion_io+0x270/0x270 [ 1300.750013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1300.751097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1300.752170] do_syscall_64+0x33/0x40 [ 1300.752957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1300.754025] RIP: 0033:0x7f2e9760cb19 [ 1300.754797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1300.758644] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1300.760228] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1300.761713] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1300.763209] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1300.764706] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1300.766210] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:32:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x30) 20:32:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) 20:32:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x6000000) 20:32:14 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0x10200) sendfile(r1, r0, 0x0, 0x5) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8bf}}, './file0\x00'}) 20:32:14 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 53) 20:32:14 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x246001, 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x6}, r6, 0x1, 0x0, 0x1}, 0x7) [ 1300.920124] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=3s [ 1300.922222] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1300.923726] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1300.925298] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 1300.926882] print_req_error: 375 callbacks suppressed [ 1300.926901] blk_update_request: critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x100000 phys_seg 8 prio class 0 [ 1300.930308] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1300.931875] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1300.933442] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1300.935016] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1300.936582] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 1300.938161] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 1300.939730] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 1300.941295] Buffer I/O error on dev sr0, logical block 7, lost async page write 20:32:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x300) [ 1300.976263] FAULT_INJECTION: forcing a failure. [ 1300.976263] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.978680] CPU: 0 PID: 8466 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1300.980106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1300.981835] Call Trace: [ 1300.982409] dump_stack+0x107/0x167 [ 1300.983169] should_fail.cold+0x5/0xa [ 1300.983967] ? create_object.isra.0+0x3a/0xa30 [ 1300.984922] should_failslab+0x5/0x20 [ 1300.985720] kmem_cache_alloc+0x5b/0x310 [ 1300.986588] create_object.isra.0+0x3a/0xa30 [ 1300.987505] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1300.988571] kmem_cache_alloc+0x159/0x310 [ 1300.989449] vm_area_dup+0x78/0x290 [ 1300.990242] ? copy_page_range+0x24e9/0x3800 [ 1300.991211] ? vm_area_alloc+0x110/0x110 [ 1300.992075] ? vm_iomap_memory+0x190/0x190 [ 1300.992980] ? __vma_link_rb+0x540/0x700 [ 1300.993843] copy_process+0x298b/0x78b0 [ 1300.994680] ? SOFTIRQ_verbose+0x10/0x10 [ 1300.995569] ? __cleanup_sighand+0xb0/0xb0 [ 1300.996481] ? _copy_from_user+0xfb/0x1b0 [ 1300.997362] kernel_clone+0xe7/0x980 [ 1300.998163] ? __lockdep_reset_lock+0x180/0x180 [ 1300.999141] ? create_io_thread+0xf0/0xf0 [ 1301.000018] ? ksys_write+0x21a/0x260 [ 1301.000819] ? lock_downgrade+0x6d0/0x6d0 [ 1301.001696] __do_sys_clone3+0x1e5/0x320 [ 1301.002547] ? __do_sys_clone+0x110/0x110 [ 1301.003437] ? rcu_read_lock_any_held+0x75/0xa0 [ 1301.004401] ? vfs_write+0x354/0xb10 [ 1301.005188] ? fput_many+0x2f/0x1a0 [ 1301.005949] ? ksys_write+0x1a9/0x260 [ 1301.006751] ? __ia32_sys_read+0xb0/0xb0 [ 1301.007604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1301.008698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1301.009774] ? trace_hardirqs_on+0x5b/0x180 [ 1301.010688] do_syscall_64+0x33/0x40 [ 1301.011471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1301.012541] RIP: 0033:0x7f3a69dacb19 [ 1301.013320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1301.017144] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1301.018740] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1301.020222] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1301.021721] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1301.023225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1301.024713] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:32:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 20:32:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x7000000) 20:32:29 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x100000c, 0x4000010, 0xffffffffffffffff, 0x0) 20:32:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x500) 20:32:29 executing program 3: r0 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x22c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x8001, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xa, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 20:32:29 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x2042, 0x1, {0x2}}, 0x3f) 20:32:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 43) 20:32:29 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x1e1, 0x0, 0x0, 0x0) 20:32:29 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 54) 20:32:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x8000000) 20:32:29 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d41, 0xa581, 0x0, &(0x7f0000000000)={[0xffffffffffff0927]}, 0x8) [ 1315.902494] FAULT_INJECTION: forcing a failure. [ 1315.902494] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.904485] CPU: 1 PID: 8507 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1315.905442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.906608] Call Trace: [ 1315.906984] dump_stack+0x107/0x167 [ 1315.907497] should_fail.cold+0x5/0xa [ 1315.908025] ? create_object.isra.0+0x3a/0xa30 [ 1315.908657] should_failslab+0x5/0x20 [ 1315.909185] kmem_cache_alloc+0x5b/0x310 [ 1315.909752] create_object.isra.0+0x3a/0xa30 [ 1315.910376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1315.911083] kmem_cache_alloc+0x159/0x310 [ 1315.911663] anon_vma_clone+0xdc/0x590 [ 1315.911744] FAULT_INJECTION: forcing a failure. [ 1315.911744] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.912208] anon_vma_fork+0x82/0x640 [ 1315.915103] ? __vm_enough_memory+0x184/0x360 [ 1315.915731] copy_process+0x72cd/0x78b0 [ 1315.916314] ? __cleanup_sighand+0xb0/0xb0 [ 1315.916922] ? _copy_from_user+0xfb/0x1b0 [ 1315.917509] kernel_clone+0xe7/0x980 [ 1315.918037] ? __lockdep_reset_lock+0x180/0x180 [ 1315.918710] ? create_io_thread+0xf0/0xf0 [ 1315.919306] ? ksys_write+0x21a/0x260 [ 1315.919833] ? lock_downgrade+0x6d0/0x6d0 [ 1315.920416] __do_sys_clone3+0x1e5/0x320 [ 1315.920983] ? __do_sys_clone+0x110/0x110 [ 1315.921575] ? rcu_read_lock_any_held+0x75/0xa0 [ 1315.922217] ? vfs_write+0x354/0xb10 [ 1315.922736] ? fput_many+0x2f/0x1a0 [ 1315.923243] ? ksys_write+0x1a9/0x260 [ 1315.923774] ? __ia32_sys_read+0xb0/0xb0 [ 1315.924337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.925059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.925785] ? trace_hardirqs_on+0x5b/0x180 [ 1315.926407] do_syscall_64+0x33/0x40 [ 1315.926929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.927636] RIP: 0033:0x7f3a69dacb19 [ 1315.928168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.930708] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1315.931756] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1315.932736] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1315.933714] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1315.934700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1315.935673] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1315.936688] CPU: 0 PID: 8506 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1315.938149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.939885] Call Trace: [ 1315.940449] dump_stack+0x107/0x167 [ 1315.941216] should_fail.cold+0x5/0xa [ 1315.942020] ? xas_alloc+0x336/0x440 [ 1315.942809] should_failslab+0x5/0x20 [ 1315.943607] kmem_cache_alloc+0x5b/0x310 [ 1315.944469] xas_alloc+0x336/0x440 [ 1315.945221] xas_create+0x34a/0x10d0 [ 1315.946018] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1315.947131] xas_store+0x8c/0x1c40 [ 1315.947901] __xa_store+0x164/0x2d0 [ 1315.948667] ? xa_delete_node+0x280/0x280 [ 1315.949546] ? trace_hardirqs_on+0x5b/0x180 [ 1315.950462] xa_store+0x31/0x50 [ 1315.951155] __io_uring_add_tctx_node+0x1cf/0x520 [ 1315.952158] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1315.953258] ? alloc_fd+0x2e7/0x670 [ 1315.954038] io_uring_setup+0x1fbb/0x2980 [ 1315.954923] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1315.955986] ? wait_for_completion_io+0x270/0x270 [ 1315.957019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.958128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.959208] do_syscall_64+0x33/0x40 [ 1315.959988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.961053] RIP: 0033:0x7f2e9760cb19 20:32:29 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x5907, 0xc6cf, 0x2, &(0x7f0000000180)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r4, 0x0, &(0x7f0000000000)="c39cf18c19103032293f92ac29d9a029e279c43765eb876c26a67f05cc75ea03ee4b6344b9c6ff94bd9d3db9e41e74d8cbc4c72893a6ba86e726e67987ef445f132690b0b1f6c5a2b133852c4f3e81fc7bc87468edc8cb3683910c6fb5c6cb255a71c2bdd3a705d581e818193a42b2bf9b6a85d96bb6d4dfc41304c942b57aeef0a90813cd14f61fb27f5224e02b6f15b698a828577c0aec14d80cc39381f924cd1f481c842329a00f418cf2d9", 0xad, 0x804, 0x1}, 0x3f) [ 1315.961830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.965904] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1315.967508] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1315.969010] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1315.970521] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1315.972017] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1315.973528] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:32:29 executing program 0: r0 = syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x0, 0x80, 0x58, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x6, 0x2, "01"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xffff, 0x62, 0x5, "7fcede31"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xc0, {0x7, 0x25, 0x1, 0x80, 0x3, 0x30c0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x20, 0x1, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x80, 0x1f, "1b"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xff, 0x1002}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x55, 0x81, "a17ea9"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x2, 0x1001}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1, 0x7f, "d33d9372"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x8, 0x26, {0x7, 0x25, 0x1, 0x80, 0xc4, 0x7fff}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x5, 0x5e, 0x1, 0x8, 0x9}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x1c, &(0x7f0000000200)=@string={0x1c, 0x3, "3c40787bbda110dd4af256dea8b1ca4e73fdd601c2f643bf1c59"}}, {0xb8, &(0x7f0000000240)=@string={0xb8, 0x3, "c79ef8b123024149df8f0c39432fc40b8edf0eeda7093300c7fd48acb5ed2c6583f758f068b076a511a76e07668b4f41c9b58c006dc2e1bdb4add0136500ddde107e14a1a8d6531ea17fdd28f1f3e647155fbab6432f0d5ae9a84ebe333b906badb56dfd96c082f4157d21f95237348eeb2474b0f25b2c61fc2d8edd20193466b81121290239bc2a40756f75dec5b83eb2b1f76f2f1a809d76989efd26c0b0833fc9a68bdf78e0c939d4ac7e4ffdaa817da72cd76ee6"}}, {0x88, &(0x7f0000000300)=@string={0x88, 0x3, "f58fdbb5e42106e832c9e544036179526c9abbb8fd4437852116eb92983017ae2eb153626626d2c584944bd0674e71bfc6220565a7445885e7f2c9f12feba425325e815ca26c637896a49b9dd7b4e182225f83739cb2ee9fd35781cfa190359cdfb5ab9913184f99d8aae0efb2cea52f5d995e8ee2eaca76a3b5d6351cbdd6863e1d1396257a"}}, {0xce, &(0x7f00000003c0)=@string={0xce, 0x3, "bd1176188961d26ee803f67aed349490fe9f480a694f49b91ac7981c7256aa7019312e0daca83485ebed626fa233681be869c2c9a981302c3e5ba9cce5b2caa47fdc1593cd2134530e3b0557e651f04d6caed1dd9ff3b7890f374b3b98c7ff95ee50333848de4d10295102e87560aec56e9797a200f51ec87c549827e9553aee899cb0a84801923cb0d7238ded76596325dc0734b7e5deaf7ce0c25cc693af26d31eebcd04a3e4d101a1de74c2917dc0a0600ee1a70bad6494399f44a986693e13c04ba0042aae4d65be6049"}}, {0xf6, &(0x7f00000004c0)=@string={0xf6, 0x3, "efb6d5269bd2e611a887824229e30307e3911f186321bd5fe7455b9d314e0558611587a6cf72d5a6d21e2a42f26157e71366af2d64e7cfdee498778f9a6efb717d2dd0bc885f1448afa1ef2b1136d6dadd2f5444ac7f0dc5a9a6a60a1a60dd71e12f77b9619661eb6fe4ba600ae4dec1f91031d0100c806e071136cd5274ab61338ae6a6322211311eba1af98f27436b0e2eae0591e69ed0259605f2dbf60df0d7f982f77b1add7cd70770e50b2031b98414b89b532d525768780cd8dcb1674f85c93f86681ac6a368e844b6f0b0158e655277aa95ab96ee2e92b9cbf6ad2fc44ab68aca2a649455406a8400a2095e8ada34ba5f"}}, {0x9e, &(0x7f00000005c0)=@string={0x9e, 0x3, "e0cc1b176d010f2d374e959405633186c5497b32a45043bb690841c0568be456df0da35815759b38fa3f4dcab7832485ba0ae0327d1f6da7d2d54ec9d5d87deb2aa31135bc5286d2b78ce28be543724a47110e33360bd2255eaff31b0cd3b0fa9e41c3839306776b13cb34f9581821def8407fb5fb50903f875fd453c02543d5395b5e15e119fb7fd0976fee24a2a5e8c1aae1d17f32bcd84b134878"}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000880)={0x14, &(0x7f0000000700)={0x40, 0x23, 0xbd, {0xbd, 0x5, "656941095c9c4c103e1fe4a52a2b0106cbde47a9a44e27099a7c4dbe3acc7f6bae00345ebea280304465199660babb2802a8bfcf96a73d1dc45f42f26a621ebace396a2a80cb8c9b80f782ff68173a8ee55729e0e5ae6778f5227c35b07dbe86ac7e39ca225606f69dc0d6804f28d0b63a5513b3c0d495c92c4af020ee2070d36ca6b2a6a0537fe8948705fee3319bb82402f97d9b5ef21e7f7b8879e1fc2e6a121d2fd32a7b73d013d273bcb690d84b02d393b0d01a728ffb88fb"}}, &(0x7f0000000800)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "7b387ce06ba7869be9088a2b2f55b7b700663a9672cebb53b1a6c72e2f472967f762ff7b4ebf6cc82c612efdfc56be02873d5f50454fccf1afe9a9079ca78de9bab617c5b98464fb0412"}}}, &(0x7f0000000b40)={0x44, &(0x7f00000008c0)={0x0, 0x15, 0x9b, "a7b4882de903abad1dcf464ced73c03702b0334de263ce4cbfc982cced47bcc2b95fbdeba92bf30e47845000efdf643f5c0577d87d737979797b82f5b665edc80fec05df21fc09db1888ded015ee248a12a6d3bd557c67ff5ce86aef741e2399caa370ea242e7ec29ab599b65f01fe5f7e9d4d8243324a11cf2847c5f0f98f87f920a4bc7cf8b336e76fea53147cf3ea4aeb977c83fd4b200950bc"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xf5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a00)={0x20, 0x81, 0x2, "451f"}, &(0x7f0000000a40)={0x20, 0x82, 0x2, "d3e3"}, &(0x7f0000000a80)={0x20, 0x83, 0x1, "d9"}, &(0x7f0000000ac0)={0x20, 0x84, 0x1, "1a"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "fa837c"}}) syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') 20:32:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x600) [ 1316.055297] udc-core: couldn't find an available UDC or it's busy [ 1316.056261] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:32:29 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) 20:32:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000) 20:32:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x6, &(0x7f0000000340)=[{&(0x7f0000000080)="183584dae8faefabddace7220382e2a3b6a63b4044385c44a5f2b6af00e7ff0b79536e739df87522bce11acccada2c5c7f9e721e785dc3e133ceb0a76e527d9c93deec6e96f23bef71ac15db95d1ff6ce99df466530a2ef9bcbc9aa9bd2b4766e2e2518f117262c37f2e88403752a6d856948ab5be22a573acfd8161628d43e64aae8ca3ba7340c9db85ed4640f4643773bf683ff4754d65a7ac52e14c6ea33e427cea5123c60c380ba05548", 0xac, 0x1}, {&(0x7f0000000140)="846e1e74f4367b1d93894c37db7fb0b9de31aa92b731c290b6e12260c25821ed1f7685a9e9c7", 0x26, 0xa81b}, {&(0x7f0000000180)="38d3067a86517377f31c8992fc6e2a71d08222a5bebb04d8efd7e819a1c482fc08f97ea6ddb45349c470d8bd67003a77845a606c134683a0e854692eefc159388de8c66531c20389e2dcd3d6b4c198fb3eeff8fe80cfb9d450822187936f1c22531d7105985e1cb59160aaadad483dff1c598f2c7c8abd450dbf119218137794903683f33122a72115e3d1c66caf573c92ffbdc60838f588d5f4f0e3913ab2fe8e8ae66c9b40a33be74ab3295fd19ed102cd99d17a8c7cb2e9f128e964c2fde93b6f3ec2cd95751e17d0ffb0aef843b5", 0xd0, 0x40}, {&(0x7f0000000280)="35aa675021c8d8430a88facea231f2734d603ca4c26534cd21539acbfed7", 0x1e, 0x8}, {&(0x7f00000002c0), 0x0, 0x2}, {&(0x7f0000000300)="1f6602d017b281721b3f9ef506f34f960b74", 0x12, 0x7}], 0x114a8a0, &(0x7f0000000400)={[{@nonumtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}], [{@fsname={'fsname', 0x3d, '6'}}, {@smackfsroot}, {@appraise_type}, {@permit_directio}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4908, &(0x7f0000000480)={0x0, 0x7b71, 0x8, 0x0, 0x16e}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000500)) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000600)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000540)=0x80, &(0x7f0000000580)=@sco={0x1f, @fixed}, 0x0, 0x800, 0x1}, 0x0) 20:32:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x700) 20:32:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x7, 0xed, 0x4, 0xf7, 0x0, 0x8000, 0x4040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x81, 0x200}, 0x2020, 0x8, 0x2, 0xd, 0x46, 0xef2, 0x57, 0x0, 0xea2, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x11) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x40000c5, 0x8000) [ 1316.152231] loop7: detected capacity change from 0 to 86016 20:32:29 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) [ 1316.180381] loop7: detected capacity change from 0 to 86016 [ 1316.570851] udc-core: couldn't find an available UDC or it's busy [ 1316.571674] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:32:51 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="0d999c23a87a3ee358f7da494d8bdc6617de3d579d967e", 0x17, 0x48810, 0x1}, 0x40000) 20:32:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000) 20:32:51 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = inotify_init() close_range(r1, r2, 0x0) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000100)={"972b7bc9c140f4671978cdb7", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "b34969251e1fb63ecfb61c15a28ecc44"}, 0x11, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fcntl$setstatus(r3, 0x4, 0x400) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000000)) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 20:32:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x3000) 20:32:51 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 55) 20:32:51 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) 20:32:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x20b5, 0x0, 0x0, 0x0) 20:32:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 44) [ 1337.888961] FAULT_INJECTION: forcing a failure. [ 1337.888961] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.890507] CPU: 1 PID: 8573 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1337.891342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.892356] Call Trace: [ 1337.892684] dump_stack+0x107/0x167 [ 1337.893132] should_fail.cold+0x5/0xa [ 1337.893600] ? create_object.isra.0+0x3a/0xa30 [ 1337.894153] should_failslab+0x5/0x20 [ 1337.894621] kmem_cache_alloc+0x5b/0x310 [ 1337.895117] ? mark_held_locks+0x9e/0xe0 [ 1337.895613] create_object.isra.0+0x3a/0xa30 [ 1337.896162] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1337.896782] kmem_cache_alloc+0x159/0x310 [ 1337.897004] FAULT_INJECTION: forcing a failure. [ 1337.897004] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.897299] xas_alloc+0x336/0x440 [ 1337.897314] xas_create+0x34a/0x10d0 [ 1337.897342] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1337.901169] xas_store+0x8c/0x1c40 [ 1337.901614] __xa_store+0x164/0x2d0 [ 1337.902063] ? xa_delete_node+0x280/0x280 [ 1337.902582] ? trace_hardirqs_on+0x5b/0x180 [ 1337.903110] xa_store+0x31/0x50 [ 1337.903517] __io_uring_add_tctx_node+0x1cf/0x520 [ 1337.904106] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1337.904746] ? alloc_fd+0x2e7/0x670 [ 1337.905197] io_uring_setup+0x1fbb/0x2980 [ 1337.905707] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1337.906328] ? wait_for_completion_io+0x270/0x270 [ 1337.906948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.907589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.908219] do_syscall_64+0x33/0x40 [ 1337.908682] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1337.909302] RIP: 0033:0x7f2e9760cb19 [ 1337.909765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.911980] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1337.912892] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1337.913751] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1337.914610] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1337.915468] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1337.916326] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1337.917205] CPU: 0 PID: 8575 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1337.918675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.920427] Call Trace: [ 1337.920997] dump_stack+0x107/0x167 [ 1337.921774] should_fail.cold+0x5/0xa [ 1337.922590] ? down_write+0xe0/0x160 [ 1337.923387] ? anon_vma_clone+0xdc/0x590 [ 1337.924252] should_failslab+0x5/0x20 [ 1337.925064] kmem_cache_alloc+0x5b/0x310 [ 1337.925932] anon_vma_clone+0xdc/0x590 [ 1337.926780] anon_vma_fork+0x82/0x640 [ 1337.927593] ? __vm_enough_memory+0x184/0x360 [ 1337.928557] copy_process+0x72cd/0x78b0 [ 1337.929443] ? __cleanup_sighand+0xb0/0xb0 [ 1337.930374] ? _copy_from_user+0xfb/0x1b0 [ 1337.931267] kernel_clone+0xe7/0x980 [ 1337.932062] ? __lockdep_reset_lock+0x180/0x180 [ 1337.933046] ? create_io_thread+0xf0/0xf0 [ 1337.933945] ? ksys_write+0x21a/0x260 [ 1337.934786] ? lock_downgrade+0x6d0/0x6d0 [ 1337.935675] __do_sys_clone3+0x1e5/0x320 [ 1337.936531] ? __do_sys_clone+0x110/0x110 [ 1337.937439] ? rcu_read_lock_any_held+0x75/0xa0 [ 1337.938425] ? vfs_write+0x354/0xb10 [ 1337.939213] ? fput_many+0x2f/0x1a0 [ 1337.939978] ? ksys_write+0x1a9/0x260 [ 1337.940777] ? __ia32_sys_read+0xb0/0xb0 [ 1337.941644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.942765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.943850] ? trace_hardirqs_on+0x5b/0x180 [ 1337.944770] do_syscall_64+0x33/0x40 [ 1337.945564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1337.946659] RIP: 0033:0x7f3a69dacb19 [ 1337.947447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.951321] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1337.952927] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1337.954425] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1337.955910] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1337.957397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.958904] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:32:51 executing program 7: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in, @in=@remote}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) 20:32:51 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6f93, &(0x7f0000000200)={0x0, 0xddc1, 0x20, 0x2, 0x173}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r2, 0x0, &(0x7f0000000300)="f0203ea09555f4c30f5449b8b3", 0xd, 0x80, 0x1}, 0xff) mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000) 20:32:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 45) 20:32:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x300000) 20:32:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0) 20:32:51 executing program 7: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000011c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000012c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0xde50, 0x0, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001200)=""/157, 0x9d}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = syz_io_uring_setup(0x301d, &(0x7f0000001300)={0x0, 0x2779, 0x2, 0x1, 0x12, 0x0, r1}, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001180), &(0x7f0000001380)) close(r5) openat$sr(0xffffffffffffff9c, &(0x7f0000001140), 0xc2380, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x3, 0x6000, @fd_index=0x8, 0x7fde1e04, &(0x7f00000010c0)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000)="c1d1d1c3547afbcd658078e32730112d604316b5ac5e87c3fd43f3e14638125bd781b34b11acc529dd5fcbb3e33887138b68ea72ca3cf2ceca8a23a23c4295d80e6e5da5e9ff80497692134a035288f6c01a43dde255d84f9a1094ebbbb4b8c3e91821c2543d3fdc83a2d0848ac7e839afe0af71d5c7745cce93ccda41d6d9bf9f8fea3aed8c68615e73e0b878dba7f9cdc2d36c6dae7c76f4444427b8", 0x9d}], 0x2, 0x0, 0x1, {0x2, r6}}, 0x1) [ 1338.068940] FAULT_INJECTION: forcing a failure. [ 1338.068940] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.071446] CPU: 0 PID: 8591 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1338.072880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1338.074630] Call Trace: [ 1338.075194] dump_stack+0x107/0x167 [ 1338.075964] should_fail.cold+0x5/0xa [ 1338.076770] ? xas_alloc+0x336/0x440 [ 1338.077556] should_failslab+0x5/0x20 [ 1338.078369] kmem_cache_alloc+0x5b/0x310 [ 1338.079236] xas_alloc+0x336/0x440 [ 1338.079989] xas_create+0x34a/0x10d0 [ 1338.080790] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1338.081907] xas_store+0x8c/0x1c40 [ 1338.082693] __xa_store+0x164/0x2d0 [ 1338.083469] ? xa_delete_node+0x280/0x280 [ 1338.084351] ? trace_hardirqs_on+0x5b/0x180 [ 1338.085277] xa_store+0x31/0x50 [ 1338.085976] __io_uring_add_tctx_node+0x1cf/0x520 [ 1338.087005] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1338.088269] ? alloc_fd+0x2e7/0x670 [ 1338.089050] io_uring_setup+0x1fbb/0x2980 [ 1338.089934] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1338.091013] ? wait_for_completion_io+0x270/0x270 [ 1338.092092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1338.093233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1338.094317] do_syscall_64+0x33/0x40 [ 1338.095116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1338.096196] RIP: 0033:0x7f2e9760cb19 [ 1338.096978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1338.100839] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 20:32:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x48e3bfff) 20:32:51 executing program 3: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}, {@version_9p2000}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}]}}) r0 = syz_io_uring_setup(0x7959, &(0x7f00000001c0)={0x0, 0xc4ad, 0x0, 0x2, 0x320}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x80202, 0x100) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000240)="be307fe14a7b0609e7e863b360e1046e41c83ef4c4c6a1b480d7d0c76f69ca49adcf57afd9e8d4f3c2c9a17f", 0x2c}, {&(0x7f0000000280)="90a477b3f60791091425d1acf36d59c64332d29bf4370ea116f8c8284dd32e878be7bfc24c99f8bba67a198a813072acde116a9c0252cd6b2875ba83c627bc7d501cefc8b19c13967473f9ab2f14be72c6a526b0acdf5289b21b31aee882b07fb698eaac5764f44f4f775fa9bee50ac5f1a55cc214990526a651506e6dd609308eb295e361ffb33e0cea9fa51357451bfeec770f2b878038016184a19ddbceabad67cbbd8ce7a3d070c9c577a064c84b18b2e822c7", 0xb5}, {&(0x7f0000000340)="39eafc4b708f191f57d7e45be21ae77aac7f42a388691ad66ebcab30cfe384f92321ab984e932a885a20b4831721e0df1422fc9348b660fa805d1ed7e4f152d7dc44d9b9a121f8354c4d6d19101240d00f066b2f41b2d9b94f54f2945bf3125080e296bbbd0d5b52d51b994d5b382f1f24337b1ecfd578ab1b30cc78d94791563b65ea28d78f3dd11435", 0x8a}, {&(0x7f0000000400)="b8f45a5ab7107f5f787344ccb4c83139321de8ff9514110fae3f4ce2f40d20cef76ae8a88830220a1c7749100cf0cd798ee28f4a739a96248bdf9bb85337c2b3ccfd8f9d31e3c903833c3de9b79313ca24d8f92452a33d9d598432cafd852bf512382946b643005f4456f2968e0ff805e3c3680ff2a2c9bd2bbd36ff21e09e9280472626f6738d57cd5e4068f73270fa961ad980e8b8b2f4bc74ee9c84ebaac91a78ed1df9faab1af9302bedadcb67fd7081e80381991502420f16d6c9dea6e2166c0a66872786e114a644a2d83f8fe869fcc9f334e161", 0xd7}], 0x4, 0x8) [ 1338.102447] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1338.104117] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1338.105618] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1338.107130] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1338.108625] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:32:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 20:33:09 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x800000) 20:33:09 executing program 7: r0 = gettid() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3f, 0x2, 0x9, 0x4, 0x0, 0x0, 0x10100, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x6}, 0xd010, 0x10000, 0x3d5a, 0x6, 0x0, 0xffffff81, 0xaa02, 0x0, 0x10001}, r0, 0x0, r1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x18}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:33:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 46) 20:33:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa04aaaaaaaa20bfcfb41d6cba31"], 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000600)="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", 0x3, 0x0, 0x0, {0x0, r3}}, 0x9) 20:33:09 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 56) 20:33:09 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xb520, 0x0, 0x0, 0x0) 20:33:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4e020fff) 20:33:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) write$P9_RREADLINK(r1, &(0x7f0000002180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x5f67, 0x8d90, 0x3, &(0x7f0000000000)={[0x7aeb]}, 0x8) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', 0xfffffffffffffffd, 0x81, 0x3, &(0x7f0000001180)=[{&(0x7f0000000080)="01bb95", 0x3, 0x1000}, {&(0x7f00000000c0)="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", 0x1000, 0xffffffff}, {&(0x7f00000010c0)="5b7d59364ec002a091880c0716a64490cf60fb0767ba3a49507ec5f7737705ae9baf82117e79e657d0a365b887d4d621bb9e45d34d4a86f87dc3565353a377474adcf33f33109e5aaa5cd0a65b22e34fa9341cc0168289532ab648555baee03c3ee4b45429d0a4fac498f0596b8f60d22ad944ff7f16f79f2d91fcb616e6492cea4462fe996bad9cb2e96a1115fd7685912463863177acb2b5c793935b0e", 0x9e, 0x3ff}], 0x81000, &(0x7f0000001200)={[{@acl}, {@bsdgroups}, {@auto_da_alloc}, {@usrjquota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@journal_ioprio}, {@minixdf}, {@noquota}], [{@smackfstransmute={'smackfstransmute', 0x3d, '['}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@euid_gt}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '#%\xb3-.,)[!['}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) r3 = syz_open_dev$vcsn(&(0x7f0000001e40), 0x10000, 0x3dc5324baa3b1d1a) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xf4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000001300)={0x1, 0x171e, @status={[0x5a, 0x6, 0x100000001, 0x93, 0x1a, 0x4]}, [0x401, 0x2, 0x1, 0x28e, 0x6, 0x8, 0x6, 0xa7, 0x101, 0x1, 0x0, 0xffffffff, 0x4, 0x80, 0x7e66, 0x7, 0x1, 0x0, 0x7fffffff, 0x6, 0x6, 0x8000, 0x34, 0x2, 0x4, 0x6, 0x2, 0x0, 0x200, 0x2, 0x401, 0x7, 0x9, 0x7, 0x0, 0x8001, 0x1, 0x492a, 0x40, 0x2, 0x2ea3, 0x3, 0x80000000, 0x2, 0x3, 0x4, 0x2, 0x0, 0x995f, 0xffffffffffffff56, 0x4, 0x0, 0x3ff, 0x8, 0x2, 0x42b, 0x1e632826, 0x4, 0xc5d, 0xd1, 0x9, 0x400, 0x1000, 0x9]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r5 = eventfd2(0x8, 0x1) r6 = mmap$binder(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002140)={0x50, 0x0, &(0x7f0000002080)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001fc0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000001d40)=""/217, 0xd9, 0x1, 0x40}}, &(0x7f0000002040)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r6}], 0x12, 0x0, &(0x7f0000002100)="ca874c4dccf65b03702d453ac20f4c1215c9"}) [ 1356.531972] FAULT_INJECTION: forcing a failure. [ 1356.531972] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.534995] CPU: 1 PID: 8624 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1356.536777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1356.538976] Call Trace: [ 1356.539670] dump_stack+0x107/0x167 [ 1356.540626] should_fail.cold+0x5/0xa [ 1356.541635] ? create_object.isra.0+0x3a/0xa30 [ 1356.542824] should_failslab+0x5/0x20 [ 1356.543826] kmem_cache_alloc+0x5b/0x310 [ 1356.544886] create_object.isra.0+0x3a/0xa30 [ 1356.546039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1356.547379] kmem_cache_alloc+0x159/0x310 [ 1356.548469] anon_vma_clone+0xdc/0x590 [ 1356.549500] anon_vma_fork+0x82/0x640 [ 1356.550489] ? __vm_enough_memory+0x184/0x360 [ 1356.551669] copy_process+0x72cd/0x78b0 [ 1356.552735] ? __cleanup_sighand+0xb0/0xb0 [ 1356.553865] ? _copy_from_user+0xfb/0x1b0 [ 1356.554949] kernel_clone+0xe7/0x980 [ 1356.555723] ? __lockdep_reset_lock+0x180/0x180 [ 1356.556682] ? create_io_thread+0xf0/0xf0 [ 1356.557582] ? ksys_write+0x21a/0x260 [ 1356.558386] ? lock_downgrade+0x6d0/0x6d0 [ 1356.559269] __do_sys_clone3+0x1e5/0x320 [ 1356.560114] ? __do_sys_clone+0x110/0x110 [ 1356.561026] ? rcu_read_lock_any_held+0x75/0xa0 [ 1356.561984] ? vfs_write+0x354/0xb10 [ 1356.562767] ? fput_many+0x2f/0x1a0 [ 1356.563523] ? ksys_write+0x1a9/0x260 [ 1356.564307] ? __ia32_sys_read+0xb0/0xb0 [ 1356.565167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1356.566247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1356.567330] ? trace_hardirqs_on+0x5b/0x180 [ 1356.568233] do_syscall_64+0x33/0x40 [ 1356.569011] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1356.570119] RIP: 0033:0x7f3a69dacb19 [ 1356.570894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1356.574691] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1356.576263] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1356.577733] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1356.579232] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1356.580692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1356.582274] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:33:10 executing program 0: mmap(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0xeb4b1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 20:33:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4e023fff) [ 1356.607263] FAULT_INJECTION: forcing a failure. [ 1356.607263] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.609736] CPU: 1 PID: 8639 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1356.611195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1356.612948] Call Trace: [ 1356.613515] dump_stack+0x107/0x167 [ 1356.614320] should_fail.cold+0x5/0xa [ 1356.615186] ? create_object.isra.0+0x3a/0xa30 [ 1356.616175] should_failslab+0x5/0x20 [ 1356.616994] kmem_cache_alloc+0x5b/0x310 [ 1356.617886] ? mark_held_locks+0x9e/0xe0 [ 1356.618913] create_object.isra.0+0x3a/0xa30 [ 1356.619836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1356.620930] kmem_cache_alloc+0x159/0x310 [ 1356.621843] xas_alloc+0x336/0x440 [ 1356.622630] xas_create+0x34a/0x10d0 [ 1356.623452] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1356.624586] xas_store+0x8c/0x1c40 [ 1356.625374] __xa_store+0x164/0x2d0 [ 1356.626174] ? xa_delete_node+0x280/0x280 [ 1356.627091] ? trace_hardirqs_on+0x5b/0x180 [ 1356.628042] xa_store+0x31/0x50 [ 1356.628733] __io_uring_add_tctx_node+0x1cf/0x520 [ 1356.629761] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1356.630900] ? alloc_fd+0x2e7/0x670 [ 1356.631708] io_uring_setup+0x1fbb/0x2980 [ 1356.632625] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1356.633722] ? wait_for_completion_io+0x270/0x270 [ 1356.634806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1356.635934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1356.637066] do_syscall_64+0x33/0x40 [ 1356.637859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1356.639032] RIP: 0033:0x7f2e9760cb19 [ 1356.639828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1356.643790] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1356.645428] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1356.646967] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1356.648499] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1356.650028] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1356.651549] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:33:10 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe101, 0x0, 0x0, 0x0) 20:33:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x1000000) 20:33:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0f024e) 20:33:10 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, r8, r9}}, 0x3) 20:33:30 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1c91, 0x2988, 0x2, &(0x7f0000000000)={[0x50]}, 0x8) 20:33:30 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x3fffff, 0x0, 0x0, 0x0) 20:33:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)="bbeec9d8e491c11d1ad05416c236d3287c306820c1fb990856d28b794ad59e95af16", 0x22) setsockopt$inet6_mreq(r0, 0x29, 0x4b, &(0x7f0000000040)={@remote}, 0x14) bind$inet6(r0, &(0x7f0000001180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) [ 1376.805252] FAULT_INJECTION: forcing a failure. [ 1376.805252] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.807683] CPU: 0 PID: 8682 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1376.809123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.810868] Call Trace: [ 1376.811445] dump_stack+0x107/0x167 [ 1376.812222] should_fail.cold+0x5/0xa [ 1376.813028] ? xas_alloc+0x336/0x440 [ 1376.813837] should_failslab+0x5/0x20 [ 1376.814637] kmem_cache_alloc+0x5b/0x310 [ 1376.815515] xas_alloc+0x336/0x440 [ 1376.816263] xas_create+0x34a/0x10d0 [ 1376.817075] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1376.818175] xas_store+0x8c/0x1c40 [ 1376.818950] __xa_store+0x164/0x2d0 [ 1376.819723] ? xa_delete_node+0x280/0x280 [ 1376.820601] ? trace_hardirqs_on+0x5b/0x180 [ 1376.821518] xa_store+0x31/0x50 [ 1376.822211] __io_uring_add_tctx_node+0x1cf/0x520 [ 1376.823243] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1376.824334] ? alloc_fd+0x2e7/0x670 [ 1376.825110] io_uring_setup+0x1fbb/0x2980 [ 1376.825994] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1376.827070] ? wait_for_completion_io+0x270/0x270 [ 1376.828116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.829223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.830312] do_syscall_64+0x33/0x40 [ 1376.831137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.832223] RIP: 0033:0x7f2e9760cb19 [ 1376.833016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.836865] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1376.838470] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1376.839990] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1376.841504] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1376.842995] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1376.844498] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1376.861827] FAULT_INJECTION: forcing a failure. [ 1376.861827] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.864360] CPU: 0 PID: 8695 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1376.865804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.867544] Call Trace: [ 1376.868110] dump_stack+0x107/0x167 [ 1376.868877] should_fail.cold+0x5/0xa [ 1376.869697] ? anon_vma_fork+0xf1/0x640 [ 1376.870533] should_failslab+0x5/0x20 [ 1376.871342] kmem_cache_alloc+0x5b/0x310 [ 1376.872211] anon_vma_fork+0xf1/0x640 [ 1376.873014] ? __vm_enough_memory+0x184/0x360 [ 1376.873965] copy_process+0x72cd/0x78b0 [ 1376.874876] ? __cleanup_sighand+0xb0/0xb0 [ 1376.875801] ? _copy_from_user+0xfb/0x1b0 [ 1376.876683] kernel_clone+0xe7/0x980 [ 1376.877492] ? __lockdep_reset_lock+0x180/0x180 [ 1376.878490] ? create_io_thread+0xf0/0xf0 [ 1376.879408] ? ksys_write+0x21a/0x260 [ 1376.880229] ? lock_downgrade+0x6d0/0x6d0 [ 1376.881129] __do_sys_clone3+0x1e5/0x320 [ 1376.881981] ? __do_sys_clone+0x110/0x110 [ 1376.882895] ? rcu_read_lock_any_held+0x75/0xa0 [ 1376.883895] ? vfs_write+0x354/0xb10 [ 1376.884700] ? fput_many+0x2f/0x1a0 [ 1376.885486] ? ksys_write+0x1a9/0x260 [ 1376.886308] ? __ia32_sys_read+0xb0/0xb0 [ 1376.887206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.888347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.889451] ? trace_hardirqs_on+0x5b/0x180 [ 1376.890383] do_syscall_64+0x33/0x40 [ 1376.891195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.892299] RIP: 0033:0x7f3a69dacb19 [ 1376.893087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.896995] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1376.898631] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1376.900155] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1376.901692] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.903229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.904756] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:33:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa04aaaaaaaa20bfcfb41d6cba31"], 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000600)="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", 0x3, 0x0, 0x0, {0x0, r3}}, 0x9) 20:33:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 47) 20:33:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f024e) 20:33:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x2000000) 20:33:30 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 57) 20:33:30 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 20:33:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffbfe348) 20:33:30 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x1583, 0xbeaa, 0x3, &(0x7f0000000000)={[0x7]}, 0x8) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) signalfd4(r0, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x80000) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x24ff8f17]}, &(0x7f0000000080), 0x8) 20:33:30 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x75, 0x2, 0x2, 0x40, 0x7, 0x3, 0x6, 0x0, 0x272, 0x40, 0x3dd, 0x9, 0xb1, 0x38, 0x1, 0x0, 0x5, 0x1}, [{0x4, 0x80, 0xffff, 0xffffffff, 0xbb, 0x7, 0x4, 0x2}], "1cb3dfffe0c24865ecc62fb90dd07e8fd646156136bcd95a19d8f5df4855d5d0ead3803aee3e436e79a72ea94cc94bc82df6dc46c71fe5b75d106f4e27097fd8de77fac5c183f0d175749d290f936297182c629c6bf8e5a1ae5ddf748ff1b2dd744260f071692af48c2cb865894f828bf9c5381fb090e8f7619e92453a509be342688cdd398fc78074b4af957f2979a6cb05ab603694fec3230006eb7c75370533b9b55b50ab06a625e4de6792325b021c426f8bbf4df5f10064953c01adfa074e6cc11c6ff8ad35fced05f49891614f2f6993cda2d1f1abb9237a59463c9379ef06", ['\x00', '\x00']}, 0x35a) 20:33:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x3000000) [ 1377.031883] audit: type=1400 audit(1776803610.474:64): avc: denied { map } for pid=8706 comm="syz-executor.0" path="pipe:[33200]" dev="pipefs" ino=33200 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 20:33:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 48) 20:33:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa04aaaaaaaa20bfcfb41d6cba31"], 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000600)="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", 0x3, 0x0, 0x0, {0x0, r3}}, 0x9) 20:33:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffff8000) 20:33:30 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x4662, 0x2863, 0x3, &(0x7f0000000000)={[0x3f]}, 0x8) [ 1377.113387] FAULT_INJECTION: forcing a failure. [ 1377.113387] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.116266] CPU: 1 PID: 8716 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1377.117754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.119517] Call Trace: [ 1377.120091] dump_stack+0x107/0x167 [ 1377.120865] should_fail.cold+0x5/0xa [ 1377.121687] ? create_object.isra.0+0x3a/0xa30 [ 1377.122663] should_failslab+0x5/0x20 [ 1377.123481] kmem_cache_alloc+0x5b/0x310 [ 1377.124358] ? mark_held_locks+0x9e/0xe0 [ 1377.125231] create_object.isra.0+0x3a/0xa30 [ 1377.126168] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1377.127278] kmem_cache_alloc+0x159/0x310 [ 1377.128204] xas_alloc+0x336/0x440 [ 1377.128992] xas_create+0x34a/0x10d0 [ 1377.129819] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1377.130988] xas_store+0x8c/0x1c40 [ 1377.131782] __xa_store+0x164/0x2d0 [ 1377.132574] ? xa_delete_node+0x280/0x280 [ 1377.133491] ? trace_hardirqs_on+0x5b/0x180 [ 1377.134442] xa_store+0x31/0x50 [ 1377.135176] __io_uring_add_tctx_node+0x1cf/0x520 [ 1377.136224] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1377.137371] ? alloc_fd+0x2e7/0x670 [ 1377.138189] io_uring_setup+0x1fbb/0x2980 [ 1377.139124] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1377.140230] ? wait_for_completion_io+0x270/0x270 [ 1377.141318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1377.142477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.143633] do_syscall_64+0x33/0x40 [ 1377.144466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.145599] RIP: 0033:0x7f2e9760cb19 [ 1377.146426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.150509] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1377.152240] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1377.153841] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1377.155469] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1377.157091] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1377.158712] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:33:30 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 58) [ 1377.238984] FAULT_INJECTION: forcing a failure. [ 1377.238984] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.241450] CPU: 1 PID: 8725 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1377.242911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.244670] Call Trace: [ 1377.245244] dump_stack+0x107/0x167 [ 1377.246016] should_fail.cold+0x5/0xa [ 1377.246834] ? create_object.isra.0+0x3a/0xa30 [ 1377.247787] should_failslab+0x5/0x20 [ 1377.248593] kmem_cache_alloc+0x5b/0x310 [ 1377.249466] create_object.isra.0+0x3a/0xa30 [ 1377.250398] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1377.251486] kmem_cache_alloc+0x159/0x310 [ 1377.252377] anon_vma_clone+0xdc/0x590 [ 1377.253214] anon_vma_fork+0x82/0x640 [ 1377.254008] ? __vm_enough_memory+0x184/0x360 [ 1377.254966] copy_process+0x72cd/0x78b0 [ 1377.255845] ? __cleanup_sighand+0xb0/0xb0 [ 1377.256768] ? _copy_from_user+0xfb/0x1b0 [ 1377.257668] kernel_clone+0xe7/0x980 [ 1377.258461] ? __lockdep_reset_lock+0x180/0x180 [ 1377.259453] ? create_io_thread+0xf0/0xf0 [ 1377.260352] ? ksys_write+0x21a/0x260 [ 1377.261174] ? lock_downgrade+0x6d0/0x6d0 [ 1377.262074] __do_sys_clone3+0x1e5/0x320 [ 1377.262953] ? __do_sys_clone+0x110/0x110 [ 1377.263855] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.264829] ? vfs_write+0x354/0xb10 [ 1377.265629] ? fput_many+0x2f/0x1a0 [ 1377.266413] ? ksys_write+0x1a9/0x260 [ 1377.267235] ? __ia32_sys_read+0xb0/0xb0 [ 1377.268113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1377.269225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.270310] ? trace_hardirqs_on+0x5b/0x180 [ 1377.271268] do_syscall_64+0x33/0x40 [ 1377.272076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.273181] RIP: 0033:0x7f3a69dacb19 [ 1377.273991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.277949] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1377.279590] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1377.281107] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1377.282597] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.284101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.285600] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:33:46 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 59) 20:33:46 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4000000) 20:33:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 49) 20:33:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x800000000) 20:33:46 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) 20:33:46 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1800004, 0x40010, r0, 0x0) io_uring_setup(0x61ea, &(0x7f0000000000)={0x0, 0xcbc9, 0x4, 0x2, 0xeb, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x100010, r0, 0x0) 20:33:46 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fef000/0x2000)=nil, 0x7000) r0 = shmget(0x2, 0x1000, 0x78000006, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4096) 20:33:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa04aaaaaaaa20bfcfb41d6cba31"], 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000600)="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", 0x3, 0x0, 0x0, {0x0, r3}}, 0x9) [ 1392.964609] FAULT_INJECTION: forcing a failure. [ 1392.964609] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.967177] CPU: 1 PID: 8747 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1392.968617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.970357] Call Trace: [ 1392.970935] dump_stack+0x107/0x167 [ 1392.971707] should_fail.cold+0x5/0xa [ 1392.972512] ? anon_vma_fork+0x1ff/0x640 [ 1392.973376] should_failslab+0x5/0x20 [ 1392.974178] kmem_cache_alloc+0x5b/0x310 [ 1392.975071] anon_vma_fork+0x1ff/0x640 [ 1392.975903] copy_process+0x72cd/0x78b0 [ 1392.976787] ? __cleanup_sighand+0xb0/0xb0 [ 1392.977707] ? _copy_from_user+0xfb/0x1b0 [ 1392.978598] kernel_clone+0xe7/0x980 [ 1392.979402] ? __lockdep_reset_lock+0x180/0x180 [ 1392.980382] ? create_io_thread+0xf0/0xf0 [ 1392.981280] ? ksys_write+0x21a/0x260 [ 1392.982081] ? lock_downgrade+0x6d0/0x6d0 [ 1392.982977] __do_sys_clone3+0x1e5/0x320 [ 1392.983829] ? __do_sys_clone+0x110/0x110 [ 1392.984726] ? rcu_read_lock_any_held+0x75/0xa0 [ 1392.985733] ? vfs_write+0x354/0xb10 [ 1392.986520] ? fput_many+0x2f/0x1a0 [ 1392.987309] ? ksys_write+0x1a9/0x260 [ 1392.988106] ? __ia32_sys_read+0xb0/0xb0 [ 1392.988963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.990075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.991162] ? trace_hardirqs_on+0x5b/0x180 [ 1392.992070] do_syscall_64+0x33/0x40 [ 1392.992844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.993894] RIP: 0033:0x7f3a69dacb19 [ 1392.994686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.998504] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1393.000081] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1393.001542] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1393.003002] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1393.004458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1393.005911] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1393.011332] FAULT_INJECTION: forcing a failure. [ 1393.011332] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.013788] CPU: 1 PID: 8744 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1393.015207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1393.016904] Call Trace: [ 1393.017444] dump_stack+0x107/0x167 [ 1393.018195] should_fail.cold+0x5/0xa [ 1393.018989] ? xas_alloc+0x336/0x440 [ 1393.019754] should_failslab+0x5/0x20 [ 1393.020529] kmem_cache_alloc+0x5b/0x310 [ 1393.021376] xas_alloc+0x336/0x440 [ 1393.022106] xas_create+0x34a/0x10d0 [ 1393.022915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1393.024002] xas_store+0x8c/0x1c40 [ 1393.024784] __xa_store+0x164/0x2d0 [ 1393.025533] ? xa_delete_node+0x280/0x280 [ 1393.026391] ? trace_hardirqs_on+0x5b/0x180 [ 1393.027296] xa_store+0x31/0x50 [ 1393.027977] __io_uring_add_tctx_node+0x1cf/0x520 [ 1393.029011] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1393.030075] ? alloc_fd+0x2e7/0x670 [ 1393.030855] io_uring_setup+0x1fbb/0x2980 [ 1393.031734] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1393.032772] ? wait_for_completion_io+0x270/0x270 [ 1393.033782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1393.034846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1393.035914] do_syscall_64+0x33/0x40 [ 1393.036673] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1393.037738] RIP: 0033:0x7f2e9760cb19 [ 1393.038507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1393.042273] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1393.043820] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1393.045269] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1393.046711] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1393.048178] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1393.049624] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:33:46 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x6, 0x4000010, 0xffffffffffffffff, 0x8000000) 20:33:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x1000000000) 20:33:46 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x5000000) 20:33:46 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0xfffffb76) 20:33:46 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) [ 1408.981928] FAULT_INJECTION: forcing a failure. [ 1408.981928] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.983368] CPU: 0 PID: 8789 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1408.984141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1408.985087] Call Trace: [ 1408.985392] dump_stack+0x107/0x167 [ 1408.985812] should_fail.cold+0x5/0xa [ 1408.986251] ? create_object.isra.0+0x3a/0xa30 [ 1408.986825] should_failslab+0x5/0x20 [ 1408.987273] kmem_cache_alloc+0x5b/0x310 [ 1408.987738] create_object.isra.0+0x3a/0xa30 [ 1408.988232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1408.989037] kmem_cache_alloc+0x159/0x310 [ 1408.989517] anon_vma_fork+0x1ff/0x640 [ 1408.989972] copy_process+0x72cd/0x78b0 [ 1408.990445] ? __cleanup_sighand+0xb0/0xb0 [ 1408.990939] ? _copy_from_user+0xfb/0x1b0 [ 1408.991424] kernel_clone+0xe7/0x980 [ 1408.991850] ? __lockdep_reset_lock+0x180/0x180 [ 1408.992381] ? create_io_thread+0xf0/0xf0 [ 1408.992865] ? ksys_write+0x21a/0x260 [ 1408.993297] ? lock_downgrade+0x6d0/0x6d0 [ 1408.993776] __do_sys_clone3+0x1e5/0x320 [ 1408.994243] ? __do_sys_clone+0x110/0x110 [ 1408.994736] ? rcu_read_lock_any_held+0x75/0xa0 [ 1408.995273] ? vfs_write+0x354/0xb10 [ 1408.995696] ? fput_many+0x2f/0x1a0 [ 1408.996119] ? ksys_write+0x1a9/0x260 [ 1408.996551] ? __ia32_sys_read+0xb0/0xb0 [ 1408.997016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1408.997614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1408.998207] ? trace_hardirqs_on+0x5b/0x180 [ 1408.998701] do_syscall_64+0x33/0x40 [ 1408.999139] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1408.999726] RIP: 0033:0x7f3a69dacb19 [ 1409.000153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.002029] FAULT_INJECTION: forcing a failure. [ 1409.002029] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.002241] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1409.002256] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1409.002262] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1409.002269] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.002285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1409.008703] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:34:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x6000000) 20:34:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 50) 20:34:02 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) 20:34:02 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 60) 20:34:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x10000000000) 20:34:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa04aaaaaaaa20bfcfb41d6cba31"], 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 20:34:02 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x7000)=nil, 0x7000, 0x2000008, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x73f) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x1b442b0916b7a367, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x2) 20:34:02 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0xa2580) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}]}, 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20000010) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r1, 0x80, &(0x7f0000000040)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x1}, 0x0, 0x0, 0x1}, 0x2c) [ 1409.009547] CPU: 1 PID: 8795 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1409.011258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.012994] Call Trace: [ 1409.013555] dump_stack+0x107/0x167 [ 1409.014329] should_fail.cold+0x5/0xa [ 1409.015135] ? create_object.isra.0+0x3a/0xa30 [ 1409.016093] should_failslab+0x5/0x20 [ 1409.016888] kmem_cache_alloc+0x5b/0x310 [ 1409.017751] ? mark_held_locks+0x9e/0xe0 [ 1409.018617] create_object.isra.0+0x3a/0xa30 [ 1409.019554] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1409.020630] kmem_cache_alloc+0x159/0x310 [ 1409.021509] xas_alloc+0x336/0x440 [ 1409.022266] xas_create+0x34a/0x10d0 [ 1409.023065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.024190] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1409.025334] xas_store+0x8c/0x1c40 [ 1409.026091] ? lock_acquire+0x1b9/0x470 [ 1409.026925] __xa_store+0x164/0x2d0 [ 1409.027701] ? xa_delete_node+0x280/0x280 [ 1409.028585] ? trace_hardirqs_on+0x5b/0x180 [ 1409.029520] xa_store+0x31/0x50 [ 1409.030218] __io_uring_add_tctx_node+0x1cf/0x520 [ 1409.031241] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1409.032342] ? alloc_fd+0x2e7/0x670 [ 1409.033117] io_uring_setup+0x1fbb/0x2980 [ 1409.033990] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1409.035041] ? wait_for_completion_io+0x270/0x270 [ 1409.036092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.037188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.038276] do_syscall_64+0x33/0x40 [ 1409.039065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.040162] RIP: 0033:0x7f2e9760cb19 [ 1409.040941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.044788] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1409.046386] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1409.047884] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1409.049378] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1409.050869] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1409.052372] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:34:02 executing program 0: syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x800) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x300000e, 0x40010, r0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) io_uring_enter(r1, 0xb53, 0x1fe5, 0x3, &(0x7f0000000040)={[0x7]}, 0x8) 20:34:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa04aaaaaaaa20bfcfb41d6cba31"], 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 20:34:02 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x2, 0x81, 0x0, 0x3, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x1, 0x9, 0x5, 0x9, 0x6, 0x8, 0xd36, 0x0, 0x7, 0x0, 0x25}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x480081) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0x80, 0x8, 0x1f, 0x0, 0x76df, 0x880, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x40210, 0x7a6, 0x100, 0x6, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, 0x82a}, 0xffffffffffffffff, 0xc, r1, 0xb) dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:34:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x7000000) 20:34:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000080)={0x160182300, 0x0, 0x0, 0x0, {0x8034}, 0x0, 0xfffffffffffffd2e, 0x0, 0x0, 0x0, {r0}}, 0x58) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x81, 0xb66d}, {0x2, 0x10001}]}, 0x14, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x44fc, 0xa5bf, 0x2, &(0x7f0000000100)={[0x1]}, 0x8) 20:34:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 51) 20:34:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffffffffffffb) 20:34:02 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 20:34:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x7fffffffffffc) [ 1409.197851] FAULT_INJECTION: forcing a failure. [ 1409.197851] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.199226] CPU: 0 PID: 8821 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1409.199998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.200938] Call Trace: [ 1409.201247] dump_stack+0x107/0x167 [ 1409.201663] should_fail.cold+0x5/0xa [ 1409.202103] ? xas_alloc+0x336/0x440 [ 1409.202533] should_failslab+0x5/0x20 [ 1409.202967] kmem_cache_alloc+0x5b/0x310 [ 1409.203457] xas_alloc+0x336/0x440 [ 1409.203862] xas_create+0x34a/0x10d0 [ 1409.204292] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1409.204895] xas_store+0x8c/0x1c40 [ 1409.205313] __xa_store+0x164/0x2d0 [ 1409.205727] ? xa_delete_node+0x280/0x280 [ 1409.206214] ? trace_hardirqs_on+0x5b/0x180 [ 1409.206711] xa_store+0x31/0x50 [ 1409.207108] __io_uring_add_tctx_node+0x1cf/0x520 [ 1409.207661] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1409.208264] ? alloc_fd+0x2e7/0x670 [ 1409.208692] io_uring_setup+0x1fbb/0x2980 [ 1409.209174] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1409.209755] ? wait_for_completion_io+0x270/0x270 [ 1409.210324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.210927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.211536] do_syscall_64+0x33/0x40 [ 1409.211963] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.212551] RIP: 0033:0x7f2e9760cb19 [ 1409.212975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.215086] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1409.215970] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1409.216784] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1409.217602] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1409.218407] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1409.219230] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:34:02 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5263, &(0x7f0000000000)={0x0, 0x818a, 0x1, 0x2, 0x285}, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x68c8, &(0x7f0000000100)={0x0, 0xc947, 0x2, 0x2, 0x25e}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r2, &(0x7f0000000200)={0x80000019}, 0xffffffffffffffff, 0x3, 0x0, 0x1, {0x0, r6}}, 0x8) 20:34:02 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 61) 20:34:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x40000000000000) 20:34:02 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x3) 20:34:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x60000000000000) 20:34:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa04aaaaaaaa20bfcfb41d6cba31"], 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1409.333895] FAULT_INJECTION: forcing a failure. [ 1409.333895] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.337351] CPU: 1 PID: 8841 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1409.338806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.340560] Call Trace: [ 1409.341127] dump_stack+0x107/0x167 [ 1409.341906] should_fail.cold+0x5/0xa 20:34:02 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0xc, 0x40010, 0xffffffffffffffff, 0x0) [ 1409.342716] ? create_object.isra.0+0x3a/0xa30 [ 1409.343804] should_failslab+0x5/0x20 [ 1409.344609] kmem_cache_alloc+0x5b/0x310 [ 1409.345476] create_object.isra.0+0x3a/0xa30 [ 1409.346404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1409.347494] kmem_cache_alloc+0x159/0x310 [ 1409.348373] anon_vma_fork+0xf1/0x640 [ 1409.349169] ? __vm_enough_memory+0x184/0x360 [ 1409.350116] copy_process+0x72cd/0x78b0 [ 1409.350993] ? __cleanup_sighand+0xb0/0xb0 [ 1409.351919] ? _copy_from_user+0xfb/0x1b0 [ 1409.352800] kernel_clone+0xe7/0x980 [ 1409.353593] ? __lockdep_reset_lock+0x180/0x180 [ 1409.354574] ? create_io_thread+0xf0/0xf0 [ 1409.355479] ? ksys_write+0x21a/0x260 [ 1409.356291] ? lock_downgrade+0x6d0/0x6d0 [ 1409.357176] __do_sys_clone3+0x1e5/0x320 [ 1409.358032] ? __do_sys_clone+0x110/0x110 [ 1409.358931] ? rcu_read_lock_any_held+0x75/0xa0 [ 1409.359921] ? vfs_write+0x354/0xb10 [ 1409.360699] ? fput_many+0x2f/0x1a0 [ 1409.361464] ? ksys_write+0x1a9/0x260 [ 1409.362250] ? __ia32_sys_read+0xb0/0xb0 [ 1409.363112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1409.364203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1409.365271] ? trace_hardirqs_on+0x5b/0x180 [ 1409.366173] do_syscall_64+0x33/0x40 [ 1409.366951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1409.368021] RIP: 0033:0x7f3a69dacb19 [ 1409.368798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.372624] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1409.374219] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1409.375705] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1409.377197] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.378679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1409.380173] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:34:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 52) [ 1425.593731] FAULT_INJECTION: forcing a failure. [ 1425.593731] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.596672] CPU: 1 PID: 8857 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1425.598417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1425.600529] Call Trace: [ 1425.601212] dump_stack+0x107/0x167 [ 1425.602146] should_fail.cold+0x5/0xa [ 1425.603120] ? create_object.isra.0+0x3a/0xa30 [ 1425.604286] should_failslab+0x5/0x20 [ 1425.605254] kmem_cache_alloc+0x5b/0x310 [ 1425.606292] ? mark_held_locks+0x9e/0xe0 [ 1425.607353] create_object.isra.0+0x3a/0xa30 20:34:19 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 62) 20:34:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:34:19 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0) 20:34:19 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x685, 0x301700) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = signalfd4(r0, &(0x7f0000000800)={[0x1000]}, 0x8, 0x80800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) recvmmsg$unix(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000480)=""/119, 0x77}], 0x3}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/35, 0x23}, {&(0x7f0000002540)=""/82, 0x52}], 0x2, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000000d40)=[{&(0x7f00000025c0)=""/165, 0xa5}, {&(0x7f0000000840)=""/130, 0x82}, {&(0x7f0000000900)=""/102, 0x66}, {&(0x7f0000000980)=""/115, 0x73}, {&(0x7f0000000a00)=""/168, 0xa8}, {&(0x7f0000000ac0)=""/46, 0x2e}, {&(0x7f0000000b00)=""/242, 0xf2}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/170, 0xaa}], 0x9, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x2, &(0x7f0000002080)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000002300)=[{&(0x7f0000002240)=""/179, 0xb3}], 0x1}}], 0x5, 0x2100, &(0x7f0000002480)) io_submit(0x0, 0x3, &(0x7f0000002500)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000100)="c55ab944847958466685c4a3350a5a95f3b21d198b6d074d4b0971a0c243e664a1e6573060264b4f39a910c00b4ecda2a0f0d2b049f8044b0cd43d32d6adbf702990bc340779fbce62efed8c75f227f63738077c6e6522b3f4ae23a90f24de9af5eb67ce3a342e4ef2e14ced356fede7901a5ad8a5792810b958f16d885675463d5462d18a9151332453847f4ca64485480c88a2cbdb19f0", 0x98, 0x1ff, 0x0, 0x6, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000200)='\aY8', 0x3, 0x2, 0x0, 0x2, r2}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x20, r0, &(0x7f0000000280)="5cd22f8d3a0a608d7b61b09aa757de6192fa2b33bf099bc93b3273f9fee98a94813a79c248e4a3ab82a741c64ae8117c60a9b2693fbeb3cac5be07d2035b4f9b0ed5d906122086130517376f7de4f08b07c323da680c30737366d566ee45287a68d01128d4b3b47172d6adc534f058f032d7e69f5ea2", 0x76, 0x4, 0x0, 0x0, r3}]) io_uring_enter(0xffffffffffffffff, 0x7, 0x893, 0x1, &(0x7f0000000000)={[0x400]}, 0x8) r5 = syz_io_uring_setup(0xea8, &(0x7f0000000600)={0x0, 0xc163, 0x4, 0x2, 0x3a4, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x0, 0x2010, r5, 0x0) [ 1425.608468] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 20:34:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x30000000000000) 20:34:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80000000000000) 20:34:19 executing program 7: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x81, 0x34, 0x0, 0x1, 0x0, 0x80000001, 0x12020, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3db943a8312e897d, @perf_config_ext={0x6ccd, 0x10001}, 0x10, 0x3, 0xe0000, 0x3, 0x2, 0x69d, 0x3, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) [ 1425.609963] kmem_cache_alloc+0x159/0x310 [ 1425.611215] xas_alloc+0x336/0x440 [ 1425.612151] xas_create+0x34a/0x10d0 [ 1425.613124] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1425.614473] xas_store+0x8c/0x1c40 [ 1425.615426] __xa_store+0x164/0x2d0 [ 1425.616365] ? xa_delete_node+0x280/0x280 [ 1425.617439] ? trace_hardirqs_on+0x5b/0x180 [ 1425.618555] xa_store+0x31/0x50 [ 1425.619417] __io_uring_add_tctx_node+0x1cf/0x520 [ 1425.620656] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1425.621997] ? alloc_fd+0x2e7/0x670 [ 1425.622951] io_uring_setup+0x1fbb/0x2980 [ 1425.624035] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1425.625331] ? wait_for_completion_io+0x270/0x270 [ 1425.626604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1425.627955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1425.629283] do_syscall_64+0x33/0x40 [ 1425.630239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1425.631562] RIP: 0033:0x7f2e9760cb19 [ 1425.632516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1425.637045] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1425.638689] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1425.640236] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1425.641779] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1425.643326] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1425.644860] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1425.665967] FAULT_INJECTION: forcing a failure. [ 1425.665967] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1425.668646] CPU: 1 PID: 8874 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1425.670130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1425.671934] Call Trace: [ 1425.672512] dump_stack+0x107/0x167 [ 1425.673308] should_fail.cold+0x5/0xa [ 1425.674144] __alloc_pages_nodemask+0x182/0x600 [ 1425.675153] ? lock_acquire+0x197/0x470 [ 1425.676032] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1425.677340] ? lock_downgrade+0x6d0/0x6d0 [ 1425.678235] ? do_raw_spin_lock+0x121/0x260 [ 1425.679180] alloc_pages_current+0x187/0x280 [ 1425.680150] __pmd_alloc+0x37/0x630 [ 1425.680946] copy_page_range+0x2bd0/0x3800 [ 1425.681864] ? perf_trace_lock+0xac/0x490 [ 1425.682761] ? lock_chain_count+0x20/0x20 [ 1425.683676] ? find_held_lock+0x2c/0x110 [ 1425.684564] ? anon_vma_fork+0x462/0x640 [ 1425.685470] ? up_write+0x191/0x550 [ 1425.686260] ? vm_iomap_memory+0x190/0x190 [ 1425.687169] ? downgrade_write+0x3a0/0x3a0 [ 1425.688094] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1425.689261] ? __vma_link_rb+0x540/0x700 [ 1425.690147] copy_process+0x7658/0x78b0 [ 1425.691046] ? __cleanup_sighand+0xb0/0xb0 [ 1425.691992] ? _copy_from_user+0xfb/0x1b0 [ 1425.692897] kernel_clone+0xe7/0x980 [ 1425.693701] ? __lockdep_reset_lock+0x180/0x180 [ 1425.694703] ? create_io_thread+0xf0/0xf0 [ 1425.695621] ? ksys_write+0x21a/0x260 [ 1425.696442] ? lock_downgrade+0x6d0/0x6d0 [ 1425.697341] __do_sys_clone3+0x1e5/0x320 [ 1425.698217] ? __do_sys_clone+0x110/0x110 [ 1425.699139] ? rcu_read_lock_any_held+0x75/0xa0 [ 1425.700146] ? vfs_write+0x354/0xb10 [ 1425.700950] ? fput_many+0x2f/0x1a0 [ 1425.701731] ? ksys_write+0x1a9/0x260 [ 1425.702547] ? __ia32_sys_read+0xb0/0xb0 [ 1425.703438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1425.704568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1425.705673] ? trace_hardirqs_on+0x5b/0x180 [ 1425.706608] do_syscall_64+0x33/0x40 [ 1425.707421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1425.708525] RIP: 0033:0x7f3a69dacb19 [ 1425.709330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1425.713298] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1425.714939] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1425.716482] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1425.718015] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1425.719561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1425.721097] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:34:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x80000000000000) 20:34:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 53) 20:34:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:34:34 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x6101, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f0000001080)=@v2={0x3, 0x2, 0x42, 0x2, 0x1000, "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"}, 0x1009, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0xd55b) 20:34:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x80ffff00000000) [ 1441.477255] FAULT_INJECTION: forcing a failure. [ 1441.477255] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.479735] CPU: 1 PID: 8887 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1441.481209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.483001] Call Trace: [ 1441.483586] dump_stack+0x107/0x167 [ 1441.484377] should_fail.cold+0x5/0xa [ 1441.485200] ? xas_alloc+0x336/0x440 [ 1441.486001] should_failslab+0x5/0x20 [ 1441.486820] kmem_cache_alloc+0x5b/0x310 [ 1441.487715] xas_alloc+0x336/0x440 [ 1441.488488] xas_create+0x34a/0x10d0 [ 1441.489307] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1441.490439] xas_store+0x8c/0x1c40 [ 1441.491222] __xa_store+0x164/0x2d0 [ 1441.492022] ? xa_delete_node+0x280/0x280 [ 1441.492928] ? trace_hardirqs_on+0x5b/0x180 [ 1441.493869] xa_store+0x31/0x50 [ 1441.494588] __io_uring_add_tctx_node+0x1cf/0x520 [ 1441.495648] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1441.496777] ? alloc_fd+0x2e7/0x670 [ 1441.497575] io_uring_setup+0x1fbb/0x2980 [ 1441.498480] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1441.499587] ? wait_for_completion_io+0x270/0x270 [ 1441.500659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1441.501790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1441.502910] do_syscall_64+0x33/0x40 [ 1441.503722] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.504824] RIP: 0033:0x7f2e9760cb19 [ 1441.505628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.509635] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1441.511280] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1441.512826] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1441.514367] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1441.515920] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1441.517431] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1441.550464] FAULT_INJECTION: forcing a failure. [ 1441.550464] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.552923] CPU: 1 PID: 8900 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1441.554369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.556128] Call Trace: [ 1441.556702] dump_stack+0x107/0x167 [ 1441.557473] should_fail.cold+0x5/0xa [ 1441.558284] ? __pmd_alloc+0x94/0x630 [ 1441.559085] should_failslab+0x5/0x20 [ 1441.559905] kmem_cache_alloc+0x5b/0x310 [ 1441.560770] __pmd_alloc+0x94/0x630 [ 1441.561558] copy_page_range+0x2bd0/0x3800 [ 1441.562456] ? perf_trace_lock+0xac/0x490 [ 1441.563329] ? lock_chain_count+0x20/0x20 [ 1441.564230] ? find_held_lock+0x2c/0x110 [ 1441.565094] ? anon_vma_fork+0x462/0x640 [ 1441.565976] ? up_write+0x191/0x550 [ 1441.566742] ? vm_iomap_memory+0x190/0x190 [ 1441.567641] ? downgrade_write+0x3a0/0x3a0 [ 1441.568541] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1441.569677] ? __vma_link_rb+0x540/0x700 [ 1441.570547] copy_process+0x7658/0x78b0 [ 1441.571455] ? __cleanup_sighand+0xb0/0xb0 [ 1441.572380] ? _copy_from_user+0xfb/0x1b0 [ 1441.573275] kernel_clone+0xe7/0x980 [ 1441.574067] ? __lockdep_reset_lock+0x180/0x180 [ 1441.575055] ? create_io_thread+0xf0/0xf0 [ 1441.575957] ? ksys_write+0x21a/0x260 [ 1441.576761] ? lock_downgrade+0x6d0/0x6d0 [ 1441.577639] __do_sys_clone3+0x1e5/0x320 [ 1441.578496] ? __do_sys_clone+0x110/0x110 [ 1441.579393] ? rcu_read_lock_any_held+0x75/0xa0 [ 1441.580375] ? vfs_write+0x354/0xb10 [ 1441.581159] ? fput_many+0x2f/0x1a0 [ 1441.581921] ? ksys_write+0x1a9/0x260 [ 1441.582723] ? __ia32_sys_read+0xb0/0xb0 [ 1441.583592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1441.584693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1441.585769] ? trace_hardirqs_on+0x5b/0x180 [ 1441.586682] do_syscall_64+0x33/0x40 [ 1441.587480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.588555] RIP: 0033:0x7f3a69dacb19 [ 1441.589346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.593222] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1441.594824] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1441.596335] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1441.597836] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1441.599330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.600854] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:34:34 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 63) 20:34:34 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x40110, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/tcp\x00') mmap(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r0, 0x18f3c000) r3 = fork() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x22c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x8001, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, r3, 0xa, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40d9, 0x860, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80000000, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x22c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x8001, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, r5, 0xa, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x9, &(0x7f00000000c0)=""/195) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r2, 0x0, &(0x7f0000001b40)={&(0x7f0000000540)=@generic={0x6, "11a6f50d50c9ff6269e342755f0ca92fd37cdf9a58ef4501de2796cf9544c1b419f520221e829cb0754705c877ad383f989b1f1fa9be749a44d6997eb7f2c70ce7a2c9145d313c22988742eba8eefaa28efe4d357fae96ae7311441e475af341fd5a6b83c4b31b09180ca5a2ae60e3c4fd4f92410db1c3495854f0ca5ca7"}, 0x80, &(0x7f0000001840)=[{&(0x7f00000005c0)="46ba6d3339c03212a01b8617bf52b08171fb53875426c091ed2c09ef881e7a42694609e5d39b2fe56a", 0x29}, {&(0x7f0000000600)="959eaf2c1331c1cdae57f90a2283ff9503d460d5dfe82324", 0x18}, {&(0x7f0000000640)="8a284b1cb248c5e0ba4ddfaf9d801e62723dde127f594129bd0d963dd82ddbce58c8da8258ee9953c0ba5a30dd0848a2", 0x30}, {&(0x7f0000000680)="1735206537b00a2708761238a7ad8f1bd6cf458ef5824c34005bbd8e6c16e9841a8d2c8ee9f16849615a2299243c7f1981e3d50c5e0b274bb0b105f2452371c67985bccc6b93ee60513dff8830130fee84de890cb7dc9d7ac0e2052f2526ff7013b9263aff12aed238f33ff452dbbcde457bb68c4473f72df9393b9b1b059610fcdf433ebdf26c8efd89a0d13a80822c433c5f3fa22c949e33a510df727eba9f52b3ece45f69742520735a435bff23", 0xaf}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001740)="61d95cd3de3e8948cf585cc2756d8ea831e99f5fd1fd9b91e7b71f4a21e030b59b13f65778a1502aeb13b9f72b6e8b2003443d636aa5d3d06849bb580428d69579a78e1400b1236b783d69457466ee55ce5f793539ec1703b0d3ffb7283c848d1ff88bbf4ea93b874de69cb4f5add5263d572ec60f24705c4638bc9d26f1fc4c609c83c0fb1517db1745470db5c13171c4c2b5c3ab29e624fee0d0603bff392aef83c7496b2c2ff7f9fc9e063392d7436900b8a820bc3d5fddf2ec39dddbaf149fe7a8f23b45dbb008ebac1a5d450335bed9c3f73f5e29737f53e347ec654d6ad0d6fe758fe0e30871caea1ec295042eb35327ceb2", 0xf5}], 0x7, &(0x7f00000018c0)=[{0x90, 0x116, 0x9, "9841965235abf90f03ee772f6da34445383ef976fdce94da1f6d07e5595797d721e254821e1461b37b046efd374e94093ca576203c2ae0f904ee3e134957bed3fdc8efe40712a1a84bddc9d018030e16778fb2f328d9931ff1edb585287ae6a98019b64e027f3c53a71c0bfdc550adea93e5f0a40b6f138ef4"}, {0xc0, 0x112, 0x7f, "c95a1bab5436919e8fdd8bfc64d70059bd022090f9eef333a8480a9fa8b6ff73030a2b72fa372d54e7e8f0549d36ad6900cc747ecec97116fb2c0cd910828bec08fa85a457ed0b2463494ed83a1837d1d189658fd2e780e00b6c39af84c1496b4d5008fb289cf5e17ff8733aa9b881f032a4d47e2476483dba38d49d9d06b7eaa45248cc65d4abc011ed698b19462e5fbef5cbc4254ce95a7e1c81dbc2a253957a1312661502670e2db36227c4d715"}, {0x110, 0x3a, 0x3, "616e721e84939bf44d2080dc05b5e45764866f335d7320d6ffd5d643fe20c679dc6aea55cd3b3bf831efe1665b432d5a638608521652e0e9365b9ec9fc3bb26163a3410b8640cff683cc861fc2360b16e1634f0798e56818121673af7d0c2618376b9ffd16fa6bd1fb6b660460dd490108c13fd894cd0223d60ae29a36bcbb73df74b0a2467134b6e66929747b9e9753535ad3e835f2e83241b722cb49ea588500cc0fd3502f12e817d073449318f2a4cd22fd5baea86d692d21693628d61fd003c0bca6d6e878e92f43dbb1b74d8ca6baf07dbd594316c7973f82a94083c060f8965cc75f22df68aaa2e6226a4f1f1957e0781a21cbc715cef759"}], 0x260}, 0x0, 0x4000800, 0x1}, 0x8ec) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)=0x80, &(0x7f0000000340)=@phonet, 0x0, 0x80000, 0x1, {0x0, r6}}, 0x5) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0xe6, 0x0, 0x2, 0x0, 0x0, 0x12020, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_config_ext={0x7fff}, 0x8000, 0x4, 0xfffffff8, 0x7bed39852cbb8299, 0x94, 0x9, 0x52, 0x0, 0x3ff, 0x0, 0x6}, r3, 0x3, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) io_uring_enter(r7, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0, 0x30, r7, 0x0) 20:34:34 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x40000000, 0x0, 0x0, 0x0) 20:34:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x100000000000000) 20:34:35 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0xc, 0x8014, 0xffffffffffffffff, 0x0) 20:34:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x100000000000000) 20:34:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x200000000000000) 20:34:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 54) 20:34:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff8001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:34:35 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xb5200000, 0x0, 0x0, 0x0) 20:34:35 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 64) [ 1441.792474] FAULT_INJECTION: forcing a failure. [ 1441.792474] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.794850] CPU: 1 PID: 8923 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1441.796288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.798034] Call Trace: [ 1441.798594] dump_stack+0x107/0x167 [ 1441.799364] should_fail.cold+0x5/0xa [ 1441.800186] ? create_object.isra.0+0x3a/0xa30 [ 1441.801147] should_failslab+0x5/0x20 [ 1441.801946] kmem_cache_alloc+0x5b/0x310 [ 1441.802800] ? mark_held_locks+0x9e/0xe0 [ 1441.803672] create_object.isra.0+0x3a/0xa30 [ 1441.804602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.805681] kmem_cache_alloc+0x159/0x310 [ 1441.806564] xas_alloc+0x336/0x440 [ 1441.807318] xas_create+0x34a/0x10d0 [ 1441.808130] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1441.809242] xas_store+0x8c/0x1c40 [ 1441.810010] __xa_store+0x164/0x2d0 [ 1441.810783] ? xa_delete_node+0x280/0x280 [ 1441.811667] ? trace_hardirqs_on+0x5b/0x180 [ 1441.812584] xa_store+0x31/0x50 [ 1441.813286] __io_uring_add_tctx_node+0x1cf/0x520 [ 1441.814311] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1441.815412] ? alloc_fd+0x2e7/0x670 [ 1441.816203] io_uring_setup+0x1fbb/0x2980 [ 1441.817084] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1441.818149] ? wait_for_completion_io+0x270/0x270 [ 1441.819194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1441.820305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1441.821390] do_syscall_64+0x33/0x40 [ 1441.822178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.823254] RIP: 0033:0x7f2e9760cb19 [ 1441.824042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.827939] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1441.829538] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1441.831039] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1441.832541] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1441.834039] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1441.835559] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:34:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x300000000000000) 20:34:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x200000000000000) 20:34:35 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x100000c, 0x100010, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff, 0x6, &(0x7f0000001340)=[{&(0x7f0000000080)="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", 0x1000, 0x10000}, {&(0x7f0000001080)="a4e577eaf744cad38d52d09e52fe", 0xe, 0x3ff}, {&(0x7f00000010c0)="f53557d8dad3b8d0bb637d36d6a2cadb668b884e197d7dcd9586db4389c36e88f9744985041948d655d1607b829119c959bea2878acaf2e1119bed111948e41388efc9ea9a65b3149ac597583f0efdbbd3", 0x51, 0xe8f}, {&(0x7f0000001140)="c8b91b", 0x3, 0x4}, {&(0x7f0000001180)="69e0e9d8bfef8143b5ab496a048b9bde2cca8e7d95c67c5dcf373651d68be5717df525ca1ab9cf3df57aeb416162db89365f8ea02418c58941d3e16692a1eebfd0801c377d40f92182baeaee08a3a3a52e72f253038f926a3b5a68a46dc5e58cedaf5ed8f15418ade61c56df93949fadcf6dfcd4411d80400b10ee81f28fd58ee207872efbdde1c27c867edcf5b7e959b896c43d21e223c44966e14a8398d7a1cfb79ec98aecf973daa1d78090862491069a97610df289f73a3332923eac318b89f478ec0c2f3270996c1b6fe252d5be735404b27686fc699ef9a7cd26", 0xdd, 0xb722}, {&(0x7f0000001280)="96ffcd0530240c3d69181d978eaa7f020249c7fbd70b40ee74be3a14aaa218c0edefdb2797641d8c02c73ff4f1a689292a75af5511570002f119c69fbfec0424aa316b915f485d2661d8a59cf6f40e57a4a31f1b351f8c3ee41a4ede980f4bde13b5d36ed04a1245e6da60f13b53859f691214e8830c6c42080f7e2406efa1b874aa8e1f884cc32e1bcc15ce9c7cee9781c13469c3b5e35fbb20369a7df0d5ad556bf7dbbb4c", 0xa6, 0x1}], 0x7a480, &(0x7f0000001400)=ANY=[@ANYBLOB="6a6f75726e616c5f636865636b73756d2c7375626a5f747970653d2c2c726f6f74636f6e746578743d73746166665f752c7375626a5f726f6c653d2e2c66756e583d4b455845435f494e495452414d46535f434845434b2c636f6e746578743d73797374656d5f752c736d61636b66736465663d2bf37d2c7375626a5f726f6c653d2d292f2c00"]) syz_io_uring_setup(0x674f, &(0x7f0000001540)={0x0, 0x2ee6, 0x1, 0x2, 0x23d}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fec000/0x3000)=nil, &(0x7f00000015c0), &(0x7f0000001680)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000001640)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r3}}, 0x8) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000001500)={0x10000, 0x30, [0x5, 0xff, 0xa9, 0xfffffffffffffe00], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 1441.889301] FAULT_INJECTION: forcing a failure. [ 1441.889301] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.891758] CPU: 1 PID: 8934 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1441.893198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.894946] Call Trace: [ 1441.895514] dump_stack+0x107/0x167 [ 1441.896286] should_fail.cold+0x5/0xa [ 1441.897090] ? create_object.isra.0+0x3a/0xa30 [ 1441.898055] should_failslab+0x5/0x20 [ 1441.898852] kmem_cache_alloc+0x5b/0x310 [ 1441.899728] create_object.isra.0+0x3a/0xa30 [ 1441.900652] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.901727] kmem_cache_alloc+0x159/0x310 [ 1441.902610] anon_vma_fork+0x1ff/0x640 [ 1441.903454] copy_process+0x72cd/0x78b0 [ 1441.904344] ? __cleanup_sighand+0xb0/0xb0 [ 1441.905259] ? _copy_from_user+0xfb/0x1b0 [ 1441.906139] kernel_clone+0xe7/0x980 [ 1441.906927] ? __lockdep_reset_lock+0x180/0x180 [ 1441.907907] ? create_io_thread+0xf0/0xf0 [ 1441.908794] ? ksys_write+0x21a/0x260 [ 1441.909599] ? lock_downgrade+0x6d0/0x6d0 [ 1441.910475] __do_sys_clone3+0x1e5/0x320 [ 1441.911337] ? __do_sys_clone+0x110/0x110 [ 1441.912260] ? rcu_read_lock_any_held+0x75/0xa0 [ 1441.913228] ? vfs_write+0x354/0xb10 [ 1441.914016] ? fput_many+0x2f/0x1a0 [ 1441.914779] ? ksys_write+0x1a9/0x260 [ 1441.915593] ? __ia32_sys_read+0xb0/0xb0 [ 1441.916451] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1441.917553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1441.918629] ? trace_hardirqs_on+0x5b/0x180 [ 1441.919549] do_syscall_64+0x33/0x40 [ 1441.920335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.921419] RIP: 0033:0x7f3a69dacb19 [ 1441.922215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.926064] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1441.927664] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1441.929166] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1441.930669] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1441.932191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.933699] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:34:35 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe1010000, 0x0, 0x0, 0x0) 20:34:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x400000000000000) 20:34:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x300000000000000) 20:34:35 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp, &(0x7f0000000080)=0x80, 0x80000) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:34:35 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x100, {0x0, 0x43, 0x100, 0x80, 0x6}}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0x2, 0x9}, {{}, 0x3, 0x5, 0x800}, {{0x0, 0xea60}, 0x16, 0x2, 0x449}, {{r1, r2/1000+10000}, 0x3, 0x90}, {{}, 0x12, 0x4, 0xbe04}, {{0x77359400}, 0x3, 0x6}, {{}, 0x1f, 0x0, 0x200}, {{r3, r4/1000+10000}, 0x11, 0x100, 0x3f}, {{}, 0x17, 0xff00, 0x800}], 0xd8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) fallocate(r5, 0x8, 0x1, 0x5) 20:34:52 executing program 7: rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:34:52 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x500000000000000) 20:34:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:34:52 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xae, 0x3, 0x6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) 20:34:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 55) 20:34:52 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xe4ffffff, 0x0, 0x0, 0x0) 20:34:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x400000000000000) 20:34:52 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 65) [ 1459.526447] FAULT_INJECTION: forcing a failure. [ 1459.526447] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.528994] CPU: 1 PID: 8977 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1459.530479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.532280] Call Trace: [ 1459.532855] dump_stack+0x107/0x167 [ 1459.533649] should_fail.cold+0x5/0xa [ 1459.534484] ? xas_alloc+0x336/0x440 [ 1459.535294] should_failslab+0x5/0x20 [ 1459.536133] kmem_cache_alloc+0x5b/0x310 [ 1459.537022] xas_alloc+0x336/0x440 [ 1459.537794] xas_create+0x34a/0x10d0 [ 1459.538617] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1459.539765] xas_store+0x8c/0x1c40 [ 1459.540553] __xa_store+0x164/0x2d0 [ 1459.541350] ? xa_delete_node+0x280/0x280 [ 1459.542258] ? trace_hardirqs_on+0x5b/0x180 [ 1459.543196] xa_store+0x31/0x50 [ 1459.543924] __io_uring_add_tctx_node+0x1cf/0x520 [ 1459.544973] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1459.546107] ? alloc_fd+0x2e7/0x670 [ 1459.546906] io_uring_setup+0x1fbb/0x2980 [ 1459.547830] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1459.548918] ? wait_for_completion_io+0x270/0x270 [ 1459.549988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.551119] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.552245] do_syscall_64+0x33/0x40 [ 1459.553051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1459.554156] RIP: 0033:0x7f2e9760cb19 [ 1459.554954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.558927] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1459.560585] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1459.562125] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1459.563677] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1459.565215] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1459.566757] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1459.580572] FAULT_INJECTION: forcing a failure. [ 1459.580572] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.583221] CPU: 1 PID: 8979 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1459.584720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.586514] Call Trace: [ 1459.587088] dump_stack+0x107/0x167 [ 1459.587888] should_fail.cold+0x5/0xa [ 1459.588715] ? __pmd_alloc+0x94/0x630 [ 1459.589539] should_failslab+0x5/0x20 [ 1459.590362] kmem_cache_alloc+0x5b/0x310 [ 1459.591249] __pmd_alloc+0x94/0x630 [ 1459.592049] copy_page_range+0x2bd0/0x3800 [ 1459.592966] ? perf_trace_lock+0xac/0x490 [ 1459.593860] ? lock_chain_count+0x20/0x20 [ 1459.594765] ? find_held_lock+0x2c/0x110 [ 1459.595662] ? anon_vma_fork+0x462/0x640 [ 1459.596571] ? up_write+0x191/0x550 [ 1459.597364] ? vm_iomap_memory+0x190/0x190 [ 1459.598278] ? downgrade_write+0x3a0/0x3a0 [ 1459.599201] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1459.600397] ? __vma_link_rb+0x540/0x700 [ 1459.601290] copy_process+0x7658/0x78b0 [ 1459.602193] ? __cleanup_sighand+0xb0/0xb0 [ 1459.603133] ? _copy_from_user+0xfb/0x1b0 [ 1459.604047] kernel_clone+0xe7/0x980 [ 1459.604853] ? __lockdep_reset_lock+0x180/0x180 [ 1459.605861] ? create_io_thread+0xf0/0xf0 [ 1459.606770] ? ksys_write+0x21a/0x260 [ 1459.607592] ? lock_downgrade+0x6d0/0x6d0 [ 1459.608503] __do_sys_clone3+0x1e5/0x320 [ 1459.609375] ? __do_sys_clone+0x110/0x110 [ 1459.610290] ? rcu_read_lock_any_held+0x75/0xa0 [ 1459.611290] ? vfs_write+0x354/0xb10 [ 1459.612101] ? fput_many+0x2f/0x1a0 [ 1459.612883] ? ksys_write+0x1a9/0x260 [ 1459.613702] ? __ia32_sys_read+0xb0/0xb0 [ 1459.614582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.615723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.616830] ? trace_hardirqs_on+0x5b/0x180 [ 1459.617763] do_syscall_64+0x33/0x40 [ 1459.618565] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1459.619676] RIP: 0033:0x7f3a69dacb19 [ 1459.620476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.624438] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1459.626077] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1459.627613] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1459.629159] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.630693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.632235] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:34:53 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000e, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7e98, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x1010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@tipc=@name, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001340)=""/188, 0xbc}, 0x0, 0x10021, 0x1, {0x1}}, 0x0) io_uring_enter(r0, 0x11d1, 0x8e18, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x1010, r0, 0x0) 20:34:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x600000000000000) 20:35:10 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) 20:35:10 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xffff3f00, 0x0, 0x0, 0x0) 20:35:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x700000000000000) 20:35:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x500000000000000) 20:35:10 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 66) 20:35:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:35:10 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 56) 20:35:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x602800, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x238, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3da}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x65}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x66}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "62b86b24fc99a063bf8912080ffeca71feaff2461f92915f4b86d6"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "ba70126bb2d6ea528cebf13c100578c8f261735554d35141"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "e98c596f50d4406dcfcff8c42bc7be43806a2cf1c31f7e93a19ec5118d311f662cba472631f1b12d47d1cfc6980b97dbe23e8dc1e4c4eacbd83785b15afd8d5122929427de4fedc16c144b20801e2a3a3f20914d9cedee581da8718231be2009c8a81d014c50ffa5b9f077212d538579305e2ed87c2bd94a281d3aef7460638415ed95dca737b46b0af6587d0d7ecb0920bc9b27a45cef94b0128922698c59b4aa12ca"}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) openat(r1, &(0x7f0000000500)='./file0\x00', 0x10000, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6b}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4004000) [ 1476.638514] FAULT_INJECTION: forcing a failure. [ 1476.638514] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.640286] CPU: 0 PID: 9010 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1476.641274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1476.642297] FAULT_INJECTION: forcing a failure. [ 1476.642297] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.642463] Call Trace: [ 1476.642492] dump_stack+0x107/0x167 [ 1476.645920] should_fail.cold+0x5/0xa [ 1476.646478] ? create_object.isra.0+0x3a/0xa30 [ 1476.647140] should_failslab+0x5/0x20 [ 1476.647685] kmem_cache_alloc+0x5b/0x310 [ 1476.648281] ? mark_held_locks+0x9e/0xe0 [ 1476.648859] create_object.isra.0+0x3a/0xa30 [ 1476.649500] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1476.650228] kmem_cache_alloc+0x159/0x310 [ 1476.650831] xas_alloc+0x336/0x440 [ 1476.651345] xas_create+0x34a/0x10d0 [ 1476.651912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1476.652664] xas_store+0x8c/0x1c40 [ 1476.653186] __xa_store+0x164/0x2d0 [ 1476.653709] ? xa_delete_node+0x280/0x280 [ 1476.654331] ? trace_hardirqs_on+0x5b/0x180 [ 1476.654968] xa_store+0x31/0x50 [ 1476.655453] __io_uring_add_tctx_node+0x1cf/0x520 [ 1476.656148] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1476.656903] ? alloc_fd+0x2e7/0x670 [ 1476.657448] io_uring_setup+0x1fbb/0x2980 [ 1476.658045] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1476.658760] ? wait_for_completion_io+0x270/0x270 [ 1476.659493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1476.660248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1476.660990] do_syscall_64+0x33/0x40 [ 1476.661526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1476.662252] RIP: 0033:0x7f2e9760cb19 [ 1476.662801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.665409] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1476.666481] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1476.667488] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1476.668531] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1476.669538] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1476.670542] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1476.671579] CPU: 1 PID: 9013 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1476.673160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1476.675028] Call Trace: [ 1476.675634] dump_stack+0x107/0x167 [ 1476.676484] should_fail.cold+0x5/0xa [ 1476.677348] ? create_object.isra.0+0x3a/0xa30 [ 1476.678376] should_failslab+0x5/0x20 [ 1476.679239] kmem_cache_alloc+0x5b/0x310 [ 1476.680177] create_object.isra.0+0x3a/0xa30 [ 1476.681171] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1476.682335] kmem_cache_alloc+0x159/0x310 [ 1476.683287] __pmd_alloc+0x94/0x630 [ 1476.684133] copy_page_range+0x2bd0/0x3800 [ 1476.685110] ? perf_trace_lock+0xac/0x490 [ 1476.686059] ? lock_chain_count+0x20/0x20 [ 1476.687016] ? find_held_lock+0x2c/0x110 [ 1476.687960] ? anon_vma_fork+0x462/0x640 [ 1476.688916] ? up_write+0x191/0x550 [ 1476.689748] ? vm_iomap_memory+0x190/0x190 [ 1476.690711] ? downgrade_write+0x3a0/0x3a0 [ 1476.691679] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1476.692913] ? __vma_link_rb+0x540/0x700 [ 1476.693856] copy_process+0x7658/0x78b0 [ 1476.694804] ? __cleanup_sighand+0xb0/0xb0 [ 1476.695813] ? _copy_from_user+0xfb/0x1b0 [ 1476.696766] kernel_clone+0xe7/0x980 [ 1476.697613] ? __lockdep_reset_lock+0x180/0x180 [ 1476.698669] ? create_io_thread+0xf0/0xf0 [ 1476.699644] ? ksys_write+0x21a/0x260 [ 1476.700524] ? lock_downgrade+0x6d0/0x6d0 [ 1476.701470] __do_sys_clone3+0x1e5/0x320 [ 1476.702398] ? __do_sys_clone+0x110/0x110 [ 1476.703370] ? rcu_read_lock_any_held+0x75/0xa0 [ 1476.704418] ? vfs_write+0x354/0xb10 [ 1476.705264] ? fput_many+0x2f/0x1a0 [ 1476.706081] ? ksys_write+0x1a9/0x260 [ 1476.706953] ? __ia32_sys_read+0xb0/0xb0 [ 1476.707895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1476.709094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1476.710259] ? trace_hardirqs_on+0x5b/0x180 [ 1476.711254] do_syscall_64+0x33/0x40 [ 1476.712116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1476.713274] RIP: 0033:0x7f3a69dacb19 [ 1476.714116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.718269] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1476.719995] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1476.721610] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1476.723226] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.724853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1476.726470] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:35:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x600000000000000) 20:35:10 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 57) 20:35:10 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xfcffffffffff0700) 20:35:10 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x10, 0xffffffffffffffff, 0x0) 20:35:10 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0xffffffe4, 0x0, 0x0, 0x0) [ 1476.824772] FAULT_INJECTION: forcing a failure. [ 1476.824772] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.827224] CPU: 1 PID: 9027 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1476.828682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1476.830429] Call Trace: [ 1476.830990] dump_stack+0x107/0x167 [ 1476.831770] should_fail.cold+0x5/0xa [ 1476.832587] ? create_object.isra.0+0x3a/0xa30 [ 1476.833549] should_failslab+0x5/0x20 [ 1476.834353] kmem_cache_alloc+0x5b/0x310 [ 1476.835222] ? mark_held_locks+0x9e/0xe0 [ 1476.836098] create_object.isra.0+0x3a/0xa30 [ 1476.837022] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1476.838110] kmem_cache_alloc+0x159/0x310 [ 1476.838996] xas_alloc+0x336/0x440 [ 1476.839757] xas_create+0x34a/0x10d0 [ 1476.840571] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1476.841683] xas_store+0x8c/0x1c40 [ 1476.842460] __xa_store+0x164/0x2d0 [ 1476.843232] ? xa_delete_node+0x280/0x280 [ 1476.844136] ? trace_hardirqs_on+0x5b/0x180 [ 1476.845065] xa_store+0x31/0x50 [ 1476.845768] __io_uring_add_tctx_node+0x1cf/0x520 [ 1476.846790] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1476.847902] ? alloc_fd+0x2e7/0x670 [ 1476.848690] io_uring_setup+0x1fbb/0x2980 [ 1476.849577] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1476.850646] ? wait_for_completion_io+0x270/0x270 [ 1476.851696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1476.852810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1476.853912] do_syscall_64+0x33/0x40 [ 1476.854706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1476.855793] RIP: 0033:0x7f2e9760cb19 [ 1476.856597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.860492] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1476.862102] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1476.863614] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1476.865120] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1476.866625] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1476.868144] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:35:10 executing program 6: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x8010, r0, 0x0) 20:35:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x700000000000000) 20:35:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:35:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 58) 20:35:27 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 67) 20:35:27 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x100000c, 0x10, 0xffffffffffffffff, 0x0) 20:35:27 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 20:35:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:35:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x4000000000000000) 20:35:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x100, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x12800, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x279, @private0, 0x6}, 0x1c) syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000180)=@ethernet={0x1, @broadcast}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x2) [ 1493.653906] FAULT_INJECTION: forcing a failure. [ 1493.653906] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.656466] CPU: 1 PID: 9054 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1493.657929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1493.659704] Call Trace: [ 1493.660285] dump_stack+0x107/0x167 [ 1493.661071] should_fail.cold+0x5/0xa [ 1493.661899] ? create_object.isra.0+0x3a/0xa30 [ 1493.662875] should_failslab+0x5/0x20 [ 1493.663692] kmem_cache_alloc+0x5b/0x310 [ 1493.664588] create_object.isra.0+0x3a/0xa30 [ 1493.665527] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1493.666620] kmem_cache_alloc+0x159/0x310 [ 1493.667518] ptlock_alloc+0x1d/0x70 [ 1493.668314] pte_alloc_one+0x68/0x1a0 [ 1493.669131] __pte_alloc+0x1d/0x330 [ 1493.669921] copy_page_range+0x1b62/0x3800 [ 1493.670831] ? perf_trace_lock+0xac/0x490 [ 1493.671727] ? find_held_lock+0x2c/0x110 [ 1493.672616] ? anon_vma_fork+0x462/0x640 [ 1493.673513] ? up_write+0x191/0x550 [ 1493.674297] ? vm_iomap_memory+0x190/0x190 [ 1493.675202] ? downgrade_write+0x3a0/0x3a0 [ 1493.676129] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1493.677287] ? __vma_link_rb+0x540/0x700 [ 1493.678172] copy_process+0x7658/0x78b0 [ 1493.679063] ? __cleanup_sighand+0xb0/0xb0 [ 1493.680005] ? _copy_from_user+0xfb/0x1b0 [ 1493.680912] kernel_clone+0xe7/0x980 [ 1493.681709] ? __lockdep_reset_lock+0x180/0x180 [ 1493.682702] ? create_io_thread+0xf0/0xf0 [ 1493.683608] ? ksys_write+0x21a/0x260 [ 1493.684433] ? lock_downgrade+0x6d0/0x6d0 [ 1493.685324] __do_sys_clone3+0x1e5/0x320 [ 1493.686189] ? __do_sys_clone+0x110/0x110 [ 1493.687098] ? rcu_read_lock_any_held+0x75/0xa0 [ 1493.688101] ? vfs_write+0x354/0xb10 [ 1493.688898] ? fput_many+0x2f/0x1a0 [ 1493.689673] ? ksys_write+0x1a9/0x260 [ 1493.690485] ? __ia32_sys_read+0xb0/0xb0 [ 1493.691361] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1493.692494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1493.693588] ? trace_hardirqs_on+0x5b/0x180 [ 1493.694515] do_syscall_64+0x33/0x40 [ 1493.695313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1493.696419] RIP: 0033:0x7f3a69dacb19 [ 1493.697216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1493.700950] FAULT_INJECTION: forcing a failure. [ 1493.700950] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.701153] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1493.701177] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1493.701188] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1493.701201] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.701224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1493.711444] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1493.712995] CPU: 0 PID: 9062 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1493.714549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1493.716423] Call Trace: [ 1493.717028] dump_stack+0x107/0x167 [ 1493.717855] should_fail.cold+0x5/0xa [ 1493.718719] ? create_object.isra.0+0x3a/0xa30 [ 1493.719758] should_failslab+0x5/0x20 [ 1493.720628] kmem_cache_alloc+0x5b/0x310 [ 1493.721556] ? mark_held_locks+0x9e/0xe0 [ 1493.722480] create_object.isra.0+0x3a/0xa30 [ 1493.723464] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1493.724619] kmem_cache_alloc+0x159/0x310 [ 1493.725560] xas_alloc+0x336/0x440 [ 1493.726375] xas_create+0x34a/0x10d0 [ 1493.727228] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1493.728418] xas_store+0x8c/0x1c40 [ 1493.729252] __xa_store+0x164/0x2d0 [ 1493.730080] ? xa_delete_node+0x280/0x280 [ 1493.731032] ? trace_hardirqs_on+0x5b/0x180 [ 1493.732037] xa_store+0x31/0x50 [ 1493.732794] __io_uring_add_tctx_node+0x1cf/0x520 [ 1493.733888] ? io_uring_alloc_task_context+0x6a0/0x6a0 20:35:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x800}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x68f9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10001}, {0x6, 0x16, 0x456}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x47}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x11}, {0x8, 0xb, 0xbe0b}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x10, 0xffffffffffffffff, 0x0) [ 1493.735254] ? alloc_fd+0x2e7/0x670 [ 1493.736128] io_uring_setup+0x1fbb/0x2980 [ 1493.737077] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1493.738216] ? wait_for_completion_io+0x270/0x270 [ 1493.739341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1493.740534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1493.741705] do_syscall_64+0x33/0x40 [ 1493.742550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1493.743697] RIP: 0033:0x7f2e9760cb19 [ 1493.744550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1493.748688] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1493.750381] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1493.751882] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1493.753387] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1493.754888] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1493.756407] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:35:27 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r1, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x30, r0, 0x0) 20:35:27 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x12, 0xffffffffffffffff, 0x0) 20:35:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xfbffffffffff0f00) 20:35:27 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0) 20:35:27 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x75486000) 20:35:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x0, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:35:27 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x7) io_uring_enter(0xffffffffffffffff, 0xa2, 0x4e7a, 0x0, &(0x7f0000000000)={[0x4]}, 0x8) 20:35:27 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 68) [ 1494.081001] FAULT_INJECTION: forcing a failure. [ 1494.081001] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1494.083669] CPU: 0 PID: 9097 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1494.085093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.086791] Call Trace: [ 1494.087345] dump_stack+0x107/0x167 [ 1494.088114] should_fail.cold+0x5/0xa [ 1494.088910] __alloc_pages_nodemask+0x182/0x600 [ 1494.089876] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1494.091111] ? find_held_lock+0x2c/0x110 [ 1494.091966] ? __pmd_alloc+0x31d/0x630 [ 1494.092778] ? lock_downgrade+0x6d0/0x6d0 [ 1494.093636] ? do_raw_spin_lock+0x121/0x260 [ 1494.094537] alloc_pages_current+0x187/0x280 [ 1494.095463] pte_alloc_one+0x16/0x1a0 [ 1494.096283] __pte_alloc+0x1d/0x330 [ 1494.097048] copy_page_range+0x1b62/0x3800 [ 1494.097913] ? perf_trace_lock+0xac/0x490 [ 1494.098776] ? find_held_lock+0x2c/0x110 [ 1494.099614] ? anon_vma_fork+0x462/0x640 [ 1494.100472] ? up_write+0x191/0x550 [ 1494.101224] ? vm_iomap_memory+0x190/0x190 [ 1494.102089] ? downgrade_write+0x3a0/0x3a0 [ 1494.102958] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1494.104073] ? __vma_link_rb+0x540/0x700 [ 1494.104915] copy_process+0x7658/0x78b0 [ 1494.105772] ? __cleanup_sighand+0xb0/0xb0 [ 1494.106664] ? _copy_from_user+0xfb/0x1b0 [ 1494.107536] kernel_clone+0xe7/0x980 [ 1494.108309] ? __lockdep_reset_lock+0x180/0x180 [ 1494.109264] ? create_io_thread+0xf0/0xf0 [ 1494.110133] ? ksys_write+0x21a/0x260 [ 1494.110921] ? lock_downgrade+0x6d0/0x6d0 [ 1494.111777] __do_sys_clone3+0x1e5/0x320 [ 1494.112655] ? __do_sys_clone+0x110/0x110 [ 1494.113577] ? rcu_read_lock_any_held+0x75/0xa0 [ 1494.114574] ? vfs_write+0x354/0xb10 [ 1494.115378] ? fput_many+0x2f/0x1a0 [ 1494.116169] ? ksys_write+0x1a9/0x260 [ 1494.116987] ? __ia32_sys_read+0xb0/0xb0 [ 1494.117874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1494.119006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1494.120123] ? trace_hardirqs_on+0x5b/0x180 [ 1494.121060] do_syscall_64+0x33/0x40 [ 1494.121869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1494.122972] RIP: 0033:0x7f3a69dacb19 [ 1494.123780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1494.127751] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1494.129394] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1494.130926] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1494.132469] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1494.134003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1494.135538] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1511.221558] FAULT_INJECTION: forcing a failure. [ 1511.221558] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.225396] CPU: 0 PID: 9110 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1511.226852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1511.228621] Call Trace: [ 1511.229187] dump_stack+0x107/0x167 [ 1511.229973] should_fail.cold+0x5/0xa [ 1511.230786] ? create_object.isra.0+0x3a/0xa30 [ 1511.231757] should_failslab+0x5/0x20 [ 1511.232573] kmem_cache_alloc+0x5b/0x310 [ 1511.233447] create_object.isra.0+0x3a/0xa30 [ 1511.234378] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1511.235733] kmem_cache_alloc+0x159/0x310 [ 1511.236628] ? lock_downgrade+0x6d0/0x6d0 [ 1511.237516] vm_area_dup+0x78/0x290 [ 1511.238301] ? _cond_resched+0x10/0x30 [ 1511.239128] ? copy_page_range+0x24e9/0x3800 [ 1511.240105] ? vm_area_alloc+0x110/0x110 [ 1511.240974] ? up_write+0x191/0x550 [ 1511.241747] ? vm_iomap_memory+0x190/0x190 [ 1511.242648] ? downgrade_write+0x3a0/0x3a0 [ 1511.243549] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1511.244712] ? __vma_link_rb+0x540/0x700 [ 1511.245584] copy_process+0x298b/0x78b0 [ 1511.246472] ? __cleanup_sighand+0xb0/0xb0 [ 1511.247396] ? _copy_from_user+0xfb/0x1b0 [ 1511.248328] kernel_clone+0xe7/0x980 [ 1511.249115] ? __lockdep_reset_lock+0x180/0x180 [ 1511.250101] ? create_io_thread+0xf0/0xf0 [ 1511.250995] ? ksys_write+0x21a/0x260 [ 1511.251802] ? lock_downgrade+0x6d0/0x6d0 [ 1511.252694] __do_sys_clone3+0x1e5/0x320 [ 1511.253554] ? __do_sys_clone+0x110/0x110 [ 1511.254460] ? rcu_read_lock_any_held+0x75/0xa0 [ 1511.255439] ? vfs_write+0x354/0xb10 [ 1511.256239] ? fput_many+0x2f/0x1a0 [ 1511.256353] FAULT_INJECTION: forcing a failure. [ 1511.256353] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.257014] ? ksys_write+0x1a9/0x260 [ 1511.260195] ? __ia32_sys_read+0xb0/0xb0 [ 1511.261066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1511.262180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1511.263269] ? trace_hardirqs_on+0x5b/0x180 [ 1511.264196] do_syscall_64+0x33/0x40 [ 1511.264989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1511.266074] RIP: 0033:0x7f3a69dacb19 [ 1511.266862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.270761] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1511.272382] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1511.273893] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1511.275402] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1511.276921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1511.278433] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1511.279982] CPU: 1 PID: 9120 Comm: syz-executor.4 Not tainted 5.10.253 #1 20:35:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) 20:35:44 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 69) 20:35:44 executing program 7: syz_open_dev$sg(&(0x7f0000000000), 0xd75, 0x80400) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:35:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff0f024e00000000) 20:35:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 59) 20:35:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r0, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2007, @fd_index=0x9, 0x2000008, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/130, 0x82}], 0x1, 0x10}, 0x3) io_uring_enter(r1, 0xad2, 0x413a, 0x1, &(0x7f0000000040)={[0x2]}, 0x8) 20:35:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fork() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c1400001300040027bd7000ffdbdf2518000000895f9fd67ba4c1aab98cb3bfc25f9180dac1eaee7560ffdc27132a523a546a5b76a358a39c611861229d96645531ff7972afe128701549a3925f71e5c56cd037ec010f801e008dcc8534a04bb2bcb70f56cf0b4aee1678f629b0bb8e8743274886b15cd589b60df58dfe7d9c1d426d5ae48057783897236339fa20667a61670518b678ea4e3f28bc095e10a43f3604edef508cdddd095a9bd5c1f84d0c9b340d5733dfa5750e9a7fc7d057d6386cd919b0dcab7810c82a6de4f81e7d8ed51c475f4be04e07febc843b7825e641251b37270ab47240102b46966ce0a34a023d4fd05515108fd7e43843d646c6e7f230fcf215002cf6c0e136a4f8cc8dc1384572f42f06635c7576c90f21767978751b37dc4993c22b9b0bdea393e8ac17d8885de4f9808e78432e9e278aec773cc1a30c70714924a991ae1dcbc8cf1d21bad7e44a8a3517192a489daa0ec1f5779d62e0a8596cd4e923968735304bf069afd0639fc0227bef0cef32b238f0a31fbde6b1f4a3c27e01e1478397da35fe3ab7df1b871910de9c3bfb163bc15c2937dbe6fc89e312b2492b06e64d1c5b4b5ce56ec2587e991382bb3de0029ccb5f93c191313c437cbe4d4f7664d1377f500fb04fe8d5fcc872fa2b4a0ec97707009200252c0000fd35aa447d6c96755210b38f5e0276605b86177944218567434130af81b7af1d8ec0c2b935d5da7c9c00caee93167b3d489f03d4d3ce1c671f4a0a2118dc36900d81739bf9cd50ff5dcf9d2b86204d06da6e08007c00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="68f1f07c92caa5e46040d716a3c87753d82022dc9f4bc2351308000500", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], 0x143c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 20:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x0, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1511.281529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1511.283707] Call Trace: [ 1511.284291] dump_stack+0x107/0x167 [ 1511.285070] should_fail.cold+0x5/0xa [ 1511.285887] ? xas_alloc+0x336/0x440 [ 1511.286689] should_failslab+0x5/0x20 [ 1511.287502] kmem_cache_alloc+0x5b/0x310 [ 1511.288385] xas_alloc+0x336/0x440 [ 1511.289148] xas_create+0x34a/0x10d0 [ 1511.289962] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1511.291083] xas_store+0x8c/0x1c40 [ 1511.291864] __xa_store+0x164/0x2d0 [ 1511.292653] ? xa_delete_node+0x280/0x280 [ 1511.293553] ? trace_hardirqs_on+0x5b/0x180 [ 1511.294489] xa_store+0x31/0x50 [ 1511.295215] __io_uring_add_tctx_node+0x1cf/0x520 [ 1511.296251] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1511.297366] ? alloc_fd+0x2e7/0x670 [ 1511.298169] io_uring_setup+0x1fbb/0x2980 [ 1511.299068] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1511.300150] ? wait_for_completion_io+0x270/0x270 [ 1511.301217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1511.302337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1511.303443] do_syscall_64+0x33/0x40 [ 1511.304254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1511.305348] RIP: 0033:0x7f2e9760cb19 [ 1511.306145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.310067] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1511.311690] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1511.313219] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1511.314732] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1511.316257] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1511.317775] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:35:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xff3f024e00000000) 20:35:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x0, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:35:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x1e1, 0x0, 0x0) 20:35:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 60) 20:35:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x100000c, 0x810, 0xffffffffffffffff, 0x0) 20:35:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) 20:35:44 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000c21000/0x1000)=nil, 0x1000, 0x300000b, 0x50, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x1f5, 0x629b, 0x1, &(0x7f0000000000)={[0x772]}, 0x8) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15, 0x0, {0x0, r5}}, 0x7fff) 20:35:45 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r0, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 20:35:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0xffbfe34800000000) [ 1511.611963] FAULT_INJECTION: forcing a failure. [ 1511.611963] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.614421] CPU: 1 PID: 9145 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1511.615856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1511.617609] Call Trace: [ 1511.618167] dump_stack+0x107/0x167 [ 1511.618935] should_fail.cold+0x5/0xa [ 1511.619749] ? create_object.isra.0+0x3a/0xa30 [ 1511.620716] should_failslab+0x5/0x20 [ 1511.621515] kmem_cache_alloc+0x5b/0x310 [ 1511.622381] ? mark_held_locks+0x9e/0xe0 [ 1511.623240] create_object.isra.0+0x3a/0xa30 [ 1511.624164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1511.625265] kmem_cache_alloc+0x159/0x310 [ 1511.626156] xas_alloc+0x336/0x440 [ 1511.626913] xas_create+0x34a/0x10d0 [ 1511.627715] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1511.628842] xas_store+0x8c/0x1c40 [ 1511.629617] __xa_store+0x164/0x2d0 [ 1511.630392] ? xa_delete_node+0x280/0x280 [ 1511.631294] ? trace_hardirqs_on+0x5b/0x180 [ 1511.632224] xa_store+0x31/0x50 [ 1511.632928] __io_uring_add_tctx_node+0x1cf/0x520 [ 1511.633944] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1511.635048] ? alloc_fd+0x2e7/0x670 [ 1511.635835] io_uring_setup+0x1fbb/0x2980 [ 1511.636726] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1511.637806] ? wait_for_completion_io+0x270/0x270 [ 1511.638855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1511.639969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1511.641076] do_syscall_64+0x33/0x40 [ 1511.641871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1511.642957] RIP: 0033:0x7f2e9760cb19 [ 1511.643742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.647606] RSP: 002b:00007f2e94b82108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1511.649219] RAX: ffffffffffffffda RBX: 00007f2e9771ff60 RCX: 00007f2e9760cb19 [ 1511.650717] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 0000000000000132 [ 1511.652240] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1511.653746] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1511.655249] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:35:45 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x500, 0x0, 0x0) 20:35:45 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 70) [ 1511.732650] FAULT_INJECTION: forcing a failure. [ 1511.732650] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.736400] CPU: 0 PID: 9157 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1511.737869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1511.739627] Call Trace: [ 1511.740208] dump_stack+0x107/0x167 [ 1511.740989] should_fail.cold+0x5/0xa [ 1511.741802] ? create_object.isra.0+0x3a/0xa30 [ 1511.742771] should_failslab+0x5/0x20 [ 1511.743580] kmem_cache_alloc+0x5b/0x310 [ 1511.744454] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1511.745777] create_object.isra.0+0x3a/0xa30 [ 1511.746746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1511.747823] kmem_cache_alloc+0x159/0x310 [ 1511.748736] ptlock_alloc+0x1d/0x70 [ 1511.749519] pte_alloc_one+0x68/0x1a0 [ 1511.750341] __pte_alloc+0x1d/0x330 [ 1511.751135] copy_page_range+0x1b62/0x3800 [ 1511.752036] ? perf_trace_lock+0xac/0x490 [ 1511.752947] ? find_held_lock+0x2c/0x110 [ 1511.753816] ? anon_vma_fork+0x462/0x640 [ 1511.754751] ? up_write+0x191/0x550 [ 1511.755526] ? vm_iomap_memory+0x190/0x190 [ 1511.756441] ? downgrade_write+0x3a0/0x3a0 [ 1511.757342] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1511.758501] ? __vma_link_rb+0x540/0x700 [ 1511.759396] copy_process+0x7658/0x78b0 [ 1511.760304] ? __cleanup_sighand+0xb0/0xb0 [ 1511.761232] ? _copy_from_user+0xfb/0x1b0 [ 1511.762120] kernel_clone+0xe7/0x980 [ 1511.762905] ? __lockdep_reset_lock+0x180/0x180 [ 1511.763930] ? create_io_thread+0xf0/0xf0 [ 1511.764843] ? ksys_write+0x21a/0x260 [ 1511.765658] ? lock_downgrade+0x6d0/0x6d0 [ 1511.766541] __do_sys_clone3+0x1e5/0x320 [ 1511.767429] ? __do_sys_clone+0x110/0x110 [ 1511.768362] ? rcu_read_lock_any_held+0x75/0xa0 [ 1511.769352] ? vfs_write+0x354/0xb10 [ 1511.770143] ? fput_many+0x2f/0x1a0 [ 1511.770941] ? ksys_write+0x1a9/0x260 [ 1511.771764] ? __ia32_sys_read+0xb0/0xb0 [ 1511.772656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1511.773788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1511.774886] ? trace_hardirqs_on+0x5b/0x180 [ 1511.775816] do_syscall_64+0x33/0x40 [ 1511.776615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1511.777732] RIP: 0033:0x7f3a69dacb19 [ 1511.778522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.782446] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1511.784044] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1511.785606] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1511.787120] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1511.788670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1511.790184] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:35:45 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x3}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x1}, 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x401, 0x1000, 0x1, 0x7ff}, &(0x7f0000000300)={0x5, 0x0, 0x8, 0x7, 0x2, 0x0, 0x3, 0x1}, &(0x7f0000000340)={0x6, 0xfffffffffffffffd, 0x100000001, 0x3, 0x0, 0x1ff, 0x8bf6, 0x3ff}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x40]}, 0x8}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x13, 0x1, 0xf8, 0x0, 0x0, 0x0, 0xd8a88, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x40000, 0xffffffffffffffff}, 0x0, 0x5bda, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0xffff, 0x0, 0x9, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ec0), 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="6f2fffff000000000a004e2200000010ff010000000000000000000000000001060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a004e24000000090000000000000000000000000000000100800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000005fc010000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000003ff020000000000000000000000000001000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000007fe8800000000000000000000000000017e010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000004fe88000000000000000000000000010109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000420010000000000000000000000000002fcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000003fc02000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000000fc0000000000000000000000000000010700"/1152], 0x490) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f40)={'macvlan1\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="3b0000000100000007000000b8000000a79dfe868ab7c395debab2b5a9c672a9d59773c2b976447ced7c9e1b51bd6415228722a4a05898e0d11af984b0a1b0e439c18632c1689da3d44f1c2af3c98519fef2a277ef30c082"]}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000740)={'trans=xen,', {[{@privport}, {@debug={'debug', 0x3d, 0x10000}}, {@version_9p2000}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0xc1}}]}}) 20:35:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x2, 0x0, 0x2, 0x6, 0x0, 0x1, 0x100, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100)}, 0x10000, 0x1340000000, 0x6, 0x3, 0x1, 0x9, 0x5a, 0x0, 0x1ff, 0x0, 0x82f4}, r2, 0xe, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r1, 0x94e1c000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xce2f5ad318dd6872, r1, 0x57ffe000) r3 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000080)=0xb443) syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r6}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = gettid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x81, 0x44, 0x40, 0x6, 0x0, 0x2, 0x109, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0xd1}, 0x2c04, 0xffffffffffffffa3, 0x1000, 0x5, 0x4, 0x7f, 0x7f, 0x0, 0x7fff, 0x0, 0x9}, r7, 0xc, r0, 0x0) 20:35:45 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x14, r3, 0x201}, 0x14}}, 0x0) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3190, 0x65d6, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r0, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x8000) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000040)={0x4, 0x7ff}) fcntl$setpipe(r6, 0x407, 0x3) 20:36:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 61) 20:36:01 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r0, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 20:36:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x284}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 20:36:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 20:36:01 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x8000) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x8, 0x70bd2c, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008014}, 0x2008800) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, r1, 0x0) [ 1528.543476] FAULT_INJECTION: forcing a failure. [ 1528.543476] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.545155] CPU: 1 PID: 9182 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1528.546135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1528.547311] Call Trace: [ 1528.547698] dump_stack+0x107/0x167 [ 1528.548239] should_fail.cold+0x5/0xa [ 1528.549185] ? create_object.isra.0+0x3a/0xa30 [ 1528.550343] should_failslab+0x5/0x20 [ 1528.551304] kmem_cache_alloc+0x5b/0x310 [ 1528.552375] create_object.isra.0+0x3a/0xa30 [ 1528.553492] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1528.554782] kmem_cache_alloc+0x159/0x310 [ 1528.555842] vm_area_dup+0x78/0x290 [ 1528.556788] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1528.557958] ? lock_downgrade+0x6d0/0x6d0 [ 1528.559000] ? copy_page_range+0x24e9/0x3800 [ 1528.560131] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1528.561314] ? avc_has_extended_perms+0xf40/0xf40 [ 1528.562535] ? vm_area_alloc+0x110/0x110 [ 1528.563570] ? selinux_vm_enough_memory+0x114/0x180 [ 1528.564832] ? selinux_sb_statfs+0x250/0x250 [ 1528.565942] ? percpu_counter_add_batch+0x8b/0x140 [ 1528.567180] ? __vm_enough_memory+0x184/0x360 [ 1528.568302] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1528.569613] copy_process+0x298b/0x78b0 [ 1528.570664] ? __cleanup_sighand+0xb0/0xb0 [ 1528.571757] ? _copy_from_user+0xfb/0x1b0 [ 1528.572829] kernel_clone+0xe7/0x980 [ 1528.573770] ? __lockdep_reset_lock+0x180/0x180 [ 1528.574942] ? create_io_thread+0xf0/0xf0 [ 1528.576007] ? ksys_write+0x21a/0x260 [ 1528.576979] ? lock_downgrade+0x6d0/0x6d0 [ 1528.578028] __do_sys_clone3+0x1e5/0x320 [ 1528.579047] ? __do_sys_clone+0x110/0x110 [ 1528.580127] ? rcu_read_lock_any_held+0x75/0xa0 [ 1528.581294] ? vfs_write+0x354/0xb10 [ 1528.582221] ? fput_many+0x2f/0x1a0 [ 1528.583130] ? ksys_write+0x1a9/0x260 [ 1528.584073] ? __ia32_sys_read+0xb0/0xb0 [ 1528.585110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1528.586436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1528.587729] ? trace_hardirqs_on+0x5b/0x180 [ 1528.588843] do_syscall_64+0x33/0x40 [ 1528.589788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1528.591085] RIP: 0033:0x7f3a69dacb19 [ 1528.592027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1528.596693] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1528.598441] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1528.600026] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1528.601629] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1528.603214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1528.604813] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:36:01 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 71) 20:36:01 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x22c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x8001, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, r2, 0xa, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x5}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x8, 0x66930, {0x0, r3}, 0xaf9, 0x4, 0x1}, 0x3) ftruncate(r3, 0x6) 20:36:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) [ 1528.625981] FAULT_INJECTION: forcing a failure. [ 1528.625981] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.627310] CPU: 0 PID: 9195 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1528.628091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1528.629055] Call Trace: [ 1528.629365] dump_stack+0x107/0x167 [ 1528.629782] should_fail.cold+0x5/0xa [ 1528.630220] ? vm_area_dup+0x78/0x290 [ 1528.630653] should_failslab+0x5/0x20 [ 1528.631087] kmem_cache_alloc+0x5b/0x310 [ 1528.631562] vm_area_dup+0x78/0x290 [ 1528.631980] ? lock_release+0x680/0x680 [ 1528.632442] ? mark_lock+0xf5/0x2df0 [ 1528.632874] ? lock_chain_count+0x20/0x20 [ 1528.633349] ? mark_lock+0xf5/0x2df0 [ 1528.633775] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1528.634370] ? lock_chain_count+0x20/0x20 [ 1528.634844] ? mark_lock+0xf5/0x2df0 [ 1528.635266] ? vm_area_alloc+0x110/0x110 [ 1528.635731] ? __lock_acquire+0x1657/0x5b00 [ 1528.636229] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1528.636834] ? SOFTIRQ_verbose+0x10/0x10 [ 1528.637294] ? vmacache_find+0x55/0x2a0 [ 1528.637754] __split_vma+0xa8/0x4e0 [ 1528.638170] __do_munmap+0x365/0x1260 [ 1528.638605] ? arch_get_unmapped_area+0x450/0x450 [ 1528.639158] mmap_region+0x7cc/0x1500 [ 1528.639605] do_mmap+0x868/0x1370 [ 1528.640005] vm_mmap_pgoff+0x198/0x1f0 [ 1528.640457] ? randomize_page+0xb0/0xb0 [ 1528.640919] ksys_mmap_pgoff+0x41c/0x560 [ 1528.641384] ? find_mergeable_anon_vma+0x250/0x250 [ 1528.641942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1528.642543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1528.643128] do_syscall_64+0x33/0x40 [ 1528.643555] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1528.644139] RIP: 0033:0x7f2e9760cb62 [ 1528.644571] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1528.646657] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1528.647520] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1528.648333] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1528.649152] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1528.649959] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1528.650771] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:36:02 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x20b5, 0x0, 0x0) 20:36:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 20:36:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/16, 0x10, 0x2100, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}, 0x1c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 20:36:02 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00, 0x0, 0x0) 20:36:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 62) [ 1528.818332] FAULT_INJECTION: forcing a failure. [ 1528.818332] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.819684] CPU: 0 PID: 9218 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1528.820474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1528.821422] Call Trace: [ 1528.821731] dump_stack+0x107/0x167 [ 1528.822151] should_fail.cold+0x5/0xa [ 1528.822591] ? create_object.isra.0+0x3a/0xa30 [ 1528.823109] should_failslab+0x5/0x20 [ 1528.823543] kmem_cache_alloc+0x5b/0x310 [ 1528.824011] create_object.isra.0+0x3a/0xa30 [ 1528.824518] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1528.825098] kmem_cache_alloc+0x159/0x310 [ 1528.825578] vm_area_dup+0x78/0x290 [ 1528.825997] ? lock_release+0x680/0x680 [ 1528.826453] ? mark_lock+0xf5/0x2df0 [ 1528.826879] ? lock_chain_count+0x20/0x20 [ 1528.827352] ? mark_lock+0xf5/0x2df0 [ 1528.827777] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1528.828379] ? lock_chain_count+0x20/0x20 [ 1528.828857] ? mark_lock+0xf5/0x2df0 [ 1528.829286] ? vm_area_alloc+0x110/0x110 [ 1528.829757] ? __lock_acquire+0x1657/0x5b00 [ 1528.830259] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1528.830854] ? SOFTIRQ_verbose+0x10/0x10 [ 1528.831316] ? vmacache_find+0x55/0x2a0 [ 1528.831772] __split_vma+0xa8/0x4e0 [ 1528.832188] __do_munmap+0x365/0x1260 [ 1528.832636] ? arch_get_unmapped_area+0x450/0x450 [ 1528.833190] mmap_region+0x7cc/0x1500 [ 1528.833632] do_mmap+0x868/0x1370 [ 1528.834038] vm_mmap_pgoff+0x198/0x1f0 [ 1528.834486] ? randomize_page+0xb0/0xb0 [ 1528.834955] ksys_mmap_pgoff+0x41c/0x560 [ 1528.835420] ? find_mergeable_anon_vma+0x250/0x250 [ 1528.835984] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1528.836586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1528.837180] do_syscall_64+0x33/0x40 [ 1528.837606] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1528.838190] RIP: 0033:0x7f2e9760cb62 [ 1528.838612] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1528.840699] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1528.841563] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1528.842374] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1528.843185] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1528.844000] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1528.844820] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:36:15 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 72) 20:36:15 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r0, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 20:36:15 executing program 0: r0 = syz_io_uring_setup(0x7d02, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r0, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0xb402}, 0x1}, 0x4d8e) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1792, 0x86c0, 0x0, &(0x7f00000000c0)={[0x7ff]}, 0x8) io_uring_enter(r0, 0x2309, 0xc057, 0x2, &(0x7f0000000100)={[0x7fffffff]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x300000c, 0x8010, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4967, &(0x7f00000001c0)={0x0, 0x9427, 0x2, 0x2, 0x2a9, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r5, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4007, @fd=r0, 0x67d, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x8000000) 20:36:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 63) 20:36:15 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0xb385, 0x1, 0x8, 0x3a8, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x10000000) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x8000}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r9}}, 0x200) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd=r1, 0xc28f, &(0x7f0000000040)=""/72, 0x48, 0x0, 0x1}, 0x3163) mmap$IORING_OFF_CQ_RING(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x8000000) syz_io_uring_setup(0x6c0f, &(0x7f0000000180)={0x0, 0x6a52, 0x1, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000240)) syz_io_uring_complete(r10) io_uring_enter(r1, 0x3871, 0x2573, 0x1, &(0x7f0000000000)={[0x1]}, 0x8) 20:36:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 20:36:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000000)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0xffff, @loopback, 0x8001}, 0x1c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 20:36:15 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"6df7a316283e92bee4808aae36e52e55", 0x0, 0x0, {0x0, 0x4}, {0x7ff, 0x80}, 0xfb6, [0x7, 0x81, 0x8, 0x6, 0x6, 0x2, 0x2, 0x5, 0x1f, 0xabd, 0x7, 0x7, 0x964, 0x8001, 0x3, 0x401]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000240)={{r0}, r2, 0x1a, @unused=[0x1, 0x1, 0x50000000, 0x7], @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 1542.486969] FAULT_INJECTION: forcing a failure. [ 1542.486969] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.489478] CPU: 1 PID: 9229 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1542.490935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1542.492735] Call Trace: [ 1542.493298] dump_stack+0x107/0x167 [ 1542.494062] should_fail.cold+0x5/0xa [ 1542.494857] ? vm_area_dup+0x78/0x290 [ 1542.495722] should_failslab+0x5/0x20 [ 1542.496537] kmem_cache_alloc+0x5b/0x310 [ 1542.497438] vm_area_dup+0x78/0x290 [ 1542.498202] ? lock_release+0x680/0x680 [ 1542.499040] ? mark_lock+0xf5/0x2df0 [ 1542.499885] ? lock_chain_count+0x20/0x20 [ 1542.500776] ? mark_lock+0xf5/0x2df0 [ 1542.501645] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1542.502738] ? lock_chain_count+0x20/0x20 [ 1542.503612] ? mark_lock+0xf5/0x2df0 [ 1542.504391] ? vm_area_alloc+0x110/0x110 [ 1542.505262] ? __lock_acquire+0x1657/0x5b00 [ 1542.506182] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1542.507267] ? SOFTIRQ_verbose+0x10/0x10 [ 1542.508105] ? vmacache_find+0x55/0x2a0 [ 1542.508950] __split_vma+0xa8/0x4e0 [ 1542.509709] __do_munmap+0x365/0x1260 [ 1542.510507] ? arch_get_unmapped_area+0x450/0x450 [ 1542.511539] mmap_region+0x7cc/0x1500 [ 1542.511661] FAULT_INJECTION: forcing a failure. [ 1542.511661] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.512353] do_mmap+0x868/0x1370 [ 1542.512387] vm_mmap_pgoff+0x198/0x1f0 [ 1542.516237] ? randomize_page+0xb0/0xb0 [ 1542.517107] ksys_mmap_pgoff+0x41c/0x560 [ 1542.517963] ? find_mergeable_anon_vma+0x250/0x250 [ 1542.518992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1542.520100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1542.521194] do_syscall_64+0x33/0x40 [ 1542.521975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1542.523052] RIP: 0033:0x7f2e9760cb62 [ 1542.523838] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1542.527706] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1542.529296] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1542.530784] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1542.532262] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1542.533762] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1542.535248] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1542.536803] CPU: 0 PID: 9240 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1542.538254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1542.540003] Call Trace: [ 1542.540573] dump_stack+0x107/0x167 [ 1542.541338] should_fail.cold+0x5/0xa [ 1542.542132] ? vm_area_dup+0x78/0x290 [ 1542.542928] should_failslab+0x5/0x20 [ 1542.543727] kmem_cache_alloc+0x5b/0x310 [ 1542.544593] vm_area_dup+0x78/0x290 [ 1542.545369] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1542.546357] ? lock_downgrade+0x6d0/0x6d0 [ 1542.547222] ? copy_page_range+0x24e9/0x3800 [ 1542.548162] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1542.549152] ? avc_has_extended_perms+0xf40/0xf40 [ 1542.550170] ? vm_area_alloc+0x110/0x110 [ 1542.551030] ? selinux_vm_enough_memory+0x114/0x180 [ 1542.552068] ? selinux_sb_statfs+0x250/0x250 [ 1542.552998] ? percpu_counter_add_batch+0x8b/0x140 [ 1542.554021] ? __vm_enough_memory+0x184/0x360 [ 1542.554947] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1542.556023] copy_process+0x298b/0x78b0 [ 1542.556903] ? __cleanup_sighand+0xb0/0xb0 [ 1542.557817] ? _copy_from_user+0xfb/0x1b0 [ 1542.558696] kernel_clone+0xe7/0x980 [ 1542.559470] ? __lockdep_reset_lock+0x180/0x180 [ 1542.560454] ? create_io_thread+0xf0/0xf0 [ 1542.561341] ? ksys_write+0x21a/0x260 [ 1542.562146] ? lock_downgrade+0x6d0/0x6d0 [ 1542.563022] __do_sys_clone3+0x1e5/0x320 [ 1542.563877] ? __do_sys_clone+0x110/0x110 [ 1542.564786] ? rcu_read_lock_any_held+0x75/0xa0 [ 1542.565745] ? vfs_write+0x354/0xb10 [ 1542.566517] ? fput_many+0x2f/0x1a0 [ 1542.567279] ? ksys_write+0x1a9/0x260 [ 1542.568070] ? __ia32_sys_read+0xb0/0xb0 [ 1542.568932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1542.570021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1542.571087] ? trace_hardirqs_on+0x5b/0x180 [ 1542.571987] do_syscall_64+0x33/0x40 [ 1542.572824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 20:36:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000003c80)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x23, 0x0, "e0d067b4e0e31b87bd88da237e370337cfeee896c79bb23a1336c4cc446257b3d31bd38777a693593b5bc1f8cc78054ef0b9caa6e3ffc1825647469f6798bc92a3048ff672e79bf48d8746779e16cc13"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001140)={@in6={{0xa, 0x4e20, 0x3, @private0}}, 0x0, 0x0, 0x34, 0x0, "ca668692b32ba6959ed483dd8f359a659efc8ded47db23841ac81161298bd5a8b6cf9f3782e425753963766492e819d3868ed7bb27fec41626d371cce9d342b90dd3365ceb584be7e9a77ac133bd7843"}, 0xd8) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x0) [ 1542.573897] RIP: 0033:0x7f3a69dacb19 [ 1542.574890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1542.578743] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1542.580360] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1542.581863] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1542.583360] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1542.584862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1542.586347] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:36:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:36:16 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xb520, 0x0, 0x0) 20:36:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:36:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = getegid() r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366ee578400080820000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, r1}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) faccessat(r4, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) 20:36:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 64) 20:36:16 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 73) 20:36:16 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x74fd, &(0x7f0000000000)={0x0, 0x73ef, 0x4, 0x2, 0x9e}, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0xc00) syz_io_uring_submit(r0, r3, &(0x7f00000003c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r5, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/42, 0x2a}], 0x3, &(0x7f0000000340)=""/38, 0x26}, 0x0, 0x2000, 0x0, {0x3}}, 0x3) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r6, 0x8000000) [ 1542.866646] FAULT_INJECTION: forcing a failure. [ 1542.866646] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.869197] CPU: 1 PID: 9267 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1542.870644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1542.872382] Call Trace: [ 1542.872953] dump_stack+0x107/0x167 [ 1542.873727] should_fail.cold+0x5/0xa [ 1542.874527] ? create_object.isra.0+0x3a/0xa30 [ 1542.875484] should_failslab+0x5/0x20 [ 1542.876276] kmem_cache_alloc+0x5b/0x310 [ 1542.877155] create_object.isra.0+0x3a/0xa30 [ 1542.878066] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1542.879135] kmem_cache_alloc+0x159/0x310 [ 1542.880011] anon_vma_clone+0xdc/0x590 [ 1542.880859] anon_vma_fork+0x82/0x640 [ 1542.881661] ? __vm_enough_memory+0x184/0x360 [ 1542.882606] copy_process+0x72cd/0x78b0 [ 1542.883480] ? __cleanup_sighand+0xb0/0xb0 [ 1542.884404] ? _copy_from_user+0xfb/0x1b0 [ 1542.884974] FAULT_INJECTION: forcing a failure. [ 1542.884974] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.885287] kernel_clone+0xe7/0x980 [ 1542.885310] ? __lockdep_reset_lock+0x180/0x180 [ 1542.885333] ? create_io_thread+0xf0/0xf0 [ 1542.885370] ? ksys_write+0x21a/0x260 [ 1542.890971] ? lock_downgrade+0x6d0/0x6d0 [ 1542.891842] __do_sys_clone3+0x1e5/0x320 [ 1542.892705] ? __do_sys_clone+0x110/0x110 [ 1542.893603] ? rcu_read_lock_any_held+0x75/0xa0 [ 1542.894573] ? vfs_write+0x354/0xb10 [ 1542.895358] ? fput_many+0x2f/0x1a0 [ 1542.896118] ? ksys_write+0x1a9/0x260 [ 1542.896921] ? __ia32_sys_read+0xb0/0xb0 [ 1542.897769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1542.898867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1542.899944] ? trace_hardirqs_on+0x5b/0x180 [ 1542.900867] do_syscall_64+0x33/0x40 [ 1542.901645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1542.902725] RIP: 0033:0x7f3a69dacb19 [ 1542.903500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1542.907380] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1542.908988] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1542.910484] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1542.911999] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1542.913517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1542.915019] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1542.916575] CPU: 0 PID: 9270 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1542.918019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1542.919766] Call Trace: [ 1542.920321] dump_stack+0x107/0x167 [ 1542.921099] should_fail.cold+0x5/0xa [ 1542.921905] ? create_object.isra.0+0x3a/0xa30 [ 1542.922874] should_failslab+0x5/0x20 [ 1542.923680] kmem_cache_alloc+0x5b/0x310 [ 1542.924555] create_object.isra.0+0x3a/0xa30 [ 1542.925473] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1542.926565] kmem_cache_alloc+0x159/0x310 [ 1542.927453] anon_vma_clone+0xdc/0x590 [ 1542.928292] __split_vma+0x17c/0x4e0 [ 1542.929086] __do_munmap+0x365/0x1260 [ 1542.929891] ? arch_get_unmapped_area+0x450/0x450 [ 1542.930910] mmap_region+0x7cc/0x1500 [ 1542.931733] do_mmap+0x868/0x1370 [ 1542.932476] vm_mmap_pgoff+0x198/0x1f0 [ 1542.933320] ? randomize_page+0xb0/0xb0 [ 1542.934183] ksys_mmap_pgoff+0x41c/0x560 [ 1542.935043] ? find_mergeable_anon_vma+0x250/0x250 [ 