00)=nil, 0x1000, 0x1) 03:17:51 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="c5060000000000002e2f62696c653000"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, r1, 0x9) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:17:51 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 03:17:51 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x90) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) unlinkat(r1, &(0x7f00000001c0)='./file0\x00', 0x200) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x63c443, 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x7040, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000040)={0x0, 0x9}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x6, {}, 0x81, 0x0, 0x0, {0x0, 0x0, r2}}, 0x3f) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:17:51 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0xd9038000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x526}}, './file0\x00'}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000000)=0x5) 03:17:51 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x8010, r0, 0x6abce000) 03:17:51 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:17:51 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x27}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x80) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x17) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:17:51 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) 03:17:51 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:17:51 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x810, r0, 0x0) 03:18:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4a2116dd5acef878) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0x10010, 0xffffffffffffffff, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x7, 0x80000001, 0x0, 0x1, 0x7, 0x1}, 0x6) 03:18:05 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) 03:18:05 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1) 03:18:05 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x200, 0x1, 0x1, 0x6], @devid=r1}) 03:18:05 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:05 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x47eac000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:18:05 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) 03:18:05 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000000)={0x0, r0, "3f79294452a62a7cb22f4a2faf44c37facdd3b607e08710d6695866d778830d08bf8912011c43938e09ff4a43ebccfd656a568ac12c01b933e4c84577d8a6663ad2d5450d718ce5ffb20ae10d67a88f406123385c826b4ddad995e7b0161d76fe2470ec66337009cf345d86be66e11262669e698eee752a7b9278ebde44a8654770dc622a589dcaf025217c692ee3bd529f80bb7a8e5163d96e1cb59d4b3a988145457bcf2873938726b661a397d52f12f286294a89a55148c7489af07d83a6140441b44ace486642929a9c3c58ee579884786db7bd3968858bfb112bfac3e5d5d9365fc105e72e293ab02c0026243599e5ecb51e885a9123beabde18dba8095", "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"}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:18:05 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) syz_io_uring_setup(0x1807, &(0x7f0000000000)={0x0, 0xc6d3, 0x4, 0x0, 0x293}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0x0, r2, 0x2, 0x0, 0xb319e0b0c2b9c5f2}, 0x9) 03:18:05 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) 03:18:05 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:05 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) 03:18:05 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0xdfac7000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:18:05 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x6e, 0x2, 0x9) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) 03:18:05 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x2000)=nil) 03:18:05 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 03:18:23 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) 03:18:23 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget(0x2, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x284c1, 0x0) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) sendfile(r1, r2, 0x0, 0x3) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x1f20, &(0x7f0000000000)={0x0, 0x285f, 0x8, 0x1, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:18:23 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = dup(r0) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000000)=""/81) sendmsg$nl_generic(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x47c, 0x3f, 0x200, 0x70bd28, 0x25dfdbfd, {0x13}, [@generic="ab0c1325441080ca22a5c8da51a99ec8039c1495dfa0f528f715831477d927add140e798df66f899488d84a6dcce74460578f5c54bf386ce70de953cb44a9a98d4de55b0d9d32a4261a0a9b381ce8640ed6f1271f367cc54a183f8cc63d042e4d7b9a08caf3f5cb3791e69a972", @nested={0x4, 0x2d}, @typed={0x8, 0x74, 0x0, 0x0, @fd=r4}, @nested={0x198, 0x73, 0x0, 0x1, [@generic="7417bb10227257c72ce0e588a9c8673ec756b77e3ea297bf4dcf79bff9206a17f8eb332871fd187cdb77f011cdffcf324f4cd589f6d9514ae5be2ead75033c0ed0bf225ad40a5a2257c596e9ac36223d59395b787fbe063cc496b8cf71aed4cc7c4de399ac4d6c200a33a6aee86eed3f07f59f4c4c3a99d66177a7f25b534aaab4de658a0b60e375616d3a6cad2462c2e691e6a9ddd8f57f989190a46fabd637d2d038ace9fd265be4ae678c0cd2c6c9d28e1a9ee0", @generic="72049d86027d1006e225345b82df4d1ef3a607ca3317818ea36870d1a57e6b44c5a3bce0898df779d17a189bb36a04bf196ff04a5afcd2e048f74a6207119d044895a20601d30321b32fcf01d4bbcc9e786eadb1d5637e90dd867b6f62c8f04d52d1295812871cb32520e543163c572fc507820d38c27c9540dcf823a47b4d7d88229c0558cf9385b80db1b672069aee5e936abb6400075a8a76838c7edb0b0002211fc8611daa11db4cd34f8d5867ba6b273ed8999839b7ffe9c5d2efb31d9dced0fef7ae2931cada12a012eb3c6b34e70c084a22e154884fd22c5f5d4b36"]}, @nested={0xc, 0x91, 0x0, 0x1, [@typed={0x4, 0x4a}, @typed={0x4, 0x81}]}, @generic="320480eb04bed6e3b8d12b3ad693bf54a21ab2c17b88e87d2d47a53fac17b0530485cb53771bfe9a1cf845bfadcebd32e8e8438ef40203f56d147a3866facd59acb6d77f8f52a6d9d21efcd21b9f1cb6afdf437b28df40df", @nested={0xeb, 0xe, 0x0, 0x1, [@generic="2d0c6a5e4a82fe2018d5973580a18b06a068c0aa1c45d78287fe1251520a3782e120f352fad5cdd127b02b23b3412de8e54176b67b714587a6ffd5a338e0e8aac890c85c726793ca11f12518b489e4e738f803b032a2321136d00830f914bfe1ccf67d5b8017b09c96ec3d8650f315b97e4e5ef02448712c0069b86d8ee77bbaca809e663f9fad3714a478ac63566fa35b2084c76c4e940fcf167e3fb83ad19704e43bd17918124555a23ad3a2cfdaf6db3f4e698ac21d5b379bba0921c2dd", @typed={0x16, 0x44, 0x0, 0x0, @str='/dev/input/event#\x00'}, @typed={0x8, 0x6b, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x92, 0x0, 0x0, @pid}]}, @typed={0x16, 0x54, 0x0, 0x0, @str='/dev/input/event#\x00'}, @nested={0xec, 0x42, 0x0, 0x1, [@typed={0xe7, 0x5a, 0x0, 0x0, @binary="2fc49b99d483da564ff092d5609d3ba0f2148f3989989c1699e7ad3e83b524140629a5cea6e27dca9c21efdfbe49c0069402ecb5e96fef22f5090a40bd50ac7b82924dd6e04e4855debb0cf11ffa7598f00e9b55b6b21e85b81bb1c4399b8a02138ec8670e9c862be5e35dd01e7e55b97a9accfeaadb75b86faf06431be82aaf418b73fcc56d0b32178b94473cf4593bc6561366fe83341b0e8938c9452d1606ac8cb92431910d6ebaafd72418bc93d7b85def7db982d1dceef2e1270389cc449c8da3fa61f2b7614d1dcf06d935ee4e03478d1db74e6ada558afdc6c2e1d3de3dcd8d"}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x4004801}, 0x4) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000080)=""/99) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:18:23 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:23 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}}, 0x0) 03:18:23 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10) 03:18:23 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xe482, 0x8, 0x800}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 03:18:23 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 03:18:23 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x14) 03:18:23 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) 03:18:23 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) fchdir(r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:18:23 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:23 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x3, 0x0, 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:23 executing program 0: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:18:39 executing program 0: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, 0xffffffffffffffff, 0x1000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x80000001, 0x42, 0x5) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x1, 0x0, 0x0, 0x38, 0x615, 0x2}, {0x0, 0x5, 0xd3, 0x6, 0x5, 0x4}], ['\x00']}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 03:18:39 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f00000025c0)={&(0x7f0000000000), 0xc, &(0x7f0000002580)={&(0x7f0000000040)={0x2538, 0x20, 0x527, 0x70bd29, 0x25dfdbfe, {0x14}, [@nested={0x1488, 0x15, 0x0, 0x1, [@generic="2ae4560a70091ecc61f32e7f5e4184e1168e40f367491b036722ba15760e14ed92630d8bef865ea51bac99ca347fb571df25c3c2247b5ad3df63c6183b39b0b2463e407ef9e3279c6e0db3d929e5c866fbe3b7ebb6dd16c2de086417bfc2b9c67f9f83229eaf8a5014dd5b339b06cba031d5044c5a9606c49d4af4fe12972b01ebf6fa6f3c6dbf5ac2542d81cd6ec252a39aa181e2bf60", @generic="24fb4006984d9233d8d6a448790798b4b9b6c030350e4d43cb133d974b2ef1437e82ca6ff647f30a393512c19265b3390f4c0b59a3b5566dcfa6b012b324fc4e648087edf6c48198a87124a3da8617b61479dc92044dbe65299e2342bc0402c5e004cdb5c338845b7ce14ca596287cccfe937a7974986d4d7801da33e1fcef8f1508c20e09691a601abdd9cf67b022bddd42ee178635dcfb66d55ebd53df4788accc8ca153dae9971b864270999feabee4471d839ebfb11eac015cd6c1cb81663b52c05e8b5ce4562a9aff0c33ed880e88d7d9d0a8570504af", @generic="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", @generic="81e4f52104e8ce6d5c92ae4f82b3ed740f0d894aaf918419d85a02f2546b9735aa938215a83611d1aba1c022515cbae59d17e906aeb167d538aadd995eb68492295146e3a7e6995033cae0b902ed1e0f235e16b9a9d2035a5f5aadedd2538ced85ae6b2b76142ba184969c02b8961083e0b493105492a6164a2d5c783beacb65b9b56dbf054a45272a3ed6924d10d3a5ff96cdb1168e6d829e3245a263805f14085ff5ed700227a683c7ec2a989c64b1ab169cce2d06b5e2e46e388e95fd4aaa42d00ad561d1f0a9f6", @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x17}, @generic="9f0656113e282840a07a421b5e4498f3d097f3dca5c216eff94333727e280bd024a0b357e9d31d132501b25da299f906aac475ce7cef8016fdf103acf73c166a2c6d86cd4f762f72244a26c2a3b1a9cbda483093042e2dc26d560f27993021cf58c613c978891dfb42d232c68f1a76595dc42b05134578f62e212f5772dfe84d", @generic="a3fa7bc0d61d93610791b401b1a9665a3077c6b00e01c0d0aeba1c6e1ec9b0def3bdb51840fac3d1cade2c8889cb675e643412bcbc838c7ef4b6baebf992a28560c3d3320f784a655a06036c6d80ef2747a5b32e125ae89ae89d8cb596032e3c1bd1a20c885996cafe6d37a0ca47b0cbf6186610c945c1dac894563f9a369d185715aee88f8caee876c64e0f3171fb242ee89c928e273adcb8296e1a650ee2afffb932a81ec41594b8e733e14b6be839c0d611028dc0932e01b71c1db485761014f68a7c", @generic="fc7373081be20bdcfdf0135d523ddf7af439ec2ab415fbe8cb5ebab34522b77a1f910c8f5226b826336f5c27d9a0af304642d4186426eae1dd03601638cc61c656d9ebf5f49084d8957045ba9e1232d778fe1e7abbaf62113c92da54600fc48553f9ff00001505630111be9e6e1b2e19d3f529f4e5315bcfc2bebee1ff8e100f7a03a322e5620ebd4409f760d6eba688cd460e9a13c1ff27067174012c6afd264d539e0a4bbbe14855665aa8355a982c3cc9943ae9b658b5336a285e087449a5d5e2288944b09d5e439b1e02d8812cf15f938d631c3c3726dd089d202a288b71e41f8933447c37fe8ca576220faad1fa40eaed"]}, @generic="522ffed99b188a7d55d99b76ced39c263641af0784699f7c2ef96e88bae861ed3b193c9ef3b82295537d841e85adefc47121d1a23e66eaec9eba176076c76b7d1c42793afea2618de9dbce1e0eeb5faf59f3e12c35bd65724e16025f20fd0aa5e4e6742cc35c589a1cb0c84695f893a441c00716cd65d4aded2a21d058db192c799bdb9a", @nested={0x1018, 0x83, 0x0, 0x1, [@generic="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", @typed={0xc, 0x95, 0x0, 0x0, @u64=0x7}, @typed={0x7, 0x58, 0x0, 0x0, @str=']!\x00'}]}]}, 0x2538}, 0x1, 0x0, 0x0, 0x4000805}, 0x11) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) dup2(r0, r1) r2 = openat2(0xffffffffffffffff, &(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x204041, 0x8, 0x16}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x100010, 0xffffffffffffffff, 0x5f0b9000) 03:18:39 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x15) 03:18:39 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:39 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0xffffc000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:18:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x400, 0x8, 0x83, 0x1, 0x8, "d4ff750849e6aa36c9860e56563f2da0e942cb"}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r1, 0x7f, 0x0, 0x0, 0x2}, 0x8) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040, 0x0, {0x0, r3}}, 0x9) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/input/event#\x00'}, {0x20, '/dev/input/event#\x00'}], 0xa, "a3753d72d79ba2a3"}, 0x39) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x7) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000000)=""/81) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x7) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:18:39 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}], 0x1, "bd96b5f67f5e17"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000004cbc0)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "9cc3d2f815816e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r8}, {r9, r10}], 0x1, "bd96b5f67f5e17"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058080)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {0x0, r10}], 0x4, "691fd547e91efe"}) fcntl$dupfd(r0, 0x0, r1) 03:18:39 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) 03:18:39 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) 03:18:39 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000000)={0x0, 0x61c, 0x464}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:18:39 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:39 executing program 4: mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 03:18:39 executing program 0: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11) 03:18:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:18:39 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:39 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:18:57 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x13, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 03:18:57 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) 03:18:57 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0xa031, 0xffffffffffffffff, 0x9c1bd000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x17) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) io_uring_enter(r0, 0x3ca4, 0x1cd8, 0x1, &(0x7f0000000040)={[0x3]}, 0x8) 03:18:57 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:18:57 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0xfff, 0x3f00000000000, 0x3ff, 0x4a49, 0x0, 0x6}}, 0x42903) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:18:57 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/133, 0x85, 0x1, &(0x7f00000000c0)=""/174, 0xae}, &(0x7f00000001c0)=0x40) 03:18:57 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:57 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:57 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x4010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x64) 03:18:57 executing program 6: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 03:18:57 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:57 executing program 4: semget$private(0x0, 0x2, 0x80) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) read(0xffffffffffffffff, &(0x7f0000000000)=""/69, 0x45) 03:18:57 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:18:57 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 03:18:57 executing program 7: r0 = semget(0x3, 0x2, 0x18) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/178) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) lseek(0xffffffffffffffff, 0x4, 0x5) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:18:58 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d1536c1dd0c9b7df47c653d16ed1925a39d90977ae7db3a62ab04d24dc6e84414f0d11678ed6173e5d71675f7ab395674d9fe647e29d38b1e28aca56bbf76419907a8a3108312025e79eb9f0e94649f54c23f1fb0ec21b0d7ac5103426d2552c6f38ff961389197e373d951d3945e264a257e164535629576a8305b8fd9eda1b2d98beb352298cd0ff2035a6296557072b60fb5d5a7e748454", 0x99}, {&(0x7f00000000c0)="8a5240b4437552f4ee9a9716c0667f9e684940bb3327666125380c1c98785f69780a7316da47381f", 0x28}, {&(0x7f0000000100)="2a3127a9263bbbde21f2593b74ba341648f1e4336851511323199ce57722e35148f370bf420374d7c80f382c068d8b6416766dd23680627c0a8a5f48c42f4c282655561dee23a7d0f48c675e29f9a76cbcb0b7d2f99a5698a2bf81d84b0c412698ecbb0df4a6baefb903d607757391d0c230f758bf8168fbe220bbe3e1a346f4d3ee656bd9ba7ed9c9a838c18a475df572dfe27b3a0de33730a7abfa5c03155a95fdcd377574d417aa03bd1dfd8eb4803ea2915cab1a091c2cf4399c994aaf2f73fb6b28882a3fb7678bbc6b85104e6f8e3ff26f3b813413a935e33ad88492", 0xdf}], 0x3, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x100}}], 0x18}, 0x80084) 03:18:58 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, 0xffffffffffffffff, 0xe8ba4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 03:18:58 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) 03:18:58 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget(0x2, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x284c1, 0x0) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) sendfile(r1, r2, 0x0, 0x3) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x1f20, &(0x7f0000000000)={0x0, 0x285f, 0x8, 0x1, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 03:18:58 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 03:18:58 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:19:13 executing program 7: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:19:13 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000000)={r1, 0x80000001}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:19:13 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="0be2d85e08448907afefdb42ab140d3cd443e4ffbccd75720b0e49acb88babdc0a14ee29068eff218983ce7d960fa3874f76993f22ef7a3bcfa2d46433415194d9691d479646689031b97209963827604e035718a7f1b4dc6693ccb058a5274282ca2d3e58542dd81ee12432b06003cfe60a162fc0753d2226e87b326c5e7d8349f27af48432463ca48c00e1d8b06e843484", 0x92}, 0x68) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:19:13 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x200, 0x1, 0x1, 0x6], @devid=r1}) 03:19:13 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0) 03:19:13 executing program 6: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:19:13 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 03:19:13 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 03:19:13 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x1, 0xffff705e}, {0x3, 0x8}], 0xee01}, 0x18, 0x2) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast2, 0x4e22, 0x4, 0x4e21, 0x400, 0x2, 0xa0, 0xa0, 0x32, 0x0, r0}, {0x8000, 0x7, 0x100000000, 0xff, 0xffffffff, 0x70, 0x54a, 0x60}, {0x80, 0x6, 0x8, 0x8}, 0xa1, 0x6e6bbf, 0x1, 0x1, 0x1, 0x1}, {{@in6=@private2, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x64010102, 0x3502, 0x4, 0x0, 0x9, 0x800, 0x8, 0x3}}, 0xe8) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) chown(&(0x7f0000000240)='./file0\x00', r2, r1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:19:13 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2904caf119645884, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r0, 0x8, 0x80, 0x615d}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf, 0x10, r2, 0x2bdec000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1ad9}}, './file1\x00'}) fcntl$setsig(r1, 0xa, 0x31) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000200)=@req={0x200, 0x80000000, 0x4, 0x7}, 0x10) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000009210000", @ANYRES32, @ANYBLOB="0400000000002f4538ff1062f46d3000"]) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:19:13 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x93429000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:19:13 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:19:13 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:19:13 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 03:19:13 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x16) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 03:19:29 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80203, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40085}, 0x4040014) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:19:29 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:19:29 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x4}, 0x2a) 03:19:29 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 03:19:29 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4a00, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 03:19:29 executing program 2: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x80010, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0xedfd8000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:19:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x4a013, r0, 0x2699c000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x40010, r1, 0x5a809000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) 03:19:29 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 03:19:29 executing program 2: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80000005ddcf4e231a81cb4ccd1a0304f8d6582ecb7382b5d8bb7b11425b65c579f646cf12b8349d2b60d7af504a0ccee87e14952978ef6322d1efdaabe011a34562c630f2e00750e8f55d9ba0710c86de771c8d3cbb76628fc4b1e8153788cdd6e6308eb91f90aa8ad281a88977d81be3a50e02534ee15172bc83544fa01614c0cfa4cf36f4d70", @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0xc8}, 0x1, 0x0, 0x0, 0x2000a044}, 0xc000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x1000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x9b, 0x3, &(0x7f0000000040)="69ff6d04295f4530aff41b75e70d16a08b2a7abb7ad25c00e743cd906e2e3d32cd1661347ed6286aa59ffc11f961c6cd725ee42c5aeb1de27a51abee142733e0b593bc410c20db98a2da04b06639b7fc6237b07a0d3fc65f5adee05c8c8cf1816b0572b3d28efd1f9abdf5157ca1566833b552b8762af585347a965fdad925b72b9e36b1ad0137a4899cbe455c8d73d562c27823eb74e5b56995106841c8e6da3dedf1b6657d5e47a50109fe4de599d87c475493ac24abcb787644073df2adf3b6abf33340e08c0d59148a19ede1c37cdbbc900db44d5fc7dba7db675ca773bd514f", 0xffff0001, 0x0, 0x0, {0x1}}, 0x6) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x3f, 0x100000) 03:19:29 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:19:29 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:19:29 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) 03:19:43 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:19:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:19:43 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) shmget(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x12, r3, 0x6d25e000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 03:19:43 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x3, 0x6) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000000)=""/81) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff], 0xa) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:19:43 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ppoll(&(0x7f0000000040)=[{r0, 0x2100}, {0xffffffffffffffff, 0x1}], 0x2, &(0x7f0000000080), &(0x7f00000000c0)={[0x100000000]}, 0x8) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x451b86, 0x0) pread64(r1, &(0x7f0000000140)=""/203, 0xcb, 0x369) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2) 03:19:43 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x12, r0, 0xffffe000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:19:43 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index=0x2, 0xbf2, &(0x7f0000000140)="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", 0x1000, 0x1, 0x1}, 0x2) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, r0, 0x49201000) 03:19:43 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @random="4af3da41330a"}, 0x14) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@delpolicy={0x33c, 0x14, 0x300, 0xa49f, 0x25dfdbfe, {{@in=@broadcast, @in6=@remote, 0x4e21, 0xff, 0x4e22, 0x7f, 0x2, 0x20, 0x0, 0x0, r3, r4}, 0x6e6bb5, 0x2}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x6, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x33}}}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x16}, @in=@private=0xa010100, 0x0, 0x2}}, @tmpl={0x184, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x1, 0xff, 0x17a4, 0xa49, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x3503, 0x0, 0x2, 0x8f, 0x8, 0xe7e, 0xffffffc0}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x4d3, 0x3c}, 0xa, @in=@multicast1, 0x0, 0x0, 0x1, 0xe0, 0x4, 0x3, 0xc30}, {{@in=@remote, 0x4d5, 0x2b}, 0x2, @in6=@mcast2, 0x3504, 0x3, 0x1, 0x1, 0xffffffff, 0x6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0xff}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x1, 0x3, 0x40, 0x2, 0x3, 0xfff}, {{@in=@multicast2, 0x4d6, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x7, 0x3, 0x20, 0x6, 0x10001, 0x1}]}, @coaddr={0x14, 0xe, @in6=@local}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2c, 0x70bd2d, 0x70bd2c, 0x70bd2d, 0xfff, [0x1, 0x5, 0x7, 0x5, 0x1ff, 0xffffff57, 0x0]}}, @proto={0x5, 0x19, 0xff}, @proto={0x5, 0x19, 0x2b}, @algo_aead={0xc4, 0x12, {{'ccm-aes-ce\x00'}, 0x3c0, 0x0, "980bc963fea108d9fe46f73ee8c4ae8eb43a7e0733f7dc0f7aa9d2cd372cdca10b0ec68050f022b467944a6d0a4f6954c74dcb26cfdfb2ea3bb1df6dc206c3e2aadf1ac2c2ddfc75f4613e2717f75b207982fa99e3737a44f75dd51822107350ab6a1ae55345875fca9faf80ae099d5ca08882e43649151c"}}]}, 0x33c}}, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=@migrate={0x150, 0x21, 0x200, 0x70bd29, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e23, 0x0, 0x4e23, 0xffff, 0xa, 0x0, 0x80, 0x0, 0x0, r4}, 0x6e6bb1}, [@offload={0xc, 0x1c, {r3, 0x3}}, @replay_thresh={0x8, 0xb, 0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @srcaddr={0x14, 0xd, @in=@private=0xa010102}, @algo_comp={0xbc, 0x3, {{'deflate\x00'}, 0x3a0, "caafb983e33fd5bab50b740e8e0beeffa676637d669b815da841414e0245ffbcbe0e6eb0d017aef7f11ea71e3a1902c6dd47a8b1aded843fddde9213c1d84a1e9f2f0cc1d8bb0b0a11c38d3c6f49560e9bd551de83fad4d7e11e944c2ed52268670cb8ce7ccd95096e3785bce00caa4e47e86187"}}, @coaddr={0x14, 0xe, @in6=@local}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) 03:19:43 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffffff, 0x75f3e000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x400, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000300)={0x4, &(0x7f0000000280)=[{0x1, 0xb9, &(0x7f0000000040)="4984d266074255337b635cf78df4bfa9cbdd53045815994efdc9ef2eaf0d5fc3e0077e978f103d116561c25ae494b5d0cb614c18fcdbd84c37ae931b9480b872a56bd923699db31df10ff5bab0e96007f2aa475515f98339b1c034debee81cb695f8afcc17b2fb1bb0711b19160e5148ccfdd554e5b02f1cdf01325820b7eb42f92033680244b6d67d867f4108f4b29dd4657c872c171874d2a7f0c1be694416399b4c1e834d713e6b9d8f886cbbfe742528afbf3ff55a522e", 0x0, 0x1}, {0x3f, 0x64, &(0x7f0000000100)="6076bc3d7905cd5d6e8769ffb42951e69eb43b4a90a50cd6e3edefbc87a82cd7adb02629e0cb29fa82efaee79abec8283dfb070bb2dc3003088e15c02c9bfac955ce430e9194a489950b868e71fa4c45a02cda3280a673deafb90f6a3ed46ee9d6794b8a", 0x1}, {0x7fffffff, 0xa6, &(0x7f0000000180)="cc1b7348698936db0ae43369abc494e7fd4103c10984a35e0685fec4e0e456112d332ec20cd8e0c4f2cbb9c732bac23433828ce9bd25c3d5eb825381d60618ca0ca603539637e03cefacc1f53ed45ce268ee544014b06e732383694ee816e66d09a37a6db2f1010b59e96f5bc6817b29c23853b93a41127d05ad82d60b4041f78d2798701d3f80d985c0a5563d38fb935ceb5bac8ae4486541dfe053e838959ebb95d958b5fd", 0x1}, {0x8001, 0xf, &(0x7f0000000240)="51b50d89c0ce7f3ed00d1b369d26f9"}]}) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x5000) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 03:19:43 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:19:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:19:43 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) shmget(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x12, r3, 0x6d25e000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 03:19:43 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) 03:19:43 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0, @dev}, &(0x7f0000000100)=0x80, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000b40)={0x0, "f692302ea6c98b3578a4f697d6674d85"}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xffffff3b, &(0x7f0000000ac0)={&(0x7f0000002040)=ANY=[@ANYBLOB="24040002", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf258900000008000300f7eadaf9bfa57429ae90fc9a90f3ec3dfe9658b128e5d4d6e87859af28bb6202107d629051646596f2e11ad3c71d1f545969fa858f2c03b86d495787a5dce85bb21f3714a2d1ace9b0ebf34c63f1571d83b747ad7f77836d1ed6676a6b04eccedaf924ad5a7bb6de033f9e0b012734e998f61d72e156d461f0705b15ee0db0747fa68cfd41a38d8d7d8c75f98a2fae9e816bed0ab42b17aa3f309f317019", @ANYRES16=r0, @ANYBLOB="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"], 0xa24}, 0x1, 0x0, 0x0, 0x4040}, 0x6004) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x11) recvfrom$unix(r1, &(0x7f0000000140), 0x0, 0x10000, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0xfe5c, @any, 0xdd28, 0x1}, 0xe) 03:19:43 executing program 4: r0 = epoll_create(0x6) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x16}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/input/event#\x00'}, {0x20, '[-&'}, {0x20, '(]@'}], 0xa, "2888461367c0056db07514c1a7d478f39610f1d7199d2f9d0eeb133d672137b7a48a519c46cdcc2276f8725f52ede57b1272"}, 0x58) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:19:43 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff8100e380}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:19:43 executing program 2: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:19:43 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) [ 1851.051613] ieee802154 phy0 wpan0: encryption failed: -22 03:19:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) [ 1851.095326] ieee802154 phy0 wpan0: encryption failed: -22 03:19:43 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:19:57 executing program 7: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'syz_tun\x00'}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x5, 0xf3, 0x1, 0xdd1}, {0xffe1, 0x8, 0xf9}, {0x8ef, 0x2, 0x47, 0x5}, {0x0, 0x51, 0x9, 0x4b}, {0xf594, 0x20, 0x7, 0x3}]}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) dup3(0xffffffffffffffff, r0, 0x80000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x65) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:19:57 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0xa, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:19:57 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) shmget(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x12, r3, 0x6d25e000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 03:19:57 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12) 03:19:57 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff8100e380}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:19:57 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, 0xffffffffffffffff, 0xd317d000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 03:19:57 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:19:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0800001a000000002e2f66696c653000"]) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @loopback, 0x5}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000005900)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000058c0)={&(0x7f0000005880)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x4d}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "8d97273595f8e73f7253b0d5cc90e5906a6d"}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8c1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_io_uring_complete(0x0) r7 = syz_mount_image$ext4(&(0x7f0000002c00)='ext3\x00', &(0x7f0000003240)='./file0\x00', 0x8001, 0x8, &(0x7f0000005680)=[{&(0x7f0000003280)="113dd8e349c5cf2f0b9399c8537e003fe424753eb4f59349977af80f8e2e8188e5b66c806e400529e60337c44dcbca65530bf149a95d4498e47337491c0d63860c3c4b296d6bba8a9919a02169f56380e8b2b8b4a8be0ace674b5e775d5da5535579b675754aa30dc295b948659254b2ab82b026f68b50bc07cdd5ed67ecb4cfecd755c07d7f7bc484f232691d0ed2d9017b30056da6a3e30f80d734c31de47d9be2841fb4db0896b4", 0xa9}, {&(0x7f0000003340)="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", 0x1000, 0x3}, {&(0x7f0000004340)="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", 0xfe, 0x38000}, {&(0x7f0000004440)="71bdeda570a8b9b94040f09c1a0e2d61d330978b85f87dd438aad0b9c53b83da7a19ab946924e7219127534b89ae355e2c3e605547b760fbc335db8029f7be1f8f76436abba84efacc2568691bf733d501c3234ca762ca616439cbccf181aba4ec53fdafb699dcf319c772975091a3d61390eeebd1a82fbd806a60adb153ba1b72bbc5251f7501d7532af78d648463719ddcd29875ff0eca2f936d27cb9c2175dfdc44d6cf9188f87da356b9ceeb8fab9b2eb7823c325f12ddd00f1ae130756799b29373b04f559a02da811a697cdd98ed5e632a603407cb8bc32dbbcb027b3d5395850efefb0d1d0c62ab954b6592b902ab56961945", 0xf6, 0x8}, {&(0x7f0000004540)="9465c25ccf712781f4aebf00d1587008a0d1b58233896538c721aaf324467a7cb387b5c92c5b52c8485ccc1c2adac96fa1ecbebd78236490faca74f35676bfcbe7b69a5fcdf392a45f63bc8033e8b2ece87ac5b6e66747beb6e14dc266ad3e2b4712bd8f0a60cf026bad84b714c1cda23f339fe20b5a1728a4b22e0ce71160360b60424ea584173ba89bc5d4c4cb6b4c0d655cd57648c15fef47ba04a71438b332284b0e87dcb5c8f8d282d7efea77ef6d93e9a7e65f97e5cd0fa6c16c65dd046aa91891d9321fff24724c4d1248a4f51959024ce5f174a997660e8dacee1cbbb4b3faea9f893a62097e7e2c051971bac685afff18efd8973588b8e184fae1e39df6cea4d7010d86efe8161a5c525e9d2d38caf8baa57f37314c91556239baa8d7f0a0efb3cc3034e3633290c9a20ec7a477d41b225655a77d76053fa3c2a0eb2ea893892f738c6dc1d4dad214a0bfddf972f31f7d9ee924a91a7b2d682ef8070ddeec82a38cd7f0776f228eb303c84d59a8e6ee2796e5c87f40e52f88ce8609261aaeb88d9fc33b10c6435660339a0e6b6a8d80affbcccf9ba45efbaf44f5630a2df4d218e10369aeea13df6c102f2fe608290f31d48318925a37bba2bcdcf99b12803da4951531c1c1296d3404b66fa740bca980c504c72fe1f2b7adbffaf7b034ccbe110b10e9aa6fb938843952a01f2550d6bc37ff3a70d3ae119a2ce40ddb3c658c44eebe6a1f2d055c383dc9cd724892fd5c5a3d40e502c6e72976348e1295d27d8b2e55ce8ccb4e6bd77ca2378570ddff52de2c653cafeef5be856d1143e2cb69a1315551b49a8268ea390d067de7aa3fdfc58dd15c3310db6aba0f5442bbcfc291a51fddd2691a4c85d83698d9c3601f0b09c49f11226246d42d807bd50e72134a7a5e2e244c5c1009513d28f5e4d826dcf22fbe0685b99acd20ff81c406c95a74419f2b32582492e46231deded0e3da3a60a0ba4bfbad7a8dab3c7742a498346f01d6efc516124b7d6f5e1c2d3af48b97bcbebae3f0cd117e943bc1cfea8e622e9700ac62f5b6b683190b085c0c094206d26a00316573604dbded85c96a33d8b27100f80cf3ab9dfc121b52a0c5e34cecdcd48c79c6ef72c2154234768bda6b2f7b5a61b2314fd82fce6b4de815e1b86e00d7ed349b58fb5af33857ea7f5a7d888d4035e3badbf30e2f3f3497f3e2e35979c98ad96d7c0762cc1dabfd4c8c8240ec4b7cba734e6c2dc9583c8d0db3896710dd512964bf7c8540800e8979b214ec3c3ea80243b32be9e3f524f2a92a95699f21dba42a8b00d2aa3d6bd0886d079a685ff193e058ce3b8cfef8f4b82547f85d664946ae868cc0dc693ebcca528766115017296d89607e56f895202892c0ca55c9562fab469a1904798436dbf3812a5bf8cf8126462e4419a3a72b5d6b3e5dfa679c51c1f166fb787c163551df22240a3c19ea4545e0717cedd38ef27965ad3689925243af4d5ad80bb664210288e1010d964da23423767885ea7432355b3134428943a5e9fd972ac51c81b4d3f3c37eea815ceed4dd35ad94577c3b5616b488c7b00992cc7620f33d1b71fd7f27d217e3e9b8dfc9b4442c9990f48f49e8dc7e2c317f805a78e262576ad15f8b3fb7bdde6a1c78d096f92877057e677905f218a17a57f03972b057f53807be13ccc7bef0d5752792763ae0b1ba537ac84ccc273abc25a3bbc2894ae140b4c37ab6ec183b39b260fb0b65f67442011de95e912bb0613a8bb45e8dfed1cda4923bdc3a2883eda28bbc4feb572c6e690f02cf745a1afe553ac1134e439b67adf4b8df7ffc2599f57653d5c82c565ae7182c1982c4c4881597c0d28badf42f772727e96684254fa9648f2cbdb9f438f159ac9a44a0bcf0861bb3b2b7b13954d4039563f331e1a57ff95b6c16a33222288bf7dac62e7f1be6cf4f219a22325dc2af140988b480d4a3b530c8883b46dde054496c03a6a45cafa7518bca87600f1ccefb796336e0de63cf588a464eb04080b217f93f8faa130575732a8a31806285d9e40192324e853433e448a2f08c8c2ce9a16c459048ca43f22ef442578bae06e0fc083818a4f42f730fe98ce1876e4e674de2c7c96a649d72dd814be505febcb432d59bcfd3b3a5edb79d428323c476ce28a57c5b0428172e8c8ff929c3fdf7d6169c38d34caddead09fca04c3c8f20d33cb13de5456c487b0314b1326b132439a0932bd2dcedf69ff73e29834314580ae7f23f2fda54fbefffa931363e2b14e4dad7f53c703d17cd49f7cc5a5965b23f41f25e5acd3266705f57e493ba677408ae1ce4024769612bb0c09d87f5c1503c15c23f1247d31852028aa193f2aaffe2dc2b6e113df2ffe3cac8044f71d44251292cada6c023834cccf0b50c6a32f453a6db7829110601d952a8d71e89fc9edbf0988a5ae3581801a9053bdf0bfd8aac117484297900a90ca67320dce87f3e50c8d887654924748aecf24ce34c59ced9a604a0a53386dc6d08d7a9c2eb846535ba25ee3d492ba4df5f68f537bc2a828a9aef646d317a4fa9a4c670abe31677bf22e3c4729071509a709247828df0529b8a28ca781ef8cd4386680b26746d310e9831bedc341779aafd853dfb50e7a794e7221bc31d7de0b83fea005ea5a73a16b44f32103ac678d8e1983b67c2065a6a1fc1ee84f4c2a8ba4528843beda180a02230e1a88b5c0121fe3b6e92b76de878267b466561f038a77fc04396cce303ab7d20cc2a01c40db296827a3ea445d8d7b51c5e8e4b3f1ddfb8e393e72f93bdec2d6c09f744f8d651faecca0a7c4bacb2e5794d0a2f870d48c9314082bdeb51d318141a288629a8fb9870fa80eb044e3ac92c0f6744acf3cd153341fc24cc0ce5d3e5934ab939fc509793082a25705d49374d583dc37e5e8827015881c4e81424f6e07fad38746c7d9ee71efb59eaf674c85bfc6967c0e56084fc73cef0db58a07d51f234ddbc6aaac4d24d1024302264e43301928fd9043148400960bfc7b6cf3a647d1feb34ab6c473913c35b9c7d51b3ec227fbd197382d582e578f6e2d9961c5da734f03c3eabcef75af04f12db20334d03bd9681fbf86028beb2a71078d06a65ab20ba5de03751b1f781c2e0c8de83725d3c68199157aa62ddd3a356851ac913772bc1b2af7d379d764e4fa39c6b08126e5061a52487129874c0cccd88c175258b94dd47da10d36bc4322cbcce2efe8626571a850c72c49dc06b552e56786677d2cf8bc8f8c0bdca40ac2e191fb2c14b0ea551bb124ef96fb19126c34c4ee1c1a83b95db7f088d63e1647e4e9425987a09f9aee28113f0bfc3067b983abf4d4fc0458ddb4ad153d0e0bf28beb5fea41ef726baba2973816e9539948965dc89d2704bbe33b8649a3d78c58b425151be9ed1af993bde5032b7e4f7dad35b9f34785fb3f00eb4e4141d047268497d64bfe6d6c62dbd7fc414da1dcf5d81207352f22a37d5102bf97e9d230f9a4ea45ff28529c89e9a151f22520f9c28fdf67c2db5829802e1f273efe6c99fdafec1a5dbb8976bee696cf5a5bcd964efcf44be9ce9bbf9ad62c722c2812a2b2eb445ae3dbb8aed8515ef5ad01701911630684b4fcab1271b2838a3f43fdb64b12e060c95c4061e0ea8a8b0a350b26f40ec054d1eca43539d280c0c3bc3792eddd37631c82ecbd7c2a2244939cee59e4fd022ac3ab3a38f2256de1a84ea3faf0bcad204eb5cb604f281a8600495cd058b34a488e43868b05fb70bc1068a98baa9f2d29d29e10f33c91cbce066f3be3cad9f6647323e4b092305b87d3850b33ee1d14723fa31e1c673d66f39e188ecf54ec1e9fbb5b11ab4829868449761ea41ff7fe504a75384b911d942743987fde3d6501edec370a415fd49075d5836156b38a64eaa69503440b27663c7f6d45fc082b494dd0383ed88a72c153bec00ac2876caf0770c9fa7517ba85b274b8133d13ba684af14e8dc444a654c400bc798c471de0febbeac071941ad7fe306d1137fbb3748d0200cf0c7d0be26df4e1a9f0113dd570e5f8d1aa4f9c1af1ea5af8445fb6595eb5653c3a91f9cb2f7b4fe01125a1efe2032600bbe152fc9a2b7445695de6242387bbe2b41cceb41662b4541fb1eabe665d4f3ddba6b71050430b81cbf7df541b45ed11ca50f49254a4347573d8b41c5ffc23b37faeba518a83cfb572fd61b919573bb766fa2bea8c30ac14814b304bf8e19acd7d56fab0beab22c9b7ecb655b6ed7189e42edca3edcb2b14c882527a2dd7c951f3e50dc9a3a143c2df03f94458322c903254e675b78e5fa47c809001854c4da491b4527f129150acf09aa973e426a36d77c62a6a2d9c46e90cd20e00677343db17adf60846e931b63c1c1675a3da141450afb33216fc9cf71ed7d7ddd2488b877de313db4cc9b277f8ed0579bf4f71a87c706c1e4729fd0dbb3fa4014d2a7e14148bf0ff6830eb68f1742c3694debe48827e64dd2bee293a907c3e46ed8fd82dd3aea749ce5b7ddb482e724f8042f18477ae3777e41c8aae7fa92f42709e32aa8df4733935e1829e5a60daeee00b265cb5950cabf9c937cab62f9a81f7df129bf69f04b1ead58d7c6d348588ca4c7825c378c7a6d12744be744719e02854fe74c685fa9aaa4cf70eefa288c6fd41bc89f43440959d28bc87a0ec287b740b4049076fcbea03c00d1f09689f3fbcd05de8eccb3ad6b888b004bcf898f9ce596eff0e856a41bdb61c251661e3fbec9e7d953aec4e7bddda4a9869c670f12c48dd681f8815ffb17442990f4a2125be0a876401f0b4678a0cc484ff659c0cfa8939f6c027061e82ff3d3a217597fef28bb83258bad0c50024aa77a00f552ae28faf2fdcad56631d88ff512643f0cb48ee4ed49aef91054eaff56dec75f3f3258914abc403c939623f04cf0e26028df7d5ca6d3c87cfa2a485d193c40c40cce2161be24e188196c76e1ea1189c43ce19b3b1d6b8c5432b149f29ad2e57f2ebe6197a53dc8a8927e9dcb910a643ab25261566c8c5bb184f4eeeb26ae7a3ced8c311052c38be85db295cde2f8512a541c2bfb2b733234a481abfd49e5a49a4881157addb3fd78bf971eb5267f1735e5fd73fe3432deb29480cd8dae4a778dc11c3b5f0718a48a5e21d21ad299c530ad93348d91fcd05fdcd7e0128cf199f4ba661fbaf1918547fc708eaa9b52f98d980239df6a1bcea8133bad9d83a0c2f75ff624666cfe05ec327ae31dae693c684f8f506940fdf8fdf6d6fba801e390e21c313d465ccc7aebaddcf0117fe4ae1ffb332a721812c302200536f3ccffeb2374fa865e9def92d7737d39feec307e042e5aba05e9e50b2f5bd74e0a8af2d56d3315de1d19585501f1176826a61cba097833ed79df20204026d34648b28b9d5861bb368bff4bd48e45e30d18d1cdbc282bee3e97dcac1455a7fa45117945f2f94ad10d54bb94647e5351da82c41d2dfc26ed4898d7143f77e5d20c699c6bf0b5386a4d5b4a9d91875d39503e7ba87304fc963704fe4a5cade330ac9a95e15c4de8ed47381d08f88f0018d8b102227a8df0886cfd49bd4533b385fc8ef66bdb89297e9828d0537273c3ee9c70efe9bf01b529defeb91bc2eca9101f8ca44bd04b7a131d26eb387e57f90d1a2438f585a33dfdd9b3877cd8c1644ea83861753e6fefa3c7cadf1a8325ea4ff80995e3596a139cb50a84299c9e2875c8e079ed26d1b35655ad03b3ba71603467441cef31e221c2facc67c7516655db17be056e7bf93bd0c43835205cb4d64ac4933895ebc538df17dd5ec7c8ceb98d4026541292c8f7", 