1542.936086] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1542.937201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1542.938298] do_syscall_64+0x33/0x40 [ 1542.939087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1542.940163] RIP: 0033:0x7f2e9760cb62 [ 1542.940950] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1542.944833] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1542.946433] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1542.947938] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1542.949446] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1542.950898] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1542.952358] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:36:30 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 74) 20:36:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="ac11234da517f52638d164358a64b73494a0155446cd88ca7bf8fe1e74b1003106f76bb5d8e6946ce3b4cc99b5db2fb405305a383d6369946a58ce9071819355a885c5aeaa189d9b5cb8a8919b8256295e60f7193bcd8f2b694be17c8afbdb62ce2091600ccddfb0f0196aa58db23d68caf977e90327e3dad19d7f807635314ab500fe2e0a68d878975520e8487e5dac3ccc5c70678400cf974f5d3a56ab5c3f8bcadc0bd8e3e335a9d27cc303795f21bd0377877061865b75836800fdaebef7147430523cc648f9d41735759d94d71986dfd62a459f0fb9fc56ed1bbd2e7691f83d4aebafe83f854b60", 0xea}, {&(0x7f0000000100)="073573bc8221d82ec90798dfea79fe1e7e8afe26d6f5681a0cf456dad7ca7292ff442cb526393aa43e4ca7233c53e11f8ff0a2df1cfa2411c0293ed98cbd51e49683d4bfb40dd188421b2122fb3ac9dedc73c8b20383a3368dee91108739488286f727ee94219d2441f1ca494c999bd2a2de9445ac3be4034756f65138ee450be801584ee0fbf8eaed4f0137e22a904d35d29f3c56c2f8682191a595fd857ab0bcb254baac", 0xa5}], 0x2, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}, 0x40050) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) 20:36:30 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r2 = dup2(r0, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3f, 0x42, 0x1, 0xf3, 0x0, 0x9, 0x90040, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x120a0, 0x8, 0x8, 0x3, 0x74, 0x9, 0x1, 0x0, 0x6, 0x0, 0xffff}, 0x0, 0x6, r2, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000e, 0x14011, r1, 0x0) 20:36:30 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe101, 0x0, 0x0) 20:36:30 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd_index=0x5, 0xfffffffffffffffa, 0x10001, 0x8, 0x2, 0x1, {0x2, r5}}, 0xdf8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1) r8 = getpid() r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0x1f865660930ec53b}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x1}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) write$binfmt_elf64(r9, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7f, 0x1, 0x3, 0x4, 0x3, 0x0, 0x5, 0x2cd, 0x40, 0x30b, 0x51, 0x9, 0x38, 0x1, 0x1f, 0x8001, 0x5}, [{0x7, 0x1, 0x3, 0x6, 0x42603dcc, 0x100000001, 0x3f, 0x5}, {0x1, 0x663f, 0x826, 0x5, 0x6, 0x1, 0x1, 0xfffffffffffffffe}], "914f0c0676e3d3fc0602a3897ed713a5765a3a7b56598459", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xac8) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0xa8) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f00000000c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:36:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:36:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 65) 20:36:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) r9 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x22c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x8001, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, r9, 0xa, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x548, 0x3a, 0x300, 0x70bd28, 0x25dfdbfb, {0xd}, [@nested={0xa3, 0x2e, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @u32=0x7}, @generic="adb49e4528f6bc7b1ed06e56e91daed420c86f1932bb988c330557704cd28658ad79f0fddb9eed860b2f7664734c95de2363cf72733bebff300dd8260e455f1e1e84a0822889e37127b73da88369bcedf6dc427673985b536ebd1e66cbc0b1c7506b7ffb96dacd78a2abd4723063b93b772a56bff0a1cca0ab02a2e5d19040aca0ba31f940d585c143f03e696edc070a064fbc1f33f0c5"]}, @nested={0x282, 0x4a, 0x0, 0x1, [@typed={0x8, 0x28, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}, @generic="45b08e260add5236ccb3dadb9cd3a120dd979a2ebf2a17d1602ac2526b2df53c05fefd27d391d93c2aa4f44f128ce18a8ba29aee2236c094cf78cf467f3d62ce5961bf791a6a449a32ee4c8f9effa207af", @typed={0x8, 0x4c, 0x0, 0x0, @u32=0xa6b}, @generic="65a6b57c5224b173765e71357d6cc3d74f2ca9dc4978cd0235ab0349543cfea3fe3ce37b6990b70ce2eb10949a87c01fd0a310f1bbe4ac31f10ec15e562686a99f444ac352ee606f636c24dee5c1bfddd1810ce60678aeb234c98320d10029bc789c3dd332ad9c165e4ddecad6e9", @typed={0xf7, 0x18, 0x0, 0x0, @binary="ef9d2f85c0ef01c6c1adbb3726d3f4eb7aa7d29b1a12f3922c39ca258549e4d377c00a5444e68ff07ba20ecf9a5f8647fefa013f8728c38f3870906244389f41cacc84b70679539069c4fcfe264d5b25b22468ec8c1c7dbc0c3a4434d9d6fe97bfd7fb278a9b71cbc04606654ebd713da5969a1d6db82f8e4befc740c0cd66c03c44154a39a6dad331e8d94b05e50a9aa2a71a3f8dddefdb76250a0ccb0f41a21646d912ddfbdb13ac8f9f198f18e4d89ae360a28f7c33ba1e1c0d51d153ad65e103b47faecd4359ac04a8676207b633899f88b25c31c4732faa73c128c63af64e87cff45059fcabdc028ee40d15be0dd0534d"}, @typed={0x8, 0x83, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="a21df687b8ba4009ae8056cace3f635890aa5637ae26f2d1285a0ab3c033d73b6d0a56da2480177a3c4e85bc14b1be934d38083c8d52054abd5fba1988788f2ea3826e0cf52060f87e0351e19ab7522ce6151521f9d3a5d76305b6f9517fc070b42b16d797cd2719afd56bfd1fd999004e3baa0fb6ed34bda5fac0effc4125ca641362ed4457d672d47551783bfef43a4579fa210f999fceedd1671919806a741d99ac9acc45b0"]}, @nested={0xee, 0x21, 0x0, 0x1, [@typed={0x4, 0x83}, @generic="f264d2e4b67284991cda717771d0ca323f3dad969f2a1ae526c6e6d939b154bfbc4d6014314cd785dfd85ddb17f4b9d49da160a19d8848111bbd0c33c2f94414e9c5a8026a51baaedd6287ca2779c77b9e5fd5070069138927ab7e0bc59b1b4bd0b7ea", @typed={0x4, 0x7c}, @generic="4135b0ef92c5fad41f9adb31d021a61a059772fc455a6a8961fc9250e5b86e0517a247738a52ba09009ca1a540f176f949258a49e5f5fe10ea4e57d77b5e95645b78c2e7689baec2f10eb1ef7344cebd4f276dd2870f9cb3a3b810dc8d784dc8e1e100fbf26092d520d333018c5b0a4e232654c49f4ef3", @typed={0x8, 0x79, 0x0, 0x0, @uid=r8}]}, @nested={0x10d, 0x41, 0x0, 0x1, [@generic="121477e471cc1a9c71165025f1f2d5277c4ff82dd299493b28dddc779f6ef041b3b2d81a772c1e945bbba55662ec10b999a3fdf8949893eb5b165662163f693efdb1184f2efa91997b2f14864b5071b9011322eb3f2110e7c5c488cf24cb56a4c6da623b28db46c6836fd4046b0e7b122d23ef0552116b2731a382", @typed={0xc, 0x39, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x24, 0x0, 0x0, @pid=r9}, @generic="9eea9bf4154c8401bf8e97794fda00fc513e9b2f966cec37c41bd0a906d215f59092a40a452ab66eb0e8684c746d7d9b01a426d66d1944b1cd8e14438c66101e6dbbf738db8215872a09cc75042d6e1f0909d15f5c756a0977a7469f574831459fec77c02b46705bea4c4851d17f87dfdeeb", @typed={0x8, 0x90, 0x0, 0x0, @uid=r10}]}, @typed={0xc, 0x91, 0x0, 0x0, @str='nl80211\x00'}]}, 0x548}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, r11, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x4c}}, 0x80) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r11, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40815}, 0x4040190) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) [ 1556.857410] FAULT_INJECTION: forcing a failure. [ 1556.857410] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.860182] CPU: 1 PID: 9297 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1556.861747] FAULT_INJECTION: forcing a failure. [ 1556.861747] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.861770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.865229] Call Trace: [ 1556.865847] dump_stack+0x107/0x167 [ 1556.866696] should_fail.cold+0x5/0xa [ 1556.867589] ? vm_area_dup+0x78/0x290 [ 1556.868470] should_failslab+0x5/0x20 [ 1556.869364] kmem_cache_alloc+0x5b/0x310 [ 1556.870310] ? __lockdep_reset_lock+0x180/0x180 [ 1556.871408] vm_area_dup+0x78/0x290 [ 1556.872261] ? find_held_lock+0x2c/0x110 [ 1556.873234] ? __vma_adjust+0x66e/0x2510 [ 1556.874180] ? lock_downgrade+0x6d0/0x6d0 [ 1556.875167] ? up_write+0x191/0x550 [ 1556.876013] ? downgrade_write+0x3a0/0x3a0 [ 1556.877005] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 1556.878265] ? vm_area_alloc+0x110/0x110 [ 1556.879219] ? __vma_adjust+0xbb8/0x2510 [ 1556.880188] ? vmacache_find+0x55/0x2a0 [ 1556.881129] __split_vma+0xa8/0x4e0 [ 1556.881979] __do_munmap+0xf40/0x1260 [ 1556.882867] ? arch_get_unmapped_area+0x450/0x450 [ 1556.883995] mmap_region+0x7cc/0x1500 [ 1556.884905] do_mmap+0x868/0x1370 [ 1556.885725] vm_mmap_pgoff+0x198/0x1f0 [ 1556.886644] ? randomize_page+0xb0/0xb0 [ 1556.887586] ksys_mmap_pgoff+0x41c/0x560 [ 1556.888530] ? find_mergeable_anon_vma+0x250/0x250 [ 1556.889670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1556.890889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1556.892089] do_syscall_64+0x33/0x40 [ 1556.892962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1556.894164] RIP: 0033:0x7f2e9760cb62 [ 1556.895028] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1556.899304] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1556.901086] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1556.902697] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1556.904311] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1556.905930] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1556.907546] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1556.909202] CPU: 0 PID: 9296 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1556.910148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.911273] Call Trace: [ 1556.911641] dump_stack+0x107/0x167 [ 1556.912145] should_fail.cold+0x5/0xa [ 1556.912695] ? anon_vma_fork+0xf1/0x640 [ 1556.913248] should_failslab+0x5/0x20 [ 1556.913772] kmem_cache_alloc+0x5b/0x310 [ 1556.914333] anon_vma_fork+0xf1/0x640 [ 1556.914851] ? __vm_enough_memory+0x184/0x360 [ 1556.915464] copy_process+0x72cd/0x78b0 [ 1556.916039] ? __cleanup_sighand+0xb0/0xb0 [ 1556.916634] ? _copy_from_user+0xfb/0x1b0 [ 1556.917217] kernel_clone+0xe7/0x980 [ 1556.917734] ? __lockdep_reset_lock+0x180/0x180 [ 1556.918375] ? create_io_thread+0xf0/0xf0 [ 1556.918952] ? ksys_write+0x21a/0x260 [ 1556.919473] ? lock_downgrade+0x6d0/0x6d0 [ 1556.920049] __do_sys_clone3+0x1e5/0x320 [ 1556.920613] ? __do_sys_clone+0x110/0x110 [ 1556.921205] ? rcu_read_lock_any_held+0x75/0xa0 [ 1556.921829] ? vfs_write+0x354/0xb10 [ 1556.922338] ? fput_many+0x2f/0x1a0 [ 1556.922835] ? ksys_write+0x1a9/0x260 [ 1556.923350] ? __ia32_sys_read+0xb0/0xb0 [ 1556.923906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1556.924614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1556.925320] ? trace_hardirqs_on+0x5b/0x180 [ 1556.925911] do_syscall_64+0x33/0x40 [ 1556.926417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1556.927109] RIP: 0033:0x7f3a69dacb19 [ 1556.927610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.930085] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1556.931122] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1556.932091] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1556.933080] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1556.934049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1556.935011] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:36:30 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3fffff, 0x0, 0x0) 20:36:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x100000}, 0x0, 0x800000000000, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x20200) r1 = syz_io_uring_setup(0x135, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 20:36:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x2000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x25c9, &(0x7f0000000000)={0x0, 0x67b2, 0x1, 0x0, 0x389, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 20:36:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:36:44 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x7, 0x2000, @fd_index=0x8, 0x3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000040)=""/57, 0x39}], 0x2, 0x21, 0x0, {0x0, r1}}, 0x5dd7) 20:36:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 66) 20:36:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 20:36:44 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 75) 20:36:44 executing program 6: r0 = syz_mount_image$iso9660(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x7, 0x6, &(0x7f0000001680)=[{&(0x7f00000004c0)="ad19eff3dc617d2d388d988dddb770264c5d4623756788ab4e2b9f5043650a75fdaa6a2653dfdb82", 0x28}, {&(0x7f0000000600)="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", 0x1000, 0xfffffffffffffffd}, {&(0x7f0000000500)="832efd00a5e98b1c9cbec107188599033323b75ee7628895b02450720f4535fe30c1d5552d4696fff4db3ddc72dc7b399e97a9293f5e20f07241d60ff74615a2e4dd34aa805d76a160", 0x49, 0x7fffffff}, {&(0x7f0000000580)="15986087a996c4f16e675f3450c262e230f41ac830ca329555e150c26f06dc45c50a", 0x22, 0x7}, {&(0x7f0000001600)="f2d6cbee3909096bde6b4914a5f9310373211f", 0x13, 0x100000000}, {&(0x7f0000001640)="5ed0f40566387b6728fbb4a640706580317ea67dc53581e65562c45ee50496cc148f438927161e96d53149a523ebcbc7433107f19844085686e2466ae9149a86", 0x40}], 0xa0, &(0x7f0000001740)={[{@sbsector={'sbsector', 0x3d, 0xd3}}, {@nocompress}, {@cruft}, {@sbsector={'sbsector', 0x3d, 0x1d7}}], [{@obj_role={'obj_role', 0x3d, '\\\'\\'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@measure}, {@euid_lt={'euid<', 0xee01}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@measure}]}) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="1d95eb8c09e5665bfbd2c3b53f48701590bf2b682a6290269709f71ed0df70d38db23752fd9effd44c067c6ad55155a795adee5bd7bc0d2898238f72c469f224ae0ca5e6915718ac01d3b9fca75790297355dbecd3bf1a419bf1cc4418ee0fdfd4876f0768cff255165c506ea3c4b0ca751b0a1fff99b4c0adc7ff6a3b40c6ef88bfa7ae1b6e5bf45cb1252d9ad0296782cbc309f75b85d282a970a43812e1c7b41a672a9bae8223ff89d772355b0081b28c12d1ef4f5663f70c1a08", 0xbc}, {&(0x7f00000000c0)="d4df7f5932b6047bdf6c7de9d8d0968fff5cd2b6fcfd648ef6fc43125bd9805b9c24f2b540c2ef42208db402dc33f8eab944a1afd793bba705b39581b32fd1476749dfd79d684340cdd0a4bfc1c2eceee7e30070bd298865dc912d1d79b53d777a7d6837c3be4b4bd9a4f4b633ea2c4fd8578e81cea15ad9567fa9450735b25d2d8b79e2982e548010a1f8444d753bf0628535671a", 0x95}, {&(0x7f0000000180)="155abfcace71d7aacdefbc4eb0030935b8d6720b5224ee19547ee3416c5d55eab0838ced49aceeaf60b2b5a15580152a5ac7e33abbed5d19f4b990578799946d7972e6af4b039038447376229de0c1ce17d2c6d525cb724c", 0x58}], 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) sendto$inet6(r2, &(0x7f0000000240)="bed500be163ea93ccbc5de733e578aae25982e05a567be3783bf1f5d1c8bbcca41978c2c14a1d864032d1b4acfc803fc336fa50164b83e19b90fe535a621ec10ea039e8f045e79e844868f2bf9417837d24a5c5b2bedd1540282d7cde00cb3fc2729605b6967dc21340c5459848d4e6b41f057793f18ad55d505ff677d9efdcabb0f8cc09839ad8d12a1e8e2d46be0d245897a27597e27b58ad56ef37c9be7b876a77ebbefd7f4a70c7c759d290d87fb39537de380117ce2f6b522480ef8ae88b0adf92c55be49a74f973a5dfa15d84dfc72b83313e2779c4312b3364e6b", 0xde, 0x50, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @local, 0x6}, 0x1c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) [ 1571.041233] FAULT_INJECTION: forcing a failure. [ 1571.041233] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.042880] CPU: 1 PID: 9327 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1571.043876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.045084] Call Trace: [ 1571.045485] dump_stack+0x107/0x167 [ 1571.046021] should_fail.cold+0x5/0xa [ 1571.046601] ? create_object.isra.0+0x3a/0xa30 [ 1571.047255] should_failslab+0x5/0x20 [ 1571.047808] kmem_cache_alloc+0x5b/0x310 [ 1571.048395] create_object.isra.0+0x3a/0xa30 [ 1571.049031] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1571.049769] kmem_cache_alloc+0x159/0x310 [ 1571.050374] anon_vma_fork+0xf1/0x640 [ 1571.050928] ? __vm_enough_memory+0x184/0x360 [ 1571.051596] copy_process+0x72cd/0x78b0 [ 1571.052222] ? __cleanup_sighand+0xb0/0xb0 [ 1571.052871] ? _copy_from_user+0xfb/0x1b0 [ 1571.053370] kernel_clone+0xe7/0x980 [ 1571.053796] ? __lockdep_reset_lock+0x180/0x180 [ 1571.054337] ? create_io_thread+0xf0/0xf0 [ 1571.054819] ? ksys_write+0x21a/0x260 [ 1571.055253] ? lock_downgrade+0x6d0/0x6d0 [ 1571.055731] __do_sys_clone3+0x1e5/0x320 [ 1571.056190] ? __do_sys_clone+0x110/0x110 [ 1571.056675] ? rcu_read_lock_any_held+0x75/0xa0 [ 1571.057209] ? vfs_write+0x354/0xb10 [ 1571.057636] ? fput_many+0x2f/0x1a0 [ 1571.058049] ? ksys_write+0x1a9/0x260 [ 1571.058489] ? __ia32_sys_read+0xb0/0xb0 [ 1571.058952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1571.059553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1571.060141] ? trace_hardirqs_on+0x5b/0x180 [ 1571.060638] do_syscall_64+0x33/0x40 [ 1571.061080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.061671] RIP: 0033:0x7f3a69dacb19 [ 1571.062093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.064207] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1571.065107] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1571.065930] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1571.066748] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1571.067567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.068383] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1571.073169] FAULT_INJECTION: forcing a failure. [ 1571.073169] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.076105] CPU: 0 PID: 9334 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1571.077870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.079988] Call Trace: [ 1571.080948] dump_stack+0x107/0x167 [ 1571.081901] should_fail.cold+0x5/0xa [ 1571.082893] ? vm_area_dup+0x78/0x290 [ 1571.083862] should_failslab+0x5/0x20 [ 1571.084840] kmem_cache_alloc+0x5b/0x310 [ 1571.085887] ? __lockdep_reset_lock+0x180/0x180 [ 1571.087081] vm_area_dup+0x78/0x290 [ 1571.088019] ? find_held_lock+0x2c/0x110 [ 1571.089057] ? __vma_adjust+0x66e/0x2510 [ 1571.090091] ? lock_downgrade+0x6d0/0x6d0 [ 1571.091171] ? up_write+0x191/0x550 [ 1571.092115] ? downgrade_write+0x3a0/0x3a0 [ 1571.093202] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 1571.094586] ? vm_area_alloc+0x110/0x110 [ 1571.095619] ? __vma_adjust+0xbb8/0x2510 [ 1571.096678] ? vmacache_find+0x55/0x2a0 [ 1571.097654] __split_vma+0xa8/0x4e0 [ 1571.098478] __do_munmap+0xf40/0x1260 [ 1571.099337] ? arch_get_unmapped_area+0x450/0x450 [ 1571.100430] mmap_region+0x7cc/0x1500 [ 1571.101317] do_mmap+0x868/0x1370 [ 1571.102109] vm_mmap_pgoff+0x198/0x1f0 [ 1571.102990] ? randomize_page+0xb0/0xb0 [ 1571.103903] ksys_mmap_pgoff+0x41c/0x560 [ 1571.104828] ? find_mergeable_anon_vma+0x250/0x250 [ 1571.105948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1571.107131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1571.108291] do_syscall_64+0x33/0x40 [ 1571.109143] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.110291] RIP: 0033:0x7f2e9760cb62 [ 1571.111131] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1571.115272] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1571.116988] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1571.118592] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1571.120199] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1571.121806] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1571.123405] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:36:44 executing program 7: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x9, 0x1, 0x4, 0x1, 0x4, [{0x1, 0x8, 0x0, '\x00', 0x3002}, {0x0, 0x4, 0x800, '\x00', 0x9}, {0x30, 0xfffffffffffffff8, 0x4000004, '\x00', 0x1680}, {0x100, 0x200, 0x1000, '\x00', 0x400}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000004300)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000042c0)={&(0x7f0000003b80)={0x70c, r4, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x3, 0x5, 0x6, 0x60, 0x3, 0x48, 0x30, 0x24, 0xc]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1f, 0x6, 0x36, 0x4, 0x0, 0x6, 0x3, 0x24, 0x9, 0x4, 0x24, 0x2, 0xb, 0x1, 0x1b, 0x60, 0x1b, 0x18, 0xc, 0x30, 0x4, 0x2, 0xb, 0x60, 0x16, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x1, 0x60, 0x9, 0x18, 0x36, 0x36, 0x2, 0x3, 0xb, 0x9, 0x1b, 0x2f, 0xc, 0x48, 0xc, 0x45, 0xc, 0x48, 0xc, 0x36, 0x6, 0x12, 0x3]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x8}, {0x3, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x4, 0x6}, {0x7, 0x9}, {0x4, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x7}, {0x4}, {0x4, 0x6}, {0x2, 0x8}, {0x0, 0x9}, {0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x7}, {0x1, 0x6}, {}, {0x0, 0x8}, {0x2, 0x7}, {0x2, 0x5}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x4}, {0x6, 0x5}, {0x2, 0x9}, {0x4, 0x9}, {}, {}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3, 0x8, 0x6, 0x400, 0x4, 0x7ff, 0x100, 0x1f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x6}, {0x5, 0x4}, {0x6}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x1b}, {0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0x4}, {0x1, 0x2}, {0x3, 0x8}, {0x2, 0x2}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x3, 0x2}, {0x7, 0x4}, {0x7, 0x3}, {0x4, 0x1}, {0x7}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x3}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x6}, {0x6}, {0x0, 0x4}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x9}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x8}, {0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x729, 0x2, 0x1, 0x7, 0x6, 0x7, 0x81, 0x100]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x36, 0x12, 0xb, 0x5, 0x30, 0x9, 0x3, 0x1b, 0x9, 0x3, 0x60, 0x3, 0x1, 0x1b, 0x3, 0xba5becac09b15444, 0x16, 0x12, 0x24, 0x4, 0x16, 0x1b, 0x48, 0x16, 0x36, 0x60, 0x1b, 0x5, 0x3, 0x0]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x8}, {0x7, 0x3}, {0x4, 0x3}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0xa}, {0x5, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x3}, {0x4}, {0x0, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6c, 0xb, 0x6, 0x18, 0x39, 0xe, 0x18, 0x24, 0x4, 0x15, 0x5, 0x18, 0x16, 0x5, 0xb, 0x35, 0xc]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0xa}, {0x5, 0x8}, {0x5, 0x2}, {0x5, 0xa}, {0x7, 0x3}, {0x5, 0x9}, {0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x9}, {0x2, 0xa}, {0x3}, {0x4, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0x9}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x3}, {0x3, 0xa}, {0x3, 0x7}, {0x4, 0x8}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x9}, {0x3, 0x2}, {0x4, 0x7}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x5}, {0x2}, {0x1}, {0x7}, {0x2, 0x6}, {0x3}, {0x5, 0x9}, {0x2}, {0x0, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa455, 0x9c, 0x401, 0x5, 0xa0f, 0x8, 0x3, 0x7f]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0x8}, {0x7}, {0x2, 0x7}, {0x7, 0x5}, {0x4, 0x5}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x2, 0x1c, 0x2, 0x0, 0xa641, 0x2]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x1, 0x0, 0x4, 0x9a, 0x239, 0xffff]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x1}, {0x5, 0x5}, {0x6}, {0x6, 0x5}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x7}, {0x7, 0x8}, {0x1}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0xf77, 0x20, 0x2, 0xfffe, 0x3f, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0xb, 0x6, 0x69, 0x24, 0x6, 0x5, 0x9, 0x6c, 0xc, 0x48, 0x4, 0x18, 0x5, 0x6, 0x4, 0x12, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x6d, 0xe16, 0x9, 0x8001, 0x3, 0x7f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x9}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffe0, 0x6, 0x5, 0x7f, 0xe0, 0x3, 0x101, 0x4fb]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4}, {0x3, 0x1}, {0x7, 0x6}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x8}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x5, 0x1b, 0x24, 0x36, 0x12, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x4, 0x6, 0x0, 0x55d8, 0x20, 0x40, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x13a, 0x5, 0x4, 0xa8, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x3}, {0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x5}, {0x5, 0x9}, {0x7}, {0x3, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {}, {0x6, 0x1}, {0x6, 0x1}, {0x3, 0x2}, {0x4, 0x9}, {0x2}, {0x7, 0x5}, {0x1, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x7fff, 0x7, 0x5, 0x1c, 0xfffa, 0x4, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x6e2f, 0x0, 0x100, 0x3, 0x0, 0x4dee]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x6, 0xffff, 0x600, 0x3, 0x7f, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x400, 0x5, 0x9, 0x7ff, 0x40, 0x3ff, 0x100]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0xa}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0x3}, {0x7, 0x6}, {0x2, 0x7}, {0x6, 0x5}, {0x6, 0x7}, {0x7, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x6}, {0x5, 0x4}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x9}, {0x6, 0x2}, {0x4, 0x4}, {0x3, 0x7}, {0x3, 0x7}, {0x4, 0xa}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x8}, {0x2, 0x9}, {0x6, 0x5}, {0x3}, {0x5}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x7, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x6, 0x16}, {0x2, 0x6}, {0x6, 0x7}, {0x5, 0x4}, {0x0, 0x6}, {0x2, 0x3}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x4}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x3, 0x36, 0x2, 0x30, 0x43, 0x30, 0x6, 0x5, 0x16, 0x1b, 0xb, 0x24, 0xa, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x190, 0x1, 0x2, 0x5, 0x7, 0x2, 0x5]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x5}, {0x5, 0x5}, {0x3}, {}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x7}, {0x7, 0x6}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x4, 0xa}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x7, 0x1}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x6}, {0x2, 0xa}, {0x3, 0x1}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x4, 0xb, 0x12, 0x61, 0x9, 0x3, 0x6c, 0x1, 0x36, 0x12, 0x60, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x0, 0x1, 0x6, 0x1, 0xb, 0x4, 0x9, 0x9, 0x1b, 0x2, 0x65, 0x1b, 0x5, 0x16, 0x6c, 0x9, 0x74, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x20, 0x8000, 0xa3a8, 0xd8e, 0x21, 0x18, 0x7f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x4a27, 0xb84, 0x7, 0x7fff, 0x8, 0x7]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x1}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x9}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0x9}, {0x3, 0x6}, {}, {0x7, 0x2}, {0x3, 0x9}, {0x4}, {0x1, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x6, 0x1}, {0x3, 0x9}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0xa}, {0x4, 0x8}, {0x7, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x6}, {0x2, 0x2}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x8}, {}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x5}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x8}, {0x7, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x6}, {}, {0x4, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x12, 0xb, 0x16, 0x6, 0x60, 0xc, 0x48, 0x6, 0x60, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x6}, {0x1, 0xa}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x4}, {0x4}, {0x1, 0x6}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x8}, {0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x4, 0x1}, {0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x1}, {0x7, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x6, 0x6}, {0x5}, {0x5, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x20, 0x87, 0xee9f, 0x5, 0x1f, 0x9, 0x20]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x12, 0x3, 0x36, 0x9, 0xc, 0x5, 0x9, 0x1, 0xb, 0x16, 0x18, 0x16, 0x48, 0x9fe2ab3dafba2f82, 0x12, 0x12, 0x6c, 0x24, 0x16, 0x6, 0x2, 0x30, 0xc, 0x48, 0x6c, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x252, 0x0, 0x3, 0x6795, 0x4, 0x5, 0x20]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x16, 0x30, 0xb, 0x3, 0x6, 0x24, 0x6, 0xb, 0x36, 0x36, 0x60, 0x5, 0x48, 0x16, 0xb, 0x16, 0x1b, 0x5, 0x60, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x1b, 0x18, 0x3, 0x9, 0x2, 0x1, 0x3, 0x2, 0x5, 0x36, 0x18, 0x16, 0x12, 0x6c, 0x24, 0x30, 0x60, 0x4, 0x6c, 0x24, 0x6c, 0x4, 0x3, 0x4, 0x2, 0xb, 0x48]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x2, 0x30, 0x6c, 0x3, 0x60, 0x6c, 0x12, 0x9, 0x24, 0x16, 0xb, 0x36, 0x12, 0x18, 0x1, 0x5, 0x1]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x9}, {0x5, 0x8}, {0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x5}, {0x1}, {0x7, 0x1}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x4}, {0x7, 0x4}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x3}, {0x7, 0x8}, {0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x5}, {0x3, 0x4}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x2, 0x4}, {}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x2, 0x9}, {0x6, 0x5}, {0x3, 0x5}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0x2}, {0x2}, {0x6, 0xa}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x1}, {0x7}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x6, 0x200, 0x9, 0x9, 0x4d, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x9b56432dbb6aa4a0}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x3}, {}, {0x2, 0x1}, {0x3, 0x6}, {0x0, 0x4}, {0x3, 0x9}, {0x2, 0x4}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x9}, {0x7, 0x1}, {0x7, 0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x7}, {0x6}, {0x1, 0x2}, {0x4}, {0x3, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x5}, {0x7, 0x7}, {}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0xa}, {0x1, 0x8}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x9}, {0x4, 0x6}, {0x4}, {0x6, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x5, 0x5}, {0x7, 0x8}, {0x2, 0x2}, {0x1, 0x5}, {0x5, 0x6}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x9}, {0x4, 0x9}, {0x6}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x8}, {0x6, 0x7}, {0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x6}, {0x2, 0x7}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x1, 0x9}, {0x7, 0x1}, {}, {0x4, 0xa}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x6}]}]}]}]}, 0x70c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = fcntl$dupfd(r2, 0x406, r0) r8 = openat(r7, &(0x7f00000005c0)='./file0\x00', 0x8a82, 0x1aa) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000600)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x3, 0x1, 0x0, 0xf877, 0xc5, 0x8, 0xff00]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x9397, 0x9, 0x400, 0x8, 0x5, 0x1ff, 0x4002, 0x7, 0x0, 0x6]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x44000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004340)=ANY=[@ANYBLOB="8f786bac369c5474b328544dc19a5d71e05115c2ba526e480b14d104137979efd6b2610e9916af36dd85aa8bfd04d8cbea019f44ea2e4365a446f2f49558f7fc1d41cc64a4b5b73aafc08dfbc2f4291eb795b60f3dc37bb6133db31fd3e88f0f471791bdbb87ce06ca478d38dcce2605116255839f293b594b1fbc4fbf20bf3d0dcd91e74b80b05a361a5d765e603cea", @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="0a00180003030303030300000c0070000500080000000000"], 0x34}}, 0x0) sendmmsg$sock(r7, &(0x7f0000003940)=[{{&(0x7f00000007c0)=@ethernet={0x306, @random="16dfde81d147"}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000840)="607343ec21a926447df71a362cfe1d819c77fc18f7fa3349d9e0a4c0c208622d99ecda50849225937c3141988306985f8214403cc0852e87754434ed3ccc2e6200e4f956f0c90dd0482a79925b93c94085b3d0eedf1852b92285f2b3f8c0", 0x5e}, {&(0x7f00000008c0)="d422f5a6fe8d8bd6991c03b45c9ce9cd2bb3e0ceacbff129999ba7d8a3f88c6b09a3975ac58c91e06bc19179378ac4bd7a430f0606d484a0cd917fbfe37ff82b939feb505775e1afd039bda913a14627fb9b698246cb756ebf043bdcedb30ef88df47c", 0x63}, {&(0x7f0000000940)="88c2485728e2339dfcfa3ba3268dba96f786e80e2c41c35780a8987c4481ddac59eed53e05760b5480e3fc00625d81f7b1a780e87ab8f208e03d634bad96de9d6de8", 0x42}, {&(0x7f00000009c0)="43d08451865ebfe54e90d295db1fb6bfbe873e1a7117fa4669cfa91c702617b1e29c73f0aaae1d8d8ebaa44dbd017c8b6369be099901c7f01bd140b85ca8287ed5d550ada1261d0b4ef5211a6d647c93bd53ef9aea4aa41246d01ca1fa4d586b158850b61bab9245cba824923a6036a65d47b33d3e91a54046e4548267103f2560ddcd87de09b6901a2b4118d6b881139055aaca7f1df0eaa8ff9ab7a29cf0270aa0986255828fc5357cfb987b038f88afd65e1e3112576c9585a28a4282ae", 0xbf}, {&(0x7f0000000a80)="2dae88bbe3a21d0fbc99ad48133d1dac26cd7f67c066d2abc476922157c16f0df09cf47f882f4c44d2b166e6ccf9868b1c6cdd1d29e8dd45931a3cbf2e8058f330695969845df1eb8b57cc32d0eb035e8ea098a31c68d955d0506e71152b2ee659087548bc4f8320c0c951cc12265a31ac0697715c0fb4e2c883815c042eae02cf4be1f92f1807fbafc189a435bb8b0334b020e5133eb574399e11889ba991dbd58c12e7639b0d7a19f5819e0e1a7478b6eaa2f5fc16d8f13ca1c47bf9baacf5a735517fcd66c6756ccac69cfe7cf28f40cd6bd760a65927fb8a42504bdda65a962f7e500bcf02fbb9bc3d9450e9e7a2c8fb37777836c4c308d231970744e54cc02c4ae4f226195577cb23dd2a86cebbeb98b72b523d68a9a19c046fda8d75a771e347c277c66ca630644423a116a5ef061c2f936ad987c1258282a0a3760d28d244677986ab2ea9bb01d941fb0b6d0c0229f74de5a78234744ea0245ab21fa15a88db3bc9aa226f4d57397d9e57ee866702a1f18d3d2c2f79ae9f90d18832afb28f0398d3ba90ab93700369d7bc20b6e20daf2ca6c5f6a46897259f64788b1055ba0fe0ca61ce880a15bec8485930cff546a30d2dcc6ab6968a1b994ff1b6e7686099c0838ad07c3ef9a241075d236bff40371970e937062dc872ef1bd451433ce1f489e3ae9b7a4269efbfe3083096f580792363529f1e9db30a950065713858e4a7c9bd43dee8564232683e648b9889febdf025390b6ed8dedc63038b649b43caa16dbb6d69aac2785585826be21f72f00137ad20c6075ed201354aabb73e525b9fbf58a056825aa0861128534d6c460356bfe61c30d134fd84876cbe6a9bba8be4dbef02b73ecd2196b461775e466ed9f09ca29c56e7e6df78903f0e64df225b812920da81ffe1df956c8958144e1b90ac2c80b1ff23c6d02f32ea2fb051203c76338998b181fc35caf58a67d619b0ed5d2b49a4b79ed87986d4f477408ad86b8f5f5db1ec2b80e7572ebfaa2362ee00d1f5cf376c9900c055a66fb65ff3b6e03a673177e5e7c8b76ca8aaa7d885f35dc607c79923d51954f28a6875e405220767dcbe70ccb9131e5219af74de2722fad9a4df95351b8a1abe2c22ea5a32cedb7d8b56ebae77389e7bdbdff51aa469aea102141594653405c8a16229c5784ff1410c07af1c80c39b66511e324d803a89d317f51c635e548c388e550d9f0d9891e849e6ff72a79d58dbaf0e3a79563372b6371857ac58dbd1907142d71ed02ab69c67630e42864c2a0319a6e4fe6bfb52eeec03a79ca782637f39e29680e693830933d7ae5abb259f112a3e583bb37a17895bda0bcd25d09d5924a8a90931a28c2927d66c1404f611f6242be3fda78c795c1d9d89e165d91f7729b6f25ad6f1f198a4af5fe30009042a2c63906c4100650ce02c281b4d7eed56d12035b72d40033e916895212dead81d3ae49844da4cc61595a9282762432fb8a20a665c4787bcba5d2faf1273152d5bc6894656597306f5ed758ef2db40ab8d97af313857865e3785b0b08fd7ce23c4acaa93bfbaf9c914a45fa7ceb934ce3166b78f6aa564e152905bd305b9a187f576f3e1a6290c56820d82f16d4a8679bbde3a73d6bc20d5e072a482016fd0315713dc24f691c12bee49882915a1594d5f4ec45d2350c79a11478c592af6480875a88d2f02c7e9ea43f050087f8eb8aa277ee8a8f3f63e5ff2795e924a9a466651ba9c07f0780b9229cbc32c53fae46ea2353290c220030ea27df71f89c2456f8b0181ca4076669e1d1955af83a9d03836145c14e18d7d77999679deaa188249e3e139f74e681a9e2f87351f34f9a770ac11b125231c45dc2672469554a74a9b5d784d2dc84a4758b189949c4912346ad4cb7ce93a0c39ad6d27655a75ba92ad53383e87b72cb54d65ff1ed385a92bc1ae2d228e99e2c260a6d2142b61e2d886e8e0db95b68da03e86322690ef90d45fb418614d1475058ae1d8f93069a5e802559bd35518406bc2d7f48739e7367499d2ba3ca19d46820238f5f9a4aad93dc09e7d8012de5dda9ab20664efb77e828097cab52d3d9b59d13329efc2b01de6945936b861fe2768f5960bd10bea256cd7d89392bbd71a2ea7fa8cd906b39f24e788481a30fbbe73f2faa62594c60b25c5a86d9702b1d4fa70d2f5c7b06aa948e162756c98c75ba507d374a246037ab5dc6d8b8b4228f1f544c505f449242a0b9d95d7f4aeccb096a2f9c3fb27fb2dc7c2c4146aa703ba3ce0fd61e9779c52165e97385be82a3a72468e9a4f81a8f4a8e97e736df6b5f72ff4dece943f01708148fb92c66669e5a8d7f54ffb3c8ea4129029f24637dc3e495b9bb5e2380404bd30253e5eb7a7877bfa785767eb0ca951769904cc0cad9e9ea34788a51710b65939467c4efc5c971096a6979dc85ddea86e26550cebb7423f2d2b0dda6aa9590677f68aac5c564af1dbdfb61b5d0c3796a27294a98f1e1ffc48683b8ed37bbb56c4ebb4b8884c98451cf182b6efa80cec83364ca63e81c258853986ff4f8a0e149a6d359d9aca9bbe3d6022fd473e2353705f4b1d5f8e06ba97813106ece14ae107970a937bbb34831e0f893247430899add3c867b7cfd0be391ff1e285e9419c52c345dfab1e6a5959f953116d216c8a4d72f44c3c76a8b20cdd0778fa992b3d8ccab76bbc5ed0965e7c14eec939a8e02d59acb7e983aec1ce493ce54fe3d840700976200f822497fbe52f512b4a386f92fba12798c4e134e822ddb1dca69e57a4afd88c833963ec03a2665b2ac13c770766680be7df1ef7b669bbc2feab3564904f02ebc3795780c55f519ec9fa7db9ba8f58d7c0d15cd4d3b4d9e68403f539eb3d45eac2cf89e1d43df0757509ef54287e285656cfce9a7d12ea2760c9e5cc8b00b75e849b5b5d0b8c9e76b7ce0d8fab652362da35236df26650e5ad6425b7ada618ad1c86f7fb51a3523df1114e22b99b29c56a95eadb7eaae990e5e768f021f6eef9637642c2b8df4585a9900f0645c05b48908018da2c4ec1047c166a4eedc2df8c14981bb085807f4d7c744e07ab1756fa94ad54145c64705d12f4454676054e5b84991951bb924563e17dab9b0484741e23cabe04955dcfa7ed7d619606ca568a52d33727c383715f59d04f87d6181ccf427b6858cbd237a65d9b4284729a2cce74cc87f6ed0664f751a3bdc68e839539c702c2b31b7b4189a2ceb8addff8ee0f7e484c574d2a1bc5f32e546cd3f0095298606d2c295ce207862c63299aa5cc25b3eddf654114afb3843e7154f3e10da216c6da88881866081f10d48586351280b92426ff4ca882adf2e4fbc7294250a7cb3b8340648d3126b8ac68120d6e53b21102da06cc0161d838f2d3eb266e9c2c7b26cec7fc3fde9510b8a4a9747a5ef5122b3e553b4f4c09429f69daae39e03f1b1a53b331b7866b2fc655569eb5aad1b5c8317223e596b8a11b8df2193e6d062a54585270ac74ca4d221afe5e4a641f3c8e2317fee86f3cc95a08af09fb169301fb854304cafb6bf8850edb528d84d92e1211c7d5dfc001e0057b70de1f521652228e56402aecb4db29e32dd004a3a5bcec99be984bcc6dd3db3d4aa8812087d4607d35792bdcf86c9186f91bac7d8d8bfc4d71ce90b80dc9c2a36b8f02b0b404d2e596cefcd7ad5ebaa302a3f6ccd11b6e47a0e8d9b730039dca8f15de0cd25115f9fab3268f06b1e71ee7046f2c1277541d587e5402a730a800919136c4aa81e09d5819b728c1a11ebe5fecdecd21c7d683da539bb596641d47500f98dd392b369930bc8b34fa6d67571781c7e6fdc61316a55784f4787d7de90ef1c77a15679fa3b01d0d767c9f090cafe90838d07c6d171131b6321d5b5c295fbeba92f59f54684f66c0edeb5233a9f671e9882a2c1cab0bc3841878e0478cb9f3a888188782266d2c453dd3f5254bf2762d7bd6af6b734ae8868dcd3287c5e7b24422c76f7af12e1c67f3baea35724315ff0c725a0b8740b9eb8a36c9bb195c12387bbf08f4541844063615a80c461605bcd124818bc8d39c33f428501b813185383094d3de21621b296259febc4aa98804ee8b1b9e6d4624cfeb82350554f2d70ec1c573e58047b5605c88d393d19b365e5b78986146df6cc96aad001372b240fa80e3e8a25f0cf2baa3d5a639a3cd852118965e5235e5d93e3926de692f8159d16eb13949537a3289abad24e690f77d45798c1842a670b27ee6af6e73f5331d8634b3f64b341350104b42d500069eda1dafa521deaaa49eb2c92f8bbc0e572f5228a3457fd0ddc24af0473f359d2a6e9e7a3de0b9f44a53c2fedeef83186531e333a52b08bee4f65c51dbf04c85233116635f559291ef178ba3bc15f3e47c3f2b920d6de04e8c0ab55682bbd7966bea9612a9d11abb29f70407161b247c243657d223470fe109fd89e8d0523449513629deec806d9dbaade89636353b07f32aa88bc2eb98d4e67201c75713bbff6f9e559c4dc1c0564fd76d6e254a77ff619de7125f4a7df715dc4377c868a41515a80dcb9c512f4347e5a9eba77270c8b8ac92f46aac574ce90c6845ea0efd5034f085e4e60556a1d1ce3530db562577212d41effb6db69ac028db4087cd2dd2e211eaa7fc8a7a2588ae06a6af601d501536b756dbdcba0f6730d3ac3797e2d38f1e154feeb75b252762b7c26ec528448ef2e9b3e1dd846a1157c93e9de8fb32016d69b4b0134219ef9b297aac381aac44ddc40b03b4bee2f8b00476f6efbee95665c756bf2a19ec1211232d36c947908a1472ae992bf888e86f34d8fd3c6717f351b12e828fbb59ca8f8b571a57171bfb9559f04d66729bb922a1a3816ca77f1cf2361be6cd73d88dd1fc3790132d1811a81914a54115d99a560e831731918e051e6f0c94ea13509449d06cc8e4e9d69b4ed8a19f7b73925e714803ea63bc1a50bc9a1d0f08199e71b8f7ea7bf062ef2842b24b57cb869d57322abd046f27c0ae8088ba875cb49506899288409b40e012dc92cd909fe986184352db4de803ebd5374f4eb42d11a0e8a669f98ba0c7642c618dc688380ad557b00d64e754551fc1d36b76cc2384f51c903d79ad10de2e4f87a21dabfb47566a00e66b50ac3eb887618d6a2ce25f6381aa793402b2fe1518a88d6b9b3ffaf6ae5c016a6c6c6772ff288eb08e532042dbaa6d13c78054cc48d78557598a4da05027e0664766dc3b4d12f9b846e0f862b345c55db8745024be47854389c71c00e342287ef267aa9902a7bac3e6bffd3fd09f5d259f3caeb6c45df09353a3cc1c4e1d31a1befc2d3b0cc42cc5220c192d4047087f38266bb044f9485d09a7dd001072804ffd37efd18d7ddf000c1822d675c4a150087c6e895e9593e7040554c9714a005bf1e5b1558820a82e1fbfe2316cc22efa4dbeb1bc97672bb9fb0c79fbac50ec540788f1fb55b24573ccdfdadca48ce1e8ba0ccc774c03c367e382bd441df7d0c546dae2c13f392f9ea72621d00570a696cc6dfc54ee3fb76846e6f1c6935457b1cce5858d342ef87c22f7642158661f6f3094b1f564e8dc6f8e13bd329aa5e90afcc2b2553ab28b356a9ca33d3c7aa18c9e61132019121dfd6d05c3f012b8bcbc4d765ea789869e446da2b32e11066f5f483af834ad745554efde48e5ae05785a610654a107768b73220ffd96abd9754bf9d51829d065b57a2b95a8d34fe1ea89ebe0a687a27a142e2a7d806ad10ca910622b4f007aa792844122f1bd2c8348b9829a0a73a8cda227d21756e91242b6c840dabb4ca461c248aa925241", 