0x1000, 0x2}, {&(0x7f0000005540)="c21edb2f23020a2edae60d2bc047e997309d447455a99c5cba8884edd59fbdd2f6839e9d7301a5a20899c1bae7", 0x2d, 0x8}, {&(0x7f0000005580)="ecf6e560902ea68ac78933ba5f79fe8f93e60cb06913e973ac4f3d9c10ab162197a6bcc30e06024ab1463505cbd13a220d0da0c1879d7ccd5aae0506f3917c4bba6777801ef189e6175da6210e7b2af2266a7b7ddfafa0af22bc985b2fd920a615d2ea3f0a5cb7cb450dc3d432f2f8448a5a02d6722883", 0x77, 0x200}, {&(0x7f0000005600)="a958dab961380222088a15cf190b937749b656766003bf95aafcb1b0485bdc6927acd14e135f095699e2b2fe4345ec97a3b48e762d6643dc4af9227cb90c3e909324b85fbfbf3db5ccf19f3b4cf38c2d57d317c023b15239e2c6ed900510286621f8703d44b90426831649daaf99c4ea9010b2148fa801640ef6dfe4", 0x7c, 0x7d}], 0x80, &(0x7f0000005940)=ANY=[@ANYBLOB='resuid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',hash,seclabel,smackfstransmute=\x00,\x00']) openat(r7, &(0x7f0000005800)='./file0\x00', 0xc2040, 0x106) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000100)={'\x00', 0xffc0, 0x1f, 0x1, 0x7, 0x8, r8}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) recvmmsg(r10, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@nl, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/84, 0x54}, {&(0x7f00000023c0)=""/205, 0xcd}, {&(0x7f00000024c0)=""/58, 0x3a}, {&(0x7f0000002500)=""/11, 0xb}, {&(0x7f0000002540)=""/251, 0xfb}, {&(0x7f0000002640)=""/205, 0xcd}], 0xa}, 0x1}, {{&(0x7f0000002800)=@un=@abs, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002880)=""/236, 0xec}, {&(0x7f0000002980)=""/133, 0x85}, {&(0x7f0000002a40)=""/239, 0xef}, {&(0x7f0000002b40)=""/170, 0xaa}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/104, 0x68}], 0x6}, 0x34d}, {{&(0x7f0000002d40)=@l2, 0x80, &(0x7f0000003100)=[{&(0x7f0000002dc0)=""/144, 0x90}, {&(0x7f0000002e80)=""/244, 0xf4}, {&(0x7f0000002f80)=""/216, 0xd8}, {&(0x7f0000003080)=""/122, 0x7a}], 0x4}, 0x6b}], 0x3, 0x100, &(0x7f0000003200)={0x77359400}) ioctl$VT_ACTIVATE(r9, 0x5606, 0x75c) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000080)={'netpci0\x00', {0x2, 0x0, @remote}}) 03:19:57 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) shmget(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x12, r3, 0x6d25e000) [ 1864.782186] loop4: detected capacity change from 0 to 458752 [ 1864.806607] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 03:19:57 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 1) 03:19:57 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, 0xffffffffffffffff, 0x4cbe8000) madvise(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0) 03:19:57 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x115880, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x40010, r0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000040)={0x8}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) [ 1864.844186] loop4: detected capacity change from 0 to 458752 03:19:57 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:19:57 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) [ 1864.870318] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 03:19:57 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10010, r1, 0x0) io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000000040)="51162a8f96c9d716040a7b117d35d551524bde", 0x13, 0x1, 0x0, 0x0, r1}, &(0x7f00000000c0)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 1864.913164] FAULT_INJECTION: forcing a failure. [ 1864.913164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1864.915672] CPU: 1 PID: 11358 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 1864.917114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.918839] Call Trace: [ 1864.919392] dump_stack+0x107/0x167 [ 1864.920153] should_fail.cold+0x5/0xa [ 1864.920964] _copy_from_user+0x2e/0x1b0 [ 1864.921802] io_uring_setup+0x9b/0x2980 [ 1864.922634] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1864.923648] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1864.924701] ? wait_for_completion_io+0x270/0x270 [ 1864.925731] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.926695] ? vfs_write+0x354/0xb10 [ 1864.927469] ? fput_many+0x2f/0x1a0 [ 1864.928225] ? ksys_write+0x1a9/0x260 [ 1864.929028] ? __ia32_sys_read+0xb0/0xb0 [ 1864.929870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.930978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.932204] do_syscall_64+0x33/0x40 [ 1864.932989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.934046] RIP: 0033:0x7fc2d9b3db19 [ 1864.934827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.938622] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1864.940209] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1864.941693] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1864.943169] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1864.944660] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1864.946141] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:19:57 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) shmget(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) 03:20:13 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:13 executing program 6: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x38a000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpgrp(0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r3, r1, 0x7, r0, &(0x7f0000000240)={r2}) move_pages(r3, 0x8, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000040)=[0xbf, 0x187b64a1, 0x2, 0x81, 0x9, 0x9, 0x1, 0x3, 0x0], &(0x7f0000000080)=[0x0], 0x4) socket$inet(0x2, 0x80000, 0xffffffff) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 03:20:13 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:20:13 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x1, 0x9, 0x6) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 03:20:13 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x30, 0xffffffffffffffff, 0x2ff84000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x101000) r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x191582, 0x2f, 0x4}, 0x18) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000280)={0x9, 0x8, 0x1000, 0x200000, "9b32389d6f6b574bf435ffb320dc164b207f46d728b16d796ca7449d38db6bba"}) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x16, 0x200, 0x70bd27, 0x25dfdbfb, {0x16}, [@typed={0x8, 0x24, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x100010, 0xffffffffffffffff, 0xa75fc000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/81) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0\x00'}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/104) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0xb36ae000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:13 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 2) 03:20:13 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x9, 0x6, &(0x7f0000000000)=""/216, 0xd8, 0x0, 0x1, {0x0, r5}}, 0xa99a) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) 03:20:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x4b, 0x0, 0x4, 0x5}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) [ 1880.799446] FAULT_INJECTION: forcing a failure. [ 1880.799446] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.801926] CPU: 1 PID: 11386 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 1880.803408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.805185] Call Trace: [ 1880.805741] dump_stack+0x107/0x167 [ 1880.806500] should_fail.cold+0x5/0xa [ 1880.807301] ? io_uring_setup+0x258/0x2980 [ 1880.808218] should_failslab+0x5/0x20 [ 1880.809045] kmem_cache_alloc_trace+0x55/0x320 [ 1880.810047] io_uring_setup+0x258/0x2980 [ 1880.810912] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1880.811963] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1880.813041] ? wait_for_completion_io+0x270/0x270 [ 1880.814111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.815247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.816365] do_syscall_64+0x33/0x40 [ 1880.817182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1880.818290] RIP: 0033:0x7fc2d9b3db19 [ 1880.819093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.823043] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1880.824653] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1880.826170] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1880.827676] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1880.829197] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1880.830709] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:20:13 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:20:13 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r0, 0x6000) 03:20:13 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:13 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0xffffd000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) 03:20:28 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 3) 03:20:28 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x20010, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r6, 0x0, &(0x7f0000000000)="8f6ee5c0b9211b1971f436a01de142a420c801edd623de1b22e2eb21696a52e122d96b4d04676d38f8052ceb59c6bdbd77347cbcc31a6679a49f315d210b6657859345a86055bf426f044975de75929a24e69df03bb79d22226195cfcd2795484c7b9b68ab642e6da14a22474081859de74f9d204b8e2a7f905b78982e0cdf061ec88d55817e376ca6fb37ff684c17ad56d2bde1b702a97152abb26b590504e68506d4aaf4d7498346c572039268eb46", 0xb0, 0x10043, 0x0, {0x0, r7}}, 0x6) 03:20:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x8) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) [ 1896.284697] FAULT_INJECTION: forcing a failure. [ 1896.284697] name failslab, interval 1, probability 0, space 0, times 0 [ 1896.287239] CPU: 1 PID: 11417 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 1896.288705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.290462] Call Trace: [ 1896.291024] dump_stack+0x107/0x167 [ 1896.291797] should_fail.cold+0x5/0xa [ 1896.292607] ? create_object.isra.0+0x3a/0xa30 [ 1896.293584] should_failslab+0x5/0x20 [ 1896.294392] kmem_cache_alloc+0x5b/0x310 [ 1896.295260] create_object.isra.0+0x3a/0xa30 [ 1896.296188] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1896.297281] kmem_cache_alloc_trace+0x151/0x320 [ 1896.298275] io_uring_setup+0x258/0x2980 [ 1896.299140] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1896.300166] ? __do_sys_io_uring_enter+0x1890/0x1890 03:20:28 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:20:28 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0xa031, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x40) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) remap_file_pages(&(0x7f00004ae000/0x4000)=nil, 0x4000, 0x2000004, 0x9, 0x20000) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{r3, r4+10000000}, {r1, r2+10000000}}, &(0x7f0000000080)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:20:28 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:28 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:20:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x0, @fd, 0x3, 0x0, 0x4, 0x10, 0x0, {0x3}}, 0x5bdd) [ 1896.301252] ? wait_for_completion_io+0x270/0x270 [ 1896.302485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.303607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.304707] do_syscall_64+0x33/0x40 [ 1896.305509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.306594] RIP: 0033:0x7fc2d9b3db19 [ 1896.307383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.311304] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1896.312919] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1896.314437] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1896.315951] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1896.317470] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1896.318970] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:20:28 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:28 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:20:28 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) io_uring_enter(0xffffffffffffffff, 0x134, 0x74f5, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 03:20:28 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x1010, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000000)) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:20:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x4b, 0x0, 0x4, 0x5}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:20:28 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) 03:20:28 executing program 4: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0xa031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:20:43 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xa031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000010c0)) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000001080)={0x8000, 0x2, 0x9acf, 0x0, 0x8, "58d5bb734a2be7b5e71ace5c6a4e96367c47e7", 0x8, 0x7ff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0x1015, 0x5, 0x7f, "e2c13888a460851ab299ccedd5d7bc7f", "061a666e4a26f5514b993e3336c6e62a901ecc56dbfd9a350bf4d957c561f2f75a4e6b37db1c0eb9e07a5de51ab549054aa2c7fa77c1b37d88cd29b1f27edeb104a9d8b70cf513f3fc6ff1f0e9efe805381184595de4f9647d9630bce7d2de1bf4b0c365e20b1853a7b3e93121da21d7ea80b4cf5da25ec13488e517e58a9f09f4c7da365e19c779c9d1e2e9a20a9a09f1f13ee131e1cc6b8b4d275c317be26e4de56344b6662a4971aa6883efc0b18c3d7409bdca8894dc77515e7f7978b7feafbed74ae5aa94fe620a2b5a5b3b5d1405d3b8c72722e6423b399de678326cacccf3ea8e811adae4f1a6b0417d784fe2f26a610758755e11d018e846977ecb7f06a3dae1448aaed54bce16ba9e3f98f5485f73d703703f285454ad8e195ff7dee17ee82d4370d97f5343f3358e31e63de88f212b64ff27ef2c2f47faeac4b8fff1e390b8740153535e91c909cc3c7e92279a62bb6c40d17886fadd070eaedcba6ca479f8466a6b7a47f8a0fd9cc6a28cfeeb86fc34cf9ea7a94f9708c70851f201ff902b9e889cc9f9a2cdead4957063140be1720ea65f0b3854dd02fb065996d747f5a50be9493f1bdabe23fd06fd50e623056902d23708f73ae72502ce68ddad35ba728a2dcecf069eb00995c1be0db7a9c4b9c95ed12de20af204eadc883ae4a787c83d4a8e909c7d0b2dde438567d1222bdb69a9e74442728c32706d62b6f62ff4950c8d4d0592f47084f2177abcd8f1bc11d60a1bdcff7f169946fb222acb6af7cd14408adbf450608f2273d77723e72e73569f5b497e99543d60501176415a5ecb51b104ed9429ae8186cc86f188964316d2269a204033688589267a85ac8d08ade261911c11c52d13cef5d96cd939fa55f5e1a0766f204f665e8ebdfddb6923611843887f210735b1be110d9c94c8f908ec520525962253bf68b246740dedc2ee6821995b7b2944c7f1e30b92a85ba1528a044ec6d54c97a6f5dc21f201a989e8741a26dfbbe06b090023a6535e61051815e9ef0358ecb6959434cbb3d492e022d391d89bffc5f4940f85e6792c2388b9aa09b61adec3da3ca9c1b1d24c3567e14293f259efaaf57bf322f99f2bffedbe1ea06ac456f174eafca9152a7bb03ba2bb6a097ee62ada71d4a31028fe84321ef0fa82c5159236d8c18e1fa36a0e75b08e31844df02fdad2b5b03304e0a262b740b0c2d4057c704600524c8c94627788a080fce6ee57ed07c4211cc3e51f650b1d2189e671be534772c5d3baebc1673dc5cf60f3b96256de9745cba68cfc9588613f33b4af69011f767610ff7f25816e0940a563b75f2c1ffce7446e0e70a92e2e399a205558305375cd9e78362154e7bdf57f95bf7549336c98681fdd87a6bdb713c2cf2e52e833115115a752ee8ca4a0b2b2e8a525d78a2a0498dfbeb604efc8329c10efddc7f09b681cbdc021c894a3f349d1f49ce6d742a61198f6529e69b4799bea93d6d0f74a5cffa7d4e67278ecec70706307fa09acbbb7cdd33f6a05018d98ec88d92fc44d5cddf4cf864c6f697f8a1e4320bf151c47f5f1c596e9de5a7675c6bf7c614b3f17672933d4386e458eb554c97600625d7b0e247e50734e93bc5cfc6504f03303e74ce72edded794ca7fd7e37d14e75bb4a3cf6a11a35bddd2119df8c0ea0b72ea9bb0d01ebc7e739662cc7dd5deb87ebfc679895c23b5395a460e6971fe4b646776cf0fc161d8b8fc056ace5836cfe484e3a78b131774ac95d6ceeb60edba8c12a95448901e8be014093e4d66304a6451fedaa704cf679f6a5d7480bf8e5403c7178a5cd81a46d10628e183a34a4b8d4a6fac41861735399f2ba1e1d8c42dcb3639812427f3b1284db5856caffe0d01af1af5e08dafe8761dbefc85d199c8f3d776e8c5fb4623e96d92997b17d6e3f4a34d60a18583ff7781f9968e21d5d68d6cd1a42262d782b724cd06471b4f8556d39b793292193560faf520c463e60fd0c72a58ad5baf32fb99c3a43274075c4d713104a6b60fbde73ce6d13106eaa1004daeda60517cac4ee616e090e67e0556762ad9cb063a30898fc3b32434ea3ecd93789fbfb0d4adcd3918a4e3d8426a9d8623a511061223aad19a7c76b39cadfc41b092539186e3c19295026510dec73ed8dd022401f8a4afe34f4424ed8827a1d551e6cd0f1ba00ba9b088fa83817e12780e0861676afd3a7ab82e4706b871a86721e31e66c4931491988799467bfaf741c837699e83df32646aa87a8b333f2213098024d957e9e3a14c494ed35a3c793d6572c4264a32b7133ea1874796d09a766f1962be0ece2ebc2f08e05c9f59f0fe7651095c4962da50d37643b41ac43b16de08b799b997f427f1fb51440470db8c34079c940bff4bc5189c31c5605c321b508dfd0b8cf655dfeedb133cf83c657faccb33deef6243b64272d866fb2206dcf8be071e8d1e8964e5005a844b00067e85c074c6f5bde99308ef0532db82a91244a682efedb6fe2aa97de99b9ae85290012aa406fd64b5e3209dd34f1c41b1ca99ad20d0806c4b02bfbd29f39606e7785edb42f0c454fa41a819fae8dee5e599471dc9d33023f93fd576768dc6ad069c1ebcf625db6128eb5083e88700f81da09600c7882a73e33b92b81eaad5a78110fdb094e440f7444125dcf8dd375df390c7c25ade7d1b48d004b244d183241afa22b0af89f3485d4a5e00e1a47a5a803a7faa790d0d71b08fd6301641c11c73461cbe9657823fb5b32477dceb0d08584264f9f2d2c7e56cee5e93b418a954ff7f7bf203710af4884f767d0cf91385994723cf3e0b51a68710bc998e27ec5205a2462b402043ee197e85b97430941bc730c7232c2409e147ad373b530c8f2903da16fb6c92adc4f3e50bda74c44cab36016a617c20a34c5adcc3c174515472c7dc9454a35b1119fc0eb5e3f2043253aa60081e8c17ae818e12e69be24d537c6c094e6813ec06eaf593bc5c2a032bb2eeb72e625e8d19ad03cdfdc594c75e3fc0eaa2ba12b02cca57328fc795a6d2777cd2f7babfb0844c90f4da10508a5b59c601993929b5dbb78600fe5bc90d533b9b4cdd4117741d07d9e5c1f7575d9f71ac5861d9490cec3fd61b3840cb5980e33f7cd63197ee4175d0f20c735b27277645bdc539203d157f089b8fe5db5ae933db6e98eeb0123f39a0a75866c99c4314741fa82d2b777e2bf75a87004da8fc1768d3bb0dc509b848160b79e6fd88a16fa7fb3853c7281345b6604978f0b358c144646813f6e98903a4e2b02f177cf0b22ad2cc9e406b82f6f29d4fac286f835b5fb09aab6320699a7ed11f00683d1438d230308cd571d5881486f1fbcecdd00c9eb0afc157f192f505af0195f7c4fb8e42efe1c2794be1cf80345bd104b109100a5a97c39a932c67dd16efb9bb2bbdc9ffcbbe3aab74058e8e391ec5093f6030e30d1f531c69e9d4f76b7774d98faa59c7a9f9d366f2e545f33a69ba8e5845ad12326929617370df7b78c346fb90f101f42d3d6b15d8d585b706cf054092751b070d701017ad486e4f0d5dd4c76e7f042e0e1f3868a35a9c840ea83a0b33f6d34ef3ca113a28f92eabcd9aad421eb56f5d7592416557496e0b3a8346c20a8109b21cf53b368f1d802414f3fd81aa185840b0567b84f1ee01531b5fcd183b029a094e920aa992020a07bf36ddd414c188fd95ebdacbb71e7309048a83310c58db7999535ca0df631d355bc244f85df6d3d6a5ac1c6405b696da1179866a4470218fbd516de31c984c9c53f5c0226933d0fc9ebf4b2eabad186692fad1cdfd8f582a07da4a524a0593a174d501125cabdc4a2175333f1344df68a3b7a187f5429910e61c4860709fe903e0f00e81dc881697c4fc7be98e4dd801fb3068fdde187de4fbd7ed1baa15668a81172f8f9bec4b2ca036a9d5e354de6f4d5916d21a9a0a510b4f36ac85ab34824605ff97aab5932bb0dd032e2668df49d41e55f6c2f1e4ec23a72a3fa6cd2a6007adde7de980c6b7874625685c0e262bb40adf487addf3b6d9af068dc43b9ea8ab7219695b4f86a9a17bbd7217bdf9649ebf8476c03c2a6ca8a3a0e4840f248e82eb880be27bf0d6b1fd2a74c425198d7ec4b308512f3b384eb992f5ed096b799a3091036af69b045c5b91c976038ae9ebf02e3fb5b48381874a226b98462bf98593631ed23651885a84bfbc27c22a2a936093dee2593a8ce9f2cd24d2185a8e7a49af767373958902b885944240201d6fc204bf9afc82612f98971f05e61aeef1a4fb84ab980839a33683612128a3afa956105effcccf583bf35303bfb84c39e6b232a67c6451b44aeeb62991cb9e7eec009457dd57c7d594da3e869ef5e4481d2b19f6f7d4f602199eccf3153c84213f0cee60f30497c437976dc2b0ca4d237988c24dc77f0bf1c61207b9e860bfad50e58d5d503e8e7a73b2b5e67b3669c70f4c01933c2f99affefa08f82df20a5f01d9bd828cec3e1ddbed23b99244592e717c565d20a96ffb9eba4e94e3ee5c86d96748cc15f4ffd9a656f533db801b4a10c9d442f14eb2297d6215d98a1b5f207408d46f67adaffaebb7259f1f44f775ece868f1c5c63fe0290656c2eb78f26c0800b3f3e6a50352da60aba22c9eec74132fe46de36be921206ab742cc2e5cadd9c362e913f3c20013ed88dd66b4da1874aa787d0acc06f0cd6f2276489f20eff1983a37f9158547c0934f36c97adf8f6efa9270efe3ff8cc200c3bcc46707df887628e80f65c9e1ea06ba67187bb715385e9c8a5d4e21380ad16d41178f398a8c905adcd7d1c01740fcce8d552ce305b3507d3802f36a3f4786d0dc5f4a804de56542d485110bcd572929bfc55862120ce047a70353a3b563f1458fb7b8600d2940c4c13b1460399aa54812c082970808e2c0a40b9cae915553d90cf1d4f4b9f99540947f2bab6acd1e4699d8ae99d21c0c14c6eb688451e8162be9c428c2764aafe0ba11010e8ea9cbfc33cc46e29cac99041eea71a95fae7c3a11a5b778d874416faa2276ed706b42d64f88e817d2413ce2351f758c1c94d3a9b0af80df6d7918895ac64558f0e38a94048ea31d9b39a10ebdbb8e9e87f056379186e9983f4173ba2d6d62551f15692fd9a2ef45f984840ac47017af6d286d67db9fbc2b506b58bd8c471c966d2b5de52d0953c9104ccf36d74139861af5f7265058f39bdf0647a85a8fcad8ff19860d7fd233929d68ff5c3aa97b23255c142c3eec4979912efb514abb9b27eb5cc1b4064a04ebe985eb8e8c304706264ba25f2073802ff7ed863020d29a1722540b4a44435b9bf3f60b387cc408cbaa54d616749be30dababc98e91b32976504f1bcfce3e1d5733e2910d016370fcad38f860e02228ddcc03f5652a13ea5b4fb693b01591c0f189a2488460e8e4906ad2712c605ad8189beb25ac49e2cf6077c3ca72b905a706bc55e21a4f21062581f74a5d8f7d811f159bed94e552bee168f89bf86420636dbb6f35e19d8956938589ccabebf80f8d2fcce76d1ec83227c34aa14ade9069c4a00ae3c5b8585e1d63dc5dc43dbc2a43bab876f72fecd68156be352dffcb2872fac998c8884e7f57aaffed42c1e6da032b0391e76b90736d0d2c168b34baa36eb1efbb75ae88dcc322ccca02db95739f7879e0c8665df05e57230a3fb44d5685e3486abe43244cd96ea934d7a99ec3a9815938dfbd9ddfc612c37e85ebccfe050a8bf37091f556eeea41949b8776ae2a7084b7523825c3ba9742710b3172c920d6aec49970c6c28ba0a38fa0a1ea868afb2ee2ecf38c844f5d79291b0"}, 0x1015, 0x0) madvise(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x15) 03:20:43 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_complete(0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40a00, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000040)={r1, r2, 0x4}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) 03:20:43 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:20:43 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x3}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff75}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x50}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7ff}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x63}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5516ef02}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x72a}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xb7}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x7e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x65}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xb0, 0x40, 0x20, 0x83, 0x4, 0x2, 0x6, 0x0, 0x62, 0x40, 0x38e, 0xc5f, 0x401, 0x38, 0x2, 0x0, 0x200, 0x3f}, [{0x6, 0x4b5, 0xffffffffffffffcb, 0x3, 0x6, 0x406c, 0xf22, 0x3ff}, {0x5, 0x5, 0x0, 0x6, 0x8, 0x4, 0x2, 0x7fff}], "a0a1faf6c00bc94096e1c488be9dcad243126f7b613b961af005d0c03fde23a093350321f4ba01b10e9c24eb69c3029e55071430d4e11a113c2bf61f66d8eb6a2b166a3c963c286cb6efc569bb0f44428eda6a0f4f0b16404b3e2a424c765cb527e8dedfb80b3de5833cf2a74de1f6b9077b1629a48bf53a4a3a0d18eee2fbe5b678371e918b9e07bcde4939b4bb078dc32c302ced5cd108604127be9fd7478bbc381b41020d7197ec78e6113a8456d86ed71548", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb64) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:20:43 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x20010, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r6, 0x0, &(0x7f0000000000)="8f6ee5c0b9211b1971f436a01de142a420c801edd623de1b22e2eb21696a52e122d96b4d04676d38f8052ceb59c6bdbd77347cbcc31a6679a49f315d210b6657859345a86055bf426f044975de75929a24e69df03bb79d22226195cfcd2795484c7b9b68ab642e6da14a22474081859de74f9d204b8e2a7f905b78982e0cdf061ec88d55817e376ca6fb37ff684c17ad56d2bde1b702a97152abb26b590504e68506d4aaf4d7498346c572039268eb46", 0xb0, 0x10043, 0x0, {0x0, r7}}, 0x6) 03:20:43 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 4) 03:20:43 executing program 6: chroot(&(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) [ 1910.804506] FAULT_INJECTION: forcing a failure. [ 1910.804506] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1910.807636] CPU: 0 PID: 11469 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 1910.809440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1910.811600] Call Trace: [ 1910.812286] dump_stack+0x107/0x167 [ 1910.813235] should_fail.cold+0x5/0xa [ 1910.814259] __alloc_pages_nodemask+0x182/0x600 [ 1910.815477] ? lock_release+0x680/0x680 [ 1910.816516] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1910.818095] ? lock_downgrade+0x6d0/0x6d0 [ 1910.819188] alloc_pages_current+0x187/0x280 [ 1910.820337] kmalloc_order+0x35/0x160 [ 1910.821354] kmalloc_order_trace+0x14/0xa0 [ 1910.822459] io_uring_setup+0x33c/0x2980 [ 1910.823363] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1910.824613] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1910.825941] ? wait_for_completion_io+0x270/0x270 [ 1910.827229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1910.828592] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1910.829855] do_syscall_64+0x33/0x40 [ 1910.830639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1910.831746] RIP: 0033:0x7fc2d9b3db19 [ 1910.832590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1910.836634] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1910.838305] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1910.839847] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1910.841421] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1910.842990] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1910.844553] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:20:43 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:20:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x20010, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r6, 0x0, &(0x7f0000000000)="8f6ee5c0b9211b1971f436a01de142a420c801edd623de1b22e2eb21696a52e122d96b4d04676d38f8052ceb59c6bdbd77347cbcc31a6679a49f315d210b6657859345a86055bf426f044975de75929a24e69df03bb79d22226195cfcd2795484c7b9b68ab642e6da14a22474081859de74f9d204b8e2a7f905b78982e0cdf061ec88d55817e376ca6fb37ff684c17ad56d2bde1b702a97152abb26b590504e68506d4aaf4d7498346c572039268eb46", 0xb0, 0x10043, 0x0, {0x0, r7}}, 0x6) 03:20:43 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x89, 0x958}, 0x10, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x5}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:43 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x40, 0x8}, 0x18) dup2(r0, r1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:20:43 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '-\x00'}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 03:20:43 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x1010, 0xffffffffffffffff, 0xeb3d2000) 03:20:43 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 5) 03:20:43 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 03:20:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x20010, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r6, 0x0, &(0x7f0000000000)="8f6ee5c0b9211b1971f436a01de142a420c801edd623de1b22e2eb21696a52e122d96b4d04676d38f8052ceb59c6bdbd77347cbcc31a6679a49f315d210b6657859345a86055bf426f044975de75929a24e69df03bb79d22226195cfcd2795484c7b9b68ab642e6da14a22474081859de74f9d204b8e2a7f905b78982e0cdf061ec88d55817e376ca6fb37ff684c17ad56d2bde1b702a97152abb26b590504e68506d4aaf4d7498346c572039268eb46", 0xb0, 0x10043, 0x0, {0x0, r7}}, 0x6) [ 1911.021654] FAULT_INJECTION: forcing a failure. [ 1911.021654] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.023517] CPU: 0 PID: 11487 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 1911.024650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1911.025928] Call Trace: [ 1911.026340] dump_stack+0x107/0x167 [ 1911.026903] should_fail.cold+0x5/0xa [ 1911.027498] ? create_object.isra.0+0x3a/0xa30 [ 1911.028204] should_failslab+0x5/0x20 [ 1911.028790] kmem_cache_alloc+0x5b/0x310 [ 1911.029431] create_object.isra.0+0x3a/0xa30 [ 1911.030105] ? kasan_unpoison_shadow+0x33/0x50 [ 1911.030812] kmalloc_order+0xfe/0x160 [ 1911.031402] kmalloc_order_trace+0x14/0xa0 [ 1911.032058] io_uring_setup+0x33c/0x2980 [ 1911.032686] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1911.033447] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1911.034228] ? wait_for_completion_io+0x270/0x270 [ 1911.034992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1911.035796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1911.036611] do_syscall_64+0x33/0x40 [ 1911.037193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1911.037997] RIP: 0033:0x7fc2d9b3db19 [ 1911.038564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1911.041400] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1911.042563] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1911.043654] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1911.044750] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1911.045845] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1911.046941] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:20:43 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:43 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 03:20:43 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:20:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) (fail_nth: 1) [ 1911.175329] FAULT_INJECTION: forcing a failure. [ 1911.175329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1911.177284] CPU: 0 PID: 11504 Comm: syz-executor.0 Not tainted 5.10.256 #1 [ 1911.178355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1911.179627] Call Trace: [ 1911.180045] dump_stack+0x107/0x167 [ 1911.180613] should_fail.cold+0x5/0xa [ 1911.181208] _copy_to_user+0x2e/0x180 [ 1911.181807] simple_read_from_buffer+0xcc/0x160 [ 1911.182528] proc_fail_nth_read+0x198/0x230 [ 1911.183200] ? proc_sessionid_read+0x230/0x230 [ 1911.183897] ? security_file_permission+0xb1/0xe0 [ 1911.184640] ? proc_sessionid_read+0x230/0x230 [ 1911.185351] vfs_read+0x228/0x620 [ 1911.185888] ksys_read+0x12d/0x260 [ 1911.186436] ? vfs_write+0xb10/0xb10 [ 1911.187022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1911.187839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1911.188642] do_syscall_64+0x33/0x40 [ 1911.189220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1911.190013] RIP: 0033:0x7fe75b96c69c [ 1911.190586] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1911.193427] RSP: 002b:00007fe758f2f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1911.194676] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe75b96c69c [ 1911.195782] RDX: 000000000000000f RSI: 00007fe758f2f1e0 RDI: 0000000000000003 [ 1911.196879] RBP: 00007fe758f2f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1911.197978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1911.199081] R13: 00007ffdc90e191f R14: 00007fe758f2f300 R15: 0000000000022000 03:20:57 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:20:57 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, 0xffffffffffffffff, 0xd5d3000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:20:57 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 03:20:57 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 6) 03:20:57 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffff00000000) 03:20:57 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:20:57 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:57 executing program 6: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x8c39}}, './file0\x00'}) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000040)={0x8, 0x6, {0x8, @usage=0x7fffffff, 0x0, 0x9bca, 0x81, 0xff, 0x9, 0xfffffffffffffffd, 0x48a, @struct={0x101, 0x1}, 0x0, 0xf53, [0x5, 0xffffffffffffa152, 0x8000, 0x11, 0x1000, 0x8cd4]}, {0x7, @usage=0x2, 0x0, 0x1000, 0x4, 0x3c5c, 0x10000, 0xd31, 0x9, @usage=0x1, 0xc2, 0x94e, [0x5, 0xffff, 0x3, 0x7, 0xb1, 0x4]}, {0x3, @struct={0x0, 0xdf}, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x20, @usage, 0xeb, 0x10000, [0x20, 0x80000001, 0x8, 0x4, 0x29, 0x6]}, {0x6, 0x0, 0x1000}}) [ 1925.570885] FAULT_INJECTION: forcing a failure. [ 1925.570885] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.573312] CPU: 1 PID: 11516 Comm: syz-executor.5 Not tainted 5.10.256 #1 03:20:57 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x9) [ 1925.574795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1925.576627] Call Trace: [ 1925.577196] dump_stack+0x107/0x167 [ 1925.577986] should_fail.cold+0x5/0xa [ 1925.578803] ? io_uring_setup+0x40b/0x2980 [ 1925.579697] should_failslab+0x5/0x20 [ 1925.580507] kmem_cache_alloc_trace+0x55/0x320 [ 1925.581478] io_uring_setup+0x40b/0x2980 [ 1925.582360] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1925.583383] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1925.584454] ? wait_for_completion_io+0x270/0x270 [ 1925.585516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.586631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1925.587735] do_syscall_64+0x33/0x40 [ 1925.588536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1925.589629] RIP: 0033:0x7fc2d9b3db19 [ 1925.590415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1925.594311] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1925.595930] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1925.597444] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1925.598977] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1925.600482] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1925.602008] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:20:58 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xaa) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) creat(&(0x7f0000001740)='./file1\x00', 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000280)='./file1\x00', 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:20:58 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x20010, r0, 0x62cf2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:20:58 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:58 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:20:58 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) (fail_nth: 1) 03:20:58 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0x9) [ 1925.752558] FAULT_INJECTION: forcing a failure. [ 1925.752558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1925.755390] CPU: 1 PID: 11544 Comm: syz-executor.3 Not tainted 5.10.256 #1 [ 1925.756856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1925.758622] Call Trace: [ 1925.759185] dump_stack+0x107/0x167 [ 1925.759958] should_fail.cold+0x5/0xa [ 1925.760778] _copy_to_user+0x2e/0x180 [ 1925.761598] simple_read_from_buffer+0xcc/0x160 [ 1925.762586] proc_fail_nth_read+0x198/0x230 [ 1925.763506] ? proc_sessionid_read+0x230/0x230 [ 1925.764477] ? security_file_permission+0xb1/0xe0 [ 1925.765519] ? proc_sessionid_read+0x230/0x230 [ 1925.766481] vfs_read+0x228/0x620 [ 1925.767219] ksys_read+0x12d/0x260 [ 1925.767970] ? vfs_write+0xb10/0xb10 [ 1925.768777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1925.769899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1925.770992] do_syscall_64+0x33/0x40 [ 1925.771781] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1925.772853] RIP: 0033:0x7fc93bac069c [ 1925.773648] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1925.777540] RSP: 002b:00007fc939083170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1925.779154] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fc93bac069c [ 1925.780687] RDX: 000000000000000f RSI: 00007fc9390831e0 RDI: 0000000000000003 [ 1925.782211] RBP: 00007fc9390831d0 R08: 0000000000000000 R09: 0000000000000000 [ 1925.783717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.785232] R13: 00007ffc6ca8c18f R14: 00007fc939083300 R15: 0000000000022000 03:21:20 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x110, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 03:21:20 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x4, 0x12, 0xfff, 0x0, "f83a085c56c996b046aef61a762679815382a0342bd87f2bcff4798552332a5e"}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) 03:21:20 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:21:20 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 7) 03:21:20 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x10000000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:21:20 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) [ 1948.222558] FAULT_INJECTION: forcing a failure. [ 1948.222558] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.225095] CPU: 0 PID: 11562 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 1948.226590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1948.228372] Call Trace: [ 1948.228982] dump_stack+0x107/0x167 [ 1948.229782] should_fail.cold+0x5/0xa [ 1948.230610] ? create_object.isra.0+0x3a/0xa30 [ 1948.231592] should_failslab+0x5/0x20 [ 1948.232414] kmem_cache_alloc+0x5b/0x310 [ 1948.233291] create_object.isra.0+0x3a/0xa30 [ 1948.234260] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1948.235348] kmem_cache_alloc_trace+0x151/0x320 [ 1948.236353] io_uring_setup+0x40b/0x2980 [ 1948.237232] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1948.238291] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1948.239382] ? wait_for_completion_io+0x270/0x270 [ 1948.240444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1948.241576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1948.242703] do_syscall_64+0x33/0x40 [ 1948.243516] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1948.244620] RIP: 0033:0x7fc2d9b3db19 [ 1948.245422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1948.249394] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1948.251045] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1948.252589] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1948.254135] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1948.255670] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1948.257209] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:21:20 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3004, 0x9) 03:21:20 executing program 4: preadv2(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x5, 0x7e, 0x3) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000f, 0x8010, 0xffffffffffffffff, 0xcd147000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200480, 0x15c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:21:20 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4002, 0x8) 03:21:20 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) setreuid(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:21:20 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) (fail_nth: 1) 03:21:20 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:21:20 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x800, @remote, 0x6}, 0x1c) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x65) r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="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", 0xfb, 0x6}, {&(0x7f00000001c0)="d3041baaa6d66eff251af857ce0589e78bf3eadfab12ed0c5744de62330f93c8217e739ed2866801e8e15709b9d9fee8ff4e561d4f7d85980f6429641f17e8b8169829ebb77f0ed8b1daceae10975b0dd6021871dea8c6a8b9c0df1887b603f5f874ed1c11b896c6bd0e37e6208ad72b4501787dd84183938c1fb572", 0x7c}, {&(0x7f0000000240)="58302b1665efe58b1cfa2797a0d1e236471119ee446c67b39992fc5f5e3d1bc8543bc920", 0x24, 0x10d62269}], 0x70000, &(0x7f0000000300)={[{@mode}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x0]}}}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x9}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_always}, {@huge_within_size}, {@huge_never}]}) pread64(r0, &(0x7f0000000400)=""/118, 0x76, 0x2e) 03:21:20 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000a, 0x40010, 0xffffffffffffffff, 0xd688c000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1f, 0xa192, 0x0) 03:21:20 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3005, 0x9) [ 1948.432944] FAULT_INJECTION: forcing a failure. [ 1948.432944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1948.435765] CPU: 1 PID: 11594 Comm: syz-executor.2 Not tainted 5.10.256 #1 [ 1948.437525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1948.439721] Call Trace: [ 1948.440409] dump_stack+0x107/0x167 [ 1948.441362] should_fail.cold+0x5/0xa [ 1948.442373] _copy_to_user+0x2e/0x180 [ 1948.443362] simple_read_from_buffer+0xcc/0x160 [ 1948.444569] proc_fail_nth_read+0x198/0x230 [ 1948.445696] ? proc_sessionid_read+0x230/0x230 [ 1948.446885] ? security_file_permission+0xb1/0xe0 [ 1948.448131] ? proc_sessionid_read+0x230/0x230 [ 1948.449297] vfs_read+0x228/0x620 [ 1948.450235] ksys_read+0x12d/0x260 [ 1948.450976] ? vfs_write+0xb10/0xb10 [ 1948.451945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1948.453296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1948.454647] do_syscall_64+0x33/0x40 [ 1948.455605] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1948.456920] RIP: 0033:0x7f16ca1fa69c [ 1948.457879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1948.461653] RSP: 002b:00007f16c77bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1948.463224] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f16ca1fa69c [ 1948.464668] RDX: 000000000000000f RSI: 00007f16c77bd1e0 RDI: 0000000000000003 [ 1948.466153] RBP: 00007f16c77bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1948.467608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1948.469084] R13: 00007ffc01bca22f R14: 00007f16c77bd300 R15: 0000000000022000 [ 1948.480087] loop4: detected capacity change from 0 to 23872512 03:21:36 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:21:36 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4100) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2302016, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@mmap}], [{@subj_role={'subj_role', 0x3d, '\x03\x00'}}, {@fowner_gt={'fowner>', r2}}, {@euid_gt={'euid>', r0}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@uid_lt={'uid<', r1}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@permit_directio}]}}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r4) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:21:36 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3006, 0x9) 03:21:36 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 8) 03:21:36 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) setreuid(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:21:36 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x3, 0x8001}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:21:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) open_by_handle_at(r0, &(0x7f0000000000)=@fuse_with_parent={0x18, 0x82, {{0x28d, 0x9, 0x1}, {0x7fff, 0x746, 0x1}}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) madvise(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x64) 03:21:36 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) [ 1964.265318] FAULT_INJECTION: forcing a failure. [ 1964.265318] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.267835] CPU: 1 PID: 11616 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 1964.269275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.271050] Call Trace: [ 1964.271615] dump_stack+0x107/0x167 [ 1964.272380] should_fail.cold+0x5/0xa [ 1964.273182] ? create_object.isra.0+0x3a/0xa30 [ 1964.274164] should_failslab+0x5/0x20 [ 1964.274957] kmem_cache_alloc+0x5b/0x310 [ 1964.275810] create_object.isra.0+0x3a/0xa30 [ 1964.276740] kmemleak_alloc_percpu+0xa0/0x100 [ 1964.277683] pcpu_alloc+0x4e2/0x1240 [ 1964.278511] ? io_tctx_exit_cb+0xf0/0xf0 [ 1964.279366] percpu_ref_init+0x31/0x3d0 [ 1964.280206] io_uring_setup+0x47a/0x2980 [ 1964.281051] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1964.282091] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1964.283201] ? wait_for_completion_io+0x270/0x270 [ 1964.284277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1964.285420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1964.286575] do_syscall_64+0x33/0x40 [ 1964.287390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1964.288443] RIP: 0033:0x7fc2d9b3db19 [ 1964.289251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.293287] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1964.294971] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1964.296524] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1964.298032] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1964.299536] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1964.301028] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:21:36 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) setreuid(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:21:36 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x9) 03:21:36 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 03:21:36 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3007, 0x9) 03:21:36 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa) 03:21:36 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x110, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, &(0x7f0000000000)=0x1, 0xe6, 0x3) 03:21:36 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x12) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80b00, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x2010, r0, 0x8799a000) 03:21:36 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 9) 03:21:36 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) [ 1964.510629] FAULT_INJECTION: forcing a failure. [ 1964.510629] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.513233] CPU: 1 PID: 11650 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 1964.514747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.516562] Call Trace: [ 1964.517130] dump_stack+0x107/0x167 [ 1964.517931] should_fail.cold+0x5/0xa [ 1964.518765] ? create_object.isra.0+0x3a/0xa30 [ 1964.519767] should_failslab+0x5/0x20 [ 1964.520602] kmem_cache_alloc+0x5b/0x310 [ 1964.521491] create_object.isra.0+0x3a/0xa30 [ 1964.522492] kmemleak_alloc_percpu+0xa0/0x100 [ 1964.523484] pcpu_alloc+0x4e2/0x1240 [ 1964.524315] ? io_tctx_exit_cb+0xf0/0xf0 [ 1964.525201] percpu_ref_init+0x31/0x3d0 [ 1964.526081] io_uring_setup+0x47a/0x2980 [ 1964.526942] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1964.527978] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1964.529067] ? wait_for_completion_io+0x270/0x270 [ 1964.530155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1964.531273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1964.532379] do_syscall_64+0x33/0x40 [ 1964.533189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1964.534309] RIP: 0033:0x7fc2d9b3db19 [ 1964.535121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.539026] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1964.540656] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1964.542215] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1964.543762] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1964.545316] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1964.546888] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:21:36 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="15b02dd64a16aa3530e57fd9d28e2487c487a5acf95059630ba97f4eb7f6d1f192ede6808db212dcd71d7d999d425f23ef82e743b2013517025c7728d4c6535733c50e152dabb1260a7c9187337a030798158aebc6a7a574deeea78b8ec2aa51100823fbe4f61176987b4f8a44176eeae1f7b6c41af25d2dd64fb9ce6483d691daa681d4d118ebe0d03696306cf631af9505b8441a04cddb93ea18338ab793ece9178407438ee7d250e0e18a9c", 0xad}, {&(0x7f00000003c0)="c2a2b8e843880708", 0x8}, {&(0x7f0000000400)="49f87bdd1b5b7ba8ec6243077e78fc0d5f834f986f6ec1f025bf9ff745f9403c6cd14f8450e1d7b2c35f96c48ca4d89b6ea6e6d30e3b1d2989150bfc3dd9497e2eead484ebb194d56759fa8d8378f57bf1b46bb237d6c61c7bacc8350d3c31cb315c20d04e", 0x65}, {&(0x7f0000000480)="e7c78f54c53b5e1ec96290dcb42b8b", 0xf}], 0x4}, 0x2000004) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x43bcb7afaeeee96, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0xfffffffffffffffd, 0x2}}, 0x10000) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 03:21:52 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0x9) 03:21:52 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) 03:21:52 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 10) 03:21:52 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x401, 0x14}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4804) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:21:52 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x301c, 0x9) 03:21:52 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:21:52 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x14080, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r0, r1, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) 03:21:52 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='erspan0\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) getsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080), 0xfffffffffffffffc) [ 1980.213361] FAULT_INJECTION: forcing a failure. [ 1980.213361] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.216053] CPU: 1 PID: 11681 Comm: syz-executor.5 Not tainted 5.10.256 #1 03:21:52 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) [ 1980.217633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.219647] Call Trace: [ 1980.220283] dump_stack+0x107/0x167 [ 1980.221125] should_fail.cold+0x5/0xa [ 1980.222004] ? percpu_ref_init+0xd8/0x3d0 [ 1980.222966] should_failslab+0x5/0x20 [ 1980.223840] kmem_cache_alloc_trace+0x55/0x320 [ 1980.224891] ? io_tctx_exit_cb+0xf0/0xf0 [ 1980.225821] percpu_ref_init+0xd8/0x3d0 [ 1980.226746] io_uring_setup+0x47a/0x2980 [ 1980.227679] ? __mutex_unlock_slowpath+0xe1/0x600 03:21:52 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x40000, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4854}, 0x2001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) [ 1980.228783] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.230039] ? wait_for_completion_io+0x270/0x270 [ 1980.231167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.232360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.233551] do_syscall_64+0x33/0x40 [ 1980.234422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.235609] RIP: 0033:0x7fc2d9b3db19 [ 1980.236466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:21:52 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3004, 0x9) [ 1980.240721] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.242569] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1980.244219] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1980.245860] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1980.247519] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1980.249163] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:21:52 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3067, 0x9) 03:21:52 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000440)=""/88) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:22:08 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 11) 03:22:08 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 03:22:08 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:22:08 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = syz_io_uring_complete(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:22:08 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10) 03:22:08 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:22:08 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:22:08 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3005, 0x9) [ 1995.977326] FAULT_INJECTION: forcing a failure. [ 1995.977326] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.979987] CPU: 0 PID: 11712 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 1995.981587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1995.983514] Call Trace: [ 1995.984138] dump_stack+0x107/0x167 [ 1995.984984] should_fail.cold+0x5/0xa [ 1995.985883] ? create_object.isra.0+0x3a/0xa30 [ 1995.986937] should_failslab+0x5/0x20 [ 1995.987804] kmem_cache_alloc+0x5b/0x310 [ 1995.988741] create_object.isra.0+0x3a/0xa30 [ 1995.989742] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1995.990915] kmem_cache_alloc_trace+0x151/0x320 [ 1995.991976] ? io_tctx_exit_cb+0xf0/0xf0 [ 1995.992900] percpu_ref_init+0xd8/0x3d0 [ 1995.993826] io_uring_setup+0x47a/0x2980 [ 1995.994767] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1995.995865] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1995.997015] ? wait_for_completion_io+0x270/0x270 [ 1995.998142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1995.999492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1996.000675] do_syscall_64+0x33/0x40 [ 1996.001528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.002712] RIP: 0033:0x7fc2d9b3db19 [ 1996.003572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.007812] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1996.009554] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 1996.011208] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 1996.012835] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1996.014481] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 1996.016112] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:22:08 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 03:22:08 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3006, 0x9) 03:22:08 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:22:08 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x14) 03:22:08 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) 03:22:08 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x10, 0xffffffffffffffff, 0xffffe000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000080)=0x9, 0xfff, 0xd) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000008000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000100)) madvise(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x13) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xb6f0, &(0x7f0000fff000/0x1000)=nil, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0x70270000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mbind(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000180)=0x1, 0x40000000000000, 0x4) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64) 03:22:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x49}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:22:08 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3007, 0x9) 03:22:22 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 12) 03:22:22 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:22:22 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) 03:22:22 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x15) 03:22:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, '.\x00'}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pread64(r0, &(0x7f0000000280)=""/193, 0xc1, 0xfffffffffffffd9f) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xe8, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa5a}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2dfc3cff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa235}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff800000}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xbd37}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1b0099db}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x86}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x39}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x118}, 0x1, 0x0, 0x0, 0x4044000}, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x140, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000680)) 03:22:22 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) r1 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0)={0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000005000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00']) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f00005e6000/0x4000)=nil, 0x4000, 0x100000c, 0x4010, r6, 0x0) mmap$IORING_OFF_SQES(&(0x7f00005be000/0x2000)=nil, 0x2000, 0x3, 0x10, r1, 0x10000000) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x19df, &(0x7f0000000000)={0x0, 0x3d17, 0x0, 0x2, 0x118}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r9 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r9, 0x80404532, &(0x7f0000000000)=""/81) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2007, @fd=r9, 0x7ff, &(0x7f0000000100)=""/21, 0x15, 0x10}, 0xa77f) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:22:22 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) 03:22:22 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x301c, 0x9) 03:22:23 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x8) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2010.609552] FAULT_INJECTION: forcing a failure. [ 2010.609552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2010.611054] CPU: 0 PID: 11762 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2010.611862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.612835] Call Trace: [ 2010.613157] dump_stack+0x107/0x167 [ 2010.613583] should_fail.cold+0x5/0xa [ 2010.614039] __alloc_pages_nodemask+0x182/0x600 [ 2010.614599] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2010.615306] ? cap_capable+0x1cd/0x230 [ 2010.615773] alloc_pages_current+0x187/0x280 [ 2010.616291] __get_free_pages+0xc/0xa0 [ 2010.616745] io_uring_setup+0xe27/0x2980 [ 2010.617229] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2010.617819] ? wait_for_completion_io+0x270/0x270 [ 2010.618402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2010.619027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2010.619635] do_syscall_64+0x33/0x40 [ 2010.620080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2010.620678] RIP: 0033:0x7fc2d9b3db19 [ 2010.621116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.623278] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2010.624171] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2010.625006] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2010.625838] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2010.626686] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2010.627522] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:22:23 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="60ea178675dc94360cc32e683d8ad5b3cc772220231840c10ff69037aafc484477a2846a54d929029253bea265fa1edc1ccd28875b9d87e78251a6be9156a4caf1ffa47bdb2cd57adf1a529fa6e2f214c218352eb6b0246091f3a9487a369f9a343d9335f080c1619ad36d", 0x6b}, 0x68) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:22:23 executing program 3: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x200]}, 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:22:23 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x80000e, 0x100010, r0, 0xa70b0000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x64) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) 03:22:23 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0xd358, 0x9, 0x4, 0x3, 0x1, [{0x0, 0x1000, 0x6, '\x00', 0x82}]}) 03:22:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}, {&(0x7f00000012c0)=""/9, 0x9}, {&(0x7f0000001300)=""/254, 0xfe}], 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001480)=""/219) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) fcntl$notify(r2, 0x402, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000018c0), 0x10f800, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001900)={0x0, r3, 0xfffffffffffffffb, 0xf84, 0x4}) ioctl$CDROMSETSPINDOWN(r1, 0x531e, &(0x7f0000000040)=0xf) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) lseek(r3, 0x9, 0x4) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000001580)=0x4, 0x8f7, 0x1) 03:22:23 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3067, 0x9) 03:22:23 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) 03:22:38 executing program 6: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:22:38 executing program 3: mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x50, 0xffffffffffffffff, 0x596a000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000000)) 03:22:38 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3004, 0x9) 03:22:38 executing program 7: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:22:38 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3fff, 0x9) 03:22:38 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 13) 03:22:38 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) 03:22:38 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) [ 2026.165525] FAULT_INJECTION: forcing a failure. [ 2026.165525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2026.168371] CPU: 0 PID: 11819 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2026.169971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2026.171909] Call Trace: [ 2026.172530] dump_stack+0x107/0x167 [ 2026.173383] should_fail.cold+0x5/0xa [ 2026.174279] __alloc_pages_nodemask+0x182/0x600 [ 2026.175363] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2026.176755] ? cap_capable+0x1cd/0x230 [ 2026.177659] alloc_pages_current+0x187/0x280 [ 2026.178687] __get_free_pages+0xc/0xa0 [ 2026.179589] io_uring_setup+0xf9a/0x2980 [ 2026.180542] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2026.181713] ? wait_for_completion_io+0x270/0x270 [ 2026.182857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2026.184077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2026.185267] do_syscall_64+0x33/0x40 [ 2026.186124] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2026.187324] RIP: 0033:0x7fc2d9b3db19 [ 2026.188177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2026.192421] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2026.194175] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2026.195853] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2026.197496] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2026.199145] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2026.200788] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:22:38 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x9) 03:22:38 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x7, 0x80, 0xfffffff9}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x509482, 0x1) r2 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xa49b, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="44df76adc033240202c41d58cd349e99517a7d1ee7", 0x15, 0x3}], 0x1180021, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xfffffffffffffff8}}], [{@fsname={'fsname', 0x3d, ']\x00'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r2, 0x8}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:22:38 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x9) 03:22:38 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:22:38 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x5, 0x2, 0x5) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) [ 2026.264471] loop6: detected capacity change from 0 to 41984 [ 2026.302572] loop6: detected capacity change from 0 to 41984 03:22:53 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x810, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:22:53 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="15b02dd64a16aa3530e57fd9d28e2487c487a5acf95059630ba97f4eb7f6d1f192ede6808db212dcd71d7d999d425f23ef82e743b2013517025c7728d4c6535733c50e152dabb1260a7c9187337a030798158aebc6a7a574deeea78b8ec2aa51100823fbe4f61176987b4f8a44176eeae1f7b6c41af25d2dd64fb9ce6483d691daa681d4d118ebe0d03696306cf631af9505b8441a04cddb93ea18338ab793ece9178407438ee7d250e0e18a9c", 0xad}, {&(0x7f00000003c0)="c2a2b8e843880708", 0x8}, {&(0x7f0000000400)="49f87bdd1b5b7ba8ec6243077e78fc0d5f834f986f6ec1f025bf9ff745f9403c6cd14f8450e1d7b2c35f96c48ca4d89b6ea6e6d30e3b1d2989150bfc3dd9497e2eead484ebb194d56759fa8d8378f57bf1b46bb237d6c61c7bacc8350d3c31cb315c20d04e", 0x65}, {&(0x7f0000000480)="e7c78f54c53b5e1ec96290dcb42b8b", 0xf}], 0x4}, 0x2000004) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x43bcb7afaeeee96, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0xfffffffffffffffd, 0x2}}, 0x10000) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 03:22:53 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 14) 03:22:53 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:22:53 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 03:22:53 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) 03:22:53 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:22:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x42844}, 0x48800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2041.502484] FAULT_INJECTION: forcing a failure. [ 2041.502484] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.504862] CPU: 0 PID: 11857 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2041.506607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2041.508700] Call Trace: [ 2041.509378] dump_stack+0x107/0x167 [ 2041.510299] should_fail.cold+0x5/0xa [ 2041.511277] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2041.512674] should_failslab+0x5/0x20 [ 2041.513490] kmem_cache_alloc_trace+0x55/0x320 [ 2041.514651] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2041.516028] io_uring_setup+0x14f6/0x2980 [ 2041.517076] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2041.518147] ? wait_for_completion_io+0x270/0x270 [ 2041.519398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2041.520718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2041.521815] do_syscall_64+0x33/0x40 [ 2041.522753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2041.524064] RIP: 0033:0x7fc2d9b3db19 [ 2041.524993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2041.528830] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2041.530720] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2041.532506] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2041.534298] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2041.536095] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2041.537875] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:22:53 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="15b02dd64a16aa3530e57fd9d28e2487c487a5acf95059630ba97f4eb7f6d1f192ede6808db212dcd71d7d999d425f23ef82e743b2013517025c7728d4c6535733c50e152dabb1260a7c9187337a030798158aebc6a7a574deeea78b8ec2aa51100823fbe4f61176987b4f8a44176eeae1f7b6c41af25d2dd64fb9ce6483d691daa681d4d118ebe0d03696306cf631af9505b8441a04cddb93ea18338ab793ece9178407438ee7d250e0e18a9c", 0xad}, {&(0x7f00000003c0)="c2a2b8e843880708", 0x8}, {&(0x7f0000000400)="49f87bdd1b5b7ba8ec6243077e78fc0d5f834f986f6ec1f025bf9ff745f9403c6cd14f8450e1d7b2c35f96c48ca4d89b6ea6e6d30e3b1d2989150bfc3dd9497e2eead484ebb194d56759fa8d8378f57bf1b46bb237d6c61c7bacc8350d3c31cb315c20d04e", 0x65}, {&(0x7f0000000480)="e7c78f54c53b5e1ec96290dcb42b8b", 0xf}], 0x4}, 0x2000004) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x43bcb7afaeeee96, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0xfffffffffffffffd, 0x2}}, 0x10000) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 03:22:54 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3005, 0x9) 03:22:54 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:22:54 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:22:54 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:22:54 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 03:22:54 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8db}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="24484f4fee23e61f9d71dce5847dfe1f216149071e9079270cedf881ebc83964c2b037176c98d2945b799f88a905c2a4f0a5555501a71cf7d54a775f5292b57469635d319af8bc9b81", 0x49}, {&(0x7f00000000c0)="442ae6d5488a3b5d1b0a34dc587e7314a9a5971ca423a248530d673eea92a8be4c30151f9f4559cdc5907c61658ab34dd1fd3fa454eec02cf6f120fd1978477626b32a3d", 0x44}, {&(0x7f0000000140)="f71cf2c286c2ef0b1394886d48251b405aa528bf7865ad475e3a93d159f7cc4cd92d3e2e0116ad8a67776eb5", 0x2c}], 0x3}, 0x24000000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:22:54 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 15) 03:22:54 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 1) 03:22:54 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="15b02dd64a16aa3530e57fd9d28e2487c487a5acf95059630ba97f4eb7f6d1f192ede6808db212dcd71d7d999d425f23ef82e743b2013517025c7728d4c6535733c50e152dabb1260a7c9187337a030798158aebc6a7a574deeea78b8ec2aa51100823fbe4f61176987b4f8a44176eeae1f7b6c41af25d2dd64fb9ce6483d691daa681d4d118ebe0d03696306cf631af9505b8441a04cddb93ea18338ab793ece9178407438ee7d250e0e18a9c", 0xad}, {&(0x7f00000003c0)="c2a2b8e843880708", 0x8}, {&(0x7f0000000400)="49f87bdd1b5b7ba8ec6243077e78fc0d5f834f986f6ec1f025bf9ff745f9403c6cd14f8450e1d7b2c35f96c48ca4d89b6ea6e6d30e3b1d2989150bfc3dd9497e2eead484ebb194d56759fa8d8378f57bf1b46bb237d6c61c7bacc8350d3c31cb315c20d04e", 0x65}, {&(0x7f0000000480)="e7c78f54c53b5e1ec96290dcb42b8b", 0xf}], 0x4}, 0x2000004) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x43bcb7afaeeee96, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0xfffffffffffffffd, 0x2}}, 0x10000) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) [ 2041.780440] FAULT_INJECTION: forcing a failure. [ 2041.780440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2041.782647] CPU: 0 PID: 11893 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2041.784159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2041.785639] Call Trace: [ 2041.786219] dump_stack+0x107/0x167 [ 2041.787030] should_fail.cold+0x5/0xa [ 2041.787874] _copy_from_user+0x2e/0x1b0 [ 2041.788588] io_uring_setup+0x9b/0x2980 [ 2041.789455] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2041.790323] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2041.791433] ? wait_for_completion_io+0x270/0x270 [ 2041.792294] ? rcu_read_lock_any_held+0x75/0xa0 [ 2041.793288] ? vfs_write+0x354/0xb10 [ 2041.793981] ? fput_many+0x2f/0x1a0 [ 2041.794763] ? ksys_write+0x1a9/0x260 [ 2041.795452] ? __ia32_sys_read+0xb0/0xb0 [ 2041.796176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2041.797296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2041.798252] do_syscall_64+0x33/0x40 [ 2041.799100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2041.800004] RIP: 0033:0x7f0f2173bb19 [ 2041.800663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2041.803844] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2041.805176] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2041.806428] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2041.807682] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2041.808948] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2041.810205] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2041.816139] FAULT_INJECTION: forcing a failure. [ 2041.816139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2041.818472] CPU: 0 PID: 11895 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2041.819674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2041.821124] Call Trace: [ 2041.821602] dump_stack+0x107/0x167 [ 2041.822247] should_fail.cold+0x5/0xa [ 2041.822943] __alloc_pages_nodemask+0x182/0x600 [ 2041.823762] ? kernel_text_address+0xf2/0x120 [ 2041.824558] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2041.825605] ? unwind_get_return_address+0x55/0xa0 [ 2041.826459] ? create_prof_cpu_mask+0x20/0x20 [ 2041.827429] alloc_pages_current+0x187/0x280 [ 2041.828246] stack_depot_save+0x37f/0x400 [ 2041.829118] kasan_save_stack+0x32/0x40 [ 2041.829828] ? kasan_save_stack+0x1b/0x40 [ 2041.830696] ? kasan_record_aux_stack+0xa2/0xb0 [ 2041.831513] ? call_rcu+0x93/0x9e0 [ 2041.832138] ? slab_free_freelist_hook+0x13e/0x180 [ 2041.833172] ? kfree+0xd7/0x340 [ 2041.833777] ? __free_slab+0xb0/0x1f0 [ 2041.834567] ? qlist_free_all+0x59/0xe0 [ 2041.835302] ? quarantine_reduce+0x184/0x210 [ 2041.836227] ? __kasan_kmalloc.constprop.0+0xa2/0xd0 [ 2041.837107] ? kmem_cache_alloc_trace+0x133/0x320 [ 2041.837944] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2041.839116] ? io_uring_setup+0x14f6/0x2980 [ 2041.839900] ? do_syscall_64+0x33/0x40 [ 2041.840719] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2041.841855] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2041.842959] ? SOFTIRQ_verbose+0x10/0x10 [ 2041.843803] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2041.844744] ? SOFTIRQ_verbose+0x10/0x10 [ 2041.845606] ? lock_acquire+0x197/0x470 [ 2041.846424] ? find_held_lock+0x2c/0x110 [ 2041.847177] ? __delete_object+0xb3/0x100 [ 2041.848036] ? lock_downgrade+0x6d0/0x6d0 [ 2041.848745] ? swap_cgroup_swapoff+0x1a0/0x1a0 [ 2041.849694] kasan_record_aux_stack+0xa2/0xb0 [ 2041.850504] call_rcu+0x93/0x9e0 [ 2041.851243] slab_free_freelist_hook+0x13e/0x180 [ 2041.852237] ? __free_slab+0xb0/0x1f0 [ 2041.853034] kfree+0xd7/0x340 [ 2041.853700] __free_slab+0xb0/0x1f0 [ 2041.854468] qlist_free_all+0x59/0xe0 [ 2041.855276] quarantine_reduce+0x184/0x210 [ 2041.856172] __kasan_kmalloc.constprop.0+0xa2/0xd0 [ 2041.857208] kmem_cache_alloc_trace+0x133/0x320 [ 2041.858170] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2041.859286] io_uring_setup+0x14f6/0x2980 [ 2041.860237] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2041.861366] ? wait_for_completion_io+0x270/0x270 [ 2041.862466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2041.863652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2041.864807] do_syscall_64+0x33/0x40 [ 2041.865641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2041.866785] RIP: 0033:0x7fc2d9b3db19 [ 2041.867630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2041.871755] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2041.873451] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2041.875057] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2041.876650] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2041.878251] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2041.879858] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2056.086172] FAULT_INJECTION: forcing a failure. [ 2056.086172] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.087649] CPU: 0 PID: 11909 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2056.088548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2056.089600] Call Trace: [ 2056.089952] dump_stack+0x107/0x167 [ 2056.090420] should_fail.cold+0x5/0xa [ 2056.090911] ? io_uring_setup+0x258/0x2980 [ 2056.091461] should_failslab+0x5/0x20 [ 2056.091959] kmem_cache_alloc_trace+0x55/0x320 [ 2056.092549] io_uring_setup+0x258/0x2980 [ 2056.093074] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2056.093692] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2056.094337] ? wait_for_completion_io+0x270/0x270 [ 2056.094968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2056.095663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2056.096340] do_syscall_64+0x33/0x40 [ 2056.096538] FAULT_INJECTION: forcing a failure. [ 2056.096538] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.096822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2056.096834] RIP: 0033:0x7f0f2173bb19 [ 2056.096846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2056.096863] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2056.103750] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2056.104662] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2056.105581] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2056.106494] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2056.107408] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:23:08 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 2) 03:23:08 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) 03:23:08 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 16) 03:23:08 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x81, 0x1e54, 0x3) 03:23:08 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:08 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x1000, 0x6, 0x9, 0x5, 0x3ff}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x10001, 0x9, 0x4, 0xffffa4b2}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) [ 2056.108337] CPU: 1 PID: 11911 Comm: syz-executor.5 Not tainted 5.10.256 #1 03:23:08 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="15b02dd64a16aa3530e57fd9d28e2487c487a5acf95059630ba97f4eb7f6d1f192ede6808db212dcd71d7d999d425f23ef82e743b2013517025c7728d4c6535733c50e152dabb1260a7c9187337a030798158aebc6a7a574deeea78b8ec2aa51100823fbe4f61176987b4f8a44176eeae1f7b6c41af25d2dd64fb9ce6483d691daa681d4d118ebe0d03696306cf631af9505b8441a04cddb93ea18338ab793ece9178407438ee7d250e0e18a9c", 0xad}, {&(0x7f00000003c0)="c2a2b8e843880708", 0x8}, {&(0x7f0000000400)="49f87bdd1b5b7ba8ec6243077e78fc0d5f834f986f6ec1f025bf9ff745f9403c6cd14f8450e1d7b2c35f96c48ca4d89b6ea6e6d30e3b1d2989150bfc3dd9497e2eead484ebb194d56759fa8d8378f57bf1b46bb237d6c61c7bacc8350d3c31cb315c20d04e", 0x65}, {&(0x7f0000000480)="e7c78f54c53b5e1ec96290dcb42b8b", 0xf}], 0x4}, 0x2000004) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x43bcb7afaeeee96, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0xfffffffffffffffd, 0x2}}, 0x10000) [ 2056.110005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2056.111859] Call Trace: [ 2056.112534] dump_stack+0x107/0x167 03:23:08 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/2, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x420, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xddb0}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0c0023800600190008000000"], 0x28}}, 0x0) [ 2056.113479] should_fail.cold+0x5/0xa [ 2056.114489] ? create_object.isra.0+0x3a/0xa30 sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000009c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x928, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3b}}}}, [@NL80211_ATTR_TX_RATES={0x484, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x1, 0x80, 0x8, 0x7, 0x8, 0x8001]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x48, 0x1, 0x16, 0xb, 0x5, 0x32ba1af87f2359fe, 0x3, 0xc, 0x6, 0x4, 0x18, 0x24, 0x6c, 0x6, 0x24, 0x6c, 0x2, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9800, 0x9, 0x4, 0xffff, 0x7, 0x3, 0x5]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x12, 0x60, 0x24, 0x36, 0x6, 0x48, 0x48, 0x2, 0x18, 0x12, 0x1, 0x36, 0x16, 0x4, 0x24, 0x6c, 0x16, 0x3, 0x9, 0x4, 0x18, 0x12, 0x6c, 0x11, 0x1, 0x1, 0x48, 0x36]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x2, 0x1b, 0x60, 0x2, 0x60, 0x24, 0x6, 0x77]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x4, 0x6, 0x48, 0x36, 0x9, 0x36, 0x24, 0x6, 0x18, 0x4, 0x18, 0x1, 0xe86e486fd32759a3, 0x1b, 0xc]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x2}, {0x3}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x7, 0x8}, {0x2, 0x2}, {0x1, 0x1}, {}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0xa}, {0x6}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x9}, {0x7, 0x7}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x5}, {0x4, 0x6}, {0x5, 0x5}, {0x6}, {0x7, 0x8}, {}, {0x5, 0xa}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x1}, {0x6, 0x5}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x3}, {0x0, 0x5}, {0x4, 0xa}, {0x6, 0x2}, {0x6, 0x8}, {0x3, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x3}, {0x3, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x2966, 0xadac, 0x7fff, 0x6, 0x7ff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x11c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x18, 0x2, 0x3, 0x36, 0x24, 0xc117733a27faefb3, 0xc, 0x16, 0x6c, 0x16, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4}, {0x4, 0x9}, {0x3, 0x4}, {0x7, 0x5}, {0x6, 0x2}, {0x3}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x4}, {0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x4}, {0x4, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x8}, {0x1, 0x6}, {0x4, 0x1d}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0x3}, {0x2, 0x8}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x5}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0x8}, {0x7, 0x1}, {0x2, 0x5}, {0x5, 0x2}, {0x2, 0x1}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x6, 0x3}, {0x3, 0x5}, {}, {0x5, 0x4}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0xa}, {0x4, 0x6}, {0x1, 0x6}, {}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x3, 0x3, 0x24, 0x18, 0x6]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x3}, {0x2}, {0x1, 0x7}, {0x1}, {}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x6, 0x8}, {0x2, 0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x6, 0x7}, {0x7}, {0x6, 0x1}, {0x2, 0x5}, {0x3, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0x8}, {0x5, 0x3}, {0x4, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0x6}, {0x7, 0x8}, {0x7, 0x4}, {0x3, 0x2}, {0x3, 0x3}, {0x3, 0x4}, {0x3, 0x7}, {0x2, 0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x7}, {0x5, 