0x1000}], 0x5, &(0x7f0000001b00)=[@timestamping={{0x14, 0x1, 0x25, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x508}}], 0x30}}, {{&(0x7f0000001b40)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @broadcast}, 0x4, 0x3, 0x3, 0x4}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="965886d96cfd4ee2529349b2efc2f581b42dccbcd266cb06c385b472c9d05ea8921208d9c2d81e971bdbf102dddccf3731b2f20d3d22e5f239dd1a9a82a77d4adfcc68449b8cecbe6e4b8b765017f13a836799618b1271dccbafacf75c3b25e4a80f2123901c193fdbb5d39c", 0x6c}], 0x1}}, {{&(0x7f0000001c80)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e24, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d00)="6e15c811d126e454c3c09288aa34fe3fc9bb1cfbc18f8fe29f15bb5d33f3389e333c06971d0709b56129f2f6b01f5362c66c2b108bbdc2501861880ece0c71f612dc43154600267f20c219fc42529ab2308cf039b7f788781053332a5851566b438e9e643435c1608e0a7048b44e861390fd01768d38422a505626d1939d6572fd9c303b0c7b775d5283f77ee4b9b160353208d9390fc331d192fc99f23db9a3f4d9c0a548931431e789f2c7ab82a1717ca511e039aab3f76541bcc9792616028d0b0d4f04", 0xc5}], 0x1, &(0x7f0000001e40)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}], 0x30}}, {{&(0x7f0000001e80)=@llc={0x1a, 0x337, 0x8, 0xfa, 0x8, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001f00)="2310c7d4e50aef4ad258455c0b8405c936e07e7c8fdc4bdd98e62dc74b527afd970f73733420dfe5505e9710efb90d630ae7c806445663ed33b6ad2aa1492ba61e56763f6aa1ed6d3a14f9b2b38fdaa70174cac5974c4cb25f81a5d88fabb9d16265cec25ab1a58a320522bff2ba9d23fb07d765c095c0e45dcca662d27514dec0193f939aa668e00bf5d633", 0x8c}, {&(0x7f0000001fc0)="421425d651a4feec2df33a0243cbb9080a8c964fcad83881b907be4767a6a61cb8aafff9e8d58f4ceda6c8829aca4841fda35c5892b2452625ef6fe23fe13dc5003f0494e81141f1f38fe9e91e3cf4eb74aeeb0fae5252bc385f79d1f5a4a7586b63af95019340d7a4d334a5dca8f093d90a01a2dbf9248483679eacebe1326979b0b32ce014c0c0c2e64ae5134209f4b617f46cbe3841b25c43d4b14cc3a6757159af25b215325ce449208655ade5018bc6b7e153a3bc63273edbeb18a2e6878d687be01e2760d13e3c0bad5aa97e2e0e4b08b7ae3a5dbb627a", 0xda}, {&(0x7f00000020c0)="bce46f7963eb0f03c1997a60a72ec6b14ed459b3de583bca9d5ec9fceaf5eaae6b87d73ed0b6ca5ee7fc6dd50b1b8093f629143ccb23f3e3c39b11c970098103694bdacb2489d8a2658a690da940753ef01eb670ebd5584b3e40d2da8b0bfdb85b2ad74b6eec10a718c5d5232665fd1a820c8d1c261097324d833f8d24cbf5659699466e6b2dcfc960b287ef4139b3e1b9d578eb67fda1d2ba3734b164787c39f1d9d81dcbd2ac247c6aa12a9547d7579ed997ab35792d53f6164dcbd0354fa84cc3aaa2a2e053859d5706a9", 0xcc}, {&(0x7f00000021c0)="79d8c5c5897a6e84f63e2e8f4072358ef381ed8d761a30d43a28792ca49904d87571fa72ab9d3050c52916aaa4", 0x2d}, {&(0x7f0000002200)="b9deae4764eec984478b853a5349a8379e1e37e10688d65e4423a17ecbbe3f3eb66b5b38639aa65f8020014bfdb398208cf7972ef59446f53400d569a7ea04ce3323d0d015b095e88b2f104e704a16e110ae221c3d30f34b33530a159c13ccff67f88e41b177c23a", 0x68}, {&(0x7f0000002280)="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", 0xff}, {&(0x7f0000002380)="cada7d4e3c52412009b38cd876aafc0f2692e0d85704aed94d2f0c68a7bb57b0fd99918fff2a9819c535e026d84203213c492a780cf969c95cdd5e5d326bf015cf22c790783d4579f842ac24b734e1b0e6769e6e71597e45698acb7e2340c7b7f5979209c5228000e747fdafc1d4762ea9aa1fea25e3a5a3865e7bee585f49d09fd63a6ca8991b9826dae3294f6bc737dbf152030fbd33936a24e1883900d692dc199d8e933f86aa9c8b1c087bd4b5a8c63e24e36d6d76083face02514", 0xbd}], 0x7, &(0x7f00000024c0)=[@mark={{0x14, 0x1, 0x24, 0x5f2}}, @mark={{0x14, 0x1, 0x24, 0xc0000000}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0x90}}, {{&(0x7f0000002580)=@l2tp6={0xa, 0x0, 0x3, @empty, 0x0, 0x4}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002600)="00d5d624245687831aad4c9a28fc0991e9aa74b5dbc76934add9c2a7b0a7461ed77085fa422043630d3d116242b5cccdb45fd04049afadc1103627", 0x3b}, {&(0x7f0000002640)="1e5ad89b283699bca811b267470703e1cf8ac01eb9eebd3b335a8d24dc6589e25346ccde7af1e3f3ea351900c921e0b58f6da86514c4c2", 0x37}, {&(0x7f0000002680)="2ee872083e56b86b3d89cab7aa5f7e057dd1c3eef659402fc24136bc06fa0b5045307346401eee38d436e73aadb7cf824b2bca91700a63d232f26d163574fecab2f085b16a621bcac01aa5c604bacd52b87fa3f50ac2ee2794fef23356331851dbdd7669351110b01d2ca1c25bbe3bbe15cf7afd6a087f6bbcfd3108888bd826c1780ccf", 0x84}, {&(0x7f0000002740)="c514118c5810286e5f370c8ca265b6661380947d11d9d2dffcfb9b3315866d91f52d569073d156c16b7031024c804f58099056941c6cb7865ff8df50b715d914447f073eed5db1f3d1aafba9f093eb19bc4ff637a85ed9b3b5de80d204d2dd5f1ec6125fdaf871c80bd03821eb8b1bc22c9dd08d543f130052ddd457791e7a461e6dd3fe2d89f7dd705d71ec93458880317736f3941487bddb38e8c1d8be1920d0a7ff87afb548a630077912232db7bc5caa2eb42ca338834da68cf28186089c", 0xc0}, {&(0x7f0000002800)="736dfe7d71ad8c8666b45b148206f0a3bf484d6336bcaa18c97495e1fd5acf2d1a8a59301642a146a4ad44276313c0da5f352c7fa0c4f815a60cda83a50efffb83dba514a8e0a2952db596a44aa33381879497bd09", 0x55}], 0x5, &(0x7f0000002900)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9fb}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x8e}}], 0x60}}, {{&(0x7f0000002980)=@ethernet={0x306, @local}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a00)="0bd30060c27ace396561ac261a92261a5cfee65dce632b1afb00db6e48c83bc83ba161a576e493e0d193d13a9a9d22cbd07482770e8fee37992eea47fb7e3d1348dd37b9eda6842339ca63e259cda06d8c50bc986f437ff0c4ba8da3e0ef61ee45ebe8a33454e4de9b0581fd883b251f98208e6e9c4d6fadd337167545d2ab1a356a4801a096fe8fa50b137fbf8fba5b6aa8cb68b38d6e06c0cdd510bf9c05e9208465805b72148de5cb335f3849a7140decfc02ecf0c2a617173d56d800", 0xbe}, {&(0x7f0000002ac0)="50a3df5ad128479718b16e0abdd8488c4f650fc21316bcffb8cce1be32c6be07d4d3665183166b923d24b0c3d571199550df7f21b462d8c4cd5b9c2078f87e09e2bd54b38d9f06bc21a1f63f63f7d1ce34425f98cf06719e1bc7bfa7ae1037f42edee258699641a16992d19b9f59af999163cd16a8e7e06020ecdbcbf1313f3787fbe26feee0a64d73432ec702bc2b70f9d10863e94f74b725e420324f0548cc66047177f01584c3a219ab6af34f3be7b6b4f4736c75cf6ab7", 0xb9}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)="5eac21e04b71a5e9cc4d7e34e218d1d9a42d48b85e118291d42d8b45f7f6824e6ff166a7a19c4e47c4d9eea6b8bf24b59f692b9588d58538ba9c888f0a66fed4b8466f4aa978e3442d1fb3aaed2e74da1036c2516be138dda2ab9ab85fae7d2196f08521badadd8a52e0b627b0eb4d511737eb16079828c3b0", 0x79}, {&(0x7f0000002c40)="709d35a74514f1a378365b6fb248736a9c1cfcd4231e8a9ef748ba549c606b4429c1eb8b688b3ed6d25fc4fc4f5846fb94325fb1f308a584", 0x38}], 0x5, &(0x7f0000002d00)=[@timestamping={{0x14, 0x1, 0x25, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002e00)="a20b10859f116274a6bb8add485c2bd8074d47633cf1624abe2599eee1232f703aa93f18b69579b2202b19b6dbe6355fe335bc5c3810e41297630f9f2b8ad6ea208d1301527dce951aae69a1870c5fea6cb4213e3b9a11cb308697f446b40c971926b67b4394f87d9948a944583862e86970dde8b52b5947190ae7ca615938af29e19d5827f176c3b6d56dd67db847891b250d8fe319d98118b242934117dd933add7286f09e4b6b082eb625c7fde56f1f8f526c4ecf7602020a78dacd9b00eae91cc3b51b39042e5bf06786c66ef70898c55800", 0xd4}, {&(0x7f0000002f00)="10130b6d3c31dabefc18c8c679182ea5e09bbf7c6ae2ba2d9e14ac00fd2975def890118ffc41d0f2638aa2c0d09d23f3acc3905f9025951c3d6be3ac791770ad01cd55551c401672d3c0e7ad684f17bc537cfd5c20eac3921d51e0f7b25be55c7c6e4b9c1387e4491fae57ece14159433417e02f76a49d01c6ffa450b51bfee8c1e5569520567b80cc603c1ed807e9356b94aae5431627007e3d03f203f97877114f72ecd68c1097746afb450b73fb2350ca6879d83009fad5fe70a67746cea935e76c74d70112411c0e54e0a91873244080", 0xd2}, {&(0x7f0000003000)="038bc155777f0b913a9a8b7adfe33eede71868c6a7fc32fe06062e257f24a0685fef56dbc7746ea36b42eaf07bac089e71dd758f305c7512a2b1c37045ba51822dd552f557877a0eec82cbc2dc70e39af580b17658684961686d9ea0e41c7a1b3a17a2522786f2191699b7250c75836835aa1876032e384e8852129fdab9a7afb988cb62d66ca33f", 0x88}, {&(0x7f00000030c0)="fec60522c29bfa3839622d687551f17e9c3d374a0d6d1b677b41632d502d3f0c9b9f7927e2397772a4d11029efc77d728e7d6f33de7c82548719a7a05aca6934f3902d98c66645973a287c1ba998732a973c6829c8bcc2707aa927587e1b580dbab4da08a56306f31a621172f9f41564c3e4500efce361fdaed12f931c44293e54c617e1b13d1023da7c2dfa4e26331724c2882796264a01d23785e5e72a604e482f66ee02c1989e7fbd64cc9694e106a1c6e9838557b96691b5", 0xba}, {&(0x7f0000003180)="2b7b33db22884e939a0b688dd3ca0e6aac38edd4f09395aa98daf0d106abd59730de6fa1aa5cf647b63b028c6eeb3c0e531bc7131673fb4ad62cb2b03b5b2fb1a05b6226ab48f5d98a7885e32b9ce6bc6e939756be4270047c", 0x59}], 0x5}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003280)="eb30e90faecd338cdd5f7ff11e0234ca7320ecd02cfe094d7856b4de887e894160747f40e4d28b73f4ee56156ec710f07287bdb1f1ec4e838af963e91b1f2f778ef5f099e2d87bb1ad06e11fd2950999d75f8d249be450ad4264ccf3bfb3c78df7ddd7491979706578642e5debef089a067995d2feac5bf7d83d8f61de6e31f4c79d446697af5fb4a7bdbe6bce7d9059e34d", 0x92}, {&(0x7f0000003340)="a83f1e0bbb6e9cf064dc13653e17ed0e3bc0849898d674e695e704cc4fbcb3c78d11521f5b61df0cde5c490538b2ccb72e807dc301a198ce38a9db9e5f03efc54bc556360c17c900dd8ea7513e0b43c01e126d274cbce20db16ed16363cca8e0fccb23aedd6edd6ba6abd33e395574c6a1dd65852e3ff1b62fc493008ad1ce2b28e96ea480b1a778101b4a642b46f846af673ff790ccb80dc1cc1294721359f98c8245fbc0512c821206fea72d8583b614", 0xb1}, {&(0x7f0000003400)="c233c517839581680d912ed02de5e9cd14822382ffe636d9e4fa2d9dc2c68a24b5099e03e9a28e0b6a6b54b94d58ede7cdeb47058b4ad3033b6d25009772c23d7078b8ddf917ca68f23481cfc0781c771738689326fbacb1f00865f3b94da324fed6d0ae625dd028c902fb3e1d37a4e69547a7a479b12b2e0aa483cba9", 0x7d}, {&(0x7f0000003480)="4236dd0d072d837d1d5c7555dfc5a6c8c4d4d91db320d33beda73256b34d86efd58cd42ecd74238957dfd22c43a369268dde7120f90a9a4d963eee302f90652f176a41a77a11580b2c0d46075c4c764075ff459d8bc7f5716f2b7c2a22709fa9a60c", 0x62}, {&(0x7f0000003500)="1e6f662b3e5c6c41fa3d6ca94008143c736d6ef798bfa2ef650cbe81a47cc968cf75913e8343c627182bb216101829411681b1521c40fc04b9c2494c06a025b7ca5957c6b5262ca70f3ee0d994911d8d2a03028aaa502645c04cdb3de25a0f167bbc5ac1ec5e114e1afcbca15993d70c71a6bf588b17594b71252359360bfe9cbfd30b3f15a34944679007f1f1968375ef55adff131c75af82af0814f33296ac14b8a4c3dda22f27a0168cf2a3144c3efcf420c2", 0xb4}, {&(0x7f00000035c0)="b5946d648730a256ae0c0321ec0659db96d158425d727c380ae0d961a045ee0dedc83c02fc", 0x25}, {&(0x7f0000003600)="07fdd7ea0949", 0x6}, {&(0x7f0000003640)}, {&(0x7f0000003680)="90f7762003c41690bef9c47587da1077e20dcd7d46666555755ff0c7f079a7acc06f0cfe215c6fad726ffe7a7eaf218a288c4dba820ed6d03a9f79bc6d1213e92d5e0f23743b0eafe7b249e5a38c9d59f108c648edd5160b83204868e5725d42fbf47fb141022e849dbffbd693e606ceac91a152e9a0bf7516e4a4dca98bbc0d2d69646d161423e9e045a372c03798bfef6671176d8ddab351875c443e353e3aa57db90be4d399b8066cb26510ce8b46118ff57f2603fac01953cc69cd9c697d", 0xc0}, {&(0x7f0000003740)="bde08018f312e8de39a1e9de8604aa810e640864e6554354b49dd10c849cefc4c8525abef32951f9122839f657192e20de96db08a3639c840b4592aed149a4a73eb8332be28e8c15afba90e4f2f76d047e4d874134ec334fa43a2ea3d54cbb2b819e1aa252fca8b5a41477697c39959dd97244e5c78d449c411ee8d6af6999ad47c51c5b6c0f29cfa84cd2412a546f068a34cc473abc2eb9a6321acd135937a5510fe3468636ff4b6bd8851c034e1b8634cfb0685ac3fa2b3dd0d152b00fb5a5dec6570fb60ed5869341b5493db1aa33cc3c8ba6616d240bca8beceaafcf088fb32dee3f2dd0918361fe007e8b4145a370d53d2b5f6d2d9859", 0xf9}], 0xa, &(0x7f0000003900)=[@mark={{0x14, 0x1, 0x24, 0x1f}}], 0x18}}], 0x8, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3ec, 0x14, 0x1, 0x70bd2d, 0x25dfdbff, {0x13}, [@generic="118e30b63ee4f37f07e5c9430956bcbc2d1960b6c9845d7236a0c684531245d0148638bbeb238dece2454dba606408491711d0017e341b2dfce8da0961bd327751574d79f0562f1051aa7ae3c67869c7462674e92a8e4042ec5fdceeb2128b443e66a4e0cf1432b6162e17fcf3639fec5c25c8854d8e21b2f5e6be3b389b4d246ecbfe4791d230301444036c95c607f1ee45939e05b30b48c32aa6d7dea235f8305481edf4fb69487b3e642630f29e4b4c8a6c8d5ea7e1682d33de504921197f9833ba595da39903018610f24b3764c29aec2176032cf17ea965dfca26ff", @generic="9f0da1898c12cf42fce2f6bde957e2a4bd386ff912183b086b45b7be74932fe27b53377a3358", @nested={0x279, 0x71, 0x0, 0x1, [@generic="6147a319da3168fc932b448ed836f1c755f83d89c2463ce51d53a08a69b42b4b9545fedd0d9534c0061503ec7c4191501022f94896", @generic="90dc95cf0db741e884cad9e499bbc4bdab9b71647ea635751d721bde85169eb04b924cb391aa1ff10f123d12d3364c37c1c972a846a6027713c891d07155dc4a4ba52073d34ebcb043fbb9730647f559269eebcc8e7bbb7b3a140eb5504a7615cb99f6991db55d42c286b3", @generic="e344bd74eb260f059d3f405016cf5c47c0d2a96537d90c6c56020c25bbef208d3c1dfb055d8fb5dd6221579d9a87913f577cd6276c7f5a09653bddf7", @generic="0dcf78a6a98deadc8dde0b62cc3570a1d8972d1db6bb003c326c5440c366cac4c16266628ae1034108e350e46a3dc17b839e50b3e570b2190645b27d2cc9889295809d31a4a9ba6510ad99cc5d37564dc14e562707aa9d48f79840cbc46fa3cd2f861bccbb251dad1e46729fc2afcd64a1a18e01b4f22d20abc0962be7f67850bcb764349fa49183a53058adfb36cbfeb57c99f2222d7af15eb8d37892fdadfd6e3eb653ad6353ea25a5092a3351e98457f1703ded165494d5a2306565a24ff83daa53047dab82de5c1c0122929ae66d946afb40b1d88a136c2b66c48edf3881522d7e0de20185fe7b3755499ef8ec2034d1408a91cb", @generic="23f5c05c51a6d0546afe54b4caa1788a5ee728d1f26619714c349ed69c2c3528184b98c07416d8ce0b757e67d8d480d46626ad9d6600cdc5487359aec246c5dcf504c6e7972f3f25e97d1adae4f28a40a6525307b8db57d5916394ef8e009d09cee608c66f4f91562c930ee57c3ecc2b72ec7846f7c872cc81bf069642765cd554a7b943dc89ffcc9e34ba4542ca641273158e6870b9bf8da1d4b8d52a0d45aff1c59e"]}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}, @typed={0x5, 0x82, 0x0, 0x0, @str='\x00'}, @generic="eaa449159c0cae5195faca4ac0a28043276696eef6e550", @nested={0x21, 0x52, 0x0, 0x1, [@generic="bacc2cc4b2591f3116e33e2f555e518d5d9c79242e55d5d3ba2c7a5003"]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x811}, 0x800) 20:36:44 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 76) 20:36:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000006, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x8000000) r4 = dup3(r0, r0, 0x80000) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x11deb8c1335cdbc4, 0x0, r4, 0x0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/191, 0xbf}], 0x1, &(0x7f00000004c0)=""/4096, 0x1000}, 0x0, 0x0, 0x0, {0x3}}, 0x3) r5 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r7, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x6, &(0x7f00000000c0), 0x0, 0xc, 0x0, {0x1}}, 0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000000)) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000280)) r10 = openat$cgroup_subtree(r9, &(0x7f00000014c0), 0x2, 0x0) dup(r10) mkdirat$cgroup(r9, &(0x7f0000000080)='syz1\x00', 0x1ff) [ 1571.154743] loop6: detected capacity change from 0 to 135266304 [ 1571.167624] FAULT_INJECTION: forcing a failure. [ 1571.167624] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.169081] CPU: 1 PID: 9352 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1571.169862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.170809] Call Trace: [ 1571.171115] dump_stack+0x107/0x167 [ 1571.171538] should_fail.cold+0x5/0xa [ 1571.171977] ? anon_vma_fork+0x1ff/0x640 [ 1571.172441] should_failslab+0x5/0x20 [ 1571.172885] kmem_cache_alloc+0x5b/0x310 [ 1571.173353] anon_vma_fork+0x1ff/0x640 [ 1571.173804] copy_process+0x72cd/0x78b0 [ 1571.174278] ? __cleanup_sighand+0xb0/0xb0 [ 1571.174777] ? _copy_from_user+0xfb/0x1b0 [ 1571.175254] kernel_clone+0xe7/0x980 [ 1571.175678] ? __lockdep_reset_lock+0x180/0x180 [ 1571.176210] ? create_io_thread+0xf0/0xf0 [ 1571.176691] ? ksys_write+0x21a/0x260 [ 1571.177134] ? lock_downgrade+0x6d0/0x6d0 [ 1571.177608] __do_sys_clone3+0x1e5/0x320 [ 1571.178071] ? __do_sys_clone+0x110/0x110 [ 1571.178556] ? rcu_read_lock_any_held+0x75/0xa0 [ 1571.179086] ? vfs_write+0x354/0xb10 [ 1571.179509] ? fput_many+0x2f/0x1a0 [ 1571.179922] ? ksys_write+0x1a9/0x260 [ 1571.180355] ? __ia32_sys_read+0xb0/0xb0 [ 1571.180829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1571.181429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1571.182012] ? trace_hardirqs_on+0x5b/0x180 [ 1571.182504] do_syscall_64+0x33/0x40 [ 1571.182931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.183515] RIP: 0033:0x7f3a69dacb19 [ 1571.183939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.186052] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1571.186921] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1571.187729] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1571.188543] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1571.189363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.190173] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1571.202763] loop6: detected capacity change from 0 to 135266304 20:36:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 20:36:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:36:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 67) 20:36:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) 20:36:44 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 77) 20:36:44 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1800005, 0x40010, 0xffffffffffffffff, 0x0) [ 1571.324361] FAULT_INJECTION: forcing a failure. [ 1571.324361] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.325703] FAULT_INJECTION: forcing a failure. [ 1571.325703] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.326995] CPU: 0 PID: 9371 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1571.329767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.331663] Call Trace: [ 1571.332269] dump_stack+0x107/0x167 [ 1571.333114] should_fail.cold+0x5/0xa [ 1571.333977] ? anon_vma_clone+0xdc/0x590 [ 1571.334893] should_failslab+0x5/0x20 [ 1571.335752] kmem_cache_alloc+0x5b/0x310 [ 1571.336657] anon_vma_clone+0xdc/0x590 [ 1571.337552] __split_vma+0x17c/0x4e0 [ 1571.338375] __do_munmap+0xf40/0x1260 [ 1571.339238] ? arch_get_unmapped_area+0x450/0x450 [ 1571.340334] mmap_region+0x7cc/0x1500 [ 1571.341222] do_mmap+0x868/0x1370 [ 1571.342017] vm_mmap_pgoff+0x198/0x1f0 [ 1571.342902] ? randomize_page+0xb0/0xb0 [ 1571.343816] ksys_mmap_pgoff+0x41c/0x560 [ 1571.344733] ? find_mergeable_anon_vma+0x250/0x250 [ 1571.345854] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1571.347035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1571.348180] do_syscall_64+0x33/0x40 [ 1571.349032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.350192] RIP: 0033:0x7f2e9760cb62 [ 1571.351023] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1571.355159] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1571.356882] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1571.358481] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1571.360084] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1571.361691] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1571.363292] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1571.364933] CPU: 1 PID: 9372 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1571.365715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.366660] Call Trace: [ 1571.366963] dump_stack+0x107/0x167 [ 1571.367381] should_fail.cold+0x5/0xa [ 1571.367815] ? anon_vma_fork+0xf1/0x640 [ 1571.368268] should_failslab+0x5/0x20 [ 1571.368701] kmem_cache_alloc+0x5b/0x310 [ 1571.369174] anon_vma_fork+0xf1/0x640 [ 1571.369605] ? __vm_enough_memory+0x184/0x360 [ 1571.370125] copy_process+0x72cd/0x78b0 [ 1571.370601] ? __cleanup_sighand+0xb0/0xb0 [ 1571.371095] ? _copy_from_user+0xfb/0x1b0 [ 1571.371569] kernel_clone+0xe7/0x980 [ 1571.371992] ? __lockdep_reset_lock+0x180/0x180 [ 1571.372519] ? create_io_thread+0xf0/0xf0 [ 1571.373005] ? ksys_write+0x21a/0x260 [ 1571.373446] ? lock_downgrade+0x6d0/0x6d0 [ 1571.373917] __do_sys_clone3+0x1e5/0x320 [ 1571.374380] ? __do_sys_clone+0x110/0x110 [ 1571.374869] ? rcu_read_lock_any_held+0x75/0xa0 [ 1571.375394] ? vfs_write+0x354/0xb10 [ 1571.375823] ? fput_many+0x2f/0x1a0 [ 1571.376238] ? ksys_write+0x1a9/0x260 [ 1571.376668] ? __ia32_sys_read+0xb0/0xb0 [ 1571.377148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1571.377741] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1571.378323] ? trace_hardirqs_on+0x5b/0x180 [ 1571.378813] do_syscall_64+0x33/0x40 [ 1571.379236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.379815] RIP: 0033:0x7f3a69dacb19 [ 1571.380240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.382329] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1571.383185] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1571.383991] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1571.384804] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1571.385608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.386415] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:36:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x8de63000) 20:36:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:36:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x0, {0x0, r1}}, 0x1000) 20:36:44 executing program 7: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000009c41283f719de9aa7c03f6a12d8fe9dd2a6be657e12e69caa17a28ec3685ac7cdf006d3f8be1", @ANYRES16=0x0, @ANYBLOB="00042abd700001000000020000000900010073797a300000000005000400010000000900010073797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1767, 0x2b0d, 0x2, &(0x7f0000000100)={[0x6]}, 0x8) syz_io_uring_setup(0x10c3, &(0x7f0000000240)={0x0, 0x3efe, 0x2, 0x0, 0x255, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000340)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000840)=@IORING_OP_WRITEV={0x2, 0x1, 0x6000, @fd_index=0x7, 0x7, &(0x7f00000007c0)=[{&(0x7f0000000380)="08ef29bea447b697db211037bda627965df8c724ea45562f75071d14593edd713e294f4a3c1ba0ef32e2e2195aa405167619d687db8ecf3cebf248a772e51ce49327abc709fa7e521735f2b8ab2f35a19a80ac13ffe0e1927a286a415b19f1c125aa33e8fa307adf16348c6bcfa0d67ef2f34bff1571626a9f7911d004c9340a2de5657ff730f535cfc04a9d14f655e254282f053f8b55", 0x97}, {&(0x7f0000000440)="a96ee460184a89d094f7c062288a817b913e0635b393471964681705aec068f0458be8f7fb74a05e02eb89e386257d701d55faa3a0a7c4b851693ea106741f67229fcaf432fc971802676b3b46f733e94af6d5bfca314b837cb03843a2efa3bc00b3d7052c88a65a73bbf510587afeface5a1c63af466a3d73f141166ce7d47d6636d53fab998b303f4e19986f63087423626726743660ba12d532f01e8f7e85adb2444ecfaab3dcb16ab360834443519e258a055dbc0f793e571ec33272944ae7b3526d51dd7da350a70febcb0d90d8aaf1585724", 0xd5}, {&(0x7f0000000540)="1cf7d97502dec2c352eb5c590fc27a1c248b3e8f400538d058e0aea5c8b81cfaa917c42c721f0f284c7b9213ac72d449e1e0e873da", 0x35}, {&(0x7f0000000580)="58fc51d4cf678cc1db410f755e050b7991ed1d92d1f4bb878a0152c281b2b60a1dd475c621675b1d3506165485004e6aa7a2017783a014044332df73815c06772ed7dd1a3da628e0e76f24808a02ea6bf13efb05de6f082792a081f01d47fe810ea21bae6ec7ce599ae9c8935c336cbe6db0eab0949f5a304743edb738656cccf2852150675c4590738ed54f3812", 0x8e}, {&(0x7f0000000640)="b726942a0a4c014378adc53d059c1ba1e662a4729d059daff3a6163df21f707557f74f9d66ac3838e29fd55a0d94a582a5597a03afd644c83aec651a4114aeec043035c8620109805913796435c0a5ddad8f627085db50a3001a0ecb2bf88078cbc6ca895be0c7c2b312427f895502e1f8abc7b446f2", 0x76}, {&(0x7f00000006c0)="c1c906556e69d0b3154395f511c0aad5728a54753997e4618ef311c4e70686a073b42c212bc8db229ea9d04f4cc19c2c370b8954c19907bb995759d7c9440983be35dec232b0e51238f564c677bcd8a8d14d0b0c7d7baaf774ae9825886c8fa9a530b08637440df69917230e26d04424cd4eb9d9a48a1367548b575957ab9a85e5f42b57cd8e6bbd79534dfe7448f7dfca1b476cfb1f384c76f0c5768ec9b27bbb50b4e1c19dcf79ec8e2d18f87859a504fe903becedca91bba69507a41f2a79f80cbc2f8bfadb57e405148fdf1592e1d35cc923b63810542aa46b281d14dfb24a", 0xe1}], 0x6, 0x2, 0x0, {0x2, r2}}, 0x78) 20:36:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0xff, 0x0, 0x0, 0x0, 0x22c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x8001, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xa, 0xffffffffffffffff, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7f, 0x1, 0xf3, 0x3, 0x0, 0x8000, 0x5002, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x3, 0x7f}, 0x0, 0x2, 0x10000, 0x6, 0xe5, 0x4, 0x401, 0x0, 0x7ff}, r0, 0x6, r1, 0x3) r2 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0xfffffffd) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0xfe}, {&(0x7f00000000c0)="532d00b950dcc0f0b8fd8f274c16a64e9d04e22185d9bc0b9a18031482", 0x1d}], 0x2}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000440)="06bee0d1677137e35d1e1c5a6a3db3d4dc9c552d349394a23f08dae8e3c84d297b98754565a0de24a4a3b3be99d088e47df7d426f0f649df39e84d63153fc6cb4e6739adee733320ccc53f5ad82c568c8e34aedee947bdf5b882bd", 0x5b}, {&(0x7f00000004c0)="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", 0x44b}], 0x2}}], 0x2, 0x8000) sendmmsg$inet(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xe00}], 0x1, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x100010, r2, 0x10000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r8, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000380)=""/91, 0x5b}], 0x2, &(0x7f0000000440)=""/239, 0xef}, 0x0, 0x40000000, 0x0, {0x2, r9}}, 0x7) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'rose0\x00', 0xfec}) 20:36:44 executing program 6: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x8, 0x1, 0x3f}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffc00, @private1}, 0x1c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) sendmmsg$inet6(r2, &(0x7f00000013c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="ffbb84260d0db85f8e4ef92f9175be1fd2481dccf508ab2a377e8a3e6874aa1571f3d7a6a3464762df797cb55d5e87cde41cee3c4e3cac91640b0d160e09ed45c934bac920e1c4035c7063d02d060e40b886a32d3a03b5a0150a1515ff83e6fa60cfed749660ff5a786e5c682beb065bb0e1e134d510b883edbe9a516644f0", 0x7f}, {&(0x7f0000000180)="d8148d39e097ec0fe367d8582e73beae3740bdadc26e1fbd6268d659fb02a455dfdf9d7134337a5ae3cb6ed0e1d4a5e818e1f045e9bce265c2b66ff1e5975bfad496eaefd370a4c1876b4f6c3742d9247829856b29547f004304edb4c6598442d1603ddf06c29b2d0c8106240664a5676ca8b309a414f1e0099d1a862daa4e4e1a39738be808ad08758b63b90170e0ef55614929e208e45141c6ce24af380427190763727ec39ec5328435d0ef4666e66d17caac5c8d2686ed1bd6109a465c20e6bc73cc196bc76db92e93fc061a08dc7425f94324c6fe1ec65e76cbb6cae651e5", 0xe1}, {&(0x7f0000000280)="7379bf70d4910da7130eff37b075a22d2ffd4c40c9b608ec3074ffc7f417c6aab97a8f1160abccd36c20f55357457e555bcb6474d0cd82d6761717f6234eea4a3db59b033bf4d4c9dd77ef4d437d1fa5ce0abba295c6cabdfe50af29b14b06970890f501fd4b8bc1e177718ab207d9b9406d1909b6ef56e04ccc9a43bc97a17075729ce371d9fc41b3f73020f4862c4567", 0x91}, {&(0x7f0000000340)="dd9f219a8263d9e9617023c382d33d135dc28da10827f82953872f523fed3b329bc2b2c969dcd86d577e7fd838cc20824f4283640d72bef8f6c0a4c5f17ae68f7c509716d899ff683fe5588871d5b92c817414a6574df3a716041c40b5600600072668f57b05d58d028233b1a3b314f84d57d435ea8813041eda39dabbabf749af3c05b8bd8402d7de53bce9900f76c8f627158fb91490ed044353", 0x9b}, {&(0x7f0000000400)="859d276fb5ba183554b01c77264258b73bc744fed491172e9eba235d519f", 0x1e}, {&(0x7f0000000440)="b0193a78bac33e46ddc2dade1f004778180ac0b2d019af31915d865bbf1bf54e8f5363907cbab3584a9e4040b9502c7cfc718e4885530a7bd184794564de942ffe4c4733f743584d0f0092f76079e244dd674b70036f274bf1cb51b60c7f6538ffcacdb472386422cdbf3e7702c3e4afc29eeb2ee90c43015196dce9a92cb8cc64873df749be92b58f5834a0ab888da8f31083759d7a7e016c10f3effc9c63b5c3c99bfb4250a59b0ee08a90054962687b8c6ae069665bf52bee4bab15b98704", 0xc0}, {&(0x7f0000000500)="7c846eefb02d0b814db79d597129cee40cf5fe236b6feea8ff1876", 0x1b}], 0x7}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x80000000, @private1, 0x4}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000640)="fe8083eb51efc519aac3944226e28cc9c375f65265070d1c4c8742ce13ade344187626a924311439aa07af3a2036fd9cb006b08f1c959c84b5a14dcaf465be9d6a009f1f6fc4831979986af32011116e33a5908d1f38c56b3584d9a4", 0x5c}, {&(0x7f00000006c0)="531f51fc3dd1e9be9c7566354b568e96eaaaeed5d498f8b770dced65b2f4cb7bb6a786bde8384c5f1bc89b3e3e837eab41efb2a9158579079582298593311ef700546762dc33b771cfd9771286573d046948cfef9610ddcff28495043d3f344a463ec94ca96e23e3e2da0953994180", 0x6f}, {&(0x7f0000000740)="e7a7eeb0473e3284e9ee7a65fbe58ffd8bab55463070ed30e317d8f9728ffdcabe4c7cc6b8c5cde505936634", 0x2c}], 0x3, &(0x7f00000007c0)=[@dstopts={{0xe8, 0x29, 0x37, {0x87, 0x19, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x9f, "11cc9a534a0e4e971d93157d69e4a267f8d5067a6afc986d32bf472f1fefda4f32f1602328b55fee54c07de54c9e857ded3b2523fd710fafd6da2ab1a56cdbd54fb510686a6b3f380de44d8f9a5702221e84b0af83989004b4eb04b999dbd3494942f48c15155249e4edd95ef4fb7a1f8532790b372e9c2bf44ac7e885717ac2038effb23c0de6f3e9d95f90d004358e1e4b4632b4934036d708d841e03aca"}, @hao={0xc9, 0x10, @mcast1}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2f, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x3}]}}}, @hopopts={{0xc8, 0x29, 0x36, {0x32, 0x15, '\x00', [@hao={0xc9, 0x10, @mcast1}, @generic={0x5d, 0x5b, "cfccda78f971ef02756490699c9e4443ccd3a3f4adb3d33bc23599d89fd60ccb0227356192fe469e1743b6d59c5ff61e81e602730d40d67f5ea4c49d0f20aaddc904e23ac157dd3ddcc37c3b89fc4927c54eb3f7f94aa194787d2d"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x17, 0x2, [0xffffffff, 0xcf, 0x3f, 0x0, 0x800, 0x7fffffff]}}]}}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x33, 0x20, '\x00', [@ra={0x5, 0x2, 0x100}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @generic={0x0, 0xa8, "abb1d6fe853ba3525ab9188a86d1997afbb1b6a58cb5ba089682e9f5a91e8cd274d351286db304c1d97388ad704883049e52dcac3d3e24976fd0b4205661eb2726c4837ca107fa28bbe7e0e91406799876f2321837ed7c130f3ccc2ecf55d2c45495f051f55f0b2b90e603cacbf346cf56b613a64ab67a04f1d8a50b05886eafb4dbbe86bd399ed13391e5560d037f0b82d9015bef560d4fc161768b8b6b8cbf67e9104eedd0b527"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3f, 0x6, [0x22, 0x5, 0xcfdf, 0x2, 0xfffffffffffffffd, 0x3, 0x2c2]}}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0xff, 0x4, 0x1, 0x2, 0x0, [@local, @mcast2]}}}], 0x328}}, {{&(0x7f0000000b00)={0xa, 0x4e22, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000b40)="42d8d8a754b0aace0b89aa8790cf3e5b26e46bd19f061189f711ace03675fc4e5bc4fb920d5e1fcb1c94a206c7b0f7d8ff6ab819f714e376007a6fa9715600fcf5a3da6d12631f3da735a2e77ddf1f72ed8ed13f5a2d8192dfaa477fcab186300f601e054f11fea8d90f8d8d1b7e8c96b5cf6740312194b67cc3548f60cef0280bfa751e2de76d", 0x87}], 0x1, &(0x7f0000000c40)=[@rthdr={{0x68, 0x29, 0x39, {0x89, 0xa, 0x1, 0xdc, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x1b}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x4, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}, @dstopts_2292={{0x178, 0x29, 0x4, {0x3a, 0x2c, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x2}, @generic={0xd6, 0xf2, "93eb85adbc144099e25849e6935c3195bd2d606af2038fc0e3949f880ad545da6391501c90adff3a6fdf305a1f0c9e6bbb541513c11fbb42b10421ff3b16e21e8904964c6adefb716e31755d919f96960b3627b9b8f380ca5e51c262f0d1a8d8dbb269ea988c21b2506d2eadfa5257afbb65f3e4fd993858eb4773339a28096f77c7e979ba5406b3fc70ec7db5470983e9cc76979502462bec39cb5aa2240585838897930cbcdc4147d03168c819e3f3db5e33336006a40554ebad9e1593f7daa62e4d781a8f9bb00b88ab4ad112d28b2d93f3518abb1c8c269fd76e65e4707bd58b6bb48a8b05b2013424a55dda843dcb0a"}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x58, {0x0, 0x14, 0x7, 0x1ff, [0x1, 0x7, 0x8, 0x1, 0x100000000, 0x8, 0x6, 0xffffffff, 0x100000001, 0x7fffffff]}}]}}}], 0x210}}, {{&(0x7f0000000e80)={0xa, 0x4e21, 0x20, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000ec0)="cb87ed92e445c9287837ce0f5fa2abe849ad1c1f86c9e33c0cdd06d294bbb8e7e999343c2b2f560f159db30823e3df7b16b28ec00c744117cefa03b265b39333e5e9cc110c0515f62a9563b297e932b3e9c332a28fbe9f7b9d7b090d36", 0x5d}, {&(0x7f0000000f40)="273165bebcbe60edc25371073b46ecd2cacc100321c919015cce0afa3ae32fd639317ae173f1917ca4f1fa64caaa1a421e64041ab3d8bc07adff6b064e5941620314cd68d5f95cf9f13154c1ea0d4b10769940a4cc50d3b7c4c5b29769cc680f7f6f9ccd6080071db22674139f3a8666c469945ab699c8521c452c0aac5d3563ff15429b39256e6bed6e611e2e306c3bee170e6bdd8ed8a9ff6350f90b2cec745e62935be261f5aea7f3c38375dd5e51445fe41f27a2732a", 0xb8}, {&(0x7f0000001000)="5ecf43374a71548361fae95b33599d8a060c049ae94108a6d3a8e6836b23d6bd6e4ad5e8017b52c971df9578d76338d9ff23d4e50890778963a717", 0x3b}, {&(0x7f0000001040)="e288e37cf63bf516d995db7a6a70096635072bc086ba19652183bc6d772453d2bfedaa60268d600564f51a739991027b162211ad37531c53ee7984645cbd07143af44190b6e3e59cc1880aa03760549ababb4848952a72cacb2db15bb0588f2d5237f8c73ff8f8ae8c2c377e737f202fde554d487555135951826e588e13fb6f3ce191a0c6d95ed5294d05d68b253307a7d031bcad9159085cf0c6d8053032929c359cf48d0d8694f50a5ec1720ad3", 0xaf}, {&(0x7f0000001100)="e6ab30e675ce87994b3ca2d02f5ce580047c24b6e866fbe6fe814ea3dc05c6d3ea2cc784433c60a7f41941a60cdc7b6d394945f90e68b9c6443c50f5578d54ce7ec034bf3b30b942977b0890b086a615d4052a31b0907d096da9703fb4757ef2e88628df84a233f91ba45da77de66d089ce6786ea3b39a5eafebc3873af185c7108d40a2a4139425028eb4b15ffd7fc888c5416a390620ff85897a53e89c77ec8b2ac26acda9cf6317c93fb2fdcfa3c7f2", 0xb1}, {&(0x7f00000011c0)="51a3308aea70bc9e1ae39e59733eb411c3c5bf8f4e019875dcef3ad99031784b8e45d433f660ea0ab8ed69a0ab3bba08f8c3da4401dd9292d23372ad1f8bfe10946ed6c5c5bf35fe2263e75e1fa9", 0x4e}, {&(0x7f0000001240)="1fd499d7af952ace99c7141bb2133f66e56a55facc43bf8255d0f9203e038b7a51fb559d9849a1bf2231d07f47622a83587efbe01a88ad947a3e9a9b6ab681e7267725a3d315faf4badd4ddaabada81e9dc41525f870b637a349298ab1637c7610759c310f1c9bd11fb0dcc12bbd7250d82595f304ff91001a717314a08061b0ab596e06", 0x84}, {&(0x7f0000001300)="aa11aef412e576411df6dc050597078c1498d67eec5caa49fab08f83a79cc6b703cb255b698266b781a63eaade8139", 0x2f}], 0x8}}], 0x4, 0x4031) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x667, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, 0x1c) 20:36:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0) 20:36:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:36:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000240)={0x0, 0xb71, 0x0, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000640)={r1, 0x1f, 0x0, [0x800, 0x8, 0x7, 0xb1c, 0xc8], [0x1, 0x5, 0x2c, 0x6, 0x1, 0x0, 0x100000000, 0x1, 0x415, 0x9c8e, 0x9, 0x1, 0x494, 0x6, 0x9, 0x9, 0x6, 0x800, 0x399, 0x357, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0xb25d, 0xd616, 0xffff, 0xe58a, 0x40, 0xffffffffffffff4a, 0x80, 0x3, 0x100000001, 0xfff, 0xadaf, 0x80000000, 0x7, 0x7fff, 0x0, 0x3, 0xff, 0x9, 0x94, 0x2, 0x0, 0x2, 0xff, 0x3, 0xc7b, 0x0, 0x0, 0x1, 0x0, 0x862, 0x5, 0x100, 0x100000001, 0x0, 0x148f, 0x3, 0x1be6, 0x7ff, 0x65, 0x8, 0x4, 0x4, 0x8, 0x6, 0x9, 0x1, 0x1ff, 0x1f, 0xfffffffffffffffd, 0x1f, 0x6, 0x6, 0x1, 0xfffffffffffffa65, 0x1, 0x7b49, 0x2, 0x7, 0xc9, 0xd5, 0x2, 0x3f, 0x7f00000000000000, 0x542, 0x8, 0xf9c, 0x82, 0xfc2, 0x9, 0x2, 0x66b2, 0xae, 0xc05, 0xfffffffffffffffa, 0x2, 0x0, 0x100000001, 0x5, 0x100000001, 0x800, 0x3, 0x7, 0x200, 0x2, 0x6, 0x400, 0xfffffffffffffffa, 0x2, 0x8, 0x1, 0x2, 0xdcf, 0x80000000, 0x9, 0x100, 0x1000, 0x1]}) r2 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 20:36:45 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000, 0x0, 0x0) 20:36:45 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) 20:36:58 