0x7}, {0x6, 0xa}, {0x2, 0x5}, {0x4, 0x1}, {0x4, 0x2}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x3}, {0x4}, {0x6, 0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x8}, {0x7, 0x5}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x8}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x2}, {0x5, 0x9}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x6, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x6, 0x2}, {}, {0x1, 0x1e}, {0x1, 0x4}, {0x7, 0x4}, {0x5, 0xa}, {}, {0x0, 0x3}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x5}, {}, {0x0, 0x3}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0x4}, {0x3, 0x5}, {0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x7}]}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8, 0x6000, 0x8, 0xf4, 0x7, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x8}, {0x5, 0xa}, {0x4, 0x4}, {0x2}, {0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x1}, {0x4, 0x5}, {0x2}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x1}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x3}, {0x3, 0x6}, {0x6, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x7, 0x4}, {0x4, 0x9}, {0x4, 0xa}, {}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x6}, {0x7}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x3}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x8}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6c, 0x3f, 0x1, 0x3ff, 0xff, 0x1, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x8}, {0x4}, {0x3, 0x4}, {0x6, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0x1}, {0x6}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x2}, {0x5}, {0x3, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x9}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0xa}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0x5, 0xa}, {0x7, 0x6}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x7}, {0x4}, {0x4, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9000, 0x5, 0x1, 0x7, 0x3ff, 0x1ff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x48, 0x24, 0x48, 0x9, 0x48, 0x6, 0x12, 0x48, 0x30, 0x48, 0x18, 0x6c, 0x1, 0x24, 0xb, 0x18, 0x40, 0xc]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x60, 0x60, 0x6, 0x60, 0x6c, 0x30, 0x6, 0x16, 0x48, 0x5, 0x36, 0x3c, 0x12, 0x1b, 0x6c, 0x60]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x16, 0x16, 0x36, 0x13, 0x36, 0x24, 0xc, 0x6, 0x4, 0x6, 0x1, 0x3, 0x16, 0x1, 0xe87338dba42da1aa, 0x3a, 0x36, 0xc, 0x36, 0x2, 0x60, 0x6, 0x30, 0x24, 0x60, 0x6b19c14d2e4ff826, 0x12, 0x4, 0xb, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x30, 0x60, 0x48, 0x48, 0x1b, 0x5, 0x18, 0x12, 0x0, 0x16, 0x4ba1cbd85e02d87, 0x48, 0x6c, 0x48, 0xc, 0x4, 0x5, 0x36, 0x16, 0x30, 0xc, 0x60, 0x14, 0x36, 0x6, 0x4, 0x30]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x12, 0x12, 0x6c, 0x16, 0x6c, 0x60, 0x14, 0x6, 0x1, 0x0, 0x12, 0xb, 0x16, 0x18, 0xb, 0x1, 0xb, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x3, 0x16, 0x26, 0x2e, 0x16]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x0, 0x6, 0x1ff, 0x8, 0x2, 0x800, 0xd81]}}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x4, 0x4, 0x3c8, 0x0, 0xc0f9, 0x1, 0x6]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x1, 0x3]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x8}, {0x7, 0x4}, {0x6, 0x8}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x3, 0x8}, {0x3, 0x7}, {0x3}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x9}, {0x7}, {0x2}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x3, 0x9}, {0x7, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x6}, {}, {0x6, 0xa}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x6}, {0x7, 0x3}, {0x4, 0x5}, {0x1, 0x8}, {0x5, 0x1}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0x1}, {0x5, 0xa}, {0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x4, 0x4}, {0x7, 0x9}, {0x7, 0x5}, {0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x2}, {0x5, 0xa}, {0x3, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x2}, {0x6, 0x2}, {0x7, 0x9}, {0x2, 0xa}, {0x5}, {0x2, 0x6}, {0x3, 0x7}, {0x7, 0x4}, {0x6}, {0x5}, {0x4, 0x4}, {0x3, 0x3}, {0x5, 0x8}, {0x2, 0x5}, {0x5, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x3}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x7, 0x7}, {0x3, 0x7}, {0x2}, {0x6, 0x3}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x7}, {0x2, 0x6}, {0x5, 0x5}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0xa}, {0x7, 0x1}, {0x2}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0x3}, {0x2, 0x4}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x5, 0x4, 0x9, 0x101, 0x9, 0xf54d, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x278, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x79, 0x3, 0x6, 0x4, 0xf8, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3e, 0x1, 0x7ff, 0x5, 0x0, 0xffff, 0xc7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x9, 0x9, 0x84a, 0x8, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x1, 0x6}, {0x5, 0x7}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x7, 0x8}, {0x4, 0x6}, {0x4, 0x4}, {0x7, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x6, 0x3}, {0x5, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x2}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0x4}, {0x7, 0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x9}, {}, {0x4}, {0x2, 0x5}, {0x6, 0x8}, {0x4, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x3, 0x4}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x8}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x2}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x7d01ee6d763f4c53, 0x6c, 0x7e, 0x1b, 0xc, 0x6c, 0x5, 0x2a, 0x5c, 0x16, 0xc, 0x4, 0x2, 0x5, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x184, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3f, 0x200, 0x7f, 0x8000, 0x1000, 0x1da, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfbff, 0x9, 0x7, 0x100, 0x8, 0x401, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0x9}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x0, 0x7}, {}, {0x7, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x12, 0x2, 0x4, 0x4, 0x1, 0x30, 0x6c, 0x24, 0x6c, 0x0, 0x9, 0x48, 0x24, 0x18, 0x5, 0x9, 0x1b, 0x36, 0x12, 0xc, 0x0, 0x36, 0x24, 0x3, 0xb, 0x4, 0x3, 0x3, 0x18, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x6, 0x0, 0x8, 0x7fff, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x3}, {0x7, 0x3}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x3}, {0x4}, {0x2, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x7, 0x5}, {0x3, 0xa}, {}, {0x5, 0x6}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x2, 0x4}, {0x4}, {0x2, 0x5}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x3}, {0x2, 0x4}, {0x2}, {0x7, 0xa}, {0x5, 0x9}, {}, {0x6, 0xa}, {0x3, 0x3}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x3, 0x7}, {0x6, 0x9}, {0x1, 0x4}, {0x7}, {0x3, 0x1}, {0x1}, {0x7, 0x6}, {0x3, 0x6}, {0x7, 0x4}, {0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x0, 0x9}, {0x2, 0x3}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x6, 0x8}, {0x6, 0x12}, {0x2, 0x8}, {0x6, 0x4}, {0x5, 0x4}, {0x7, 0x2}, {0x4, 0x7}, {0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x3}, {0x4, 0xa}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0x4}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x11}, {0x3, 0x4}, {0x5, 0x8}, {0x3, 0x8}, {0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x4}, {0x5}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x8}, {0x4, 0x5}, {0x4, 0x1}, {0x2, 0x6}, {0x5, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x7}, {0x2, 0xf}, {0x0, 0x6}, {0x4, 0x4}, {0x4}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x1}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0x8}, {0x2, 0x9}, {0x4, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1}, {0x2, 0x6}, {0x7, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x3, 0x1}, {0x2, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x2, 0x6}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x5}, {0x7, 0x3}, {0x3}, {0x3, 0x4}, {0x6, 0x4}, {0x7, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {0x6, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x0, 0x27, 0x16, 0x3f, 0x18, 0x1, 0x6c, 0x35, 0x60, 0x0, 0x4, 0x30, 0x9, 0x16, 0x4, 0x24, 0x24, 0x60, 0x16, 0x16, 0x24, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf50f, 0x2, 0x4, 0x15, 0x8, 0x5, 0x1000, 0x3]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0x94, 0x9, 0x2, 0x1, 0xb5e, 0x7]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{}, {0x2, 0x2}, {}, {0x5, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0xa}, {0x2, 0x9}, {0x7, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0x3}, {0x4, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0xa}, {0x7}, {}, {0x1, 0xa}, {0x2, 0x7}, {0x6, 0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x4}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x9, 0x6c, 0x4, 0x9, 0x16, 0xc, 0x1, 0x6c, 0x0, 0x6c, 0x18, 0x12, 0x1b, 0x60, 0x9, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x3f, 0x7, 0x6, 0xfff, 0x5, 0x4, 0x9]}}]}, @NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x1b, 0x2, 0x6c, 0x12, 0x2, 0x1, 0x6, 0x0, 0xc, 0x1, 0x16, 0x30, 0x36, 0x6, 0x30, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbea, 0x5, 0x8000, 0xfff8, 0x101, 0x7fff, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0x4}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0x3}, {0x7, 0x7}, {0x4, 0xa}, {0x6, 0x8}, {0x7}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0x6}, {0x5, 0x2}, {0x5, 0x7}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x7}, {0x2, 0x4}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x8}, {0x3, 0x2}, {0x5, 0x8}, {0x1, 0x4}, {0x1}, {0x3, 0x3}, {0x3, 0x4}, {0x4}, {0x1, 0x7}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x2}, {0x3, 0xa}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x7, 0x3}, {0x2, 0x5}, {0x7}, {0x3, 0x4}, {0x7, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x5}, {0x1}, {0x2, 0x9}, {0x3}, {0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x8}, {0x5, 0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x8}, {0x1, 0x7}, {0x5}, {0x5, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x1}, {0x5, 0x8}, {0x3, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0x1}, {0x5, 0x6}, {0x2, 0xa}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x9}, {0x6, 0x6}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0xa}, {0x3}, {0x4, 0xa}, {0x6, 0x5}, {0x4, 0x4}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0xa}, {0x0, 0x9}, {0x5, 0x9}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x4, 0x3, 0x1b, 0x17, 0xb, 0x6, 0x1, 0x30, 0x9, 0x18, 0x6c, 0x36, 0x12, 0x1b, 0x48, 0x24, 0x1b, 0xc, 0x3, 0x1b, 0x1b, 0x5]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x4, 0x2}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0x2}, {0x4, 0x8}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0xa}, {0x4, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0x1}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x8}, {0x1}, {0x1, 0x3}, {0x3, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x4, 0x3}, {0x1, 0x9}, {0x2, 0x4}, {}, {0x0, 0x2}, {0x5, 0x7}, {0x7, 0x6}, {0x4, 0x2}, {0x3}, {0x1, 0xa}, {0x4, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x2}, {}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x1b, 0x16, 0x60, 0x1b, 0x3, 0x2, 0x6c, 0x3, 0x60, 0x9, 0x24, 0x4, 0x16, 0x1, 0x3, 0x24, 0x18, 0x30, 0x12, 0x36, 0x48, 0x16, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x200, 0x800, 0x81, 0xd7e6, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xd38, 0x1, 0x7ff, 0x1, 0x4, 0x6, 0xfff9]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0xb, 0x3, 0x30, 0x31, 0x6, 0x4, 0x24, 0x30, 0x3, 0x1b, 0x12, 0x0, 0x5, 0x2, 0x1, 0x9, 0x5, 0x48, 0x3, 0x5, 0x30]}]}]}]}, 0x928}, 0x1, 0x0, 0x0, 0x48010}, 0x4008804) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17) [ 2056.115499] should_failslab+0x5/0x20 [ 2056.116415] kmem_cache_alloc+0x5b/0x310 [ 2056.117283] create_object.isra.0+0x3a/0xa30 [ 2056.118217] kmemleak_alloc_percpu+0xa0/0x100 [ 2056.119180] pcpu_alloc+0x4e2/0x1240 [ 2056.119990] ? io_async_queue_proc+0x80/0x80 [ 2056.120915] percpu_ref_init+0x31/0x3d0 [ 2056.121760] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2056.122887] io_uring_setup+0x14f6/0x2980 [ 2056.123792] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2056.124904] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2056.126009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2056.127079] do_syscall_64+0x33/0x40 [ 2056.127868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2056.128937] RIP: 0033:0x7fc2d9b3db19 [ 2056.129711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2056.133593] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2056.135213] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2056.136717] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2056.138223] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2056.139745] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2056.141252] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2056.176203] FAULT_INJECTION: forcing a failure. [ 2056.176203] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.177658] CPU: 0 PID: 11923 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2056.178520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2056.179546] Call Trace: [ 2056.179884] dump_stack+0x107/0x167 [ 2056.180340] should_fail.cold+0x5/0xa [ 2056.180806] ? create_object.isra.0+0x3a/0xa30 [ 2056.181388] should_failslab+0x5/0x20 [ 2056.181860] kmem_cache_alloc+0x5b/0x310 [ 2056.182366] create_object.isra.0+0x3a/0xa30 [ 2056.182902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2056.183537] kmem_cache_alloc_trace+0x151/0x320 [ 2056.184115] io_uring_setup+0x258/0x2980 [ 2056.184618] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2056.185220] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2056.185835] ? wait_for_completion_io+0x270/0x270 [ 2056.186457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2056.187111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2056.187741] do_syscall_64+0x33/0x40 [ 2056.188197] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2056.188823] RIP: 0033:0x7f0f2173bb19 [ 2056.189279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2056.191532] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2056.192476] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2056.193344] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2056.194213] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2056.195102] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2056.195984] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:23:08 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 3) 03:23:08 executing program 3: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:23:08 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) 03:23:08 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:08 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x349040, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x22202, 0x0) 03:23:08 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="15b02dd64a16aa3530e57fd9d28e2487c487a5acf95059630ba97f4eb7f6d1f192ede6808db212dcd71d7d999d425f23ef82e743b2013517025c7728d4c6535733c50e152dabb1260a7c9187337a030798158aebc6a7a574deeea78b8ec2aa51100823fbe4f61176987b4f8a44176eeae1f7b6c41af25d2dd64fb9ce6483d691daa681d4d118ebe0d03696306cf631af9505b8441a04cddb93ea18338ab793ece9178407438ee7d250e0e18a9c", 0xad}, {&(0x7f00000003c0)="c2a2b8e843880708", 0x8}, {&(0x7f0000000400)="49f87bdd1b5b7ba8ec6243077e78fc0d5f834f986f6ec1f025bf9ff745f9403c6cd14f8450e1d7b2c35f96c48ca4d89b6ea6e6d30e3b1d2989150bfc3dd9497e2eead484ebb194d56759fa8d8378f57bf1b46bb237d6c61c7bacc8350d3c31cb315c20d04e", 0x65}, {&(0x7f0000000480)="e7c78f54c53b5e1ec96290dcb42b8b", 0xf}], 0x4}, 0x2000004) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:23:08 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) 03:23:08 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x80010, r0, 0x183ee000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:23:08 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) 03:23:08 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:23:22 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:22 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="15b02dd64a16aa3530e57fd9d28e2487c487a5acf95059630ba97f4eb7f6d1f192ede6808db212dcd71d7d999d425f23ef82e743b2013517025c7728d4c6535733c50e152dabb1260a7c9187337a030798158aebc6a7a574deeea78b8ec2aa51100823fbe4f61176987b4f8a44176eeae1f7b6c41af25d2dd64fb9ce6483d691daa681d4d118ebe0d03696306cf631af9505b8441a04cddb93ea18338ab793ece9178407438ee7d250e0e18a9c", 0xad}, {&(0x7f00000003c0)="c2a2b8e843880708", 0x8}, {&(0x7f0000000400)="49f87bdd1b5b7ba8ec6243077e78fc0d5f834f986f6ec1f025bf9ff745f9403c6cd14f8450e1d7b2c35f96c48ca4d89b6ea6e6d30e3b1d2989150bfc3dd9497e2eead484ebb194d56759fa8d8378f57bf1b46bb237d6c61c7bacc8350d3c31cb315c20d04e", 0x65}, {&(0x7f0000000480)="e7c78f54c53b5e1ec96290dcb42b8b", 0xf}], 0x4}, 0x2000004) 03:23:22 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mmap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2, 0x10, 0xffffffffffffffff, 0x45f05000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/22, 0x16}, &(0x7f0000001080)=0x40) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:23:22 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000280)={0x3f, 0xffffffc1, 0x8c0, 0xd0, 0x19, "7bf0bc6cd49a77ae06535839bea3b86e0fbb44"}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) preadv(r0, &(0x7f00000013c0), 0x0, 0x2, 0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) openat(r1, &(0x7f0000000240)='./file1/file0\x00', 0x4100, 0x90) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x2000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000000)) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:23:22 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 4) 03:23:22 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 17) 03:23:22 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) 03:23:22 executing program 0: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x40010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) fallocate(0xffffffffffffffff, 0x4, 0x4f, 0x81) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2070.109724] FAULT_INJECTION: forcing a failure. [ 2070.109724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2070.111460] CPU: 0 PID: 11961 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2070.112431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.113608] Call Trace: [ 2070.113985] dump_stack+0x107/0x167 [ 2070.114502] should_fail.cold+0x5/0xa [ 2070.115045] __alloc_pages_nodemask+0x182/0x600 [ 2070.115716] ? lock_release+0x680/0x680 [ 2070.116281] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2070.117139] ? lock_downgrade+0x6d0/0x6d0 [ 2070.117744] alloc_pages_current+0x187/0x280 [ 2070.118357] kmalloc_order+0x35/0x160 [ 2070.118889] kmalloc_order_trace+0x14/0xa0 [ 2070.119486] io_uring_setup+0x33c/0x2980 [ 2070.120044] FAULT_INJECTION: forcing a failure. [ 2070.120044] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.121585] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2070.122256] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2070.122977] ? wait_for_completion_io+0x270/0x270 [ 2070.123673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.124398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.125118] do_syscall_64+0x33/0x40 [ 2070.125631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.126371] RIP: 0033:0x7f0f2173bb19 [ 2070.126897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.129437] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2070.130487] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2070.131491] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2070.132479] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2070.133464] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2070.134449] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2070.135473] CPU: 1 PID: 11970 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2070.137135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.139102] Call Trace: [ 2070.139754] dump_stack+0x107/0x167 [ 2070.140623] should_fail.cold+0x5/0xa [ 2070.141549] ? create_object.isra.0+0x3a/0xa30 [ 2070.142647] should_failslab+0x5/0x20 [ 2070.143569] kmem_cache_alloc+0x5b/0x310 [ 2070.144552] create_object.isra.0+0x3a/0xa30 [ 2070.145606] kmemleak_alloc_percpu+0xa0/0x100 [ 2070.146703] pcpu_alloc+0x4e2/0x1240 [ 2070.147616] ? io_async_queue_proc+0x80/0x80 [ 2070.148684] percpu_ref_init+0x31/0x3d0 [ 2070.149655] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2070.150945] io_uring_setup+0x14f6/0x2980 [ 2070.151954] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2070.153155] ? wait_for_completion_io+0x270/0x270 [ 2070.154330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.155588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.156814] do_syscall_64+0x33/0x40 [ 2070.157702] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.158920] RIP: 0033:0x7fc2d9b3db19 [ 2070.159833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.164268] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2070.166099] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2070.167823] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2070.169532] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2070.171251] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2070.172956] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:23:22 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:22 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:22 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:22 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xff4e) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40810) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) 03:23:22 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:23:22 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 5) 03:23:22 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) [ 2070.300580] FAULT_INJECTION: forcing a failure. [ 2070.300580] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.303125] CPU: 1 PID: 11988 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2070.304673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 03:23:22 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x2}, {0x101}, 0x88, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="4ecbccc618efe49e0ef99b325c0b45c55c5d3eb78028e28a28c0195aa9b479e9221a2dc973153ccf8df5d037bc1168fc368663b1454d01853d9ce2d84304b2dd7e6c4fd13135a6c82e5b23decb054ca543a20eb2d960d5885edc9e23213fbc32f8752e41a4f2218ab8da8d1b24ef4ecd05cd9153e72f608e3596f0b8bfb2dda02ac7690fa27ed5eeb1da9d9346ca52de26ba4dfe2abfcc8850912d3b5f403e423c395646e77ce913c693ae81bf7af986dcc6d1f44c6e076b044c1ef77a86e9b33f2b7332ab167caec815a522be3da495cb323ec2cdcf1fef9e0345895db40246bbde", 0xe2, 0x0, &(0x7f0000000480)={0x2, 0x1ad, {0x1, 0xc, 0x11d, "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", 0x83, "35a491ffe3d565ec6dc26b15e4acea715ec07521a81271e39f2edfb63728deffa46fd6cc82eb4c294dd67e82092b75cef90a1f5835d7fbf4f12c3f7c82fbd5ebcf5ce3b36d85089eda9eeb84ce30b9248d851904bb9354a7ca52c9556be975d158e177880f1926626d011d33d2deb5579957c70ec5dcd1050f22dbdb0d726d09abf1f0"}, 0xd9, "7d59ac6be31d8a3818aaa50f7717cedef9a8746fbc5f04e926a846dcf69f5dc783d3307852fe447c0c2c91876ba54d47f58a2bd46ea244a67f907597d1f886db4abd0af3c1c957e83f90dc5a3021539e7eb0f1fa3c22dfd2357d4d226e74e6f83d4b86ec40f2607eda74984611cd1ed4585fbbf1885fd99d1df2c79d87ffde19fa93eb8fbb865189bdefe93c1031ad23d32333f23a53befd130d79a6f4b02ee05af0110d6798ee59b6fdccb17e0c69124d3d2a4f07247dacc9f7fd1f8b385ab876153d302b828563fee5e9b2620a6473e77e8f7aa170dfd13d"}, 0x292}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:23:22 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x14a013, 0xffffffffffffffff, 0x1e0fd000) [ 2070.306537] Call Trace: [ 2070.307253] dump_stack+0x107/0x167 [ 2070.308081] should_fail.cold+0x5/0xa [ 2070.308939] ? create_object.isra.0+0x3a/0xa30 [ 2070.309969] should_failslab+0x5/0x20 [ 2070.310822] kmem_cache_alloc+0x5b/0x310 [ 2070.311742] create_object.isra.0+0x3a/0xa30 [ 2070.312731] ? kasan_unpoison_shadow+0x33/0x50 [ 2070.313754] kmalloc_order+0xfe/0x160 [ 2070.314616] kmalloc_order_trace+0x14/0xa0 [ 2070.315583] io_uring_setup+0x33c/0x2980 [ 2070.316495] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2070.317576] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2070.318689] ? wait_for_completion_io+0x270/0x270 [ 2070.319804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.320980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.322137] do_syscall_64+0x33/0x40 [ 2070.322975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.324129] RIP: 0033:0x7f0f2173bb19 [ 2070.324960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.329062] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2070.330725] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2070.332291] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2070.333857] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2070.335438] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2070.337003] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:23:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) write$snapshot(r0, &(0x7f0000000040)="64e129f43b31fa58cef9a8f82dc19bd4bd76a2b637348c8f825020c92dbdbaa57a175a109e7f1fa2565c9ca262c8a44e795e9ea9fd84cdff3a851f28d7f3d74e44523d8af19185ea85ee8b826b793dbf8a498e3af9530fabcaeaca72491226148488ad7f9a5d9e1e727dd248c2ab", 0x6e) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f00007fc000/0x4000)=nil, 0x4000, 0x0, 0xa031, r2, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_io_uring_complete(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r3, 0x0) clone3(&(0x7f0000000340)={0x100200, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0xd}, &(0x7f0000000440)=""/185, 0xb9, &(0x7f0000000240)=""/135, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r3}}, 0x58) mmap(&(0x7f0000845000/0x2000)=nil, 0x2000, 0x8, 0x20050, r4, 0x6) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x6, 0x5, 0x7) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r5 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x298683, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r5, 0x0) openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) 03:23:37 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xffffffffffffffff) 03:23:37 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:37 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 6) 03:23:37 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x11, 0xffffffffffffffff, 0x9cf47000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:23:37 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0x20050, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:23:37 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:37 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x8001, 0x3, 0x4) 03:23:37 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 18) [ 2085.435229] FAULT_INJECTION: forcing a failure. [ 2085.435229] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.438041] CPU: 1 PID: 12027 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2085.439750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.441779] Call Trace: [ 2085.442421] dump_stack+0x107/0x167 [ 2085.443305] should_fail.cold+0x5/0xa [ 2085.444248] ? io_uring_setup+0x40b/0x2980 [ 2085.445273] should_failslab+0x5/0x20 [ 2085.446207] kmem_cache_alloc_trace+0x55/0x320 [ 2085.447310] io_uring_setup+0x40b/0x2980 [ 2085.448311] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2085.449476] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2085.450701] ? wait_for_completion_io+0x270/0x270 [ 2085.451905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.453176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.454428] do_syscall_64+0x33/0x40 [ 2085.455328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.456589] RIP: 0033:0x7f0f2173bb19 [ 2085.457487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.461900] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2085.463751] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2085.465480] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2085.467209] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2085.468911] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2085.470601] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2085.488484] FAULT_INJECTION: forcing a failure. [ 2085.488484] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.490154] CPU: 0 PID: 12024 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2085.491142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.492345] Call Trace: [ 2085.492726] dump_stack+0x107/0x167 [ 2085.493252] should_fail.cold+0x5/0xa [ 2085.493803] ? percpu_ref_init+0xd8/0x3d0 [ 2085.494396] should_failslab+0x5/0x20 [ 2085.494918] kmem_cache_alloc_trace+0x55/0x320 [ 2085.495581] ? io_async_queue_proc+0x80/0x80 [ 2085.496198] percpu_ref_init+0xd8/0x3d0 [ 2085.496744] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2085.497484] io_uring_setup+0x14f6/0x2980 [ 2085.498066] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2085.498758] ? wait_for_completion_io+0x270/0x270 [ 2085.499447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.500167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.500878] do_syscall_64+0x33/0x40 [ 2085.501388] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.502098] RIP: 0033:0x7fc2d9b3db19 [ 2085.502616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.505161] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2085.506198] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2085.507195] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2085.508167] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2085.509136] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2085.510118] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:23:37 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) 03:23:37 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', 0x0) setreuid(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:37 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x17) 03:23:37 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000011c0), 0x3, 0x505980) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x4008004) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0xa031, 0xffffffffffffffff, 0x800000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) timerfd_create(0x4, 0x80000) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x10000, 0x10, 0xa}, 0x18) r4 = fcntl$dupfd(r2, 0x0, r3) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=ANY=[@ANYBLOB="000000050601023700000000000000000000060500010007f2f74400"], 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x20004808) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001100)={0x2, &(0x7f00000010c0)=[{0x67, 0x1000, &(0x7f0000000000)="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", 0x1, 0x1}, {0x80000001, 0x97, &(0x7f0000001000)="4aa487582b4033ffa34ff37dd5cbbb8eb63a97677c127aa79ecc00752ecdf47390efdfcacaa1cb783d3fef757d45cbcf0ac2111bacf1291c40ce176f454ef6cae65526fbc7b1511badbd4ca209012061be1cc1c3782e689ab6ab372b493a7dcb613ec723018aa356696307a91fcba7adb6d8817b796681d28712009ff5b1fe0d8ae6daa387ee68bb90f1e5eb7ad8eef4145af1b2d530ad"}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000001180)=0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) 03:23:37 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:23:37 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x4, 0x5, 0x6, 0x11, 0x101, 0x4}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = signalfd4(r0, &(0x7f0000000240)={[0x8000]}, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x4, 0x100, 0x1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r2 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r7 = syz_io_uring_setup(0x7d0b, &(0x7f0000000140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r11, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r6, r9, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0x2000}}, 0x60e) 03:23:37 executing program 7: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x100010, 0xffffffffffffffff, 0x46d2b000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:23:38 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', 0x0) setreuid(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:38 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x68) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:23:38 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 7) [ 2085.715768] FAULT_INJECTION: forcing a failure. [ 2085.715768] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.717252] CPU: 0 PID: 12060 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2085.718105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.719138] Call Trace: [ 2085.719480] dump_stack+0x107/0x167 [ 2085.719933] should_fail.cold+0x5/0xa [ 2085.720402] ? create_object.isra.0+0x3a/0xa30 [ 2085.720957] should_failslab+0x5/0x20 [ 2085.721426] kmem_cache_alloc+0x5b/0x310 [ 2085.721932] create_object.isra.0+0x3a/0xa30 [ 2085.722481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2085.723106] kmem_cache_alloc_trace+0x151/0x320 [ 2085.723693] io_uring_setup+0x40b/0x2980 [ 2085.724203] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2085.724793] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2085.725423] ? wait_for_completion_io+0x270/0x270 [ 2085.726036] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.726676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.727319] do_syscall_64+0x33/0x40 [ 2085.727789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.728425] RIP: 0033:0x7f0f2173bb19 [ 2085.728884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.731135] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2085.732072] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2085.732948] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2085.733816] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2085.734675] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2085.735545] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:23:51 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 19) 03:23:51 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 8) [ 2098.805475] FAULT_INJECTION: forcing a failure. [ 2098.805475] name failslab, interval 1, probability 0, space 0, times 0 [ 2098.806865] CPU: 1 PID: 12069 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2098.807684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2098.808657] Call Trace: [ 2098.808977] dump_stack+0x107/0x167 [ 2098.809404] should_fail.cold+0x5/0xa [ 2098.809854] ? create_object.isra.0+0x3a/0xa30 [ 2098.810394] should_failslab+0x5/0x20 [ 2098.810841] kmem_cache_alloc+0x5b/0x310 [ 2098.811316] create_object.isra.0+0x3a/0xa30 [ 2098.811564] FAULT_INJECTION: forcing a failure. [ 2098.811564] name failslab, interval 1, probability 0, space 0, times 0 [ 2098.811838] kmemleak_alloc_percpu+0xa0/0x100 [ 2098.811855] pcpu_alloc+0x4e2/0x1240 [ 2098.811878] ? io_tctx_exit_cb+0xf0/0xf0 [ 2098.816376] percpu_ref_init+0x31/0x3d0 [ 2098.816842] io_uring_setup+0x47a/0x2980 [ 2098.817316] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2098.817883] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2098.818472] ? wait_for_completion_io+0x270/0x270 [ 2098.819052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2098.819669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2098.820273] do_syscall_64+0x33/0x40 [ 2098.820709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2098.821313] RIP: 0033:0x7f0f2173bb19 [ 2098.821748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2098.823909] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2098.824791] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2098.825615] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2098.826437] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2098.827263] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2098.828093] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2098.828950] CPU: 0 PID: 12071 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2098.830888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2098.833175] Call Trace: [ 2098.833907] dump_stack+0x107/0x167 [ 2098.834909] should_fail.cold+0x5/0xa [ 2098.835966] ? create_object.isra.0+0x3a/0xa30 [ 2098.837207] should_failslab+0x5/0x20 [ 2098.838244] kmem_cache_alloc+0x5b/0x310 [ 2098.839360] create_object.isra.0+0x3a/0xa30 [ 2098.840576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2098.841972] kmem_cache_alloc_trace+0x151/0x320 [ 2098.843236] ? io_async_queue_proc+0x80/0x80 [ 2098.844452] percpu_ref_init+0xd8/0x3d0 [ 2098.845542] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2098.847014] io_uring_setup+0x14f6/0x2980 [ 2098.848175] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2098.849540] ? wait_for_completion_io+0x270/0x270 03:23:51 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:23:51 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x27a101) close_range(r2, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:23:51 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:23:51 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x4000010, 0xffffffffffffffff, 0xfffff000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) dup2(0xffffffffffffffff, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2) 03:23:51 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', 0x0) setreuid(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:23:51 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x3000) [ 2098.850871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2098.852509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2098.853910] do_syscall_64+0x33/0x40 [ 2098.854924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2098.856322] RIP: 0033:0x7fc2d9b3db19 [ 2098.857337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2098.862325] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2098.863283] FAULT_INJECTION: forcing a failure. [ 2098.863283] name failslab, interval 1, probability 0, space 0, times 0 [ 2098.864312] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2098.864326] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2098.864339] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2098.864357] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2098.872404] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2098.874128] CPU: 1 PID: 12077 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2098.874948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2098.875901] Call Trace: 03:23:51 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 9) [ 2098.876254] dump_stack+0x107/0x167 [ 2098.876845] should_fail.cold+0x5/0xa [ 2098.877318] ? create_object.isra.0+0x3a/0xa30 [ 2098.877841] should_failslab+0x5/0x20 [ 2098.878275] kmem_cache_alloc+0x5b/0x310 [ 2098.878738] create_object.isra.0+0x3a/0xa30 [ 2098.879244] kmemleak_alloc_percpu+0xa0/0x100 [ 2098.879771] pcpu_alloc+0x4e2/0x1240 [ 2098.880203] ? io_tctx_exit_cb+0xf0/0xf0 [ 2098.880664] percpu_ref_init+0x31/0x3d0 [ 2098.881118] io_uring_setup+0x47a/0x2980 [ 2098.881583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2098.882132] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2098.882704] ? wait_for_completion_io+0x270/0x270 [ 2098.883271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2098.883879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2098.884468] do_syscall_64+0x33/0x40 [ 2098.884892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2098.885473] RIP: 0033:0x7f0f2173bb19 [ 2098.885896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2098.888034] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2098.888936] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2098.889742] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2098.890549] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2098.891358] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2098.892172] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:23:51 executing program 4: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:23:51 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 10) 03:23:51 executing program 4: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:23:51 executing program 2: stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [{0x7fff, 0x64}, {0x3, 0x3}], r0}, 0x18, 0x3) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=0x80000001, 0x8, 0x2) 03:23:51 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)) setreuid(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) [ 2098.991900] FAULT_INJECTION: forcing a failure. [ 2098.991900] name failslab, interval 1, probability 0, space 0, times 0 [ 2098.993241] CPU: 1 PID: 12093 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2098.994032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2098.994978] Call Trace: [ 2098.995291] dump_stack+0x107/0x167 [ 2098.995713] should_fail.cold+0x5/0xa [ 2098.996146] ? percpu_ref_init+0xd8/0x3d0 [ 2098.996613] should_failslab+0x5/0x20 [ 2098.997061] kmem_cache_alloc_trace+0x55/0x320 [ 2098.997594] ? io_tctx_exit_cb+0xf0/0xf0 [ 2098.998058] percpu_ref_init+0xd8/0x3d0 [ 2098.998511] io_uring_setup+0x47a/0x2980 [ 2098.998981] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2098.999578] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2099.000176] ? wait_for_completion_io+0x270/0x270 [ 2099.000772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2099.001413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2099.002034] do_syscall_64+0x33/0x40 [ 2099.002475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2099.003085] RIP: 0033:0x7f0f2173bb19 [ 2099.003526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.005643] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2099.006558] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2099.007417] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2099.008268] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2099.009092] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2099.009933] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:24:04 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 20) 03:24:04 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 11) 03:24:04 executing program 7: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000000)={'veth0_to_hsr\x00', @ifru_map}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x40010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) [ 2112.576538] FAULT_INJECTION: forcing a failure. 03:24:04 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)) setreuid(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:24:04 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/69, 0x45, 0x0, &(0x7f0000000080)=""/129, 0x81}, &(0x7f0000000180)=0x40) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) 03:24:04 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, r0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x65) 03:24:04 executing program 4: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:24:04 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r0, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x80000001, 0x8, '9P2000.u'}, 0x15) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2112.576538] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.579970] CPU: 1 PID: 12107 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2112.581425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.583170] Call Trace: [ 2112.583754] dump_stack+0x107/0x167 [ 2112.584513] should_fail.cold+0x5/0xa [ 2112.585314] ? create_object.isra.0+0x3a/0xa30 [ 2112.586272] should_failslab+0x5/0x20 [ 2112.587069] kmem_cache_alloc+0x5b/0x310 [ 2112.587962] create_object.isra.0+0x3a/0xa30 [ 2112.588615] FAULT_INJECTION: forcing a failure. [ 2112.588615] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.588882] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2112.588910] kmem_cache_alloc_trace+0x151/0x320 [ 2112.592397] ? io_async_queue_proc+0x80/0x80 [ 2112.593323] percpu_ref_init+0xd8/0x3d0 [ 2112.594156] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2112.595293] io_uring_setup+0x14f6/0x2980 [ 2112.596170] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2112.597218] ? wait_for_completion_io+0x270/0x270 [ 2112.598240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2112.599333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2112.600426] do_syscall_64+0x33/0x40 [ 2112.601214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2112.602281] RIP: 0033:0x7fc2d9b3db19 [ 2112.603064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.606926] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2112.608513] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2112.609992] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2112.611502] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2112.612994] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2112.614478] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2112.615991] CPU: 0 PID: 12115 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2112.616929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.618055] Call Trace: [ 2112.618419] dump_stack+0x107/0x167 [ 2112.618927] should_fail.cold+0x5/0xa [ 2112.619447] ? create_object.isra.0+0x3a/0xa30 [ 2112.620071] should_failslab+0x5/0x20 [ 2112.620584] kmem_cache_alloc+0x5b/0x310 [ 2112.621122] create_object.isra.0+0x3a/0xa30 [ 2112.621709] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2112.622396] kmem_cache_alloc_trace+0x151/0x320 [ 2112.623011] ? io_tctx_exit_cb+0xf0/0xf0 [ 2112.623536] percpu_ref_init+0xd8/0x3d0 [ 2112.624091] io_uring_setup+0x47a/0x2980 [ 2112.624619] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2112.625244] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2112.625901] ? wait_for_completion_io+0x270/0x270 [ 2112.626549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2112.627228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2112.627954] do_syscall_64+0x33/0x40 [ 2112.628467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2112.629142] RIP: 0033:0x7f0f2173bb19 [ 2112.629639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.632031] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2112.633034] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2112.633949] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2112.634862] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2112.635801] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2112.636717] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:24:20 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x6, 0x9, 0x5) 03:24:20 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:24:20 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)) setreuid(0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:24:20 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:24:20 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x110, 0xffffffffffffffff, 0x75563000) 03:24:20 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 12) [ 2128.081228] FAULT_INJECTION: forcing a failure. [ 2128.081228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2128.082989] CPU: 0 PID: 12139 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2128.083990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2128.085170] Call Trace: [ 2128.085554] dump_stack+0x107/0x167 [ 2128.086079] should_fail.cold+0x5/0xa [ 2128.086627] __alloc_pages_nodemask+0x182/0x600 [ 2128.087303] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2128.088174] ? cap_capable+0x1cd/0x230 [ 2128.088731] alloc_pages_current+0x187/0x280 [ 2128.089359] __get_free_pages+0xc/0xa0 [ 2128.089911] io_uring_setup+0xe27/0x2980 [ 2128.090495] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2128.091223] ? wait_for_completion_io+0x270/0x270 [ 2128.091932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2128.092670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2128.093404] do_syscall_64+0x33/0x40 [ 2128.093936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2128.094672] RIP: 0033:0x7f0f2173bb19 [ 2128.095206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2128.097835] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2128.098914] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2128.099926] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2128.100931] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2128.101935] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2128.102950] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2128.123355] FAULT_INJECTION: forcing a failure. [ 2128.123355] name failslab, interval 1, probability 0, space 0, times 0 03:24:20 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:24:20 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 21) [ 2128.125830] CPU: 1 PID: 12153 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2128.127499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2128.129277] Call Trace: [ 2128.129844] dump_stack+0x107/0x167 [ 2128.130643] should_fail.cold+0x5/0xa [ 2128.131472] ? __d_alloc+0x2a/0x990 [ 2128.132253] should_failslab+0x5/0x20 [ 2128.133059] kmem_cache_alloc+0x5b/0x310 [ 2128.133923] __d_alloc+0x2a/0x990 [ 2128.134656] ? find_held_lock+0x2c/0x110 [ 2128.135515] d_alloc_pseudo+0x19/0x70 [ 2128.136341] alloc_file_pseudo+0xce/0x250 [ 2128.137228] ? trace_hardirqs_on+0x5b/0x180 [ 2128.138148] ? alloc_file+0x5a0/0x5a0 [ 2128.138972] anon_inode_getfile+0xc8/0x1f0 [ 2128.139886] io_uring_setup+0x138b/0x2980 [ 2128.140778] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2128.141861] ? wait_for_completion_io+0x270/0x270 [ 2128.142906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2128.144024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2128.145114] do_syscall_64+0x33/0x40 [ 2128.145909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2128.147015] RIP: 0033:0x7fc2d9b3db19 [ 2128.147803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2128.151716] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2128.153332] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2128.154836] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2128.156354] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2128.157867] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2128.159380] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:24:20 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0xa4c9, 0xb2}, {0x1, 0x1ff}]}, 0x14, 0x3) 03:24:20 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0xffff, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/203, 0xcb, 0x1, &(0x7f0000000540)=""/150, 0x96}, &(0x7f0000000640)=0x40) 03:24:20 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 13) 03:24:20 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 03:24:20 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:24:20 executing program 0: r0 = epoll_create(0xfffffe00) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x80010, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) [ 2128.250451] FAULT_INJECTION: forcing a failure. [ 2128.250451] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2128.254205] CPU: 1 PID: 12163 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2128.255674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2128.257425] Call Trace: [ 2128.257998] dump_stack+0x107/0x167 [ 2128.258781] should_fail.cold+0x5/0xa [ 2128.259604] __alloc_pages_nodemask+0x182/0x600 [ 2128.260694] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2128.262251] ? cap_capable+0x1cd/0x230 [ 2128.263242] alloc_pages_current+0x187/0x280 [ 2128.264373] __get_free_pages+0xc/0xa0 [ 2128.265369] io_uring_setup+0xf9a/0x2980 [ 2128.266405] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2128.267677] ? wait_for_completion_io+0x270/0x270 [ 2128.268940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2128.270273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2128.271574] do_syscall_64+0x33/0x40 [ 2128.272526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2128.273833] RIP: 0033:0x7f0f2173bb19 [ 2128.274771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2128.279455] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2128.281406] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2128.283194] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2128.285003] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2128.286803] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2128.288607] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:24:20 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:24:20 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:24:20 executing program 2: prctl$PR_PAC_RESET_KEYS(0x36, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:24:20 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r0, 0x7f, 0x0, 0x0, 0x2}, 0x8) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040, 0x0, {0x0, r2}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x420040, 0xc8, 0x3}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r2}}, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x8, 0xf800000000000000, 0x2) r3 = shmget(0x2, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) shmat(r3, &(0x7f0000fee000/0x12000)=nil, 0x0) 03:24:20 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 22) 03:24:20 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) 03:24:20 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 2128.429537] FAULT_INJECTION: forcing a failure. [ 2128.429537] name failslab, interval 1, probability 0, space 0, times 0 [ 2128.431027] CPU: 0 PID: 12186 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2128.431885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2128.432903] Call Trace: [ 2128.433229] dump_stack+0x107/0x167 [ 2128.433675] should_fail.cold+0x5/0xa [ 2128.434145] ? create_object.isra.0+0x3a/0xa30 [ 2128.434701] should_failslab+0x5/0x20 [ 2128.435167] kmem_cache_alloc+0x5b/0x310 [ 2128.435668] create_object.isra.0+0x3a/0xa30 [ 2128.436209] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2128.436833] kmem_cache_alloc+0x159/0x310 [ 2128.437342] __d_alloc+0x2a/0x990 [ 2128.437762] ? find_held_lock+0x2c/0x110 [ 2128.438262] d_alloc_pseudo+0x19/0x70 [ 2128.438730] alloc_file_pseudo+0xce/0x250 [ 2128.439246] ? trace_hardirqs_on+0x5b/0x180 [ 2128.439769] ? alloc_file+0x5a0/0x5a0 [ 2128.440254] anon_inode_getfile+0xc8/0x1f0 [ 2128.440773] io_uring_setup+0x138b/0x2980 [ 2128.441285] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2128.441904] ? wait_for_completion_io+0x270/0x270 [ 2128.442504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2128.443145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2128.443775] do_syscall_64+0x33/0x40 [ 2128.444239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2128.444856] RIP: 0033:0x7fc2d9b3db19 [ 2128.445310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2128.447549] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2128.448477] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2128.449341] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2128.450207] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2128.451075] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2128.451942] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:24:35 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xf) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:24:35 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:24:35 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 23) 03:24:35 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0xa031, 0xffffffffffffffff, 0x6d657000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:24:35 executing program 2: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_io_uring_setup(0x5662, &(0x7f0000000140)={0x0, 0xb1d0, 0x0, 0x3, 0x3ac}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) [ 2143.483957] FAULT_INJECTION: forcing a failure. [ 2143.483957] name failslab, interval 1, probability 0, space 0, times 0 [ 2143.485629] CPU: 0 PID: 12198 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2143.486716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2143.487924] Call Trace: [ 2143.488331] dump_stack+0x107/0x167 [ 2143.488855] should_fail.cold+0x5/0xa [ 2143.489407] ? __alloc_file+0x21/0x320 [ 2143.490022] should_failslab+0x5/0x20 [ 2143.490569] kmem_cache_alloc+0x5b/0x310 [ 2143.491193] __alloc_file+0x21/0x320 [ 2143.491747] alloc_empty_file+0x6d/0x170 [ 2143.492684] alloc_file+0x5e/0x5a0 [ 2143.493610] alloc_file_pseudo+0x16a/0x250 [ 2143.494712] ? alloc_file+0x5a0/0x5a0 [ 2143.495719] anon_inode_getfile+0xc8/0x1f0 [ 2143.496855] io_uring_setup+0x138b/0x2980 [ 2143.497813] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2143.498976] ? wait_for_completion_io+0x270/0x270 [ 2143.500112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2143.501319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2143.502503] do_syscall_64+0x33/0x40 [ 2143.503374] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2143.504558] RIP: 0033:0x7fc2d9b3db19 [ 2143.505416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.509644] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2143.511400] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2143.513052] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2143.514689] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2143.516340] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2143.517982] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2143.538119] FAULT_INJECTION: forcing a failure. [ 2143.538119] name failslab, interval 1, probability 0, space 0, times 0 [ 2143.539505] CPU: 1 PID: 12210 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2143.540299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2143.541239] Call Trace: [ 2143.541542] dump_stack+0x107/0x167 [ 2143.541956] should_fail.cold+0x5/0xa [ 2143.542393] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2143.543022] should_failslab+0x5/0x20 [ 2143.543460] kmem_cache_alloc_trace+0x55/0x320 [ 2143.543984] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2143.544611] io_uring_setup+0x14f6/0x2980 [ 2143.545089] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2143.545664] ? wait_for_completion_io+0x270/0x270 [ 2143.546227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2143.546824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2143.547419] do_syscall_64+0x33/0x40 [ 2143.547844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2143.548433] RIP: 0033:0x7f0f2173bb19 [ 2143.548860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.550956] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2143.551822] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2143.552640] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2143.553452] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2143.554267] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2143.555079] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000200)={0xdd5, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/81) close_range(r3, r0, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) 03:24:35 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 14) 03:24:35 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 03:24:35 executing program 7: newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, r0) r1 = getgid() setresgid(0xffffffffffffffff, r0, r1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000ff00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00020000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 03:24:35 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0x80000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0xb7dcff5a8b5ba297, r0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 03:24:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x3c1000, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x110, r1, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x0, 0x101001) dup2(r2, r0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 03:24:35 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:24:36 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r0 = syz_io_uring_setup(0xf48, &(0x7f0000000000)={0x0, 0xb00e, 0x8, 0x1003, 0x26f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd425c4b22d4efec2, {0x0, r2}}, 0x7) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) read(r3, &(0x7f0000000180)=""/62, 0x3e) 03:24:36 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="0849726aba4a4e25351ca14677c089e7ce838ecaef9ac00cde589837e31d6aa61ceca4421e6dea7d9f170457a0fa36cacd302ed7a40522c82de2b0d3fd52cecf3a8b3d78dbc34457f26d832af99dfa04ed37f1ca0fa19cf21a897f2d9c83887fcae833e8f6d951e1b7", 0x69, 0x7) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:24:36 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x7f, 0x5}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:24:36 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 15) 03:24:36 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 03:24:36 executing program 3: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x4000010, r0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) lseek(0xffffffffffffffff, 0x3, 0x4) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) 03:24:36 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17) [ 2143.730679] FAULT_INJECTION: forcing a failure. [ 2143.730679] name failslab, interval 1, probability 0, space 0, times 0 [ 2143.733396] CPU: 0 PID: 12241 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2143.735011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2143.736960] Call Trace: [ 2143.737583] dump_stack+0x107/0x167 [ 2143.738439] should_fail.cold+0x5/0xa [ 2143.739332] ? create_object.isra.0+0x3a/0xa30 [ 2143.740418] should_failslab+0x5/0x20 [ 2143.741306] kmem_cache_alloc+0x5b/0x310 [ 2143.742254] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2143.743675] create_object.isra.0+0x3a/0xa30 [ 2143.744708] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2143.745894] kmem_cache_alloc_trace+0x151/0x320 [ 2143.746987] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2143.748266] io_uring_setup+0x14f6/0x2980 [ 2143.749242] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2143.750422] ? wait_for_completion_io+0x270/0x270 [ 2143.751588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2143.752811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2143.754018] do_syscall_64+0x33/0x40 [ 2143.754906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2143.756112] RIP: 0033:0x7f0f2173bb19 [ 2143.756998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.761329] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2143.763127] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2143.764799] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2143.766462] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2143.768117] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2143.769764] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:24:48 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 16) 03:24:48 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/184, 0xb8, 0x1, &(0x7f00000000c0)=""/75, 0x4b}, &(0x7f0000000180)=0x40) 03:24:48 executing program 0: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x1010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x3}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/205) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 03:24:48 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 24) 03:24:48 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12811, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000002c0)={0x0, 0x8}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) signalfd(r0, &(0x7f0000000240)={[0x1]}, 0x8) 03:24:48 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x8, 0x4, 0x3) [ 2156.488838] FAULT_INJECTION: forcing a failure. [ 2156.488838] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.491348] CPU: 0 PID: 12257 Comm: syz-executor.6 Not tainted 5.10.256 #1 03:24:48 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x8001, 0x3, 0x4) 03:24:48 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x10, 0xffffffffffffffff, 0x18eac000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x240c02) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x800) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/211) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) open_by_handle_at(r2, &(0x7f00000000c0)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x2, 0x2, 0x4b6, 0x926}}, 0x8000) dup2(r0, 0xffffffffffffffff) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/81) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESOCT=r5]) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f00000002c0)={{r4}, r5, 0xa, @inherit={0x68, &(0x7f0000000240)={0x0, 0x4, 0x5, 0x8, {0x25, 0x6, 0x1, 0x3f, 0x1454}, [0x8, 0x9, 0x561, 0x4]}}, @subvolid=0x1}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) [ 2156.492842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.494813] FAULT_INJECTION: forcing a failure. [ 2156.494813] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.494851] Call Trace: [ 2156.496963] dump_stack+0x107/0x167 [ 2156.497803] should_fail.cold+0x5/0xa [ 2156.498678] ? create_object.isra.0+0x3a/0xa30 [ 2156.499715] should_failslab+0x5/0x20 [ 2156.500595] kmem_cache_alloc+0x5b/0x310 [ 2156.501509] create_object.isra.0+0x3a/0xa30 [ 2156.502472] kmemleak_alloc_percpu+0xa0/0x100 [ 2156.503436] pcpu_alloc+0x4e2/0x1240 [ 2156.504271] ? io_async_queue_proc+0x80/0x80 [ 2156.505222] percpu_ref_init+0x31/0x3d0 [ 2156.506084] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2156.507246] io_uring_setup+0x14f6/0x2980 [ 2156.508143] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2156.509234] ? wait_for_completion_io+0x270/0x270 [ 2156.510290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.511414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.512689] do_syscall_64+0x33/0x40 [ 2156.513712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.515111] RIP: 0033:0x7f0f2173bb19 [ 2156.516131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.521122] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2156.523214] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2156.525071] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2156.526805] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2156.528445] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2156.530021] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2156.531571] CPU: 1 PID: 12253 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2156.532560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.533669] Call Trace: [ 2156.534093] dump_stack+0x107/0x167 [ 2156.534584] should_fail.cold+0x5/0xa [ 2156.535100] ? create_object.isra.0+0x3a/0xa30 [ 2156.535711] should_failslab+0x5/0x20 [ 2156.536231] kmem_cache_alloc+0x5b/0x310 [ 2156.536787] create_object.isra.0+0x3a/0xa30 [ 2156.537375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2156.538058] kmem_cache_alloc+0x159/0x310 [ 2156.538821] __alloc_file+0x21/0x320 [ 2156.539322] alloc_empty_file+0x6d/0x170 [ 2156.539872] alloc_file+0x5e/0x5a0 [ 2156.540355] alloc_file_pseudo+0x16a/0x250 [ 2156.540916] ? alloc_file+0x5a0/0x5a0 [ 2156.541433] anon_inode_getfile+0xc8/0x1f0 [ 2156.542000] io_uring_setup+0x138b/0x2980 [ 2156.542557] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2156.543231] ? wait_for_completion_io+0x270/0x270 [ 2156.543888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.544592] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.545278] do_syscall_64+0x33/0x40 [ 2156.545793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.546475] RIP: 0033:0x7fc2d9b3db19 [ 2156.546970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.549407] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2156.550413] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2156.551393] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2156.552379] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2156.553362] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2156.554352] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:24:48 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x1547, &(0x7f0000000000)={0x0, 0x99c0, 0x4, 0x3, 0x29c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd) 03:24:49 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 25) 03:24:49 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0x8, 0x4, 0x3) 03:24:49 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xff4e) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40810) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) 03:24:49 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) dup2(0xffffffffffffffff, r0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000080)={0x15, 0xb2, &(0x7f0000000140)="aed1386cfc1bf175fdce4a989c9729cacd515cad07e51a8cb204a94f3da860e494be31130ce6229d99c5eaeee154a141478ff851f2c7f7209dfcdc54c143f77244c2c39840978b3d32b2b3c28ace665709ca2e5f86ae1a49a437ac66e09f9ad5a5e87fc405b07c9f15979e48ac1731422ddec5221a5fba00e29c730fccaa0f179b3186685950e31875e9bbe58dc01db5a5aeacf447dd787f3d43cb77aa862aba506321dfc7ef924410c65e1e721a8f066aab"}) 03:24:49 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpgrp(0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r3, r1, 0x7, r0, &(0x7f0000000240)={r2}) fcntl$setown(0xffffffffffffffff, 0x8, r1) [ 2156.643921] FAULT_INJECTION: forcing a failure. [ 2156.643921] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.645780] CPU: 1 PID: 12271 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2156.646909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.648281] Call Trace: [ 2156.648717] dump_stack+0x107/0x167 [ 2156.649313] should_fail.cold+0x5/0xa [ 2156.649946] ? security_file_alloc+0x34/0x170 [ 2156.650682] should_failslab+0x5/0x20 [ 2156.651306] kmem_cache_alloc+0x5b/0x310 [ 2156.651983] security_file_alloc+0x34/0x170 [ 2156.652710] __alloc_file+0xb7/0x320 [ 2156.653328] alloc_empty_file+0x6d/0x170 [ 2156.653994] alloc_file+0x5e/0x5a0 [ 2156.654576] alloc_file_pseudo+0x16a/0x250 [ 2156.655275] ? alloc_file+0x5a0/0x5a0 [ 2156.655909] anon_inode_getfile+0xc8/0x1f0 [ 2156.656618] io_uring_setup+0x138b/0x2980 [ 2156.657314] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2156.658145] ? wait_for_completion_io+0x270/0x270 [ 2156.658958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.659822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.660675] do_syscall_64+0x33/0x40 [ 2156.661277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.662111] RIP: 0033:0x7fc2d9b3db19 [ 2156.662717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.665711] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2156.666960] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2156.668120] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2156.669271] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2156.670436] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2156.671604] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:24:49 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:24:49 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 17) 03:24:49 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4, 0x3) 03:24:49 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x40010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x1000, 0x9, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x9, [0x3, 0x1, 0xffffffff, 0x0, 0x81, 0xedcc]}) [ 2156.747051] FAULT_INJECTION: forcing a failure. [ 2156.747051] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.748575] CPU: 1 PID: 12288 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2156.749409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.750408] Call Trace: [ 2156.750737] dump_stack+0x107/0x167 [ 2156.751180] should_fail.cold+0x5/0xa [ 2156.751646] ? create_object.isra.0+0x3a/0xa30 [ 2156.752208] should_failslab+0x5/0x20 [ 2156.752669] kmem_cache_alloc+0x5b/0x310 [ 2156.753163] create_object.isra.0+0x3a/0xa30 [ 2156.753699] kmemleak_alloc_percpu+0xa0/0x100 [ 2156.754247] pcpu_alloc+0x4e2/0x1240 [ 2156.754707] ? io_async_queue_proc+0x80/0x80 [ 2156.755241] percpu_ref_init+0x31/0x3d0 [ 2156.755726] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2156.756389] io_uring_setup+0x14f6/0x2980 [ 2156.756925] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2156.757538] ? wait_for_completion_io+0x270/0x270 [ 2156.758135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.758768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.759394] do_syscall_64+0x33/0x40 [ 2156.759842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.760495] RIP: 0033:0x7f0f2173bb19 [ 2156.760944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.763138] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2156.764047] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2156.764945] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2156.765861] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2156.766769] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2156.767656] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:25:04 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:25:04 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 18) 03:25:04 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 26) 03:25:04 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xff4e) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40810) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) 03:25:04 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:25:04 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 03:25:04 executing program 3: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x896]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) 03:25:04 executing program 7: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x620002, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) getpeername(r0, &(0x7f0000000100)=@can, &(0x7f0000000080)=0x80) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) [ 2171.775474] FAULT_INJECTION: forcing a failure. [ 2171.775474] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.778148] CPU: 0 PID: 12314 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2171.779719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.781611] Call Trace: [ 2171.782214] dump_stack+0x107/0x167 [ 2171.783045] should_fail.cold+0x5/0xa [ 2171.783915] ? percpu_ref_init+0xd8/0x3d0 [ 2171.784870] should_failslab+0x5/0x20 [ 2171.785737] kmem_cache_alloc_trace+0x55/0x320 [ 2171.786303] FAULT_INJECTION: forcing a failure. [ 2171.786303] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.786775] ? io_async_queue_proc+0x80/0x80 [ 2171.789298] percpu_ref_init+0xd8/0x3d0 [ 2171.790206] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2171.791434] io_uring_setup+0x14f6/0x2980 [ 2171.792395] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2171.793540] ? wait_for_completion_io+0x270/0x270 [ 2171.794659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2171.795844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2171.797026] do_syscall_64+0x33/0x40 [ 2171.797867] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2171.799028] RIP: 0033:0x7f0f2173bb19 [ 2171.799867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.804022] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2171.805803] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2171.807433] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2171.809068] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2171.810710] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2171.812376] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2171.814045] CPU: 1 PID: 12315 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2171.814798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.815685] Call Trace: [ 2171.815985] dump_stack+0x107/0x167 [ 2171.816391] should_fail.cold+0x5/0xa [ 2171.816804] ? create_object.isra.0+0x3a/0xa30 [ 2171.817320] should_failslab+0x5/0x20 [ 2171.817732] kmem_cache_alloc+0x5b/0x310 [ 2171.818195] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2171.818787] create_object.isra.0+0x3a/0xa30 [ 2171.819287] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2171.819837] kmem_cache_alloc+0x159/0x310 [ 2171.820290] security_file_alloc+0x34/0x170 [ 2171.820760] __alloc_file+0xb7/0x320 [ 2171.821182] alloc_empty_file+0x6d/0x170 [ 2171.821627] alloc_file+0x5e/0x5a0 [ 2171.822035] alloc_file_pseudo+0x16a/0x250 [ 2171.822494] ? alloc_file+0x5a0/0x5a0 [ 2171.822916] anon_inode_getfile+0xc8/0x1f0 [ 2171.823372] io_uring_setup+0x138b/0x2980 [ 2171.823821] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2171.824368] ? wait_for_completion_io+0x270/0x270 [ 2171.824900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2171.825459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2171.826046] do_syscall_64+0x33/0x40 [ 2171.826449] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2171.826998] RIP: 0033:0x7fc2d9b3db19 [ 2171.827398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.829492] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2171.830306] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2171.831070] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2171.831884] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2171.832697] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2171.833506] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:25:18 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 27) 03:25:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x162) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10d080, 0x91) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) write$P9_RFSYNC(r0, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) 03:25:18 executing program 7: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0xe488f000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) fstatfs(r0, &(0x7f0000000140)=""/221) sendfile(r0, r0, &(0x7f0000000080)=0x9, 0x8a) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x4, 0x3d, &(0x7f00000000c0)="d6c1fa0f8baccb9ac967635cf64b1aec7a94420e71e8d0aceb89645d87cded64ae424162e4d81c0f536eeefee7eb0fbfc2e135d3ba3208e4d598ce9da5"}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r2 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r2, 0x12) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffa000/0x2000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) 03:25:18 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 03:25:18 executing program 2: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0xa031, 0xffffffffffffffff, 0xa7be8000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:25:18 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xff4e) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}}, 0x40810) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) 03:25:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x4000010, r0, 0x50727000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x1ff, 0x5]) 03:25:18 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 19) [ 2186.413994] FAULT_INJECTION: forcing a failure. [ 2186.413994] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.417701] CPU: 0 PID: 12337 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2186.419216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2186.420717] FAULT_INJECTION: forcing a failure. [ 2186.420717] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.421016] Call Trace: [ 2186.421046] dump_stack+0x107/0x167 [ 2186.421072] should_fail.cold+0x5/0xa [ 2186.425370] ? create_object.isra.0+0x3a/0xa30 [ 2186.426353] should_failslab+0x5/0x20 [ 2186.427175] kmem_cache_alloc+0x5b/0x310 [ 2186.428061] create_object.isra.0+0x3a/0xa30 [ 2186.429015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2186.430117] kmem_cache_alloc+0x159/0x310 [ 2186.431019] security_file_alloc+0x34/0x170 [ 2186.431950] __alloc_file+0xb7/0x320 [ 2186.432741] alloc_empty_file+0x6d/0x170 [ 2186.433616] alloc_file+0x5e/0x5a0 [ 2186.434386] alloc_file_pseudo+0x16a/0x250 [ 2186.435297] ? alloc_file+0x5a0/0x5a0 [ 2186.436136] anon_inode_getfile+0xc8/0x1f0 [ 2186.437063] io_uring_setup+0x138b/0x2980 [ 2186.437967] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2186.439058] ? wait_for_completion_io+0x270/0x270 [ 2186.440122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2186.441266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2186.442382] do_syscall_64+0x33/0x40 [ 2186.443187] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2186.444289] RIP: 0033:0x7fc2d9b3db19 [ 2186.445104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2186.449082] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2186.450722] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2186.452258] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2186.453814] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2186.455353] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2186.456900] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2186.458468] CPU: 1 PID: 12338 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2186.459806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2186.461415] Call Trace: [ 2186.461931] dump_stack+0x107/0x167 [ 2186.462629] should_fail.cold+0x5/0xa [ 2186.463361] ? create_object.isra.0+0x3a/0xa30 [ 2186.464233] should_failslab+0x5/0x20 [ 2186.464980] kmem_cache_alloc+0x5b/0x310 [ 2186.465763] create_object.isra.0+0x3a/0xa30 [ 2186.466605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2186.467599] kmem_cache_alloc_trace+0x151/0x320 [ 2186.468498] ? io_async_queue_proc+0x80/0x80 [ 2186.469352] percpu_ref_init+0xd8/0x3d0 [ 2186.470119] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2186.471153] io_uring_setup+0x14f6/0x2980 [ 2186.471951] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2186.472924] ? wait_for_completion_io+0x270/0x270 [ 2186.473864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2186.474857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2186.475832] do_syscall_64+0x33/0x40 [ 2186.476540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2186.477508] RIP: 0033:0x7f0f2173bb19 [ 2186.478215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2186.481636] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2186.483094] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2186.484741] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2186.486400] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2186.487768] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2186.489195] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:25:18 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 03:25:18 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 03:25:18 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xff4e) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) 03:25:18 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) 03:25:18 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x20010, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r1, 0x80, &(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x0, 0x0, 0x1}, 0xff) 03:25:19 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x120002) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:25:19 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) 03:25:19 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:25:19 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 28) 03:25:19 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$getflags(r1, 0x3) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:25:19 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) fsetxattr(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='g}stem.