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 78) 20:36:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="6706000000000000c2000000090101008910fe8000000000000000000000000000bbc910fe8000000000000000000000000000aa000100"], 0x38) 20:36:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:36:58 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/201, 0xc9}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f00000001c0)=""/216, 0xd8}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/200, 0xc8}, {&(0x7f00000013c0)=""/98, 0x62}], 0x7) 20:36:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 68) 20:36:58 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 20:36:58 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0xe, 0x8010, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x1010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000010000001800000079cb4e92a329ec", @ANYRES32=r1, @ANYBLOB="05000000000000002e2f66696c653000"]) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x11, 0xffffffffffffffff, 0x8000000) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r8, 0x7c3c, 0x644f, 0x1, &(0x7f00000001c0)={[0x9]}, 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0xa, &(0x7f0000000100)={r12, r13+10000000}, 0x1, 0x0, 0x0, {0x0, r2}}, 0x80) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[r1, r3], 0x2}, 0x1) 20:36:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x3, 0x0, 0xffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x5831, 0xb921, 0x3, &(0x7f0000000080)={[0x80]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x2ebb, &(0x7f0000000000)={0x0, 0xe3cc, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000240)={0x0, 0x9, 0x9299, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000640)={0x6, 0x1, {0x8, @usage=0x3, 0x0, 0x1, 0x0, 0x4, 0x7, 0x5, 0x4db, @struct={0x81, 0x6}, 0xfffffc00, 0x0, [0x4, 0x6, 0x1, 0xff, 0x2, 0x2]}, {0x7fff, @usage=0x8, r3, 0xfffffffffffffffa, 0x9, 0x3, 0x401, 0x4, 0x448, @usage=0x80000001, 0x200, 0x3, [0x3f, 0x4, 0xff, 0x6, 0x4, 0x9]}, {0x8000, @usage=0x3, 0x0, 0x3, 0x7e, 0x8000, 0xffffffffffffffc1, 0x5, 0x8, @struct={0xfffffff7, 0x6}, 0x0, 0x9, [0xff, 0x8, 0x7, 0x101, 0xd56, 0x9cf]}, {0x8, 0x0, 0x8001}}) [ 1584.883979] FAULT_INJECTION: forcing a failure. [ 1584.883979] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.887113] CPU: 0 PID: 9438 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1584.888866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1584.890998] Call Trace: [ 1584.891679] dump_stack+0x107/0x167 [ 1584.892619] should_fail.cold+0x5/0xa [ 1584.893610] ? anon_vma_fork+0x1ff/0x640 [ 1584.894652] should_failslab+0x5/0x20 [ 1584.895626] kmem_cache_alloc+0x5b/0x310 [ 1584.896685] anon_vma_fork+0x1ff/0x640 [ 1584.897709] copy_process+0x72cd/0x78b0 [ 1584.898780] ? __cleanup_sighand+0xb0/0xb0 [ 1584.899902] ? _copy_from_user+0xfb/0x1b0 [ 1584.900993] kernel_clone+0xe7/0x980 [ 1584.901940] ? __lockdep_reset_lock+0x180/0x180 [ 1584.903136] ? create_io_thread+0xf0/0xf0 [ 1584.904216] ? ksys_write+0x21a/0x260 [ 1584.905205] ? lock_downgrade+0x6d0/0x6d0 [ 1584.906152] __do_sys_clone3+0x1e5/0x320 [ 1584.907068] ? __do_sys_clone+0x110/0x110 [ 1584.908033] ? rcu_read_lock_any_held+0x75/0xa0 [ 1584.909096] ? vfs_write+0x354/0xb10 [ 1584.909940] ? fput_many+0x2f/0x1a0 [ 1584.910757] ? ksys_write+0x1a9/0x260 [ 1584.911609] ? __ia32_sys_read+0xb0/0xb0 [ 1584.912532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1584.913721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1584.914872] ? trace_hardirqs_on+0x5b/0x180 [ 1584.915842] do_syscall_64+0x33/0x40 [ 1584.916678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1584.917852] RIP: 0033:0x7f3a69dacb19 [ 1584.918687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1584.922811] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1584.924518] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1584.926125] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1584.927723] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1584.929329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1584.930925] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 [ 1584.940813] FAULT_INJECTION: forcing a failure. [ 1584.940813] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.942195] CPU: 1 PID: 9444 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1584.942988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1584.943934] Call Trace: [ 1584.944243] dump_stack+0x107/0x167 [ 1584.944666] should_fail.cold+0x5/0xa [ 1584.945112] ? anon_vma_clone+0xdc/0x590 [ 1584.945578] should_failslab+0x5/0x20 [ 1584.946012] kmem_cache_alloc+0x5b/0x310 [ 1584.946483] anon_vma_clone+0xdc/0x590 [ 1584.946934] __split_vma+0x17c/0x4e0 [ 1584.947363] __do_munmap+0xf40/0x1260 [ 1584.947799] ? arch_get_unmapped_area+0x450/0x450 [ 1584.948358] mmap_region+0x7cc/0x1500 [ 1584.948802] do_mmap+0x868/0x1370 [ 1584.949215] vm_mmap_pgoff+0x198/0x1f0 [ 1584.949659] ? randomize_page+0xb0/0xb0 [ 1584.950120] ksys_mmap_pgoff+0x41c/0x560 [ 1584.950586] ? find_mergeable_anon_vma+0x250/0x250 [ 1584.951152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1584.951751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1584.952339] do_syscall_64+0x33/0x40 [ 1584.952764] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1584.953355] RIP: 0033:0x7f2e9760cb62 [ 1584.953780] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1584.955865] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1584.956730] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1584.957549] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1584.958357] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1584.959170] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1584.959980] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:37:14 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 79) 20:37:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 69) 20:37:14 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)={{0xcc, 0x45, 0x2, 0x398, 0x37e, 0x1, 0x393, 0x2}, "239cc9adea65c26cacd824918ac3d6a1d203420c6a3810e6d65cc89c8189dfc3dfb7da1fd2d04a3f459dfdbd7ca094692ad04b47376a930bb4908e5c501c101f96f4445d578ab59e3d4d73d0649a516e428e6ae1785b9aec16c6f2ebfdb73fddb2478c8cda7e6cdacb7a7ac7c8a92dcb1fad", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x692) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000009c0)=""/4096) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6000004, 0x100010, r1, 0x8000000) syz_io_uring_setup(0x22ff, &(0x7f0000000000)={0x0, 0xcc3a, 0x2, 0x2, 0x1e4, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) io_uring_enter(r1, 0x66ca, 0x96e2, 0x2, &(0x7f0000000900)={[0x4]}, 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x3, 0x0, 0x101, 0x4, 0xb86950894d470229}, 0xfffffffa) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/class/graphics', 0x100, 0xae) syz_io_uring_submit(0x0, r2, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd_index=0xa, 0x9, 0x5, 0xb4, 0xa, 0x0, {0x3}}, 0x8) 20:37:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0) 20:37:14 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x100000c, 0x110010, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) io_uring_enter(0xffffffffffffffff, 0x7be5, 0x144b, 0x1, &(0x7f0000000000)={[0x5]}, 0x8) 20:37:14 executing program 6: ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'veth1\x00', {0x4}, 0x1ff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'team_slave_0\x00', {0xec5}, 0x7ff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) 20:37:14 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x3000008, 0x10, 0xffffffffffffffff, 0x8000000) 20:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1600.754262] FAULT_INJECTION: forcing a failure. [ 1600.754262] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.757164] CPU: 1 PID: 9453 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1600.758829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1600.760852] Call Trace: [ 1600.761528] dump_stack+0x107/0x167 [ 1600.762418] should_fail.cold+0x5/0xa [ 1600.763352] ? create_object.isra.0+0x3a/0xa30 [ 1600.764462] should_failslab+0x5/0x20 [ 1600.765406] kmem_cache_alloc+0x5b/0x310 [ 1600.766416] create_object.isra.0+0x3a/0xa30 [ 1600.767500] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1600.768746] kmem_cache_alloc+0x159/0x310 [ 1600.769778] anon_vma_clone+0xdc/0x590 [ 1600.770755] __split_vma+0x17c/0x4e0 [ 1600.771664] __do_munmap+0xf40/0x1260 [ 1600.772580] ? arch_get_unmapped_area+0x450/0x450 [ 1600.773758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1600.775031] mmap_region+0x7cc/0x1500 [ 1600.775977] do_mmap+0x868/0x1370 [ 1600.776835] vm_mmap_pgoff+0x198/0x1f0 [ 1600.777800] ? randomize_page+0xb0/0xb0 [ 1600.778784] ksys_mmap_pgoff+0x41c/0x560 [ 1600.779761] ? find_mergeable_anon_vma+0x250/0x250 [ 1600.780949] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1600.782237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1600.783474] do_syscall_64+0x33/0x40 [ 1600.784371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1600.785623] RIP: 0033:0x7f2e9760cb62 [ 1600.786529] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1600.790930] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1600.792739] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1600.794447] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1600.796150] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 20:37:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0) [ 1600.797861] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1600.799792] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1600.821203] FAULT_INJECTION: forcing a failure. [ 1600.821203] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.824981] CPU: 1 PID: 9468 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1600.826589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1600.828525] Call Trace: [ 1600.829152] dump_stack+0x107/0x167 [ 1600.830000] should_fail.cold+0x5/0xa [ 1600.830890] ? create_object.isra.0+0x3a/0xa30 [ 1600.831944] should_failslab+0x5/0x20 [ 1600.832824] kmem_cache_alloc+0x5b/0x310 [ 1600.833781] create_object.isra.0+0x3a/0xa30 [ 1600.834791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1600.835968] kmem_cache_alloc+0x159/0x310 [ 1600.836935] anon_vma_fork+0x1ff/0x640 [ 1600.837849] copy_process+0x72cd/0x78b0 [ 1600.838816] ? __cleanup_sighand+0xb0/0xb0 [ 1600.839814] ? _copy_from_user+0xfb/0x1b0 [ 1600.840782] kernel_clone+0xe7/0x980 [ 1600.841654] ? __lockdep_reset_lock+0x180/0x180 [ 1600.842726] ? create_io_thread+0xf0/0xf0 [ 1600.843700] ? ksys_write+0x21a/0x260 [ 1600.844570] ? lock_downgrade+0x6d0/0x6d0 [ 1600.845529] __do_sys_clone3+0x1e5/0x320 [ 1600.846460] ? __do_sys_clone+0x110/0x110 20:37:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x12813, r0, 0x10000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0xfffff001, @empty, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="31fe1eaa7b5a792882e5379126e49ca8d0014dd7f1d0d4bbce5f5dc80efac7367eb089d31ad26a7253cb81de0aca43ad3acfbf10ca70a6dd4276901ae06e4365d64389dea5dd3c97edd4266049615dadb9b02918a0b8f5d4ee3c206c6172f89287a6926aa2281074b37ee7c6c1a53ced0e41301226c9840ffc708e14f65137bfe9b0bd85beb873aac9530a3a5e8312410af71f8fe6307c71d11e1602fd563682087ed12e6ebf8780d793036d828de246bd5c67ec7770cfe208b47048220fa8293cba7b8dbc", 0xc5}, {&(0x7f0000000340)="b85ce8fbf81f07f4e80d2f8dd80eb9a6dbbb2dcb7944071331da0d24dab142d1aa183ec7f65566c7fb347b89f4119ad7ae22553132686bb82669666dbff140c2d05595eb4804d6b6d48da20f0463fa351e5fc608f7b565d395695b0c0e19077cfebc26d24b99a0ca740a62b07b016171a0808fed44e38039e8877d7f397aebcf0e51e734991b0756d03961ec06cdf8f40b07308be8391078e9fdc2af0c7c244ff0aa2524c2a5b4aeaf4245ec436a80f31f9a51a20cbebfbb17237fba57602584b1cf6eb47a646e5a0b866887ce24a1b734d1e5db72", 0xd5}], 0x2, &(0x7f0000000440)=[{0x98, 0x0, 0x5, "0aed8d2b52e0dacbb9de8e8ca87721d657909500293b71535be5e752b1a7e842c7d7ae359d97d39e177a67eeee06cf539d8533f2e45d664056fb3f86ff4f43e7d35378288d44eec7160c6a54a8e8722ba7e6b3a9976d6ea3de5585f5cbecfb3446d7c38be80266a2477f66ba4eabf897b7a63ad29273a4b03bbd02e59ca934717fa56855fe63"}, {0x18, 0x103, 0x4, "0efef9c3"}], 0xb0}, 0x0, 0x24000800, 0x1, {0x0, r7}}, 0x8) [ 1600.847429] ? rcu_read_lock_any_held+0x75/0xa0 [ 1600.848697] ? vfs_write+0x354/0xb10 [ 1600.849558] ? fput_many+0x2f/0x1a0 [ 1600.850398] ? ksys_write+0x1a9/0x260 [ 1600.851269] ? __ia32_sys_read+0xb0/0xb0 [ 1600.852211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1600.853415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1600.854578] ? trace_hardirqs_on+0x5b/0x180 [ 1600.855563] do_syscall_64+0x33/0x40 [ 1600.856412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1600.857783] RIP: 0033:0x7f3a69dacb19 [ 1600.858748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1600.862569] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1600.863703] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1600.864755] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1600.865837] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1600.866894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1600.867946] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:37:14 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x110, r0, 0x0) 20:37:14 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000000400)=""/72, 0x48}], 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1cffff0000000000389f0002020000002f8ffc90b040e918a0488704cbbab3aaffa9ecf4afa10f88b688685eeaec3a10af3a862103f7c45cd185489063008b4292cec4d2245ec054a7f21a53c0ffd1b71ff3c870f83b925e40291538e6061c6d5cd632210af1b4f3dce798544e9ff4a17436b8ee0fb105b1c70640c4fd9d79ae8951a635acdc408b6526b4e47074063605aafb725e73ec03", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}], 0x1, 0x40000001, &(0x7f0000000600)) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x80, 0x18) syz_io_uring_submit(r1, r6, &(0x7f0000001a80)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f00000009c0)=""/175, 0xaf}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x4}, 0x0, 0x60, 0x1, {0x1}}, 0x4) io_uring_enter(r3, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r9 = io_uring_setup(0x5788, &(0x7f0000000000)={0x0, 0xf2e3, 0x1, 0x0, 0x15f, 0x0, r3}) io_uring_enter(r9, 0x6d3a, 0xed2d, 0x2, &(0x7f0000000080)={[0x3]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x96d) creat(&(0x7f0000000500)='./file0\x00', 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 20:37:14 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 80) 20:37:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 70) 20:37:14 executing program 7: r0 = semget(0x1, 0x0, 0x170) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x81, 0x2800}, {0x4, 0x1}], 0x2, &(0x7f0000000080)={r1, r2+60000000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:37:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xb5200000, 0x0, 0x0) 20:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1601.037812] FAULT_INJECTION: forcing a failure. [ 1601.037812] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.039752] CPU: 0 PID: 9493 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1601.040825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.042118] Call Trace: [ 1601.042545] dump_stack+0x107/0x167 [ 1601.043126] should_fail.cold+0x5/0xa [ 1601.043735] ? create_object.isra.0+0x3a/0xa30 [ 1601.044446] should_failslab+0x5/0x20 [ 1601.045048] kmem_cache_alloc+0x5b/0x310 [ 1601.045701] create_object.isra.0+0x3a/0xa30 [ 1601.046408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1601.047204] kmem_cache_alloc+0x159/0x310 [ 1601.047864] vm_area_alloc+0x1c/0x110 [ 1601.048460] mmap_region+0x982/0x1500 [ 1601.049071] do_mmap+0x868/0x1370 [ 1601.049622] vm_mmap_pgoff+0x198/0x1f0 [ 1601.050225] ? randomize_page+0xb0/0xb0 [ 1601.050848] ksys_mmap_pgoff+0x41c/0x560 [ 1601.051492] ? find_mergeable_anon_vma+0x250/0x250 [ 1601.052277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.053082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.053905] do_syscall_64+0x33/0x40 [ 1601.054482] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.055294] RIP: 0033:0x7f2e9760cb62 [ 1601.055869] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1601.058721] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1601.059888] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1601.060995] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1601.062100] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1601.063187] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1601.064271] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:37:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x7207, &(0x7f0000000000)={0x0, 0xd16f, 0x8, 0x3, 0x392, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8010, r0, 0x10000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r3, 0x0, &(0x7f0000000240)="377ca16682af6c61ae177656be28e6f587479024d532db99b85ada8dfc084634ee5585cf3c2cbbf7d16d59e9d1a9aeaa95c3c0f584cbf1d5807b75992a7496f055c9d59056c654d8d3a06b7c68e76cb525bce1300449ff8f0708e193afc641c77a81d43e13ccbc8c7765613cf9ea7068303e4903bf966471676d8acc04535f8b2a93fad42c68ad4228f2fe4957b801a629960e0760b08ad3258da3f4e6cd2735b6c6f8ffe84041b613daa04c910cd4587749d543e3cd885e36afd51fbecdbf544f3dc0e99060211f7d554e8dbd3fee88538107566dc315cc4cbae276836b29149a7eff826bdb5d00c696bde61b68", 0xee, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 1601.081325] FAULT_INJECTION: forcing a failure. [ 1601.081325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1601.083369] CPU: 1 PID: 9502 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1601.084469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.086100] Call Trace: [ 1601.086626] dump_stack+0x107/0x167 [ 1601.087338] should_fail.cold+0x5/0xa [ 1601.088079] __alloc_pages_nodemask+0x182/0x600 [ 1601.088980] ? __lockdep_reset_lock+0x180/0x180 [ 1601.089887] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1601.091054] ? copy_page_range+0x28d9/0x3800 [ 1601.091913] alloc_pages_current+0x187/0x280 [ 1601.092768] get_zeroed_page+0x14/0xb0 [ 1601.093542] __pud_alloc+0x33/0x270 [ 1601.094247] copy_page_range+0x2c99/0x3800 [ 1601.095078] ? perf_trace_lock+0xac/0x490 [ 1601.095873] ? lock_chain_count+0x20/0x20 [ 1601.096683] ? find_held_lock+0x2c/0x110 [ 1601.097476] ? anon_vma_fork+0x462/0x640 [ 1601.098260] ? lock_downgrade+0x6d0/0x6d0 [ 1601.099071] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1601.100147] ? up_write+0x191/0x550 [ 1601.100848] ? vm_iomap_memory+0x190/0x190 [ 1601.101674] ? downgrade_write+0x3a0/0x3a0 [ 1601.102494] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1601.103555] ? __vma_link_rb+0x540/0x700 [ 1601.104345] copy_process+0x7658/0x78b0 [ 1601.105169] ? __cleanup_sighand+0xb0/0xb0 [ 1601.106008] ? _copy_from_user+0xfb/0x1b0 [ 1601.106835] kernel_clone+0xe7/0x980 [ 1601.107553] ? __lockdep_reset_lock+0x180/0x180 [ 1601.108450] ? create_io_thread+0xf0/0xf0 [ 1601.109265] ? ksys_write+0x21a/0x260 [ 1601.110000] ? lock_downgrade+0x6d0/0x6d0 [ 1601.110795] __do_sys_clone3+0x1e5/0x320 [ 1601.111573] ? __do_sys_clone+0x110/0x110 [ 1601.112394] ? rcu_read_lock_any_held+0x75/0xa0 [ 1601.113308] ? vfs_write+0x354/0xb10 [ 1601.114026] ? fput_many+0x2f/0x1a0 [ 1601.114730] ? ksys_write+0x1a9/0x260 [ 1601.115464] ? __ia32_sys_read+0xb0/0xb0 [ 1601.116270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1601.117446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.118829] ? trace_hardirqs_on+0x5b/0x180 [ 1601.119993] do_syscall_64+0x33/0x40 [ 1601.120993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1601.122306] RIP: 0033:0x7f3a69dacb19 [ 1601.123162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.127392] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1601.129151] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1601.130789] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1601.132441] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1601.134091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1601.135729] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:37:30 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x271ad000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) 20:37:30 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 81) 20:37:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x5f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 20:37:30 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe1010000, 0x0, 0x0) 20:37:30 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x280}}, 0x4388) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x7d07, &(0x7f0000000000)={0x0, 0xfffffffc, 0x4, 0x6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r5, 0x0) r6 = dup(r5) io_uring_enter(r6, 0x1be7, 0x604d, 0x1, &(0x7f00000000c0)={[0x5]}, 0x8) 20:37:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 71) [ 1617.198054] FAULT_INJECTION: forcing a failure. 20:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1617.198054] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.200807] CPU: 0 PID: 9518 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1617.202254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.203990] Call Trace: [ 1617.204556] dump_stack+0x107/0x167 [ 1617.205341] should_fail.cold+0x5/0xa [ 1617.206149] ? vm_area_alloc+0x1c/0x110 [ 1617.206990] should_failslab+0x5/0x20 [ 1617.207800] kmem_cache_alloc+0x5b/0x310 [ 1617.208663] vm_area_alloc+0x1c/0x110 [ 1617.209479] mmap_region+0x982/0x1500 [ 1617.210312] do_mmap+0x868/0x1370 [ 1617.211058] vm_mmap_pgoff+0x198/0x1f0 [ 1617.211887] ? randomize_page+0xb0/0xb0 [ 1617.212751] ksys_mmap_pgoff+0x41c/0x560 [ 1617.213617] ? find_mergeable_anon_vma+0x250/0x250 [ 1617.214660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.215782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.216880] do_syscall_64+0x33/0x40 [ 1617.217684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.218763] RIP: 0033:0x7f2e9760cb62 [ 1617.219550] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1617.223430] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1617.225031] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1617.226539] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1617.228035] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1617.229562] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1617.230144] FAULT_INJECTION: forcing a failure. [ 1617.230144] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.231066] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1617.235507] CPU: 1 PID: 9526 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1617.237127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.239038] Call Trace: [ 1617.239644] dump_stack+0x107/0x167 [ 1617.240490] should_fail.cold+0x5/0xa [ 1617.241403] ? create_object.isra.0+0x3a/0xa30 [ 1617.242457] should_failslab+0x5/0x20 [ 1617.243337] kmem_cache_alloc+0x5b/0x310 [ 1617.244313] create_object.isra.0+0x3a/0xa30 [ 1617.245402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.246636] kmem_cache_alloc+0x159/0x310 [ 1617.247643] __pmd_alloc+0x94/0x630 [ 1617.248530] copy_page_range+0x2bd0/0x3800 [ 1617.249570] ? perf_trace_lock+0xac/0x490 [ 1617.250588] ? lock_chain_count+0x20/0x20 [ 1617.251606] ? find_held_lock+0x2c/0x110 [ 1617.252624] ? anon_vma_fork+0x462/0x640 [ 1617.253670] ? up_write+0x191/0x550 [ 1617.254576] ? vm_iomap_memory+0x190/0x190 [ 1617.255611] ? downgrade_write+0x3a0/0x3a0 [ 1617.256651] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1617.257983] ? __vma_link_rb+0x540/0x700 [ 1617.258976] copy_process+0x7658/0x78b0 [ 1617.259986] ? __cleanup_sighand+0xb0/0xb0 [ 1617.261052] ? _copy_from_user+0xfb/0x1b0 [ 1617.262069] kernel_clone+0xe7/0x980 [ 1617.262982] ? __lockdep_reset_lock+0x180/0x180 [ 1617.264122] ? create_io_thread+0xf0/0xf0 [ 1617.265165] ? ksys_write+0x21a/0x260 [ 1617.266094] ? lock_downgrade+0x6d0/0x6d0 [ 1617.267113] __do_sys_clone3+0x1e5/0x320 [ 1617.268096] ? __do_sys_clone+0x110/0x110 [ 1617.269136] ? rcu_read_lock_any_held+0x75/0xa0 [ 1617.270273] ? vfs_write+0x354/0xb10 [ 1617.271182] ? fput_many+0x2f/0x1a0 [ 1617.272069] ? ksys_write+0x1a9/0x260 [ 1617.272992] ? __ia32_sys_read+0xb0/0xb0 [ 1617.273996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.275288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.276527] ? trace_hardirqs_on+0x5b/0x180 [ 1617.277611] do_syscall_64+0x33/0x40 [ 1617.278530] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.279785] RIP: 0033:0x7f3a69dacb19 [ 1617.280696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.285495] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1617.287228] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1617.288741] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1617.290245] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1617.291739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.293231] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:37:30 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0) 20:37:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 72) 20:37:30 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x20010, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x1a5, 0x459a, 0x1, &(0x7f0000000040)={[0x8]}, 0x8) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x2, 0x1010, r0, 0x10000000) io_uring_enter(r0, 0x4cc2, 0x4792, 0x1, &(0x7f0000000080)={[0x1]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_complete(r3) 20:37:30 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x20000000}) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 20:37:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05fe14b6e053", @ANYRES32=r3, @ANYBLOB="0a00180003030303030300000c0070000500080000000000"], 0x34}}, 0x0) bind(r0, &(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) eventfd(0x0) lseek(r0, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x84, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xad, 0x3}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}], @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x800}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3b}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x12}, {0x6}, {0xc}, {0x24, 0x1}, {0x18, 0x1}, {0x1b}, {0x1b}, {0x4}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x5) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8011) [ 1617.430249] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1617.441662] FAULT_INJECTION: forcing a failure. [ 1617.441662] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.444184] CPU: 0 PID: 9540 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1617.445641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1617.447396] Call Trace: [ 1617.447968] dump_stack+0x107/0x167 [ 1617.448744] should_fail.cold+0x5/0xa [ 1617.449569] ? create_object.isra.0+0x3a/0xa30 [ 1617.450532] should_failslab+0x5/0x20 [ 1617.451343] kmem_cache_alloc+0x5b/0x310 [ 1617.452215] create_object.isra.0+0x3a/0xa30 [ 1617.453151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1617.454244] kmem_cache_alloc_trace+0x151/0x320 [ 1617.455243] perf_event_mmap+0x51a/0xd90 [ 1617.456113] ? perf_event_namespaces+0x50/0x50 [ 1617.457101] ? vma_link+0x619/0x820 [ 1617.457887] mmap_region+0x3a6/0x1500 [ 1617.458712] do_mmap+0x868/0x1370 [ 1617.459460] vm_mmap_pgoff+0x198/0x1f0 [ 1617.460292] ? randomize_page+0xb0/0xb0 [ 1617.461155] ksys_mmap_pgoff+0x41c/0x560 [ 1617.462027] ? find_mergeable_anon_vma+0x250/0x250 [ 1617.463075] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1617.464193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1617.465303] do_syscall_64+0x33/0x40 [ 1617.466105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1617.467194] RIP: 0033:0x7f2e9760cb62 [ 1617.467981] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1617.471877] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1617.473494] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1617.475011] RDX: 0000000000000003 RSI: 0000000000004940 RDI: 00000000200a0000 [ 1617.476531] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 1617.478046] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1617.479558] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1617.500155] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.6'. 20:37:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 73) 20:37:45 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffff3f00, 0x0, 0x0) 20:37:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, r0, 0x0) io_uring_enter(r0, 0x57a7, 0x55a2, 0x1, &(0x7f0000000040)={[0x100000000]}, 0x8) 20:37:45 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 82) 20:37:45 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x0, @fd, 0x5, &(0x7f0000001b40)=[{&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/115, 0x73}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/201, 0xc9}, {&(0x7f00000018c0)=""/67, 0x43}, {&(0x7f0000001940)=""/176, 0xb0}, {&(0x7f0000001a00)=""/188, 0xbc}, {&(0x7f0000001ac0)=""/120, 0x78}], 0x8, 0x7}, 0x0) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x808, &(0x7f0000000040)={0x0, 0x3e4a, 0x1, 0x1, 0x353, 0x0, r2}, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x80010, r5, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r5, 0x10000000) r11 = syz_io_uring_setup(0x3d20, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r14}}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r14}}, 0x9) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x343040, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)="526392cd954ab8ad11015044ef6fdd017a2546f2fda9cecf0de1441bb96f6f1bbdecbbbc7cacb92e0ae35bd015c3518d88c95d2877da5d773fed1adf95d2606605ebcc7f094d948e", 0x48, 0x2000}, 0xfffffffe) r15 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) syz_io_uring_submit(r15, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r0, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xcda, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3ff) 20:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:37:45 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="dc56ac784264ba3ad0ccdee346f920736eaa21ff40ce6d63206d1d5655f83520df7ad9961a91e40e9b4bd680887a061db077d6257331b94182d3106089c48de92601af01d6967e301f43c4ea288bb47b4bfd80698a5e3f19fd174704a4765d5b778f94ec84762738f83bd629c920ff843350e28e2aeecd12f10c2d2e4c36e792eeda5a13a46b0ec29c4daaaea44dcf9b4222931aa46ce3a793c09d", 0x9b, 0x3}], 0x2084, &(0x7f0000000240)={[{@nodots}, {@fat=@debug}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@dots}, {@fat=@sys_immutable}], [{@uid_lt}, {@dont_measure}]}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x7) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x8000000) 20:37:45 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x50400, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000040)={0x1, 0x6}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x2, 0x28082) sendfile(r2, r0, &(0x7f00000000c0)=0xb, 0xc1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000140)={{0x1, 0x2}, {0x6, 0x61c53412}, 0x5}) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000000)={{0x5, 0x6}, {0xfff, 0x1}, 0x3}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000240)={'macvtap0\x00'}) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x300000a, 0x100010, r0, 0xf2fca000) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000180)=0x7) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) [ 1631.803948] FAULT_INJECTION: forcing a failure. [ 1631.803948] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1631.806504] CPU: 1 PID: 9563 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1631.807932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.809687] Call Trace: [ 1631.810246] dump_stack+0x107/0x167 [ 1631.811024] should_fail.cold+0x5/0xa [ 1631.811838] __alloc_pages_nodemask+0x182/0x600 [ 1631.812832] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1631.814105] ? find_held_lock+0x2c/0x110 [ 1631.814971] ? __pmd_alloc+0x31d/0x630 [ 1631.815788] ? lock_downgrade+0x6d0/0x6d0 [ 1631.816656] ? do_raw_spin_lock+0x121/0x260 [ 1631.817580] alloc_pages_current+0x187/0x280 [ 1631.818508] pte_alloc_one+0x16/0x1a0 [ 1631.819316] __pte_alloc+0x1d/0x330 [ 1631.820091] copy_page_range+0x1b62/0x3800 [ 1631.820981] ? perf_trace_lock+0xac/0x490 [ 1631.821878] ? find_held_lock+0x2c/0x110 [ 1631.822737] ? anon_vma_fork+0x462/0x640 [ 1631.823613] ? up_write+0x191/0x550 [ 1631.824378] ? vm_iomap_memory+0x190/0x190 [ 1631.825258] ? downgrade_write+0x3a0/0x3a0 [ 1631.826167] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1631.827301] ? __vma_link_rb+0x540/0x700 [ 1631.828157] copy_process+0x7658/0x78b0 [ 1631.829035] ? __cleanup_sighand+0xb0/0xb0 [ 1631.829958] ? _copy_from_user+0xfb/0x1b0 [ 1631.830854] kernel_clone+0xe7/0x980 [ 1631.831631] ? __lockdep_reset_lock+0x180/0x180 [ 1631.832607] ? create_io_thread+0xf0/0xf0 [ 1631.833502] ? ksys_write+0x21a/0x260 [ 1631.834308] ? lock_downgrade+0x6d0/0x6d0 [ 1631.835185] __do_sys_clone3+0x1e5/0x320 [ 1631.836036] ? __do_sys_clone+0x110/0x110 [ 1631.836928] ? rcu_read_lock_any_held+0x75/0xa0 [ 1631.837903] ? vfs_write+0x354/0xb10 [ 1631.838681] ? fput_many+0x2f/0x1a0 [ 1631.839444] ? ksys_write+0x1a9/0x260 [ 1631.840243] ? __ia32_sys_read+0xb0/0xb0 [ 1631.841101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.842211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.843286] ? trace_hardirqs_on+0x5b/0x180 [ 1631.844201] do_syscall_64+0x33/0x40 [ 1631.844995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1631.846072] RIP: 0033:0x7f3a69dacb19 [ 1631.846846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.850709] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1631.852299] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1631.853790] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1631.855282] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1631.856771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1631.858274] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:37:45 executing program 1: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 20:37:45 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0) [ 1631.880971] FAULT_INJECTION: forcing a failure. [ 1631.880971] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.883394] CPU: 1 PID: 9570 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1631.884822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.886573] Call Trace: [ 1631.887142] dump_stack+0x107/0x167 [ 1631.887908] should_fail.cold+0x5/0xa [ 1631.888707] ? vm_area_dup+0x78/0x290 [ 1631.889521] should_failslab+0x5/0x20 [ 1631.890325] kmem_cache_alloc+0x5b/0x310 [ 1631.891183] ? __lockdep_reset_lock+0x180/0x180 [ 1631.892159] vm_area_dup+0x78/0x290 [ 1631.892927] ? lock_acquire+0x197/0x470 [ 1631.893769] ? find_held_lock+0x2c/0x110 [ 1631.894628] ? mark_lock+0xf5/0x2df0 [ 1631.895417] ? quarantine_put+0x13f/0x1a0 [ 1631.896295] ? lock_downgrade+0x6d0/0x6d0 [ 1631.897167] ? lock_chain_count+0x20/0x20 [ 1631.898047] ? mark_held_locks+0x9e/0xe0 [ 1631.898907] ? __lock_acquire+0x1657/0x5b00 [ 1631.899828] ? mark_lock+0xf5/0x2df0 [ 1631.900626] ? vm_area_alloc+0x110/0x110 [ 1631.901502] ? __lock_acquire+0x1657/0x5b00 [ 1631.902421] ? lock_acquire+0x197/0x470 [ 1631.903263] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1631.904356] ? SOFTIRQ_verbose+0x10/0x10 [ 1631.905208] ? vmacache_find+0x55/0x2a0 [ 1631.906058] __split_vma+0xa8/0x4e0 [ 1631.906830] __do_munmap+0x365/0x1260 [ 1631.907640] ? arch_get_unmapped_area+0x450/0x450 [ 1631.908656] ? lock_release+0x680/0x680 [ 1631.909503] mmap_region+0x7cc/0x1500 [ 1631.910323] do_mmap+0x868/0x1370 [ 1631.911065] vm_mmap_pgoff+0x198/0x1f0 [ 1631.911895] ? randomize_page+0xb0/0xb0 [ 1631.912746] ksys_mmap_pgoff+0x41c/0x560 [ 1631.913610] ? find_mergeable_anon_vma+0x250/0x250 [ 1631.914642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.915749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.916835] do_syscall_64+0x33/0x40 [ 1631.917626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1631.918700] RIP: 0033:0x7f2e9760cb62 20:37:45 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) [ 1631.919485] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1631.923603] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1631.925199] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1631.926702] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020ffc000 [ 1631.928204] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 1631.929704] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1631.931192] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:37:45 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4133, 0xe81a, 0x2, &(0x7f0000000000)={[0x8d8]}, 0x8) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x7000)=nil, 0x7000, 0x0, 0x4010, r2, 0x0) r3 = syz_io_uring_setup(0x63e1, &(0x7f0000000040)={0x0, 0x3a68, 0x8, 0x3, 0xe2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x3c0d, 0x58d, 0x0, &(0x7f0000000240)={[0x1]}, 0x8) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mmap$binder(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x7) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x5, 0x2004, @fd=r5, 0x1ff, &(0x7f0000000340)="2fcda79e59008c4ca35ef44b91dbb0dac16a7b2abd3f265ef5474e2d4376c1c84f2d691c18e64d3a5a5c2299e72df2c75c3c10404edda7546033bc5b2d88b13c1fc4eb1c25e16f70274f9c24466bbfa98c5a3de45bc49736fe0b4ea59686c0ac897f5e5e7cbad40a8a9cd6b47fbaa7044f3c833e5c80873330f1de32a76989e85066cf79a38a4688b51d398126f6ce786d4ec6a11fed83a167f7b07821d130cf7013409438c6d89db3fcbc6a8fb10c21ad735261404dc37c2de30be75813d83d3a9c5794da70f3b947e6462dd8a91fba5cb657", 