@!]#/-\x00', @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=0x0], &(0x7f0000000080)='eO@}%.(@&\x7f\x00\x00\x00%,\\\x00', 0x11, 0x1) 03:25:19 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:25:19 executing program 7: ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:25:19 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xff4e) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) [ 2186.791724] FAULT_INJECTION: forcing a failure. [ 2186.791724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2186.794404] CPU: 0 PID: 12380 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2186.795908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2186.797703] Call Trace: [ 2186.798280] dump_stack+0x107/0x167 [ 2186.799075] should_fail.cold+0x5/0xa [ 2186.799928] __alloc_pages_nodemask+0x182/0x600 [ 2186.800963] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2186.802276] ? kmem_cache_alloc_trace+0x305/0x320 [ 2186.803320] alloc_pages_current+0x187/0x280 [ 2186.804276] allocate_slab+0x26f/0x380 [ 2186.805128] ___slab_alloc+0x470/0x700 [ 2186.805975] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2186.807096] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2186.808226] ? SOFTIRQ_verbose+0x10/0x10 [ 2186.809088] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2186.810206] ? kmem_cache_alloc_trace+0x305/0x320 [ 2186.811244] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2186.812359] kmem_cache_alloc_trace+0x305/0x320 [ 2186.813378] io_uring_alloc_task_context+0x99/0x6a0 [ 2186.814459] ? io_import_iovec+0x1120/0x1120 [ 2186.815410] ? lock_downgrade+0x6d0/0x6d0 [ 2186.816305] ? do_raw_spin_lock+0x121/0x260 [ 2186.817244] ? rwlock_bug.part.0+0x90/0x90 [ 2186.818169] __io_uring_add_tctx_node+0x2c6/0x520 [ 2186.819204] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2186.820337] ? alloc_fd+0x2e7/0x670 [ 2186.821140] io_uring_setup+0x1fbb/0x2980 [ 2186.822050] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2186.823156] ? wait_for_completion_io+0x270/0x270 [ 2186.824223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2186.825348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2186.826465] do_syscall_64+0x33/0x40 [ 2186.827274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2186.828380] RIP: 0033:0x7fc2d9b3db19 [ 2186.829192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2186.833174] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2186.834817] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2186.836355] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2186.837910] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2186.839444] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2186.840988] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:25:35 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x18110, 0xffffffffffffffff, 0xefb3e000) 03:25:35 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 29) [ 2202.809368] FAULT_INJECTION: forcing a failure. [ 2202.809368] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.809687] FAULT_INJECTION: forcing a failure. [ 2202.809687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2202.810984] CPU: 0 PID: 12389 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2202.811003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.815999] Call Trace: [ 2202.816384] dump_stack+0x107/0x167 [ 2202.816975] should_fail.cold+0x5/0xa [ 2202.817626] ? create_object.isra.0+0x3a/0xa30 [ 2202.818305] should_failslab+0x5/0x20 [ 2202.818865] kmem_cache_alloc+0x5b/0x310 [ 2202.819470] create_object.isra.0+0x3a/0xa30 [ 2202.820123] kmemleak_alloc_percpu+0xa0/0x100 [ 2202.820804] pcpu_alloc+0x4e2/0x1240 [ 2202.821367] __percpu_counter_init+0x10d/0x2d0 [ 2202.822044] io_uring_alloc_task_context+0xcc/0x6a0 [ 2202.822776] ? io_import_iovec+0x1120/0x1120 [ 2202.823425] ? lock_downgrade+0x6d0/0x6d0 [ 2202.824035] ? do_raw_spin_lock+0x121/0x260 [ 2202.824665] ? rwlock_bug.part.0+0x90/0x90 [ 2202.825301] __io_uring_add_tctx_node+0x2c6/0x520 [ 2202.826009] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2202.826778] ? alloc_fd+0x2e7/0x670 [ 2202.827320] io_uring_setup+0x1fbb/0x2980 [ 2202.827932] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2202.828668] ? wait_for_completion_io+0x270/0x270 [ 2202.829358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2202.830125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2202.830881] do_syscall_64+0x33/0x40 [ 2202.831424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2202.832171] RIP: 0033:0x7fc2d9b3db19 [ 2202.832688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2202.835389] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2202.836501] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2202.837551] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2202.838591] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2202.839582] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2202.840624] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2202.841677] CPU: 1 PID: 12391 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2202.843375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.845373] Call Trace: [ 2202.846021] dump_stack+0x107/0x167 [ 2202.846896] should_fail.cold+0x5/0xa [ 2202.847818] _copy_to_user+0x2e/0x180 [ 2202.848754] io_uring_setup+0x11b5/0x2980 [ 2202.849760] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2202.850971] ? wait_for_completion_io+0x270/0x270 [ 2202.852164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2202.853431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2202.854665] do_syscall_64+0x33/0x40 [ 2202.855558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2202.856794] RIP: 0033:0x7f0f2173bb19 03:25:35 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 20) 03:25:35 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) r0 = socket$inet6(0xa, 0x2, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @remote, 0x1}, 0x1c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getflags(r1, 0x408) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x11) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x65) 03:25:35 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xff4e) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) 03:25:35 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 03:25:35 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101002) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x7fff, [0xffff, 0x0, 0x22d, 0x8001, 0x1, 0x594]}) 03:25:35 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xff4e) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) [ 2202.857686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2202.862424] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2202.864286] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2202.866041] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 03:25:35 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x64) [ 2202.867771] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2202.869582] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2202.871274] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:25:35 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpgrp(0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r3, r1, 0x7, r0, &(0x7f0000000240)={r2}) fcntl$setown(0xffffffffffffffff, 0x8, r1) 03:25:51 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2204002, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r1}}, {@posixacl}, {@cache_none}, {@noextend}], [{@appraise}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@uid_lt={'uid<', r2}}]}}) 03:25:51 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) (fail_nth: 1) 03:25:51 executing program 7: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x2000) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:25:51 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 21) 03:25:51 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 30) 03:25:51 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x8010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:25:51 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) 03:25:51 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) [ 2218.902134] FAULT_INJECTION: forcing a failure. [ 2218.902134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2218.905376] CPU: 1 PID: 12426 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2218.907237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.909460] Call Trace: [ 2218.910179] dump_stack+0x107/0x167 [ 2218.911456] should_fail.cold+0x5/0xa [ 2218.912616] _copy_to_user+0x2e/0x180 [ 2218.913856] io_uring_setup+0x11b5/0x2980 [ 2218.915104] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2218.916727] ? wait_for_completion_io+0x270/0x270 [ 2218.918274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2218.919944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2218.921590] do_syscall_64+0x33/0x40 [ 2218.922698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.924338] RIP: 0033:0x7f0f2173bb19 [ 2218.925465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.930823] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2218.933074] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2218.935050] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2218.937150] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2218.939197] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2218.941201] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2218.992546] FAULT_INJECTION: forcing a failure. [ 2218.992546] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.995528] CPU: 0 PID: 12432 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2218.997306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.999235] Call Trace: [ 2218.999853] dump_stack+0x107/0x167 [ 2219.000697] should_fail.cold+0x5/0xa [ 2219.001596] ? create_object.isra.0+0x3a/0xa30 [ 2219.002654] should_failslab+0x5/0x20 [ 2219.003554] kmem_cache_alloc+0x5b/0x310 [ 2219.004506] create_object.isra.0+0x3a/0xa30 [ 2219.005545] kmemleak_alloc_percpu+0xa0/0x100 [ 2219.006604] pcpu_alloc+0x4e2/0x1240 [ 2219.007500] __percpu_counter_init+0x10d/0x2d0 [ 2219.008574] io_uring_alloc_task_context+0xcc/0x6a0 [ 2219.009747] ? io_import_iovec+0x1120/0x1120 [ 2219.010779] ? lock_downgrade+0x6d0/0x6d0 [ 2219.011735] ? do_raw_spin_lock+0x121/0x260 [ 2219.012739] ? rwlock_bug.part.0+0x90/0x90 [ 2219.013744] __io_uring_add_tctx_node+0x2c6/0x520 [ 2219.014894] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2219.016117] ? alloc_fd+0x2e7/0x670 [ 2219.017003] io_uring_setup+0x1fbb/0x2980 [ 2219.017976] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2219.019177] ? wait_for_completion_io+0x270/0x270 [ 2219.020334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.021598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.022807] do_syscall_64+0x33/0x40 [ 2219.023695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2219.024914] RIP: 0033:0x7fc2d9b3db19 [ 2219.025803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.030202] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2219.032014] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2219.033722] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2219.035426] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2219.037131] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2219.038829] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2219.042543] FAULT_INJECTION: forcing a failure. [ 2219.042543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2219.045290] CPU: 1 PID: 12434 Comm: syz-executor.4 Not tainted 5.10.256 #1 [ 2219.046822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.048635] Call Trace: [ 2219.049236] dump_stack+0x107/0x167 [ 2219.050049] should_fail.cold+0x5/0xa [ 2219.050928] __alloc_pages_nodemask+0x182/0x600 [ 2219.051949] ? walk_pgd_range+0x1eb/0x1660 [ 2219.052880] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2219.054233] ? mpol_shared_policy_lookup+0xf3/0x140 [ 2219.055345] alloc_pages_vma+0xbb/0x410 [ 2219.056232] new_page+0x222/0x280 [ 2219.057014] migrate_pages+0x49b/0x2550 [ 2219.057902] ? alloc_pages_vma+0x410/0x410 [ 2219.058855] ? buffer_migrate_page_norefs+0x40/0x40 [ 2219.059967] ? vmacache_find+0x55/0x2a0 [ 2219.060862] do_mbind+0x943/0xb20 [ 2219.061648] ? lock_downgrade+0x6d0/0x6d0 [ 2219.062570] ? __mpol_equal+0x350/0x350 [ 2219.063451] ? ksys_write+0x12d/0x260 [ 2219.064308] ? memset+0x20/0x50 [ 2219.065044] ? get_nodes+0x202/0x270 [ 2219.065872] __x64_sys_mbind+0x23d/0x290 [ 2219.066786] ? __ia32_compat_sys_mbind+0x2a0/0x2a0 [ 2219.067864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.069010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.070141] do_syscall_64+0x33/0x40 [ 2219.070945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2219.072045] RIP: 0033:0x7f8b83c2bb19 [ 2219.072855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.076811] RSP: 002b:00007f8b811a1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 2219.078451] RAX: ffffffffffffffda RBX: 00007f8b83d3ef60 RCX: 00007f8b83c2bb19 [ 2219.079984] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2219.081521] RBP: 00007f8b811a11d0 R08: 0000000000000000 R09: 0000000000000003 [ 2219.083058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2219.084589] R13: 00007ffd09d5efcf R14: 00007f8b811a1300 R15: 0000000000022000 03:25:51 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 22) 03:25:51 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x7000) 03:25:51 executing program 0: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:25:51 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000007, 0x10, 0xffffffffffffffff, 0xbc126000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000300)={[{@uni_xlateno}, {@utf8no}, {@shortname_win95}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp861'}}]}) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) read$hiddev(r1, &(0x7f0000000040)=""/123, 0x7b) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/70) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000240)=ANY=[@ANYBLOB="deffff3f0100000018000000100ca95a553486ff9af9560e9124b9140c2871cf7441b8fc292bf4b7a0913c9ed1e6ff070000000000005e997d0fa17aeeb4", @ANYRES32=r2, @ANYRES64]) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r4, 0x0, &(0x7f0000000140)='./file0\x00', 0x1b1, 0x280, 0x31713, {0x0, r5}}, 0xfe) mremap(&(0x7f000091c000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f00003bf000/0x1000)=nil) 03:25:51 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) 03:25:51 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:25:51 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) (fail_nth: 2) [ 2219.243886] FAULT_INJECTION: forcing a failure. [ 2219.243886] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.246574] CPU: 1 PID: 12450 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2219.248161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.250076] Call Trace: [ 2219.250692] dump_stack+0x107/0x167 [ 2219.251527] should_fail.cold+0x5/0xa [ 2219.252407] ? create_object.isra.0+0x3a/0xa30 [ 2219.253463] should_failslab+0x5/0x20 [ 2219.254330] kmem_cache_alloc+0x5b/0x310 [ 2219.255263] create_object.isra.0+0x3a/0xa30 [ 2219.256261] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2219.257426] kmem_cache_alloc+0x159/0x310 [ 2219.258371] __d_alloc+0x2a/0x990 [ 2219.259159] ? find_held_lock+0x2c/0x110 [ 2219.260088] d_alloc_pseudo+0x19/0x70 [ 2219.260961] alloc_file_pseudo+0xce/0x250 [ 2219.261909] ? trace_hardirqs_on+0x5b/0x180 [ 2219.262886] ? alloc_file+0x5a0/0x5a0 [ 2219.263779] anon_inode_getfile+0xc8/0x1f0 [ 2219.264760] io_uring_setup+0x138b/0x2980 [ 2219.265725] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2219.266894] ? wait_for_completion_io+0x270/0x270 [ 2219.268014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.269202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.270380] do_syscall_64+0x33/0x40 [ 2219.271219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2219.272369] RIP: 0033:0x7f0f2173bb19 [ 2219.273219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.277365] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2219.279084] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2219.280692] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2219.282307] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2219.283912] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2219.285525] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:25:51 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 31) [ 2219.296398] loop3: detected capacity change from 0 to 512 03:25:51 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20000, 0x1c0, 0x2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:25:51 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x1b9) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) [ 2219.383979] FAULT_INJECTION: forcing a failure. [ 2219.383979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2219.386887] CPU: 0 PID: 12461 Comm: syz-executor.4 Not tainted 5.10.256 #1 [ 2219.388486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.390418] Call Trace: [ 2219.391036] dump_stack+0x107/0x167 [ 2219.391879] should_fail.cold+0x5/0xa [ 2219.392765] __alloc_pages_nodemask+0x182/0x600 [ 2219.393854] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2219.395267] ? mpol_shared_policy_lookup+0xf3/0x140 [ 2219.396439] ? mark_held_locks+0x9e/0xe0 [ 2219.397396] alloc_pages_vma+0xbb/0x410 [ 2219.398328] new_page+0x222/0x280 [ 2219.399145] migrate_pages+0x49b/0x2550 [ 2219.400091] ? alloc_pages_vma+0x410/0x410 [ 2219.401104] ? buffer_migrate_page_norefs+0x40/0x40 [ 2219.402274] ? alloc_migration_target+0x4d0/0x4d0 [ 2219.403391] ? vmacache_find+0x55/0x2a0 [ 2219.404341] do_mbind+0x943/0xb20 [ 2219.405168] ? lock_downgrade+0x6d0/0x6d0 [ 2219.406136] ? __mpol_equal+0x350/0x350 [ 2219.407072] ? ksys_write+0x12d/0x260 [ 2219.407973] ? memset+0x20/0x50 [ 2219.408734] ? get_nodes+0x202/0x270 [ 2219.409613] __x64_sys_mbind+0x23d/0x290 [ 2219.410567] ? __ia32_compat_sys_mbind+0x2a0/0x2a0 [ 2219.411708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.412940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.414144] do_syscall_64+0x33/0x40 [ 2219.415011] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2219.416206] RIP: 0033:0x7f8b83c2bb19 [ 2219.417074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.421350] RSP: 002b:00007f8b811a1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 2219.423104] RAX: ffffffffffffffda RBX: 00007f8b83d3ef60 RCX: 00007f8b83c2bb19 [ 2219.424764] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2219.426415] RBP: 00007f8b811a11d0 R08: 0000000000000000 R09: 0000000000000003 [ 2219.428259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2219.429927] R13: 00007ffd09d5efcf R14: 00007f8b811a1300 R15: 0000000000022000 [ 2219.442255] FAULT_INJECTION: forcing a failure. [ 2219.442255] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.445139] CPU: 1 PID: 12467 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2219.446599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.448340] Call Trace: [ 2219.448916] dump_stack+0x107/0x167 [ 2219.449690] should_fail.cold+0x5/0xa [ 2219.450496] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2219.451604] should_failslab+0x5/0x20 [ 2219.452414] kmem_cache_alloc_trace+0x55/0x320 [ 2219.453400] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2219.454473] ? io_import_iovec+0x1120/0x1120 [ 2219.455406] ? lock_downgrade+0x6d0/0x6d0 [ 2219.456277] ? do_raw_spin_lock+0x121/0x260 [ 2219.457197] ? rwlock_bug.part.0+0x90/0x90 [ 2219.458102] __io_uring_add_tctx_node+0x2c6/0x520 [ 2219.459124] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2219.460230] ? alloc_fd+0x2e7/0x670 [ 2219.461026] io_uring_setup+0x1fbb/0x2980 [ 2219.461917] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2219.462992] ? wait_for_completion_io+0x270/0x270 [ 2219.464045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.465167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.466264] do_syscall_64+0x33/0x40 [ 2219.467061] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2219.468153] RIP: 0033:0x7fc2d9b3db19 [ 2219.468951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.472885] RSP: 002b:00007fc2d7092108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2219.474527] RAX: ffffffffffffffda RBX: 00007fc2d9c51020 RCX: 00007fc2d9b3db19 [ 2219.476053] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2219.477591] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2219.479129] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2219.480666] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2219.482846] FAT-fs (loop3): IO charset cp861 not found 03:25:51 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001340)={0xa, 0x4e24, 0xde5a, @mcast2, 0x3}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001380)="f53542b1ab492f8bee65139f06db60c0c4a94b755700146201c6cc26f4396aca6a545e27877b6f415585507550105031f3f2ff433ba6fd4f8e2bac693027883521aedfc35b08ce6f6cff732064e5d84ed70f8c6fd56194ce70b7260cf54394cfb1c11d9017db76a00e72c390e69087c3dec5b5c0bb309f987afab0de0b6f8889f1908c", 0x83}, {&(0x7f0000001440)="c5321e38d8277defd3f9832d65ead369b6aaba3f7dc987d9f70afeb76ffea9b6a3a67d9fb047b11c79975eeb65258806ed24e68293a9d22da6fad4878f2bfb7d1ce8e98f25d930b620b4c36899e23257229c450db8f785bbe4d95167f2ed65d1650374cb07130147897f31d131521fa468466982ca7e7faa2003b1a7e791dfcb32d5049b69f3db8389b309b925ca00077fcd7ae79933c6f3c40235758df91b63e5e42e896ab91f61e3", 0xa9}], 0x2, &(0x7f0000001540)=[@tclass={{0x14, 0x29, 0x43, 0x6}}], 0x18}, 0x14) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/143, 0x8f}, {&(0x7f00000010c0)=""/48, 0x30}, {&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/150, 0x96}, {&(0x7f0000001240)=""/70, 0x46}], 0x6) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:07 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) (fail_nth: 3) [ 2234.668622] FAULT_INJECTION: forcing a failure. [ 2234.668622] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.671557] CPU: 1 PID: 12481 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2234.673404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2234.675606] Call Trace: [ 2234.676309] dump_stack+0x107/0x167 [ 2234.677284] should_fail.cold+0x5/0xa [ 2234.678287] ? create_object.isra.0+0x3a/0xa30 [ 2234.679502] should_failslab+0x5/0x20 [ 2234.680510] kmem_cache_alloc+0x5b/0x310 [ 2234.681620] create_object.isra.0+0x3a/0xa30 [ 2234.682800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2234.684172] kmem_cache_alloc_trace+0x151/0x320 [ 2234.685466] io_uring_alloc_task_context+0x4a3/0x6a0 03:26:07 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 32) 03:26:07 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x9ea29000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002480), 0x1, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x450100, 0x128) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/81) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000024c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="03000000000000002e2f66696c65302f02696c653000"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800e4730cec53a7c6c95458094d58809c790000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000"]) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:07 executing program 7: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:26:07 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 23) 03:26:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c0a) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x100, 0x9, 0x15, 0x0, "b7c44023bd8ce08f5528c8764f8219e498def9a9bebe1b578fd515315d3302f077213f30e397182a982125bbcc8068869e4bcbb0c58f9d04854c7ea2da35e323", "92731c3eb9a1766ef996c77900b1122c4c52fef3104defa6fc6a7592fc913f14", [0xfffffffffffff800, 0xfe72]}) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, r2, 0xffffe000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:26:07 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) [ 2234.686788] ? io_import_iovec+0x1120/0x1120 [ 2234.688402] ? lock_downgrade+0x6d0/0x6d0 [ 2234.689490] ? do_raw_spin_lock+0x121/0x260 [ 2234.690628] ? rwlock_bug.part.0+0x90/0x90 [ 2234.691730] __io_uring_add_tctx_node+0x2c6/0x520 [ 2234.692994] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2234.694623] ? alloc_fd+0x2e7/0x670 [ 2234.694708] io_uring_setup+0x1fbb/0x2980 [ 2234.694744] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2234.694765] ? wait_for_completion_io+0x270/0x270 [ 2234.694820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2234.694844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2234.694873] do_syscall_64+0x33/0x40 [ 2234.694897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2234.694920] RIP: 0033:0x7fc2d9b3db19 [ 2234.706335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2234.711206] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2234.713262] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2234.715171] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2234.717006] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2234.718891] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2234.720776] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2234.731157] FAULT_INJECTION: forcing a failure. [ 2234.731157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2234.734284] CPU: 0 PID: 12488 Comm: syz-executor.4 Not tainted 5.10.256 #1 [ 2234.736096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2234.738279] Call Trace: [ 2234.738986] dump_stack+0x107/0x167 [ 2234.739951] should_fail.cold+0x5/0xa [ 2234.740963] __alloc_pages_nodemask+0x182/0x600 [ 2234.742212] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2234.743797] ? mpol_shared_policy_lookup+0xf3/0x140 [ 2234.745112] ? mark_held_locks+0x9e/0xe0 [ 2234.745988] alloc_pages_vma+0xbb/0x410 [ 2234.747048] new_page+0x222/0x280 [ 2234.747957] migrate_pages+0x49b/0x2550 [ 2234.749006] ? alloc_pages_vma+0x410/0x410 [ 2234.750154] ? buffer_migrate_page_norefs+0x40/0x40 [ 2234.751456] ? alloc_migration_target+0x4d0/0x4d0 [ 2234.752727] ? vmacache_find+0x55/0x2a0 [ 2234.753795] do_mbind+0x943/0xb20 [ 2234.754720] ? lock_downgrade+0x6d0/0x6d0 [ 2234.755816] ? __mpol_equal+0x350/0x350 [ 2234.756857] ? ksys_write+0x12d/0x260 [ 2234.757888] ? memset+0x20/0x50 [ 2234.758754] ? get_nodes+0x202/0x270 [ 2234.759765] __x64_sys_mbind+0x23d/0x290 [ 2234.760841] ? __ia32_compat_sys_mbind+0x2a0/0x2a0 [ 2234.762142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2234.763530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2234.764884] do_syscall_64+0x33/0x40 [ 2234.765882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2234.767225] RIP: 0033:0x7f8b83c2bb19 [ 2234.768206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2234.773007] RSP: 002b:00007f8b811a1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 2234.775011] RAX: ffffffffffffffda RBX: 00007f8b83d3ef60 RCX: 00007f8b83c2bb19 [ 2234.776874] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2234.778766] RBP: 00007f8b811a11d0 R08: 0000000000000000 R09: 0000000000000003 [ 2234.780635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2234.782527] R13: 00007ffd09d5efcf R14: 00007f8b811a1300 R15: 0000000000022000 03:26:07 executing program 1: shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) [ 2234.813410] FAULT_INJECTION: forcing a failure. [ 2234.813410] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.815897] CPU: 0 PID: 12498 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2234.817721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2234.819900] Call Trace: [ 2234.820605] dump_stack+0x107/0x167 [ 2234.821574] should_fail.cold+0x5/0xa [ 2234.822579] ? __alloc_file+0x21/0x320 [ 2234.823606] should_failslab+0x5/0x20 [ 2234.824619] kmem_cache_alloc+0x5b/0x310 [ 2234.825709] __alloc_file+0x21/0x320 [ 2234.826692] alloc_empty_file+0x6d/0x170 [ 2234.827762] alloc_file+0x5e/0x5a0 [ 2234.828697] alloc_file_pseudo+0x16a/0x250 [ 2234.829824] ? alloc_file+0x5a0/0x5a0 [ 2234.830859] anon_inode_getfile+0xc8/0x1f0 [ 2234.831980] io_uring_setup+0x138b/0x2980 [ 2234.833147] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2234.834481] ? wait_for_completion_io+0x270/0x270 [ 2234.835788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2234.837357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2234.838723] do_syscall_64+0x33/0x40 [ 2234.839706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2234.841056] RIP: 0033:0x7f0f2173bb19 [ 2234.842062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2234.846121] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2234.847799] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2234.849378] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2234.850937] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2234.852506] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2234.854077] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:26:07 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 03:26:07 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 33) 03:26:07 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x30, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00d6ef89c775b4b91200000000b36a3081000000"]) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r0, 0x45ab2000) 03:26:07 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x8010, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x5, 0x3, 0x9, 0x29a2e5d9, 0x20, 0x1, 0x7}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x400, 0x181601) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:26:07 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) 03:26:07 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 24) [ 2234.976159] FAULT_INJECTION: forcing a failure. [ 2234.976159] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.978709] CPU: 0 PID: 12511 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2234.980247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2234.982093] Call Trace: [ 2234.982686] dump_stack+0x107/0x167 [ 2234.983502] should_fail.cold+0x5/0xa [ 2234.984352] ? io_wq_create+0xeb/0xc00 [ 2234.985219] should_failslab+0x5/0x20 [ 2234.986059] __kmalloc+0x72/0x390 [ 2234.986837] io_wq_create+0xeb/0xc00 [ 2234.987671] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2234.988805] ? io_import_iovec+0x1120/0x1120 [ 2234.989785] ? io_apoll_task_func+0x2d0/0x2d0 [ 2234.990778] ? __io_req_find_next+0x300/0x300 [ 2234.991760] ? do_raw_spin_lock+0x121/0x260 [ 2234.992710] ? rwlock_bug.part.0+0x90/0x90 [ 2234.993665] __io_uring_add_tctx_node+0x2c6/0x520 [ 2234.994730] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2234.995892] ? alloc_fd+0x2e7/0x670 [ 2234.996713] io_uring_setup+0x1fbb/0x2980 [ 2234.997651] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2234.998776] ? wait_for_completion_io+0x270/0x270 [ 2234.999861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.001025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.002161] do_syscall_64+0x33/0x40 [ 2235.002973] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.004086] RIP: 0033:0x7fc2d9b3db19 [ 2235.004892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.008883] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.010547] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2235.012092] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2235.013639] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2235.015189] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2235.016728] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:26:07 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) (fail_nth: 4) 03:26:07 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) 03:26:07 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:07 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x40, 0x2, 0x6) [ 2235.080303] FAULT_INJECTION: forcing a failure. [ 2235.080303] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.082841] CPU: 1 PID: 12516 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2235.084022] FAULT_INJECTION: forcing a failure. [ 2235.084022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2235.084262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.084278] Call Trace: [ 2235.089054] dump_stack+0x107/0x167 [ 2235.089817] should_fail.cold+0x5/0xa [ 2235.090597] ? create_object.isra.0+0x3a/0xa30 [ 2235.091532] should_failslab+0x5/0x20 [ 2235.092317] kmem_cache_alloc+0x5b/0x310 [ 2235.093169] create_object.isra.0+0x3a/0xa30 [ 2235.094064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2235.095106] kmem_cache_alloc+0x159/0x310 [ 2235.095962] __alloc_file+0x21/0x320 [ 2235.096723] alloc_empty_file+0x6d/0x170 [ 2235.097565] alloc_file+0x5e/0x5a0 [ 2235.098308] alloc_file_pseudo+0x16a/0x250 [ 2235.099172] ? alloc_file+0x5a0/0x5a0 [ 2235.099968] anon_inode_getfile+0xc8/0x1f0 [ 2235.100843] io_uring_setup+0x138b/0x2980 [ 2235.101711] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2235.102755] ? wait_for_completion_io+0x270/0x270 [ 2235.103766] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.104865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.105940] do_syscall_64+0x33/0x40 [ 2235.106707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.107753] RIP: 0033:0x7f0f2173bb19 [ 2235.108521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.112289] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.113854] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2235.115316] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2235.116773] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2235.118239] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2235.119701] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2235.121206] CPU: 0 PID: 12520 Comm: syz-executor.4 Not tainted 5.10.256 #1 [ 2235.122721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.124531] Call Trace: [ 2235.125124] dump_stack+0x107/0x167 [ 2235.125941] should_fail.cold+0x5/0xa [ 2235.126783] __alloc_pages_nodemask+0x182/0x600 [ 2235.127793] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2235.129117] ? mpol_shared_policy_lookup+0xf3/0x140 [ 2235.130214] ? mark_held_locks+0x9e/0xe0 [ 2235.131102] alloc_pages_vma+0xbb/0x410 [ 2235.131973] new_page+0x222/0x280 [ 2235.132733] migrate_pages+0x49b/0x2550 [ 2235.133608] ? alloc_pages_vma+0x410/0x410 [ 2235.134543] ? buffer_migrate_page_norefs+0x40/0x40 [ 2235.135624] ? alloc_migration_target+0x4d0/0x4d0 [ 2235.136679] ? vmacache_find+0x55/0x2a0 [ 2235.137567] do_mbind+0x943/0xb20 [ 2235.138326] ? lock_downgrade+0x6d0/0x6d0 [ 2235.139235] ? __mpol_equal+0x350/0x350 [ 2235.140098] ? ksys_write+0x12d/0x260 [ 2235.140932] ? memset+0x20/0x50 [ 2235.141657] ? get_nodes+0x202/0x270 [ 2235.142487] __x64_sys_mbind+0x23d/0x290 [ 2235.143373] ? __ia32_compat_sys_mbind+0x2a0/0x2a0 [ 2235.144443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.145589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.146710] do_syscall_64+0x33/0x40 [ 2235.147518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.148626] RIP: 0033:0x7f8b83c2bb19 [ 2235.149440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.153418] RSP: 002b:00007f8b811a1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 2235.155073] RAX: ffffffffffffffda RBX: 00007f8b83d3ef60 RCX: 00007f8b83c2bb19 [ 2235.156612] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 2235.158170] RBP: 00007f8b811a11d0 R08: 0000000000000000 R09: 0000000000000003 [ 2235.159711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.161265] R13: 00007ffd09d5efcf R14: 00007f8b811a1300 R15: 0000000000022000 03:26:22 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 34) 03:26:22 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:22 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 25) 03:26:22 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) 03:26:22 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x794b0000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:26:22 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x17) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4000010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x2010, 0xffffffffffffffff, 0x79973000) 03:26:22 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) (fail_nth: 5) [ 2249.807370] FAULT_INJECTION: forcing a failure. [ 2249.807370] name failslab, interval 1, probability 0, space 0, times 0 [ 2249.810046] CPU: 1 PID: 12536 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2249.811556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2249.813483] Call Trace: [ 2249.814017] dump_stack+0x107/0x167 [ 2249.814740] should_fail.cold+0x5/0xa [ 2249.815502] ? security_file_alloc+0x34/0x170 [ 2249.816579] should_failslab+0x5/0x20 03:26:22 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}], 0x1, "bd96b5f67f5e17"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000062640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000062840)={{0x0, 0xffffffff, 0x7, 0x1f, 0x2, 0x7, 0x5, 0x4, 0x108000, 0x87, 0x4, 0x4, 0x7, 0x5, 0x7ff}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000063840)={0x0, 0x0, "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", "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"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f000004cbc0)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "9cc3d2f815816e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r14}, {r15, r16}], 0x1, "bd96b5f67f5e17"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064840)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}, {}, {r3, r5}, {r6, r7}, {0x0, r16}], 0xfa, "7255b41d4957c5"}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) [ 2249.817439] kmem_cache_alloc+0x5b/0x310 [ 2249.818594] security_file_alloc+0x34/0x170 [ 2249.819496] __alloc_file+0xb7/0x320 [ 2249.820282] alloc_empty_file+0x6d/0x170 [ 2249.821132] alloc_file+0x5e/0x5a0 [ 2249.821906] alloc_file_pseudo+0x16a/0x250 [ 2249.822804] ? alloc_file+0x5a0/0x5a0 [ 2249.823616] anon_inode_getfile+0xc8/0x1f0 [ 2249.824509] io_uring_setup+0x138b/0x2980 [ 2249.825399] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2249.826455] ? wait_for_completion_io+0x270/0x270 [ 2249.827486] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2249.828581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2249.829667] do_syscall_64+0x33/0x40 [ 2249.830444] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2249.831529] RIP: 0033:0x7f0f2173bb19 [ 2249.832315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2249.836157] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2249.837749] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2249.839245] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2249.840752] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2249.842259] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2249.843761] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2249.852112] FAULT_INJECTION: forcing a failure. [ 2249.852112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2249.854628] CPU: 1 PID: 12538 Comm: syz-executor.4 Not tainted 5.10.256 #1 [ 2249.855111] FAULT_INJECTION: forcing a failure. [ 2249.855111] name failslab, interval 1, probability 0, space 0, times 0 [ 2249.856094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2249.856102] Call Trace: [ 2249.856124] dump_stack+0x107/0x167 [ 2249.856149] should_fail.cold+0x5/0xa [ 2249.861285] _copy_to_user+0x2e/0x180 [ 2249.862108] simple_read_from_buffer+0xcc/0x160 [ 2249.863116] proc_fail_nth_read+0x198/0x230 [ 2249.864040] ? proc_sessionid_read+0x230/0x230 [ 2249.865001] ? security_file_permission+0xb1/0xe0 [ 2249.866073] ? proc_sessionid_read+0x230/0x230 [ 2249.867056] vfs_read+0x228/0x620 [ 2249.867807] ksys_read+0x12d/0x260 [ 2249.868571] ? vfs_write+0xb10/0xb10 [ 2249.869380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2249.870486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2249.871582] do_syscall_64+0x33/0x40 [ 2249.872386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2249.873480] RIP: 0033:0x7f8b83bde69c [ 2249.874263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2249.878185] RSP: 002b:00007f8b811a1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2249.879806] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b83bde69c [ 2249.881320] RDX: 000000000000000f RSI: 00007f8b811a11e0 RDI: 0000000000000003 [ 2249.882859] RBP: 00007f8b811a11d0 R08: 0000000000000000 R09: 0000000000000003 [ 2249.884412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2249.885970] R13: 00007ffd09d5efcf R14: 00007f8b811a1300 R15: 0000000000022000 [ 2249.887536] CPU: 0 PID: 12544 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2249.888395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2249.889390] Call Trace: [ 2249.889705] dump_stack+0x107/0x167 [ 2249.890159] should_fail.cold+0x5/0xa [ 2249.890610] ? create_object.isra.0+0x3a/0xa30 [ 2249.891155] should_failslab+0x5/0x20 [ 2249.891603] kmem_cache_alloc+0x5b/0x310 [ 2249.892103] create_object.isra.0+0x3a/0xa30 [ 2249.892618] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2249.893231] __kmalloc+0x16e/0x390 [ 2249.893679] io_wq_create+0xeb/0xc00 [ 2249.894142] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2249.894744] ? io_import_iovec+0x1120/0x1120 [ 2249.895281] ? io_apoll_task_func+0x2d0/0x2d0 [ 2249.895786] ? __io_req_find_next+0x300/0x300 [ 2249.896310] ? do_raw_spin_lock+0x121/0x260 [ 2249.896787] ? rwlock_bug.part.0+0x90/0x90 [ 2249.897292] __io_uring_add_tctx_node+0x2c6/0x520 [ 2249.897847] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2249.898462] ? alloc_fd+0x2e7/0x670 [ 2249.898884] io_uring_setup+0x1fbb/0x2980 [ 2249.899366] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2249.899941] ? wait_for_completion_io+0x270/0x270 [ 2249.900513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2249.901107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2249.901711] do_syscall_64+0x33/0x40 [ 2249.902142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2249.902704] RIP: 0033:0x7fc2d9b3db19 [ 2249.903140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2249.905335] RSP: 002b:00007fc2d7092108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2249.906213] RAX: ffffffffffffffda RBX: 00007fc2d9c51020 RCX: 00007fc2d9b3db19 [ 2249.907038] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2249.907856] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2249.908679] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2249.909514] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2250.002965] FAULT_INJECTION: forcing a failure. [ 2250.002965] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.004378] CPU: 0 PID: 12556 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2250.005197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.006186] Call Trace: [ 2250.006505] dump_stack+0x107/0x167 [ 2250.006953] should_fail.cold+0x5/0xa [ 2250.007414] ? io_wq_create+0x6ef/0xc00 [ 2250.007899] should_failslab+0x5/0x20 [ 2250.008351] kmem_cache_alloc_node_trace+0x59/0x340 [ 2250.008957] io_wq_create+0x6ef/0xc00 [ 2250.009398] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2250.009970] ? io_import_iovec+0x1120/0x1120 [ 2250.010496] ? io_apoll_task_func+0x2d0/0x2d0 [ 2250.011010] ? __io_req_find_next+0x300/0x300 [ 2250.011507] ? do_raw_spin_lock+0x121/0x260 [ 2250.012019] ? rwlock_bug.part.0+0x90/0x90 [ 2250.012513] __io_uring_add_tctx_node+0x2c6/0x520 [ 2250.013058] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2250.013696] ? alloc_fd+0x2e7/0x670 [ 2250.014141] io_uring_setup+0x1fbb/0x2980 [ 2250.014642] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.015261] ? wait_for_completion_io+0x270/0x270 [ 2250.015845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.016485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.017113] do_syscall_64+0x33/0x40 [ 2250.017570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.018187] RIP: 0033:0x7fc2d9b3db19 [ 2250.018630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.020788] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.021701] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2250.022572] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2250.023436] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2250.024307] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2250.025162] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:26:22 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 26) 03:26:22 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 35) 03:26:22 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/pcmcia', 0x400, 0x1d2) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/81) pidfd_getfd(r2, r3, 0x0) setreuid(0x0, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000002c0)={0x4bc, 0x2d, 0x0, 0x70bd25, 0x25dfdbfb, {0xc}, [@nested={0x1d7, 0x2d, 0x0, 0x1, [@generic="b111535d2088bb43206376a0202285942f051c82a192861381df4fdbf1e0bc134e29c7d8c96d6b33321d48cf39bb0a40af6381e1f5905cd31457b1dc362ced983a56c0aaa85ff12bbffb63d047f2e7b1e51fbbd2cd2c5f9a4be93b254222ae317d09a5020eb5c585ac776d4e31d567157f8f15c3155ff91a4d11769677cb5f26b78966d32a03afb3bfc8dd495b709aee6baecbd462d16e247023187e5eed427e7f33ee53667baafb9948101992cf2655aa0929052143edd157b8ae99969aa21d61119d7350858818fb859cb9d3aae611960633f333bd0228a30cfd9d41dcc5", @typed={0x8, 0x8, 0x0, 0x0, @pid}, @typed={0x6, 0x2f, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0x27, 0x0, 0x0, @uid=r0}, @typed={0x8, 0x48, 0x0, 0x0, @uid=0xee01}, @typed={0xd4, 0x52, 0x0, 0x0, @binary="c15294a713e9a8861d0a7ef3c4e4532ff6da7e1fd5a73bf36cc917497e173a14e12219d8fa6c31c69ce9e670667ab0c8ba2b01f240a868972665ce838208c30e112437d91115262b7908142c635692187af224ec5ee6fb6b0fef52cac33d1a0584e2c75369f95c210765f15340d4010c325de1c8eb0b2c069967daba42e1bf3f5e6ee99e8b760aef124dbdf5ceb899aaf0807e61d27e90e2166dba19f30890838f3f20d9a455d1d6dbfd02c87f95b5bf19ae0ef0bf03a4e0dc833c7b2e1586a89fecbd78ea960d1855614155d5125c1a"}]}, @typed={0x8, 0x51, 0x0, 0x0, @uid}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x100}, @nested={0x1d2, 0x7a, 0x0, 0x1, [@typed={0x4, 0x57}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="29be31f1f412fcbae62756cb2429fe03082c2ec1d1de3eddc64c5d2ab35aef3a4fbe908c874eb402608e08aa047c72132df149fb8575fd57fb99439f474e2007fdd39314c77b24ab9028d130f75b8d3d194c2abac88ec01ddc3460cc402116abd8b2bdbf", @generic="d6ea4a1d864a2d7155cb1d682ce5d2940bc51679ccf04d1e5afae48e5ca79990fbe219f18552aa1ce30639924e35f0abe04c0028f849650e3af4f900759701f53d314dea2b95038734629852aca590261b4be88e0e546d7f7c51fb080fdd212320c32ab80268c32f66154d", @generic="8c0172e525089ba5", @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@remote}, @generic="af866bc1bbdc1995363d310509e1552516352cc5aae291d3830323d0fd4dc4097ada71ea38de7bd0f7c60ff36f49f5405a2d42188183a2c02904bdc4c97785c1514781db001f80e3212f629eabe7ab1229f84056665de82379a44aa493ee050db790cd384111b4b62d9f7591dc57c5ba1667c207ede20656bbbace6986735ac59bc3a41f6fe7c3e2f6de9881fd16c3269a7691c7e7e4975b51d2307a073025691ebb105c7400687124fb02895804205676a5eaf1e5126bf02ffedbb70c529a8fd203a8f0fa34576e5e368d6b48215f38e88bd240cd0d89"]}, @nested={0x18, 0x5b, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20}, @typed={0x8, 0x1a, 0x0, 0x0, @uid=r1}, @typed={0x4, 0x57}]}, @generic="f1cb42bf64f8bcf238f1e16c58de97d494fc24c941aec307528bc4ed86091f71fec86915b8bda0723f61d74385db12d6c0e6dbc693a21b3660e328ae8c81cf9e702bbe06fa622064aa5036", @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@remote}, @typed={0x70, 0xd, 0x0, 0x0, @binary="43d4a946eaee9bd6134a5238a32f4696df96f3774f06d8012c3db9bb385a966ec580aef09bffdf7ceb00c7d1b5f291b6ab758247ceed5340f5bff6f129da657fc82e25ffebdf9888b948f9c760a9b1fb278a718d0b40215b56986ed95b00de02a4a40e68d21829fa0ec0a3c9"}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000}, 0x84041) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/241, 0xf1, 0x1, &(0x7f0000000100)=""/214, 0xd6}, &(0x7f0000000240)=0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x7ff, 0x10) 03:26:22 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0xa831, 0xffffffffffffffff, 0x32718000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x3, 0x5, 0x6, 0x81}, {0x8001, 0x81, 0x0, 0x401}, {0xfff, 0x5, 0xff, 0x80}, {0x8, 0x1, 0x9, 0x6}, {0x507, 0xff, 0x4, 0xb6d4}, {0x2, 0x1, 0x1, 0xb24}, {0x8, 0xcd, 0x1, 0x7e}, {0x0, 0x0, 0xff, 0x583}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x2, [0x5, 0x81, 0x8, 0x800, 0x7, 0x7fffffff]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:22 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={0x0, 0x9, 0x5}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @random="4af3da41330a"}, 0x14) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@remote, r2}, 0x14) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x3, 0x6, 0x7, 0x400}) [ 2250.066058] FAULT_INJECTION: forcing a failure. [ 2250.066058] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.068612] CPU: 1 PID: 12559 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2250.070080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.071859] Call Trace: [ 2250.072423] dump_stack+0x107/0x167 [ 2250.073193] should_fail.cold+0x5/0xa [ 2250.074025] ? create_object.isra.0+0x3a/0xa30 [ 2250.074995] should_failslab+0x5/0x20 [ 2250.075813] kmem_cache_alloc+0x5b/0x310 [ 2250.076674] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2250.077858] create_object.isra.0+0x3a/0xa30 [ 2250.078801] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2250.080045] kmem_cache_alloc+0x159/0x310 [ 2250.080936] security_file_alloc+0x34/0x170 [ 2250.081881] __alloc_file+0xb7/0x320 [ 2250.082689] alloc_empty_file+0x6d/0x170 [ 2250.083566] alloc_file+0x5e/0x5a0 [ 2250.084324] alloc_file_pseudo+0x16a/0x250 [ 2250.085215] ? alloc_file+0x5a0/0x5a0 [ 2250.086049] anon_inode_getfile+0xc8/0x1f0 [ 2250.086950] io_uring_setup+0x138b/0x2980 [ 2250.087836] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.088904] ? wait_for_completion_io+0x270/0x270 [ 2250.089968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.091090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.092180] do_syscall_64+0x33/0x40 [ 2250.092973] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.094057] RIP: 0033:0x7f0f2173bb19 [ 2250.094845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.098755] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.100378] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2250.101896] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2250.103425] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2250.104951] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2250.106468] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:26:22 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 03:26:22 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x10, 0x20, 0x80, 0x1, {{0x1f, 0x4, 0x2, 0x5, 0x7c, 0x66, 0x0, 0xb6, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @generic={0x82, 0x6, "5e6020ad"}, @ra={0x94, 0x4}, @generic={0x82, 0xa, "7716d454688dfdb9"}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x7, [{@remote, 0x2d2}, {@local, 0xfff}, {@broadcast, 0x6}, {@local, 0xd644fbc0}]}, @timestamp={0x44, 0x18, 0x60, 0x0, 0xf, [0x5, 0x6, 0x1, 0x700000, 0x5]}, @noop, @end, @timestamp_addr={0x44, 0xc, 0xea, 0x1, 0x0, [{@loopback, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}}}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:26:22 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xc58, 0x20, 0xd) 03:26:22 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x100010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:22 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:22 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x0, 0x0, 0x0, 0x3) 03:26:22 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x110932, 0xffffffffffffffff, 0x2) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x420280) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "983ff7b28fb82685d2530df851239454772cedeecda817e7c6c2868712f49fefe2a88875160b4eac526e703386e1920a850b7119dda9c49a82b6e42ffae12e63a05246cf952e20986530b75e52e53b7447d0152aedf4b25cb84bcce6d2aa393e7f680fb15e158f3f7d4015aa0e391cab81397aa3038a9382c262567559b7171b3dffe4f42e3643ebcd5b21d279c18c8b8474c8c780693ddf0bd4932a2b1e41b09a4ef119780b32b0dd0777cabdcd91dd213c956c754095a00029e0699d0ae894c56099cacf144ceaa40cb4e3eea58cde6436364c64cd3edcca592c65969142372d0da780ee794c396c886407f587c82ca85f533df5"}, 0xf9) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0xccc03, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x10010, r1, 0xfcdda000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000001c0)={0x0, "602ba05b585325df8646bac61e1326a4"}) 03:26:22 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 36) 03:26:22 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x0, 0x0, 0x0, 0x3) [ 2250.238561] FAULT_INJECTION: forcing a failure. [ 2250.238561] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.241309] CPU: 1 PID: 12583 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2250.242799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2250.244555] Call Trace: [ 2250.245122] dump_stack+0x107/0x167 [ 2250.246113] should_fail.cold+0x5/0xa [ 2250.247046] ? create_object.isra.0+0x3a/0xa30 [ 2250.248100] should_failslab+0x5/0x20 [ 2250.248909] kmem_cache_alloc+0x5b/0x310 [ 2250.249970] ? io_wq_create+0x114/0xc00 [ 2250.251002] create_object.isra.0+0x3a/0xa30 [ 2250.251933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2250.253017] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2250.254135] io_wq_create+0x6ef/0xc00 [ 2250.254966] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2250.256293] ? io_import_iovec+0x1120/0x1120 [ 2250.257479] ? io_apoll_task_func+0x2d0/0x2d0 [ 2250.258535] ? __io_req_find_next+0x300/0x300 [ 2250.259789] ? do_raw_spin_lock+0x121/0x260 [ 2250.260988] ? rwlock_bug.part.0+0x90/0x90 [ 2250.262158] __io_uring_add_tctx_node+0x2c6/0x520 [ 2250.263468] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2250.264934] ? alloc_fd+0x2e7/0x670 [ 2250.265748] io_uring_setup+0x1fbb/0x2980 [ 2250.266911] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2250.267983] ? wait_for_completion_io+0x270/0x270 [ 2250.269307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2250.270813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2250.272355] do_syscall_64+0x33/0x40 [ 2250.273434] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2250.274774] RIP: 0033:0x7fc2d9b3db19 [ 2250.275558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2250.279881] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2250.281784] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2250.283306] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2250.284823] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2250.286341] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2250.287869] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:26:39 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 27) 03:26:39 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) 03:26:39 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:39 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x30, r0, 0xd43e9000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4, 0x7f}}, './file0\x00'}) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x8, 0x6, 0x700, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x40) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="f000abfdeb2ead6ba873a57fa5fd736563757269747900000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000400"], 0x68) syz_open_dev$tty1(0xc, 0x4, 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:39 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 03:26:39 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:26:39 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x0, 0x0, 0x0, 0x3) 03:26:39 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 37) [ 2267.625100] FAULT_INJECTION: forcing a failure. [ 2267.625100] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.627971] CPU: 0 PID: 12614 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2267.629720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2267.631816] Call Trace: [ 2267.632480] dump_stack+0x107/0x167 [ 2267.633393] should_fail.cold+0x5/0xa [ 2267.634361] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2267.635618] should_failslab+0x5/0x20 [ 2267.636568] kmem_cache_alloc_trace+0x55/0x320 [ 2267.636833] FAULT_INJECTION: forcing a failure. [ 2267.636833] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.637721] __io_uring_add_tctx_node+0x15c/0x520 [ 2267.637746] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2267.642375] ? alloc_fd+0x2e7/0x670 [ 2267.643144] io_uring_setup+0x1fbb/0x2980 [ 2267.643998] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2267.645030] ? wait_for_completion_io+0x270/0x270 [ 2267.646051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2267.647122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2267.648189] do_syscall_64+0x33/0x40 [ 2267.648965] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2267.650016] RIP: 0033:0x7fc2d9b3db19 [ 2267.650777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2267.654603] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2267.656170] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2267.657638] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2267.659107] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2267.660572] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2267.662023] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2267.663514] CPU: 1 PID: 12617 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2267.665196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2267.667184] Call Trace: [ 2267.667844] dump_stack+0x107/0x167 [ 2267.668734] should_fail.cold+0x5/0xa [ 2267.669638] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2267.670870] should_failslab+0x5/0x20 [ 2267.671769] kmem_cache_alloc_trace+0x55/0x320 [ 2267.672875] io_uring_alloc_task_context+0x99/0x6a0 [ 2267.674079] ? io_import_iovec+0x1120/0x1120 [ 2267.675118] ? lock_downgrade+0x6d0/0x6d0 [ 2267.676118] ? do_raw_spin_lock+0x121/0x260 [ 2267.677129] ? rwlock_bug.part.0+0x90/0x90 [ 2267.678142] __io_uring_add_tctx_node+0x2c6/0x520 [ 2267.679289] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2267.680523] ? alloc_fd+0x2e7/0x670 [ 2267.681389] io_uring_setup+0x1fbb/0x2980 [ 2267.682383] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2267.683585] ? wait_for_completion_io+0x270/0x270 [ 2267.684722] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2267.685958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2267.687196] do_syscall_64+0x33/0x40 [ 2267.688082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2267.689291] RIP: 0033:0x7f0f2173bb19 [ 2267.690179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2267.694568] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2267.696388] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2267.698117] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2267.699829] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2267.701536] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2267.703200] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:26:40 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x0, 0x3) 03:26:40 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x200, 0x7, 0x1) 03:26:40 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x10, 0x20, 0x3, 0x1, {{0xf, 0x4, 0x0, 0x4, 0x3c, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x24, 0xbd, 0x0, 0x5, [0x4, 0x7, 0x80000001, 0x8, 0x7fff, 0x3, 0x56a2, 0x2]}, @end]}}}}}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:40 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:40 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000480)=""/147, 0x93}, {0x0}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f00000006c0)=""/127, 0x7f}], 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="6efb5520000000000000000100000001ddde80438e12a775a157b2d4dbf3a670eddb630b95e680a10da447", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28004000000000000100020001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x48}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x20000, 0x0}, 0x80000001) io_uring_enter(r0, 0x47d5, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x3f, 0x1f, 0x19, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0x8, 0x80000001, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000780)={'ip_vti0\x00', r5, 0x8, 0x7, 0xb9ea, 0x7aaac32b, {{0x6, 0x4, 0x0, 0x23, 0x18, 0x68, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @local, {[@noop, @noop]}}}}}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x2010, 0xffffffffffffffff, 0x10000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/sit', 0x80180, 0x196) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000900)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r7, 0x0, &(0x7f00000008c0)='./file0\x00', 0x65, 0x139002, 0x23456, {0x0, r8}}, 0x8) 03:26:40 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x0, 0x3) 03:26:40 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) finit_module(0xffffffffffffffff, &(0x7f0000000040)='[![:{-\xb3!@:)\x9b}\x00', 0x1) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x6, 0x800, 0x6) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:40 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x10) r0 = epoll_create1(0x80000) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x5, 0x6c6000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x20000001}) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0xfff, r0, 0x0, 0x1ff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000080)=0x1bf, 0x6a, 0x4) 03:26:55 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x0, 0x3) 03:26:55 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x53, 0xfffffc01, 0x8, 0x7fff, 0x2}) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x800, 0x400800) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x0, 0xc6, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7, 0x7f, 0x7}}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:26:55 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 38) 03:26:55 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000100)=0x7, 0xffffffff, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x62b1, 0x40, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:55 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x40010, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:26:55 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:26:55 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x29, 0x0, 0xf7, 0xfffff800, 0x28, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x0, 0x40, 0x3, 0x1f}}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @random="4af3da41330a"}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x5, r6, 0x1, 0x0, 0x6, @random="4af3da41330a"}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="01d8c7bd7000fddbdf250b00000014000180080003000300000008000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970057674693000000000000000000081e93101f4db5c87758a60fe", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000000000008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300030000006400018008000100", @ANYRES32=r3, @ANYBLOB="0800030000000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000300020000001400020069705f76746930000000000000000000140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r7, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r7, 0x80404532, &(0x7f0000000080)=""/80) fcntl$getownex(r8, 0x10, &(0x7f0000000040)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:26:55 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 28) [ 2283.525729] FAULT_INJECTION: forcing a failure. [ 2283.525729] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.527314] CPU: 1 PID: 12654 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2283.528245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2283.529362] Call Trace: [ 2283.529728] dump_stack+0x107/0x167 [ 2283.530224] should_fail.cold+0x5/0xa [ 2283.530736] ? create_object.isra.0+0x3a/0xa30 [ 2283.531351] should_failslab+0x5/0x20 [ 2283.531864] kmem_cache_alloc+0x5b/0x310 [ 2283.532413] create_object.isra.0+0x3a/0xa30 [ 2283.533006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2283.533693] kmem_cache_alloc_trace+0x151/0x320 [ 2283.534320] __io_uring_add_tctx_node+0x15c/0x520 [ 2283.534976] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2283.535673] ? alloc_fd+0x2e7/0x670 [ 2283.536170] io_uring_setup+0x1fbb/0x2980 [ 2283.536743] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2283.537425] ? wait_for_completion_io+0x270/0x270 [ 2283.538097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2283.538803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2283.539499] do_syscall_64+0x33/0x40 [ 2283.540008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2283.540797] RIP: 0033:0x7fc2d9b3db19 [ 2283.541302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2283.543813] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2283.544845] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2283.545828] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2283.546785] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2283.547752] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2283.548722] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2283.549411] FAULT_INJECTION: forcing a failure. [ 2283.549411] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.552571] CPU: 0 PID: 12667 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2283.554224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2283.556176] Call Trace: [ 2283.556805] dump_stack+0x107/0x167 [ 2283.557690] should_fail.cold+0x5/0xa [ 2283.558597] ? create_object.isra.0+0x3a/0xa30 [ 2283.559681] should_failslab+0x5/0x20 [ 2283.560586] kmem_cache_alloc+0x5b/0x310 [ 2283.561555] create_object.isra.0+0x3a/0xa30 [ 2283.562607] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2283.563812] kmem_cache_alloc_trace+0x151/0x320 [ 2283.564922] io_uring_alloc_task_context+0x99/0x6a0 [ 2283.566121] ? io_import_iovec+0x1120/0x1120 [ 2283.567168] ? lock_downgrade+0x6d0/0x6d0 [ 2283.568150] ? do_raw_spin_lock+0x121/0x260 [ 2283.569174] ? rwlock_bug.part.0+0x90/0x90 [ 2283.570195] __io_uring_add_tctx_node+0x2c6/0x520 [ 2283.571314] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2283.572544] ? alloc_fd+0x2e7/0x670 [ 2283.573399] io_uring_setup+0x1fbb/0x2980 [ 2283.574408] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2283.575610] ? wait_for_completion_io+0x270/0x270 [ 2283.576776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2283.578035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2283.579257] do_syscall_64+0x33/0x40 [ 2283.580121] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2283.581332] RIP: 0033:0x7f0f2173bb19 [ 2283.582226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2283.586601] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2283.588405] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2283.590108] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2283.591797] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2283.593492] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2283.595191] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2299.249904] FAULT_INJECTION: forcing a failure. 03:27:11 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 39) 03:27:11 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf0, 0x0, 0x0, 0x3) 03:27:11 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11) 03:27:11 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 29) 03:27:11 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) fcntl$getflags(r0, 0x28d959cba0da99d) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x1, 0x13c) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) pipe2(&(0x7f0000000200), 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0xa0000, 0x0) r2 = fsmount(r1, 0x0, 0x6b) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000140)=""/176) 03:27:11 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x81, 0xffffffff00000000, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x4, 0x2f38, 0x3}, 0x7}}, 0x18) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x200, 0x8000, 0x2) 03:27:11 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x100010, 0xffffffffffffffff, 0x945be000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xe) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) 03:27:11 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 2299.249904] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.253649] CPU: 0 PID: 12684 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2299.255473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.257641] Call Trace: [ 2299.258346] dump_stack+0x107/0x167 [ 2299.259300] should_fail.cold+0x5/0xa [ 2299.260307] ? xas_alloc+0x336/0x440 [ 2299.261275] should_failslab+0x5/0x20 [ 2299.262279] kmem_cache_alloc+0x5b/0x310 [ 2299.263355] ? stack_trace_consume_entry+0x160/0x160 [ 2299.264678] xas_alloc+0x336/0x440 [ 2299.265606] xas_create+0x34a/0x10d0 [ 2299.266601] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2299.267968] xas_store+0x8c/0x1c40 [ 2299.268914] __xa_store+0x164/0x2d0 [ 2299.269903] ? xa_delete_node+0x280/0x280 [ 2299.270994] ? trace_hardirqs_on+0x5b/0x180 [ 2299.272124] xa_store+0x31/0x50 [ 2299.272988] __io_uring_add_tctx_node+0x1cf/0x520 [ 2299.274255] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2299.275609] ? alloc_fd+0x2e7/0x670 [ 2299.276563] io_uring_setup+0x1fbb/0x2980 [ 2299.277655] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2299.278969] ? wait_for_completion_io+0x270/0x270 [ 2299.280260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.281631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.282996] do_syscall_64+0x33/0x40 [ 2299.283972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.285310] RIP: 0033:0x7fc2d9b3db19 [ 2299.286295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.291038] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2299.292718] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2299.294297] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2299.295863] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2299.297427] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2299.299240] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:27:11 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x8, 0x612003) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xad, 0x20, 0x7f, 0x3, 0x0, 0x0, 0x4488, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x4, 0xfffffffffffffffa}, 0x40800, 0x1, 0x1, 0x1, 0xfff, 0x3, 0xbf09, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:11 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000020000000900000000000000000000000000000000000000000000000000400200000000000000000000000000000000000000000000000000000000000000003f000000d105000000000000050000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000071b146a114b65b5e2458848c2d6139bdb2d16f7ce688b1aad6ce1e3321f7e6aa25111cbb0091dbf51cad756a31c7d64afa9a47f45c1537c2f08b56a6e81533d0cb07dcedd6b2060fc8e91f9a951dd390347a49220c3fdf9a3661dc5646b971ee01037653806d6655a5c4103c7688bb60b9b4f996c1ec703a2c3ef59fe0c63be1b56b413cf891e5ddccf33b4b919b926f"]) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x1f, 0x5}], 0x18) [ 2299.330325] FAULT_INJECTION: forcing a failure. [ 2299.330325] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.332105] CPU: 1 PID: 12703 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2299.333156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.334422] Call Trace: [ 2299.334827] dump_stack+0x107/0x167 [ 2299.335380] should_fail.cold+0x5/0xa [ 2299.335950] ? create_object.isra.0+0x3a/0xa30 [ 2299.336637] should_failslab+0x5/0x20 [ 2299.337211] kmem_cache_alloc+0x5b/0x310 [ 2299.337841] create_object.isra.0+0x3a/0xa30 [ 2299.338507] kmemleak_alloc_percpu+0xa0/0x100 [ 2299.339175] pcpu_alloc+0x4e2/0x1240 [ 2299.339747] __percpu_counter_init+0x10d/0x2d0 [ 2299.340439] io_uring_alloc_task_context+0xcc/0x6a0 [ 2299.341189] ? io_import_iovec+0x1120/0x1120 [ 2299.341862] ? lock_downgrade+0x6d0/0x6d0 [ 2299.342483] ? do_raw_spin_lock+0x121/0x260 [ 2299.343123] ? rwlock_bug.part.0+0x90/0x90 [ 2299.343761] __io_uring_add_tctx_node+0x2c6/0x520 [ 2299.344478] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2299.345254] ? alloc_fd+0x2e7/0x670 [ 2299.345819] io_uring_setup+0x1fbb/0x2980 [ 2299.346444] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2299.347197] ? wait_for_completion_io+0x270/0x270 [ 2299.347935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.348719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.349494] do_syscall_64+0x33/0x40 [ 2299.350057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.350832] RIP: 0033:0x7f0f2173bb19 [ 2299.351398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.354145] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2299.355272] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2299.356334] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2299.357397] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2299.359031] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2299.360917] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:27:11 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x4, 0x10001}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000800)={r0, 0x6, 0x1, [0x5, 0x6, 0xffffffffffffff8d, 0x20, 0xb393], [0x5, 0x9, 0x7fff, 0x3, 0x3f, 0x3, 0x5, 0x9, 0x1, 0x9, 0x7, 0xa3de, 0x1, 0x4, 0x8, 0x1, 0x0, 0x3ff, 0x7, 0xffffffffffff8000, 0xff, 0x8b0, 0x4, 0xd1d, 0x1, 0x8, 0x100, 0x0, 0x2, 0xe286, 0x4, 0x2, 0x8, 0x6, 0xffffffff, 0x4, 0x6, 0x6, 0x6, 0x80, 0x7fffffff, 0x80000000, 0xfffffffffffff14a, 0x6, 0x0, 0x400, 0xfffffffffffffffa, 0x2, 0x3ff, 0x8afd, 0xcd3, 0x9, 0xf, 0x3, 0xb5, 0x8, 0x3, 0x2, 0x0, 0x5, 0x3f, 0x5, 0x2, 0x321, 0x7, 0xef, 0x200, 0x7fff, 0x7ea, 0x6, 0x6, 0x16e, 0x7f, 0x0, 0xfffffffffffffc01, 0x2c06b950, 0x24, 0x0, 0xfffffffffffffff7, 0x100000000, 0x598, 0x80, 0x40, 0x800, 0x10000, 0x5, 0x6, 0x1, 0x80, 0x1, 0x8, 0xffff, 0x3ff, 0x1, 0x4, 0x3, 0xffffffffffffff7f, 0x3, 0x8, 0x3, 0x9, 0x1, 0x2, 0xff, 0x1000, 0x1000, 0x7, 0xfffffffffffffffa, 0x101, 0x6, 0x5, 0x7, 0x5294, 0x1, 0x4, 0xd371, 0x7fffffff, 0x6, 0xfffffffffffffff7, 0x1bbe, 0x20]}) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={r1, 0x7, 0x7}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:11 executing program 1: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:27:11 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300, 0x0, 0x0, 0x3) 03:27:11 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16) 03:27:11 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 40) [ 2299.545191] FAULT_INJECTION: forcing a failure. [ 2299.545191] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.547740] CPU: 0 PID: 12720 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2299.549231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.551038] Call Trace: [ 2299.551612] dump_stack+0x107/0x167 [ 2299.552404] should_fail.cold+0x5/0xa [ 2299.553232] ? create_object.isra.0+0x3a/0xa30 [ 2299.554233] should_failslab+0x5/0x20 [ 2299.555056] kmem_cache_alloc+0x5b/0x310 [ 2299.555940] create_object.isra.0+0x3a/0xa30 [ 2299.556885] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2299.557998] kmem_cache_alloc+0x159/0x310 [ 2299.558920] xas_alloc+0x336/0x440 [ 2299.559693] xas_create+0x34a/0x10d0 [ 2299.560516] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2299.561650] xas_store+0x8c/0x1c40 [ 2299.562453] __xa_store+0x164/0x2d0 [ 2299.563244] ? xa_delete_node+0x280/0x280 [ 2299.564148] ? trace_hardirqs_on+0x5b/0x180 [ 2299.565089] xa_store+0x31/0x50 [ 2299.565815] __io_uring_add_tctx_node+0x1cf/0x520 [ 2299.566856] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2299.567990] ? alloc_fd+0x2e7/0x670 [ 2299.568787] io_uring_setup+0x1fbb/0x2980 [ 2299.569690] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2299.570789] ? wait_for_completion_io+0x270/0x270 [ 2299.571855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.572987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.574156] do_syscall_64+0x33/0x40 [ 2299.574967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.576073] RIP: 0033:0x7fc2d9b3db19 [ 2299.576874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.580838] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2299.582490] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2299.584032] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2299.585569] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2299.587122] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2299.588658] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:27:27 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 41) 03:27:27 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10010, 0xffffffffffffffff, 0xf5c91000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:27:27 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x1010, 0xffffffffffffffff, 0x59738000) r0 = shmget$private(0x0, 0x2000, 0x54000200, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16) shmctl$SHM_UNLOCK(r0, 0xc) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) 03:27:27 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x40010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:27:27 executing program 1: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:27:27 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3f00, 0x0, 0x0, 0x3) 03:27:27 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:27 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 30) [ 2315.161395] FAULT_INJECTION: forcing a failure. [ 2315.161395] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.162877] CPU: 0 PID: 12740 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2315.163749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.164775] Call Trace: [ 2315.165113] dump_stack+0x107/0x167 [ 2315.165575] should_fail.cold+0x5/0xa [ 2315.166062] ? create_object.isra.0+0x3a/0xa30 [ 