0xd3, 0xa, 0x1}, 0x9e9) 20:37:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 20:37:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:37:45 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) 20:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1632.070799] Zero length message leads to an empty skb 20:37:59 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x8, 0x10010, 0xffffffffffffffff, 0x10000000) 20:37:59 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0) 20:37:59 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 83) 20:37:59 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:37:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x60400, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x9, 0x3f, 0x7f, 0x0, 0x7dd2, 0x60100, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x14014, 0x8, 0x2, 0x9, 0x561, 0x0, 0x4, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r0, 0x4) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 20:37:59 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x1010, 0xffffffffffffffff, 0x0) 20:37:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 74) [ 1646.156636] FAULT_INJECTION: forcing a failure. [ 1646.156636] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.158236] CPU: 0 PID: 9632 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1646.159131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.160202] Call Trace: [ 1646.160547] dump_stack+0x107/0x167 [ 1646.161030] should_fail.cold+0x5/0xa [ 1646.161529] ? create_object.isra.0+0x3a/0xa30 [ 1646.162141] should_failslab+0x5/0x20 [ 1646.162637] kmem_cache_alloc+0x5b/0x310 [ 1646.163166] create_object.isra.0+0x3a/0xa30 [ 1646.163728] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1646.164391] kmem_cache_alloc+0x159/0x310 [ 1646.164928] ? mark_lock+0xf5/0x2df0 [ 1646.165411] vm_area_dup+0x78/0x290 [ 1646.165901] ? lock_chain_count+0x20/0x20 [ 1646.166443] ? mark_lock+0xf5/0x2df0 [ 1646.166925] ? lock_chain_count+0x20/0x20 [ 1646.167452] ? mark_held_locks+0x9e/0xe0 [ 1646.167978] ? __lock_acquire+0x1657/0x5b00 [ 1646.168542] ? mark_lock+0xf5/0x2df0 [ 1646.169018] ? vm_area_alloc+0x110/0x110 [ 1646.169539] ? __lock_acquire+0x1657/0x5b00 [ 1646.170115] ? lock_acquire+0x197/0x470 [ 1646.170633] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1646.171304] ? SOFTIRQ_verbose+0x10/0x10 [ 1646.171825] ? vmacache_find+0x55/0x2a0 [ 1646.172333] __split_vma+0xa8/0x4e0 [ 1646.172809] __do_munmap+0x365/0x1260 [ 1646.173299] ? arch_get_unmapped_area+0x450/0x450 [ 1646.173936] ? lock_release+0x680/0x680 [ 1646.174449] mmap_region+0x7cc/0x1500 [ 1646.174944] do_mmap+0x868/0x1370 [ 1646.175392] vm_mmap_pgoff+0x198/0x1f0 [ 1646.175766] FAULT_INJECTION: forcing a failure. [ 1646.175766] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.175905] ? randomize_page+0xb0/0xb0 [ 1646.178788] ksys_mmap_pgoff+0x41c/0x560 [ 1646.179311] ? find_mergeable_anon_vma+0x250/0x250 [ 1646.179943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.180620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.181276] do_syscall_64+0x33/0x40 [ 1646.181770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1646.182425] RIP: 0033:0x7f2e9760cb62 [ 1646.182913] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1646.185263] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1646.186246] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1646.187160] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020ffc000 [ 1646.188063] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 1646.188967] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1646.189876] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1646.190813] CPU: 1 PID: 9635 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1646.192287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.194056] Call Trace: [ 1646.194622] dump_stack+0x107/0x167 [ 1646.195405] should_fail.cold+0x5/0xa [ 1646.196218] ? ptlock_alloc+0x1d/0x70 [ 1646.197023] should_failslab+0x5/0x20 [ 1646.197848] kmem_cache_alloc+0x5b/0x310 [ 1646.198734] ptlock_alloc+0x1d/0x70 [ 1646.199509] pte_alloc_one+0x68/0x1a0 [ 1646.200316] __pte_alloc+0x1d/0x330 [ 1646.201096] copy_page_range+0x1b62/0x3800 [ 1646.202004] ? perf_trace_lock+0xac/0x490 [ 1646.202901] ? find_held_lock+0x2c/0x110 [ 1646.203773] ? anon_vma_fork+0x462/0x640 [ 1646.204665] ? up_write+0x191/0x550 [ 1646.205440] ? vm_iomap_memory+0x190/0x190 [ 1646.206345] ? downgrade_write+0x3a0/0x3a0 [ 1646.207252] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1646.208398] ? __vma_link_rb+0x540/0x700 [ 1646.209278] copy_process+0x7658/0x78b0 [ 1646.210173] ? __cleanup_sighand+0xb0/0xb0 [ 1646.211097] ? _copy_from_user+0xfb/0x1b0 [ 1646.211981] kernel_clone+0xe7/0x980 [ 1646.212772] ? __lockdep_reset_lock+0x180/0x180 [ 1646.213764] ? create_io_thread+0xf0/0xf0 [ 1646.214656] ? ksys_write+0x21a/0x260 [ 1646.215462] ? lock_downgrade+0x6d0/0x6d0 [ 1646.216346] __do_sys_clone3+0x1e5/0x320 [ 1646.217202] ? __do_sys_clone+0x110/0x110 [ 1646.218114] ? rcu_read_lock_any_held+0x75/0xa0 [ 1646.219089] ? vfs_write+0x354/0xb10 [ 1646.219886] ? fput_many+0x2f/0x1a0 [ 1646.220655] ? ksys_write+0x1a9/0x260 [ 1646.221457] ? __ia32_sys_read+0xb0/0xb0 [ 1646.222328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.223450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.224541] ? trace_hardirqs_on+0x5b/0x180 [ 1646.225463] do_syscall_64+0x33/0x40 [ 1646.226260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1646.227350] RIP: 0033:0x7f3a69dacb19 [ 1646.228147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.232036] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1646.233666] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1646.235182] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1646.236698] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.238216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1646.239726] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:37:59 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x2000004, 0x50, 0xffffffffffffffff, 0x8000000) 20:37:59 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000240)='\b\x00', 0xfffff, 0xfffffffffffffffe) timer_delete(0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='%:+-(\x00', 0xffffffffffffffff) timer_gettime(0x0, &(0x7f0000000180)) timer_gettime(0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) eventfd(0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4059, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r4, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x80000001, 0x4, 0x0, {0x0, r1, r2}}, 0x9) timer_create(0x4, &(0x7f0000000280)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f00000002c0)) 20:37:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) 20:37:59 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) 20:37:59 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 84) 20:37:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xea89000) 20:37:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 75) 20:37:59 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2eaf, 0x83b1, 0x2, &(0x7f0000000000)={[0xfffffffffffffa55]}, 0x8) [ 1646.378904] FAULT_INJECTION: forcing a failure. [ 1646.378904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1646.380458] CPU: 0 PID: 9654 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1646.381253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.382232] Call Trace: [ 1646.382553] dump_stack+0x107/0x167 [ 1646.382983] should_fail.cold+0x5/0xa [ 1646.383437] __alloc_pages_nodemask+0x182/0x600 [ 1646.383982] ? __lockdep_reset_lock+0x180/0x180 [ 1646.384527] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1646.385238] ? copy_page_range+0x28d9/0x3800 [ 1646.385762] alloc_pages_current+0x187/0x280 [ 1646.386283] get_zeroed_page+0x14/0xb0 [ 1646.386735] __pud_alloc+0x33/0x270 [ 1646.387163] copy_page_range+0x2c99/0x3800 [ 1646.387653] ? perf_trace_lock+0xac/0x490 20:37:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 1646.388135] ? lock_chain_count+0x20/0x20 [ 1646.388848] ? find_held_lock+0x2c/0x110 [ 1646.389329] ? anon_vma_fork+0x462/0x640 [ 1646.389815] ? lock_downgrade+0x6d0/0x6d0 [ 1646.390301] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1646.390943] ? up_write+0x191/0x550 [ 1646.391367] ? vm_iomap_memory+0x190/0x190 [ 1646.391857] ? downgrade_write+0x3a0/0x3a0 [ 1646.392357] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1646.392991] ? __vma_link_rb+0x540/0x700 [ 1646.393471] copy_process+0x7658/0x78b0 [ 1646.393966] ? __cleanup_sighand+0xb0/0xb0 [ 1646.394471] ? _copy_from_user+0xfb/0x1b0 [ 1646.394953] kernel_clone+0xe7/0x980 [ 1646.395391] ? __lockdep_reset_lock+0x180/0x180 [ 1646.395933] ? create_io_thread+0xf0/0xf0 [ 1646.396423] ? ksys_write+0x21a/0x260 [ 1646.396864] ? lock_downgrade+0x6d0/0x6d0 [ 1646.397354] __do_sys_clone3+0x1e5/0x320 [ 1646.397833] ? __do_sys_clone+0x110/0x110 [ 1646.398334] ? rcu_read_lock_any_held+0x75/0xa0 [ 1646.398872] ? vfs_write+0x354/0xb10 [ 1646.399308] ? fput_many+0x2f/0x1a0 [ 1646.399729] ? ksys_write+0x1a9/0x260 [ 1646.400172] ? __ia32_sys_read+0xb0/0xb0 [ 1646.400650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.401264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.401860] ? trace_hardirqs_on+0x5b/0x180 [ 1646.402360] do_syscall_64+0x33/0x40 [ 1646.402789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1646.403376] RIP: 0033:0x7f3a69dacb19 [ 1646.403805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.405935] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1646.406813] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1646.407636] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1646.408461] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.409280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1646.410109] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1646.436930] FAULT_INJECTION: forcing a failure. [ 1646.436930] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.438260] CPU: 0 PID: 9661 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1646.439048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.439999] Call Trace: [ 1646.440302] dump_stack+0x107/0x167 [ 1646.440718] should_fail.cold+0x5/0xa [ 1646.441152] ? anon_vma_clone+0xdc/0x590 [ 1646.441623] should_failslab+0x5/0x20 [ 1646.442059] kmem_cache_alloc+0x5b/0x310 [ 1646.442534] anon_vma_clone+0xdc/0x590 [ 1646.442986] __split_vma+0x17c/0x4e0 [ 1646.443416] __do_munmap+0x365/0x1260 [ 1646.443854] ? arch_get_unmapped_area+0x450/0x450 [ 1646.444407] ? lock_release+0x680/0x680 [ 1646.444866] mmap_region+0x7cc/0x1500 [ 1646.445322] do_mmap+0x868/0x1370 [ 1646.445736] vm_mmap_pgoff+0x198/0x1f0 [ 1646.446188] ? randomize_page+0xb0/0xb0 [ 1646.446650] ksys_mmap_pgoff+0x41c/0x560 [ 1646.447118] ? find_mergeable_anon_vma+0x250/0x250 [ 1646.447684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1646.448285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1646.448878] do_syscall_64+0x33/0x40 [ 1646.449307] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1646.449905] RIP: 0033:0x7f2e9760cb62 [ 1646.450329] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1646.452431] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1646.453303] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1646.454128] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020ffc000 [ 1646.454942] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 1646.455754] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1646.456568] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1663.281573] FAULT_INJECTION: forcing a failure. [ 1663.281573] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.284278] CPU: 1 PID: 9681 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1663.285707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.287461] Call Trace: [ 1663.288021] dump_stack+0x107/0x167 [ 1663.288781] should_fail.cold+0x5/0xa [ 1663.289575] ? create_object.isra.0+0x3a/0xa30 [ 1663.290534] should_failslab+0x5/0x20 [ 1663.291325] kmem_cache_alloc+0x5b/0x310 20:38:16 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x1, 0x30, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x6, 0x0, @fd_index=0x6, 0x0, 0x0, 0x7, 0xf, 0x1, {0x0, r2}}, 0x2) io_uring_enter(0xffffffffffffffff, 0x7ffa, 0x4529, 0x0, &(0x7f0000000000)={[0x9]}, 0x8) 20:38:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r5, 0x0, &(0x7f0000000140)="b854624e15a8ea68e0a21aaa63f7f859ff0467cffaf91f26087a1ffe8dfdb94c114efc14b4bd1de53677ebe1f92a803e5017c11d623f77c3f6538fee7c2b21e44caf00402d516acefe246f5f8ba6220aa220499e63b4b59c3da83f255c41b91ab46c7bd1551580d9d3982922b8398a7bd5b82a0672d80feb45786a9fa55743ced443a2fdf63d50d552fc61419cc6c6e63d33ed1af521965a93154b33405a82a0546260a759abeb05c8eef84c4a35e840903b384464", 0xb5, 0x844}, 0xfffffffe) 20:38:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80000001) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 20:38:16 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 85) 20:38:16 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) io_uring_enter(r1, 0x5c6d, 0x3b5d, 0x3, &(0x7f00000002c0), 0x8) r2 = syz_io_uring_setup(0x37ca, &(0x7f0000000180)={0x0, 0x2ac3, 0x8, 0x3, 0xcf}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x1a8f, &(0x7f0000000000)={0x0, 0x5672, 0x0, 0x1, 0x15b, 0x0, r2}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x80000}, 0x6) 20:38:16 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 20:38:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 76) 20:38:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x0, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1663.292502] create_object.isra.0+0x3a/0xa30 [ 1663.293625] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1663.294773] kmem_cache_alloc+0x159/0x310 [ 1663.295702] anon_vma_clone+0xdc/0x590 [ 1663.296592] __split_vma+0x17c/0x4e0 [ 1663.297426] __do_munmap+0x365/0x1260 [ 1663.298278] ? arch_get_unmapped_area+0x450/0x450 [ 1663.299350] ? lock_release+0x680/0x680 [ 1663.300239] mmap_region+0x7cc/0x1500 [ 1663.301100] do_mmap+0x868/0x1370 [ 1663.301900] vm_mmap_pgoff+0x198/0x1f0 [ 1663.302777] ? randomize_page+0xb0/0xb0 [ 1663.303679] ksys_mmap_pgoff+0x41c/0x560 [ 1663.304592] ? find_mergeable_anon_vma+0x250/0x250 [ 1663.305684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.306857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1663.308000] do_syscall_64+0x33/0x40 [ 1663.308812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.309967] RIP: 0033:0x7f2e9760cb62 [ 1663.310788] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1663.314900] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1663.316544] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1663.318054] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020ffc000 [ 1663.319556] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 1663.320540] FAULT_INJECTION: forcing a failure. [ 1663.320540] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.321074] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1663.321089] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1663.326878] CPU: 0 PID: 9690 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1663.328374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.330211] Call Trace: [ 1663.330809] dump_stack+0x107/0x167 [ 1663.331622] should_fail.cold+0x5/0xa [ 1663.332460] ? vm_area_dup+0x78/0x290 [ 1663.333312] should_failslab+0x5/0x20 [ 1663.334171] kmem_cache_alloc+0x5b/0x310 [ 1663.335062] ? lock_downgrade+0x6d0/0x6d0 [ 1663.335976] vm_area_dup+0x78/0x290 [ 1663.336805] ? _cond_resched+0x10/0x30 [ 1663.337681] ? copy_page_range+0x24e9/0x3800 [ 1663.338726] ? vm_area_alloc+0x110/0x110 [ 1663.339622] ? up_write+0x191/0x550 [ 1663.340431] ? vm_iomap_memory+0x190/0x190 [ 1663.341366] ? downgrade_write+0x3a0/0x3a0 [ 1663.342313] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1663.343510] ? __vma_link_rb+0x540/0x700 [ 1663.344395] copy_process+0x298b/0x78b0 [ 1663.345321] ? __cleanup_sighand+0xb0/0xb0 [ 1663.346302] ? _copy_from_user+0xfb/0x1b0 [ 1663.347237] kernel_clone+0xe7/0x980 [ 1663.348061] ? __lockdep_reset_lock+0x180/0x180 [ 1663.349090] ? create_io_thread+0xf0/0xf0 [ 1663.350060] ? ksys_write+0x21a/0x260 [ 1663.350885] ? lock_downgrade+0x6d0/0x6d0 [ 1663.351767] __do_sys_clone3+0x1e5/0x320 [ 1663.352620] ? __do_sys_clone+0x110/0x110 [ 1663.353517] ? rcu_read_lock_any_held+0x75/0xa0 [ 1663.354491] ? vfs_write+0x354/0xb10 [ 1663.355312] ? fput_many+0x2f/0x1a0 [ 1663.356114] ? ksys_write+0x1a9/0x260 [ 1663.356970] ? __ia32_sys_read+0xb0/0xb0 [ 1663.357888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.359019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1663.360126] ? trace_hardirqs_on+0x5b/0x180 [ 1663.361096] do_syscall_64+0x33/0x40 [ 1663.361951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.363086] RIP: 0033:0x7f3a69dacb19 [ 1663.363915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.367958] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1663.369633] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1663.371213] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1663.372757] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.374440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1663.376054] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:38:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x0, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:38:16 executing program 7: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000000)=""/227) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x1, 0x5, 0x2, 0x4}) 20:38:16 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0) 20:38:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @local}, 0x1c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x20010, r1, 0x0) 20:38:16 executing program 0: writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="b765702b355c0ced780ae7c8560399101d7d31eb838c4c02cb58c506a2062bdec48d8603f647a1a1374b21884be5067c10592c3b786a71b32a27ef0378409fc2c682b388c6cc0ad0fc4011eef14a7900e725941bf1b7052f1d34055a613bf6b1be75fb79cd69616ef90f0bc2", 0x6c}, {&(0x7f0000000080)="f9ca311939683047cf7c4b08bf24c783efc55834510d3205b0c4e5da9434466344cf8e4bfa1ab564e9f274c21930d1c80777d906b9d032f1f94bc79bfbb2da1b871fe60ec192a248e2f6490fafd1e16c50", 0x51}, {&(0x7f0000000100)="a0ba5a107f9f43b2d9ab6d72db7d513547c148567bbc675c924085eb3e639f7675c394c184384d850f1af52065cc978b0551a85bfab1c9a546741d98dcaf3a504ceea721ac3e4f42b1e04f5b51c8d2f7eca290eccd291d57d70873065600e855b22d9c7caf9ceb16d614005f93797a61d49b5477553daafd6bd1b2a0020f1df9d1c4610567cd488f8c71211b7526a345ad380608afdce87f5802b685034e", 0x9e}], 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) sendfile(r0, r1, &(0x7f0000000200)=0x7, 0x800) 20:38:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 77) 20:38:17 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x80000e, 0x31, 0xffffffffffffffff, 0x0) 20:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x0, 0x82f3f172b6b59bbf, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1663.651888] FAULT_INJECTION: forcing a failure. [ 1663.651888] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.654520] CPU: 0 PID: 9722 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1663.656076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.657950] Call Trace: [ 1663.658550] dump_stack+0x107/0x167 [ 1663.659356] should_fail.cold+0x5/0xa [ 1663.660221] ? vm_area_alloc+0x1c/0x110 [ 1663.661102] should_failslab+0x5/0x20 [ 1663.661960] kmem_cache_alloc+0x5b/0x310 [ 1663.662886] vm_area_alloc+0x1c/0x110 [ 1663.663743] mmap_region+0x982/0x1500 [ 1663.664624] do_mmap+0x868/0x1370 [ 1663.665429] vm_mmap_pgoff+0x198/0x1f0 [ 1663.666315] ? randomize_page+0xb0/0xb0 [ 1663.667236] ksys_mmap_pgoff+0x41c/0x560 [ 1663.668131] ? find_mergeable_anon_vma+0x250/0x250 [ 1663.669233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1663.670405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1663.671566] do_syscall_64+0x33/0x40 [ 1663.672410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1663.673548] RIP: 0033:0x7f2e9760cb62 [ 1663.674418] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1663.678491] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1663.680228] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1663.681841] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020ffc000 [ 1663.683440] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 1663.685008] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1663.686555] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:38:35 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) [ 1681.824506] FAULT_INJECTION: forcing a failure. [ 1681.824506] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.826816] CPU: 1 PID: 9744 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1681.828193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1681.829867] Call Trace: 20:38:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0xc1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x410000, 0x2e) 20:38:35 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 20:38:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 78) 20:38:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10600, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a306f4b74a1a9df31c5a63498c3bbf9dfc2b10de24a3e8425f7cc488c1fb22f88e913046f1d2a12ec18b3d5532a7777fef39caa"], 0x40) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r3 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x22c, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x8001, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, r3, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x40, 0x1, 0xff, 0x1, 0x0, 0x80, 0xac820, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0xffff}, 0x50, 0x0, 0x2, 0x7, 0xf312, 0x2, 0x3e, 0x0, 0x4b79, 0x0, 0x4}, r3, 0xd, 0xffffffffffffffff, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ba04000000000000c910fe80090000400000000000000000000e0502000805029ce3c204000000200401010000000000"], 0x30) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat$incfs(r4, &(0x7f0000000080)='.pending_reads\x00', 0x404180, 0x80) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x8, &(0x7f0000000100)={0x0, 0x3938700}, 0x1, 0x1}, 0xab8) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f00000000c0)=0x400, 0x4) 20:38:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 20:38:35 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000000140)=""/85, 0x55}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/217, 0xd9}, {&(0x7f00000012c0)=""/187, 0xbb}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x5, &(0x7f0000002400)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x40000000) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x3, 0x1, 0x4, 0x0, 0x2, 0x80, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x10000, 0x1, 0x7, 0x1, 0x7fffffff, 0x8001, 0xa371, 0x0, 0x6139, 0x0, 0x100}, r0, 0x10, 0xffffffffffffffff, 0x8) 20:38:35 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 86) [ 1681.830690] dump_stack+0x107/0x167 [ 1681.831535] should_fail.cold+0x5/0xa [ 1681.832306] ? create_object.isra.0+0x3a/0xa30 [ 1681.833239] should_failslab+0x5/0x20 [ 1681.834018] kmem_cache_alloc+0x5b/0x310 [ 1681.834842] create_object.isra.0+0x3a/0xa30 [ 1681.835720] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1681.836744] kmem_cache_alloc+0x159/0x310 [ 1681.837587] vm_area_alloc+0x1c/0x110 [ 1681.838362] mmap_region+0x982/0x1500 [ 1681.839156] do_mmap+0x868/0x1370 [ 1681.839876] vm_mmap_pgoff+0x198/0x1f0 [ 1681.840666] ? randomize_page+0xb0/0xb0 [ 1681.841482] ksys_mmap_pgoff+0x41c/0x560 [ 1681.842313] ? find_mergeable_anon_vma+0x250/0x250 [ 1681.843310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1681.844366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1681.845407] do_syscall_64+0x33/0x40 [ 1681.846171] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1681.846913] FAULT_INJECTION: forcing a failure. [ 1681.846913] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.847194] RIP: 0033:0x7f2e9760cb62 [ 1681.847216] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1681.847233] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1681.854600] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1681.856019] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020ffc000 [ 1681.857445] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 1681.858879] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1681.860292] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1681.861748] CPU: 0 PID: 9749 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1681.862673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1681.863745] Call Trace: [ 1681.864102] dump_stack+0x107/0x167 [ 1681.864587] should_fail.cold+0x5/0xa [ 1681.865083] ? create_object.isra.0+0x3a/0xa30 [ 1681.865677] should_failslab+0x5/0x20 [ 1681.866174] kmem_cache_alloc+0x5b/0x310 [ 1681.866709] create_object.isra.0+0x3a/0xa30 [ 1681.867285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1681.867949] kmem_cache_alloc+0x159/0x310 [ 1681.868493] ? lock_downgrade+0x6d0/0x6d0 [ 1681.869042] vm_area_dup+0x78/0x290 [ 1681.869523] ? _cond_resched+0x10/0x30 [ 1681.870033] ? copy_page_range+0x24e9/0x3800 [ 1681.870644] ? vm_area_alloc+0x110/0x110 [ 1681.871189] ? up_write+0x191/0x550 [ 1681.871662] ? vm_iomap_memory+0x190/0x190 [ 1681.872208] ? downgrade_write+0x3a0/0x3a0 [ 1681.872772] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1681.873477] ? __vma_link_rb+0x540/0x700 [ 1681.874017] copy_process+0x298b/0x78b0 [ 1681.874563] ? __cleanup_sighand+0xb0/0xb0 [ 1681.875126] ? _copy_from_user+0xfb/0x1b0 [ 1681.875673] kernel_clone+0xe7/0x980 [ 1681.876154] ? __lockdep_reset_lock+0x180/0x180 [ 1681.876765] ? create_io_thread+0xf0/0xf0 [ 1681.877323] ? ksys_write+0x21a/0x260 [ 1681.877816] ? lock_downgrade+0x6d0/0x6d0 [ 1681.878364] __do_sys_clone3+0x1e5/0x320 [ 1681.878899] ? __do_sys_clone+0x110/0x110 [ 1681.879449] ? rcu_read_lock_any_held+0x75/0xa0 [ 1681.880054] ? vfs_write+0x354/0xb10 [ 1681.880550] ? fput_many+0x2f/0x1a0 [ 1681.881026] ? ksys_write+0x1a9/0x260 [ 1681.881521] ? __ia32_sys_read+0xb0/0xb0 [ 1681.882058] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1681.882740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1681.883403] ? trace_hardirqs_on+0x5b/0x180 [ 1681.883973] do_syscall_64+0x33/0x40 [ 1681.884456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1681.885135] RIP: 0033:0x7f3a69dacb19 [ 1681.885610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1681.887973] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1681.888943] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1681.889851] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1681.890775] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1681.891682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1681.892593] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:38:35 executing program 0: setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0xd5, 0x1, 0x1, 0x8, 0x0, 0x7fff], 0x1, &(0x7f0000000000), 0x0, [{}]}, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x20010, 0xffffffffffffffff, 0x8000000) 20:38:35 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000000)={{r1}, "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"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) 20:38:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 79) 20:38:35 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xb520000000000000, 0x0, 0x0) 20:38:35 executing program 2: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 87) [ 1682.031396] FAULT_INJECTION: forcing a failure. [ 1682.031396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1682.032893] CPU: 0 PID: 9773 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1682.033728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1682.034748] Call Trace: [ 1682.035074] dump_stack+0x107/0x167 [ 1682.035531] should_fail.cold+0x5/0xa [ 1682.036005] __alloc_pages_nodemask+0x182/0x600 [ 1682.036572] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1682.037303] ? walk_mem_res+0x170/0x170 [ 1682.037789] alloc_pages_current+0x187/0x280 [ 1682.038328] pte_alloc_one+0x16/0x1a0 [ 1682.038789] __pte_alloc+0x1d/0x330 [ 1682.039231] remap_pfn_range_internal+0x9a3/0xf60 [ 1682.039817] ? lookup_memtype+0x5b/0x200 [ 1682.040315] ? apply_to_existing_page_range+0x40/0x40 [ 1682.040942] remap_pfn_range+0xcd/0x160 [ 1682.041419] ? remap_pfn_range_notrack+0x70/0x70 [ 1682.042006] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1682.042630] io_uring_mmap+0x398/0x530 [ 1682.043104] mmap_file+0x5e/0xe0 [ 1682.043513] mmap_region+0xc4d/0x1500 [ 1682.043985] do_mmap+0x868/0x1370 [ 1682.044406] vm_mmap_pgoff+0x198/0x1f0 [ 1682.044876] ? randomize_page+0xb0/0xb0 [ 1682.045362] ksys_mmap_pgoff+0x41c/0x560 [ 1682.045850] ? find_mergeable_anon_vma+0x250/0x250 [ 1682.046450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1682.047078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1682.047700] do_syscall_64+0x33/0x40 [ 1682.048152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1682.048767] RIP: 0033:0x7f2e9760cb62 [ 1682.049216] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1682.051437] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1682.052362] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1682.053222] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020ffc000 [ 1682.054076] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 1682.054918] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1682.055760] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 20:38:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) [ 1682.082284] FAULT_INJECTION: forcing a failure. [ 1682.082284] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.083715] CPU: 0 PID: 9781 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1682.084513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1682.085496] Call Trace: [ 1682.085816] dump_stack+0x107/0x167 [ 1682.086261] should_fail.cold+0x5/0xa [ 1682.086714] ? vm_area_dup+0x78/0x290 [ 1682.087164] should_failslab+0x5/0x20 [ 1682.087610] kmem_cache_alloc+0x5b/0x310 [ 1682.088093] vm_area_dup+0x78/0x290 [ 1682.088532] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1682.089084] ? lock_downgrade+0x6d0/0x6d0 [ 1682.089585] ? copy_page_range+0x24e9/0x3800 [ 1682.090121] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1682.090670] ? avc_has_extended_perms+0xf40/0xf40 [ 1682.091248] ? vm_area_alloc+0x110/0x110 [ 1682.091755] ? selinux_vm_enough_memory+0x114/0x180 [ 1682.092339] ? selinux_sb_statfs+0x250/0x250 [ 1682.092862] ? percpu_counter_add_batch+0x8b/0x140 [ 1682.093437] ? __vm_enough_memory+0x184/0x360 [ 1682.093970] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1682.094585] copy_process+0x298b/0x78b0 [ 1682.095079] ? __cleanup_sighand+0xb0/0xb0 [ 1682.095601] ? _copy_from_user+0xfb/0x1b0 [ 1682.096104] kernel_clone+0xe7/0x980 [ 1682.096555] ? __lockdep_reset_lock+0x180/0x180 [ 1682.097102] ? create_io_thread+0xf0/0xf0 [ 1682.097598] ? ksys_write+0x21a/0x260 [ 1682.098053] ? lock_downgrade+0x6d0/0x6d0 [ 1682.098540] __do_sys_clone3+0x1e5/0x320 [ 1682.099015] ? __do_sys_clone+0x110/0x110 [ 1682.099511] ? rcu_read_lock_any_held+0x75/0xa0 [ 1682.100052] ? vfs_write+0x354/0xb10 [ 1682.100485] ? fput_many+0x2f/0x1a0 [ 1682.100908] ? ksys_write+0x1a9/0x260 [ 1682.101349] ? __ia32_sys_read+0xb0/0xb0 [ 1682.101830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1682.102461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1682.103059] ? trace_hardirqs_on+0x5b/0x180 [ 1682.103563] do_syscall_64+0x33/0x40 [ 1682.103996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1682.104592] RIP: 0033:0x7f3a69dacb19 [ 1682.105025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.107174] RSP: 002b:00007f3a67322188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1682.108068] RAX: ffffffffffffffda RBX: 00007f3a69ebff60 RCX: 00007f3a69dacb19 [ 1682.108906] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1682.109734] RBP: 00007f3a673221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.110574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1682.111404] R13: 00007fff4965eb1f R14: 00007f3a67322300 R15: 0000000000022000 20:38:35 executing program 0: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x7f, 0x1, 0x5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) 20:38:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) [ 1682.131142] ------------[ cut here ]------------ [ 1682.131737] WARNING: CPU: 0 PID: 9773 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1682.132780] Modules linked in: [ 1682.133189] CPU: 0 PID: 9773 Comm: syz-executor.4 Not tainted 5.10.253 #1 [ 1682.133981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1682.134972] RIP: 0010:get_pat_info+0x216/0x270 [ 1682.135536] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 51 89 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 3a 89 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 15 ad 5a 00 e9 [ 1682.137675] RSP: 0018:ffff88804a757890 EFLAGS: 00010212 [ 1682.138317] RAX: 0000000000013b0c RBX: ffff888042ff1c00 RCX: ffffc90005c11000 [ 1682.139155] RDX: 0000000000040000 RSI: ffffffff81125456 RDI: 0000000000000007 [ 1682.139973] RBP: ffff88804a757948 R08: 0000000000000000 R09: ffff88804a757818 [ 1682.140813] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1682.141658] R13: 1ffff110094eaf12 R14: 0000000000000000 R15: ffff888042ff1c50 [ 1682.142509] FS: 00007f2e94b82700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1682.143456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1682.144179] CR2: 00007fcf2069dbb0 CR3: 000000000dbb6000 CR4: 0000000000350ef0 [ 1682.144989] Call Trace: [ 1682.145317] ? pgprot_writethrough+0xc0/0xc0 [ 1682.145819] ? finish_task_switch+0x126/0x5d0 [ 1682.146361] ? finish_task_switch+0xef/0x5d0 [ 1682.146874] untrack_pfn+0xdc/0x240 [ 1682.152719] ? track_pfn_insert+0x150/0x150 [ 1682.153239] ? lock_downgrade+0x6d0/0x6d0 [ 1682.153713] ? uprobe_munmap+0x95/0x560 [ 1682.154204] unmap_single_vma+0x1bc/0x300 [ 1682.154690] zap_page_range_single+0x2ce/0x450 [ 1682.155243] ? unmap_single_vma+0x300/0x300 [ 1682.155751] ? remap_pfn_range_internal+0xc56/0xf60 [ 1682.156358] ? lookup_memtype+0x5b/0x200 [ 1682.156837] ? apply_to_existing_page_range+0x40/0x40 [ 1682.157459] remap_pfn_range+0x139/0x160 [ 1682.157925] ? remap_pfn_range_notrack+0x70/0x70 [ 1682.158500] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1682.159116] io_uring_mmap+0x398/0x530 [ 1682.159570] mmap_file+0x5e/0xe0 [ 1682.159957] mmap_region+0xc4d/0x1500 [ 1682.160427] do_mmap+0x868/0x1370 [ 1682.160833] vm_mmap_pgoff+0x198/0x1f0 [ 1682.161309] ? randomize_page+0xb0/0xb0 [ 1682.161779] ksys_mmap_pgoff+0x41c/0x560 [ 1682.162282] ? find_mergeable_anon_vma+0x250/0x250 [ 1682.162847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1682.163470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1682.164080] do_syscall_64+0x33/0x40 [ 1682.164507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1682.165115] RIP: 0033:0x7f2e9760cb62 [ 1682.165542] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1682.167656] RSP: 002b:00007f2e94b820f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1682.168543] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e9760cb62 [ 1682.169372] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020ffc000 [ 1682.170206] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 1682.171018] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1682.171856] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1682.172712] irq event stamp: 1211 [ 1682.173132] hardirqs last enabled at (1221): [] console_unlock+0x92d/0xb40 [ 1682.174130] hardirqs last disabled at (1230): [] console_unlock+0x839/0xb40 [ 1682.175135] softirqs last enabled at (1244): [] asm_call_irq_on_stack+0x12/0x20 [ 1682.176174] softirqs last disabled at (1239): [] asm_call_irq_on_stack+0x12/0x20 [ 1682.177212] ---[ end trace 11f187e60d0d3ed2 ]--- VM DIAGNOSIS: 20:38:35 Registers: info registers vcpu 0 RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e8c51 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff88804a757238 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000075 R13=0000000000000075 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e8ca8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2e94b82700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcf2069dbb0 CR3=000000000dbb6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007f2e976f37c800007f2e976f37c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88800d8ced00 RCX=000000009d3622b7 RDX=0000000000000000 RSI=218325b4dd4c0757 RDI=ffff88806cf3c128 RBP=ffff88806cf38ce0 RSP=ffff888042857758 R8 =0000000000000000 R9 =ffffffff868736a7 R10=0000000000000046 R11=0000000000000001 R12=0000000000000ef8 R13=0000000000000292 R14=0000000000000200 R15=ffff88806cf38cf0 RIP=ffffffff816ebf37 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555d42e400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1e3e488718 CR3=00000000428d2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000