2315.166624] should_failslab+0x5/0x20 [ 2315.167097] kmem_cache_alloc+0x5b/0x310 [ 2315.167602] create_object.isra.0+0x3a/0xa30 [ 2315.168152] kmemleak_alloc_percpu+0xa0/0x100 [ 2315.168721] pcpu_alloc+0x4e2/0x1240 [ 2315.169195] __percpu_counter_init+0x10d/0x2d0 [ 2315.169764] io_uring_alloc_task_context+0xcc/0x6a0 [ 2315.170391] ? io_import_iovec+0x1120/0x1120 [ 2315.170944] ? lock_downgrade+0x6d0/0x6d0 [ 2315.171456] ? do_raw_spin_lock+0x121/0x260 [ 2315.171990] ? rwlock_bug.part.0+0x90/0x90 [ 2315.172522] __io_uring_add_tctx_node+0x2c6/0x520 [ 2315.173118] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2315.173762] ? alloc_fd+0x2e7/0x670 [ 2315.174227] io_uring_setup+0x1fbb/0x2980 [ 2315.174742] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2315.175370] ? wait_for_completion_io+0x270/0x270 [ 2315.175983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.176640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.177277] do_syscall_64+0x33/0x40 [ 2315.177736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2315.178374] RIP: 0033:0x7f0f2173bb19 [ 2315.178831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.181089] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2315.182031] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2315.182678] FAULT_INJECTION: forcing a failure. [ 2315.182678] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.182909] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2315.182916] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2315.182923] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2315.182930] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2315.191591] CPU: 1 PID: 12743 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2315.193053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.194833] Call Trace: [ 2315.195400] dump_stack+0x107/0x167 [ 2315.196175] should_fail.cold+0x5/0xa [ 2315.196982] ? xas_alloc+0x336/0x440 [ 2315.197771] should_failslab+0x5/0x20 [ 2315.198611] kmem_cache_alloc+0x5b/0x310 [ 2315.199476] xas_alloc+0x336/0x440 [ 2315.200233] xas_create+0x34a/0x10d0 [ 2315.201045] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2315.202188] xas_store+0x8c/0x1c40 [ 2315.202956] __xa_store+0x164/0x2d0 [ 2315.203732] ? xa_delete_node+0x280/0x280 [ 2315.204615] ? trace_hardirqs_on+0x5b/0x180 [ 2315.205530] xa_store+0x31/0x50 [ 2315.206261] __io_uring_add_tctx_node+0x1cf/0x520 [ 2315.207281] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2315.208391] ? alloc_fd+0x2e7/0x670 [ 2315.209175] io_uring_setup+0x1fbb/0x2980 [ 2315.210097] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2315.211175] ? wait_for_completion_io+0x270/0x270 [ 2315.212219] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.213326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.214450] do_syscall_64+0x33/0x40 [ 2315.215238] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2315.216318] RIP: 0033:0x7fc2d9b3db19 [ 2315.217108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.221027] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2315.222657] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2315.224159] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2315.225667] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2315.227207] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2315.228722] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:27:27 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x6) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:27 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1}, 0x2}, {{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/14, 0xe}], 0x1, &(0x7f0000000200)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001200)=@nl=@unspec, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001280)=""/3, 0x3}], 0x1, &(0x7f0000001300)=""/150, 0x96}, 0x9}, {{&(0x7f00000013c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001440)=""/231, 0xe7}, {&(0x7f0000001540)=""/68, 0x44}], 0x2, &(0x7f0000001600)=""/47, 0x2f}, 0x4}, {{&(0x7f0000001640)=@xdp, 0x80, &(0x7f0000002940)=[{&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/133, 0x85}, {&(0x7f0000002780)=""/93, 0x5d}, {&(0x7f0000002800)=""/252, 0xfc}, {&(0x7f0000002900)=""/9, 0x9}], 0x5, &(0x7f00000029c0)=""/58, 0x3a}, 0x701}, {{&(0x7f0000002a00)=@alg, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002a80)=""/144, 0x90}, {&(0x7f0000002b40)=""/77, 0x4d}], 0x2, &(0x7f0000002c00)=""/247, 0xf7}}], 0x6, 0x102, &(0x7f0000002e80)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000002ec0)={0x0, 0x6, [0x4, 0x9, 0x40, 0x8, 0x200, 0xd8c]}) 03:27:27 executing program 1: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:27:27 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x0, 0x3) 03:27:27 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x50, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x18}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, [{0x66}, {0x30, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0x60}, {0xc}, {0x1b}, {0x1b}, {0x3}, {0x6c}, {0x16}, {0x18, 0x1}, {0x3}, {0x60}, {0x60}, {0x3, 0x1}, {0x60}, {0x3}, {0x3}, {0x24}, {0x12}, {0x9, 0x1}, {0x12, 0x1}, {0x9, 0x1}, {0x6}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00fad2d67571eaeefee8f8fc61ff81882f9796394e534ba05f6640088797e389d151f31e8027235b92e819c372612274629a8b8b2bd99b8b35eff998a6a5d540777158eb373e9385b49aba12a3b33c30b27c5639986865281e2bdd2ca8614cb3fad2f1acadf70c1b4649e4d99297856959ac4bb3fa93bd03e95377cb7b63ca2a7515c7b527a78149467a122708946548949615c1c5f418193501a198bf401cc03463a1bfbe6d96acd5fbfcc74468be5c7d49ddc78e93ec28ac8bb43f1e7a311e82d761103416", @ANYRES16=r0, @ANYBLOB="02002abd7000fcdbdf2507000000080001005e00000008000300", @ANYRES32=0x0, @ANYBLOB="1400040069703665727370616e30000000000000140004007767320000000000000000000000000005005300010000000500530000000000080005000a0000000a00e80008021100000100001c00e7005417dc5116b53719832407ef4d1e1c59073698fca94b802d1400040076657468315f766972745f77696669000400cc000a00180003030303030300000400cc00"], 0xb4}, 0x1, 0x0, 0x0, 0x4008040}, 0x24008851) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file1\x00'}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x9, 0x3ff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:27:27 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x42100, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:27 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 31) 03:27:27 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) mmap(&(0x7f0000931000/0x1000)=nil, 0x1000, 0x2, 0x50, r0, 0x23fea000) write$9p(r2, &(0x7f0000000040)="e171bc6a9b4cd0fcd594563055a9014f576b8be2af9c926f0f6bba225918694ed050bea1fff0b61a53b97ea1b14285d9ded9f19f130560543cef3a159b265dad8ba5854fe908052008fd1fa714d6795a922235ecc9f7e304e563d91f641dfd307366e00d3d3e2d30df66fdb14c5a5a3eb7ddf05de81dd2091e6cd537f00cb0b949dc7a69e7307b3f582c56303492506211620132d240b38b27bb82d67ae70f74b202ed31c08dc44ced6f86", 0xab) r3 = socket$inet(0x2, 0xa, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x80800) write$P9_RWSTAT(r4, &(0x7f00000002c0)={0x7, 0x7f, 0x1}, 0x7) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000200)={'wg0\x00'}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x30, r0, 0x46d4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r5 = syz_open_dev$mouse(&(0x7f0000000100), 0x84, 0x80) write$9p(r5, &(0x7f0000000140)="303f3a147f4571a5677114cc2c8a6c09a1e9b1f02941ac9becb97a405de6e0358564c60473a2222fcee2e36ff815d072d0fcbe5b518b161f0d3b070d6316854d4f88e4d1e1717b203efc3808995bf07e4a812bafec62c99a539a3a527d5d30916fc87ec77a2fc66e36b1a70e1a51d5458e5e2ecaca66a84def129a58e6f0c1fcfdaa3d83dcf2308210b09fd550ef4f4c842832283effa3a2929ec63c22ff86f1e6a1453a61c2c2d42905ed4cfc58139ec565cded2c5da20bc73c4826f191c3", 0xbf) [ 2315.372941] FAULT_INJECTION: forcing a failure. [ 2315.372941] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.374390] CPU: 0 PID: 12768 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2315.375209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.376188] Call Trace: [ 2315.376506] dump_stack+0x107/0x167 [ 2315.376941] should_fail.cold+0x5/0xa [ 2315.377395] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2315.378016] should_failslab+0x5/0x20 [ 2315.378466] kmem_cache_alloc_trace+0x55/0x320 [ 2315.379036] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2315.379634] ? io_import_iovec+0x1120/0x1120 [ 2315.380161] ? lock_downgrade+0x6d0/0x6d0 [ 2315.380652] ? do_raw_spin_lock+0x121/0x260 [ 2315.381165] ? rwlock_bug.part.0+0x90/0x90 [ 2315.381659] __io_uring_add_tctx_node+0x2c6/0x520 [ 2315.382233] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2315.382847] ? alloc_fd+0x2e7/0x670 [ 2315.383280] io_uring_setup+0x1fbb/0x2980 [ 2315.383769] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2315.384363] ? wait_for_completion_io+0x270/0x270 [ 2315.384943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.385558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.386188] do_syscall_64+0x33/0x40 [ 2315.386620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2315.387213] RIP: 0033:0x7f0f2173bb19 [ 2315.387657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.389794] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2315.390694] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2315.391533] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2315.392361] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2315.393194] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2315.394048] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:27:41 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 32) 03:27:41 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:27:41 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 42) 03:27:41 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:41 executing program 7: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) shutdown(r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:27:41 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) [ 2329.163239] FAULT_INJECTION: forcing a failure. 03:27:41 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf000, 0x0, 0x0, 0x3) 03:27:41 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) [ 2329.163239] name failslab, interval 1, probability 0, space 0, times 0 [ 2329.165996] CPU: 1 PID: 12777 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2329.167572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2329.169455] Call Trace: [ 2329.170061] dump_stack+0x107/0x167 [ 2329.170908] should_fail.cold+0x5/0xa [ 2329.171778] ? create_object.isra.0+0x3a/0xa30 [ 2329.172816] should_failslab+0x5/0x20 [ 2329.173683] kmem_cache_alloc+0x5b/0x310 [ 2329.174618] ? mark_held_locks+0x9e/0xe0 [ 2329.175549] create_object.isra.0+0x3a/0xa30 [ 2329.176550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2329.177710] kmem_cache_alloc+0x159/0x310 [ 2329.178673] xas_alloc+0x336/0x440 [ 2329.179493] xas_create+0x34a/0x10d0 [ 2329.180356] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2329.181570] xas_store+0x8c/0x1c40 [ 2329.182413] __xa_store+0x164/0x2d0 [ 2329.183265] ? xa_delete_node+0x280/0x280 [ 2329.184232] ? trace_hardirqs_on+0x5b/0x180 [ 2329.185237] xa_store+0x31/0x50 [ 2329.186003] __io_uring_add_tctx_node+0x1cf/0x520 [ 2329.187129] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2329.188343] ? alloc_fd+0x2e7/0x670 [ 2329.189210] io_uring_setup+0x1fbb/0x2980 [ 2329.190202] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2329.191374] ? wait_for_completion_io+0x270/0x270 [ 2329.192518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2329.193720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2329.194905] do_syscall_64+0x33/0x40 [ 2329.195751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2329.196914] RIP: 0033:0x7fc2d9b3db19 [ 2329.197763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2329.201932] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2329.203670] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2329.205284] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2329.206913] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2329.208531] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2329.210160] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2329.223834] FAULT_INJECTION: forcing a failure. [ 2329.223834] name failslab, interval 1, probability 0, space 0, times 0 [ 2329.225461] CPU: 0 PID: 12790 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2329.226409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2329.227537] Call Trace: [ 2329.227900] dump_stack+0x107/0x167 [ 2329.228403] should_fail.cold+0x5/0xa [ 2329.228931] ? create_object.isra.0+0x3a/0xa30 [ 2329.229551] should_failslab+0x5/0x20 [ 2329.230065] kmem_cache_alloc+0x5b/0x310 [ 2329.230622] create_object.isra.0+0x3a/0xa30 [ 2329.231227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2329.231910] kmem_cache_alloc_trace+0x151/0x320 [ 2329.232549] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2329.233242] ? io_import_iovec+0x1120/0x1120 [ 2329.233846] ? lock_downgrade+0x6d0/0x6d0 [ 2329.234415] ? do_raw_spin_lock+0x121/0x260 [ 2329.234994] ? rwlock_bug.part.0+0x90/0x90 [ 2329.235584] __io_uring_add_tctx_node+0x2c6/0x520 [ 2329.236235] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2329.236944] ? alloc_fd+0x2e7/0x670 [ 2329.237437] io_uring_setup+0x1fbb/0x2980 [ 2329.238008] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2329.238694] ? wait_for_completion_io+0x270/0x270 [ 2329.239360] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2329.240061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2329.240746] do_syscall_64+0x33/0x40 [ 2329.241251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2329.241947] RIP: 0033:0x7f0f2173bb19 [ 2329.242450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2329.244912] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2329.245937] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2329.246920] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2329.247891] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2329.248865] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2329.249838] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:27:41 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0xa031, 0xffffffffffffffff, 0x3ea43000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x3, 0x5, 0x3}) 03:27:41 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:41 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf0ffff, 0x0, 0x0, 0x3) 03:27:41 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:27:41 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:41 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 43) 03:27:41 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:27:41 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x4000010, 0xffffffffffffffff, 0xae5f0000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2329.372308] FAULT_INJECTION: forcing a failure. [ 2329.372308] name failslab, interval 1, probability 0, space 0, times 0 [ 2329.373817] CPU: 0 PID: 12810 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2329.374693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2329.375735] Call Trace: [ 2329.376074] dump_stack+0x107/0x167 [ 2329.376532] should_fail.cold+0x5/0xa [ 2329.377029] ? xas_alloc+0x336/0x440 [ 2329.377497] should_failslab+0x5/0x20 [ 2329.377982] kmem_cache_alloc+0x5b/0x310 [ 2329.378515] xas_alloc+0x336/0x440 [ 2329.378965] xas_create+0x34a/0x10d0 [ 2329.379447] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2329.380111] xas_store+0x8c/0x1c40 [ 2329.380578] __xa_store+0x164/0x2d0 [ 2329.381046] ? xa_delete_node+0x280/0x280 [ 2329.381583] ? trace_hardirqs_on+0x5b/0x180 [ 2329.382138] xa_store+0x31/0x50 [ 2329.382593] __io_uring_add_tctx_node+0x1cf/0x520 [ 2329.383193] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2329.383852] ? alloc_fd+0x2e7/0x670 [ 2329.384334] io_uring_setup+0x1fbb/0x2980 [ 2329.384872] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2329.385531] ? wait_for_completion_io+0x270/0x270 [ 2329.386168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2329.386830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2329.387489] do_syscall_64+0x33/0x40 [ 2329.387957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2329.388607] RIP: 0033:0x7fc2d9b3db19 [ 2329.389083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2329.391423] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2329.392390] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2329.393287] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2329.394199] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2329.395088] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2329.395973] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:27:56 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 44) 03:27:56 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x0, 0x0, 0x3) 03:27:56 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:56 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:27:56 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x65) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) getpeername$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 03:27:56 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:27:56 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:27:56 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 33) [ 2343.823475] FAULT_INJECTION: forcing a failure. [ 2343.823475] name failslab, interval 1, probability 0, space 0, times 0 [ 2343.825279] CPU: 1 PID: 12829 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2343.826358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2343.827620] Call Trace: [ 2343.828026] dump_stack+0x107/0x167 [ 2343.828583] should_fail.cold+0x5/0xa [ 2343.829165] ? create_object.isra.0+0x3a/0xa30 [ 2343.829866] should_failslab+0x5/0x20 [ 2343.830455] kmem_cache_alloc+0x5b/0x310 [ 2343.831075] ? mark_held_locks+0x9e/0xe0 [ 2343.831696] create_object.isra.0+0x3a/0xa30 [ 2343.832364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2343.833142] kmem_cache_alloc+0x159/0x310 [ 2343.833775] xas_alloc+0x336/0x440 [ 2343.834330] xas_create+0x34a/0x10d0 [ 2343.834905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2343.835707] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2343.836536] xas_store+0x8c/0x1c40 [ 2343.837083] ? xas_store+0x2/0x1c40 [ 2343.837640] __xa_store+0x164/0x2d0 [ 2343.838197] ? xa_delete_node+0x280/0x280 [ 2343.838845] ? trace_hardirqs_on+0x5b/0x180 [ 2343.839508] xa_store+0x31/0x50 [ 2343.840015] __io_uring_add_tctx_node+0x1cf/0x520 [ 2343.840749] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2343.841548] ? alloc_fd+0x2e7/0x670 [ 2343.842107] io_uring_setup+0x1fbb/0x2980 [ 2343.842750] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2343.843511] ? wait_for_completion_io+0x270/0x270 [ 2343.844257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2343.845048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2343.845828] do_syscall_64+0x33/0x40 [ 2343.846404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2343.847177] RIP: 0033:0x7fc2d9b3db19 [ 2343.847739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2343.850517] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2343.851662] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2343.852733] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2343.853560] FAULT_INJECTION: forcing a failure. [ 2343.853560] name failslab, interval 1, probability 0, space 0, times 0 [ 2343.853807] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2343.853815] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2343.853824] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2343.862720] CPU: 0 PID: 12832 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2343.864592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2343.866592] Call Trace: [ 2343.867249] dump_stack+0x107/0x167 [ 2343.868129] should_fail.cold+0x5/0xa [ 2343.869052] ? io_wq_create+0xeb/0xc00 [ 2343.869996] should_failslab+0x5/0x20 [ 2343.870986] __kmalloc+0x72/0x390 [ 2343.871842] io_wq_create+0xeb/0xc00 [ 2343.872755] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2343.873981] ? io_import_iovec+0x1120/0x1120 [ 2343.875059] ? io_apoll_task_func+0x2d0/0x2d0 [ 2343.876131] ? __io_req_find_next+0x300/0x300 [ 2343.877209] ? do_raw_spin_lock+0x121/0x260 [ 2343.878247] ? rwlock_bug.part.0+0x90/0x90 [ 2343.879293] __io_uring_add_tctx_node+0x2c6/0x520 [ 2343.880448] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2343.881724] ? alloc_fd+0x2e7/0x670 [ 2343.882612] io_uring_setup+0x1fbb/0x2980 [ 2343.883620] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2343.884857] ? wait_for_completion_io+0x270/0x270 [ 2343.886046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2343.887314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2343.888551] do_syscall_64+0x33/0x40 [ 2343.889449] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2343.890711] RIP: 0033:0x7f0f2173bb19 [ 2343.891600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2343.896063] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2343.897883] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2343.899592] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2343.901305] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2343.903036] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2343.904754] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:27:56 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x303d01, 0x8d) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000240)=ANY=[@ANYBLOB="01000707010000001800000078ad973c5acf4610034888ff35423622eb6abdb1e920b3c1640300cf3df4b88ce2ffb77f7294f0ff8dc79d2e12c3a652fd2736eeabfb", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x3, 0x0, 0x7fff}, 0x1000000) 03:27:56 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:27:56 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x0, 0x0, 0x3) 03:27:56 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 45) 03:27:56 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:27:56 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 34) 03:27:56 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) epoll_create(0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) [ 2344.039756] FAULT_INJECTION: forcing a failure. [ 2344.039756] name failslab, interval 1, probability 0, space 0, times 0 [ 2344.042504] CPU: 0 PID: 12849 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2344.044131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2344.046097] Call Trace: [ 2344.046774] dump_stack+0x107/0x167 [ 2344.046859] FAULT_INJECTION: forcing a failure. [ 2344.046859] name failslab, interval 1, probability 0, space 0, times 0 [ 2344.047663] should_fail.cold+0x5/0xa [ 2344.047696] ? xas_alloc+0x336/0x440 [ 2344.051009] should_failslab+0x5/0x20 [ 2344.051912] kmem_cache_alloc+0x5b/0x310 [ 2344.052880] xas_alloc+0x336/0x440 [ 2344.053726] xas_create+0x34a/0x10d0 [ 2344.054637] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2344.055877] xas_store+0x8c/0x1c40 [ 2344.056737] __xa_store+0x164/0x2d0 [ 2344.057601] ? xa_delete_node+0x280/0x280 [ 2344.058595] ? trace_hardirqs_on+0x5b/0x180 [ 2344.059625] xa_store+0x31/0x50 [ 2344.060411] __io_uring_add_tctx_node+0x1cf/0x520 [ 2344.061552] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2344.062791] ? alloc_fd+0x2e7/0x670 [ 2344.063733] io_uring_setup+0x1fbb/0x2980 [ 2344.064959] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2344.066452] ? wait_for_completion_io+0x270/0x270 [ 2344.067909] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2344.069299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2344.070544] do_syscall_64+0x33/0x40 [ 2344.071438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2344.072681] RIP: 0033:0x7fc2d9b3db19 [ 2344.073585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2344.078061] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2344.079859] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2344.081532] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2344.083216] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2344.084888] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2344.086603] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2344.088344] CPU: 1 PID: 12850 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2344.089292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2344.090424] Call Trace: [ 2344.090789] dump_stack+0x107/0x167 [ 2344.091289] should_fail.cold+0x5/0xa [ 2344.091810] ? create_object.isra.0+0x3a/0xa30 [ 2344.092427] should_failslab+0x5/0x20 [ 2344.092940] kmem_cache_alloc+0x5b/0x310 [ 2344.093490] create_object.isra.0+0x3a/0xa30 [ 2344.094080] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2344.094767] __kmalloc+0x16e/0x390 [ 2344.095253] io_wq_create+0xeb/0xc00 [ 2344.095768] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2344.096445] ? io_import_iovec+0x1120/0x1120 [ 2344.097044] ? io_apoll_task_func+0x2d0/0x2d0 [ 2344.097644] ? __io_req_find_next+0x300/0x300 [ 2344.098243] ? do_raw_spin_lock+0x121/0x260 [ 2344.098831] ? rwlock_bug.part.0+0x90/0x90 [ 2344.099402] __io_uring_add_tctx_node+0x2c6/0x520 [ 2344.100048] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2344.100735] ? alloc_fd+0x2e7/0x670 [ 2344.101231] io_uring_setup+0x1fbb/0x2980 [ 2344.101792] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2344.102479] ? wait_for_completion_io+0x270/0x270 [ 2344.103142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2344.103848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2344.104541] do_syscall_64+0x33/0x40 [ 2344.105042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2344.105728] RIP: 0033:0x7f0f2173bb19 [ 2344.106228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2344.108699] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2344.109710] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2344.110677] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2344.111630] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2344.112582] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2344.113530] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:27:56 executing program 0: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x110, 0xffffffffffffffff, 0x81444000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmget(0x3, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:27:56 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0xc0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000000)={@lba=0xcc57, 0x1, 0x3}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) socketpair(0x8, 0x800, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x17, 0x0, 0x0, "b1cf17495c7ba85eb53d7a6ef95ebb16", "c2a5"}, 0x17, 0x0) 03:28:12 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 35) 03:28:12 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x0, 0x0, 0x3) 03:28:12 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 46) 03:28:12 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) 03:28:12 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x12, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$FIOCLEX(r0, 0x5451) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000380)={0x210983000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {}, &(0x7f0000000140)=""/250, 0xfa, &(0x7f0000000240)=""/136, &(0x7f0000000340)=[r1, 0x0, 0x0], 0x3}, 0x58) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x100010, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000400)=0x5, 0x5, 0x3) 03:28:12 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 03:28:12 executing program 2: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'nr0\x00', 0x2}, 0x18) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:12 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x44e77000) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x84842, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1}) [ 2359.762287] FAULT_INJECTION: forcing a failure. [ 2359.762287] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.765277] CPU: 0 PID: 12872 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2359.767089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2359.769253] Call Trace: [ 2359.769944] dump_stack+0x107/0x167 [ 2359.770916] should_fail.cold+0x5/0xa 03:28:12 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2359.771920] ? io_wq_create+0x6ef/0xc00 [ 2359.773075] should_failslab+0x5/0x20 [ 2359.774082] kmem_cache_alloc_node_trace+0x59/0x340 [ 2359.775398] io_wq_create+0x6ef/0xc00 [ 2359.776405] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2359.777718] ? io_import_iovec+0x1120/0x1120 03:28:12 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x1df58000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2359.778876] ? io_apoll_task_func+0x2d0/0x2d0 [ 2359.780088] ? __io_req_find_next+0x300/0x300 [ 2359.781259] ? do_raw_spin_lock+0x121/0x260 [ 2359.782385] ? rwlock_bug.part.0+0x90/0x90 [ 2359.783504] __io_uring_add_tctx_node+0x2c6/0x520 [ 2359.784744] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2359.786094] ? alloc_fd+0x2e7/0x670 [ 2359.787062] io_uring_setup+0x1fbb/0x2980 [ 2359.788132] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2359.789446] ? wait_for_completion_io+0x270/0x270 [ 2359.790731] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2359.792027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2359.793153] do_syscall_64+0x33/0x40 [ 2359.793981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2359.795124] RIP: 0033:0x7f0f2173bb19 [ 2359.795947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2359.800071] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2359.801771] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2359.803384] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2359.804976] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2359.806590] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2359.808174] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2359.828059] FAULT_INJECTION: forcing a failure. [ 2359.828059] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.830653] CPU: 0 PID: 12890 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2359.832164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2359.833949] Call Trace: [ 2359.834526] dump_stack+0x107/0x167 [ 2359.835324] should_fail.cold+0x5/0xa [ 2359.836153] ? create_object.isra.0+0x3a/0xa30 [ 2359.837139] should_failslab+0x5/0x20 [ 2359.837970] kmem_cache_alloc+0x5b/0x310 [ 2359.838852] ? mark_held_locks+0x9e/0xe0 [ 2359.839742] create_object.isra.0+0x3a/0xa30 [ 2359.840686] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2359.841793] kmem_cache_alloc+0x159/0x310 03:28:12 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2359.842713] xas_alloc+0x336/0x440 [ 2359.843654] xas_create+0x34a/0x10d0 [ 2359.844480] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2359.845627] xas_store+0x8c/0x1c40 [ 2359.846421] __xa_store+0x164/0x2d0 [ 2359.847242] ? xa_delete_node+0x280/0x280 [ 2359.848151] ? trace_hardirqs_on+0x5b/0x180 [ 2359.849095] xa_store+0x31/0x50 [ 2359.849811] __io_uring_add_tctx_node+0x1cf/0x520 [ 2359.850866] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2359.852003] ? alloc_fd+0x2e7/0x670 [ 2359.852811] io_uring_setup+0x1fbb/0x2980 [ 2359.853722] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2359.854838] ? wait_for_completion_io+0x270/0x270 [ 2359.855918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2359.857052] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2359.858189] do_syscall_64+0x33/0x40 [ 2359.859009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2359.860128] RIP: 0033:0x7fc2d9b3db19 [ 2359.860937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2359.864958] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2359.866625] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2359.868184] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2359.869733] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2359.871296] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2359.872846] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:28:27 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 47) 03:28:27 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0xa031, 0xffffffffffffffff, 0xfffff000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:27 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 36) 03:28:27 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, 0x0, 0x0, 0x3) 03:28:27 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x100010, r0, 0x4e0fb000) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:28:27 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xf7111000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:28:27 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x50, r0, 0x21225000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:27 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001340)={0xa, 0x4e24, 0xde5a, @mcast2, 0x3}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001380)="f53542b1ab492f8bee65139f06db60c0c4a94b755700146201c6cc26f4396aca6a545e27877b6f415585507550105031f3f2ff433ba6fd4f8e2bac693027883521aedfc35b08ce6f6cff732064e5d84ed70f8c6fd56194ce70b7260cf54394cfb1c11d9017db76a00e72c390e69087c3dec5b5c0bb309f987afab0de0b6f8889f1908c", 0x83}, {&(0x7f0000001440)="c5321e38d8277defd3f9832d65ead369b6aaba3f7dc987d9f70afeb76ffea9b6a3a67d9fb047b11c79975eeb65258806ed24e68293a9d22da6fad4878f2bfb7d1ce8e98f25d930b620b4c36899e23257229c450db8f785bbe4d95167f2ed65d1650374cb07130147897f31d131521fa468466982ca7e7faa2003b1a7e791dfcb32d5049b69f3db8389b309b925ca00077fcd7ae79933c6f3c40235758df91b63e5e42e896ab91f61e3", 0xa9}], 0x2, &(0x7f0000001540)=[@tclass={{0x14, 0x29, 0x43, 0x6}}], 0x18}, 0x14) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/143, 0x8f}, {&(0x7f00000010c0)=""/48, 0x30}, {&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/150, 0x96}, {&(0x7f0000001240)=""/70, 0x46}], 0x6) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2375.175355] FAULT_INJECTION: forcing a failure. [ 2375.175355] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.178452] CPU: 0 PID: 12905 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2375.180349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.182591] Call Trace: [ 2375.183313] dump_stack+0x107/0x167 [ 2375.184290] should_fail.cold+0x5/0xa [ 2375.185311] ? xas_alloc+0x336/0x440 [ 2375.186306] should_failslab+0x5/0x20 [ 2375.187336] kmem_cache_alloc+0x5b/0x310 [ 2375.188436] xas_alloc+0x336/0x440 [ 2375.189394] xas_create+0x34a/0x10d0 [ 2375.190403] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2375.191815] xas_store+0x8c/0x1c40 [ 2375.192782] __xa_store+0x164/0x2d0 [ 2375.193753] ? xa_delete_node+0x280/0x280 [ 2375.194885] ? trace_hardirqs_on+0x5b/0x180 [ 2375.196047] xa_store+0x31/0x50 [ 2375.196934] __io_uring_add_tctx_node+0x1cf/0x520 [ 2375.198210] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2375.199613] ? alloc_fd+0x2e7/0x670 [ 2375.200480] io_uring_setup+0x1fbb/0x2980 [ 2375.201457] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2375.202637] ? wait_for_completion_io+0x270/0x270 [ 2375.203811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.205035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2375.206252] do_syscall_64+0x33/0x40 [ 2375.207136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2375.208326] RIP: 0033:0x7fc2d9b3db19 [ 2375.209182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.213434] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2375.215204] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2375.216862] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2375.218510] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2375.220171] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2375.221831] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2375.235153] FAULT_INJECTION: forcing a failure. [ 2375.235153] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.237839] CPU: 0 PID: 12915 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2375.239471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.241401] Call Trace: [ 2375.242023] dump_stack+0x107/0x167 [ 2375.242877] should_fail.cold+0x5/0xa [ 2375.243768] ? create_object.isra.0+0x3a/0xa30 [ 2375.244831] should_failslab+0x5/0x20 [ 2375.245711] kmem_cache_alloc+0x5b/0x310 [ 2375.246656] ? io_wq_create+0x114/0xc00 [ 2375.247599] create_object.isra.0+0x3a/0xa30 [ 2375.247686] FAULT_INJECTION: forcing a failure. [ 2375.247686] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.248617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2375.248648] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2375.248679] io_wq_create+0x6ef/0xc00 [ 2375.253439] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2375.254627] ? io_import_iovec+0x1120/0x1120 [ 2375.255664] ? io_apoll_task_func+0x2d0/0x2d0 [ 2375.256719] ? __io_req_find_next+0x300/0x300 [ 2375.257762] ? do_raw_spin_lock+0x121/0x260 [ 2375.258782] ? rwlock_bug.part.0+0x90/0x90 [ 2375.259768] __io_uring_add_tctx_node+0x2c6/0x520 [ 2375.260891] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2375.262098] ? alloc_fd+0x2e7/0x670 [ 2375.262967] io_uring_setup+0x1fbb/0x2980 [ 2375.263940] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2375.265107] ? wait_for_completion_io+0x270/0x270 [ 2375.266251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.267477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2375.268670] do_syscall_64+0x33/0x40 [ 2375.269537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2375.270733] RIP: 0033:0x7f0f2173bb19 [ 2375.271596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.275857] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2375.277609] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2375.279258] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2375.280916] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2375.282561] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2375.284223] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2375.285898] CPU: 1 PID: 12921 Comm: syz-executor.1 Not tainted 5.10.256 #1 [ 2375.286874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.288012] Call Trace: [ 2375.288379] dump_stack+0x107/0x167 [ 2375.288882] should_fail.cold+0x5/0xa [ 2375.289414] ? vm_area_dup+0x78/0x290 [ 2375.289938] should_failslab+0x5/0x20 [ 2375.290467] kmem_cache_alloc+0x5b/0x310 [ 2375.291035] vm_area_dup+0x78/0x290 [ 2375.291545] ? mark_lock+0xf5/0x2df0 [ 2375.292060] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2375.292756] ? __lock_acquire+0x1657/0x5b00 [ 2375.293364] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2375.294056] ? SOFTIRQ_verbose+0x10/0x10 [ 2375.294616] ? lock_downgrade+0x6d0/0x6d0 [ 2375.295206] ? vm_area_alloc+0x110/0x110 [ 2375.295808] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2375.296687] ? SOFTIRQ_verbose+0x10/0x10 [ 2375.297268] ? lock_acquire+0x197/0x470 [ 2375.297933] ? __do_sys_mremap+0x206/0x1310 [ 2375.298541] ? lock_release+0x680/0x680 [ 2375.299216] ? lock_acquire+0x197/0x470 [ 2375.299885] ? find_held_lock+0x2c/0x110 [ 2375.300584] ? vmacache_find+0x55/0x2a0 [ 2375.301261] __split_vma+0xa8/0x4e0 [ 2375.301872] __do_munmap+0xfae/0x1260 [ 2375.302515] ? ksys_write+0x12d/0x260 [ 2375.303173] __do_sys_mremap+0x100f/0x1310 [ 2375.303886] ? wait_for_completion_io+0x270/0x270 [ 2375.304522] ? move_vma.constprop.0+0xb20/0xb20 [ 2375.305299] ? rcu_read_lock_any_held+0x75/0xa0 [ 2375.306070] ? vfs_write+0x354/0xb10 [ 2375.306718] ? fput_many+0x2f/0x1a0 [ 2375.307334] ? ksys_write+0x1a9/0x260 [ 2375.307967] ? __ia32_sys_read+0xb0/0xb0 [ 2375.308657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.309543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2375.310417] do_syscall_64+0x33/0x40 [ 2375.311053] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2375.311909] RIP: 0033:0x7fa23edc4b19 [ 2375.312537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.315603] RSP: 002b:00007fa23c33a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2375.316872] RAX: ffffffffffffffda RBX: 00007fa23eed7f60 RCX: 00007fa23edc4b19 [ 2375.318067] RDX: 0000000000003000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2375.319256] RBP: 00007fa23c33a1d0 R08: 0000000020ffc000 R09: 0000000000000000 [ 2375.320431] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2375.321618] R13: 00007ffc133eb2ef R14: 00007fa23c33a300 R15: 0000000000022000 03:28:27 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3f000000, 0x0, 0x0, 0x3) 03:28:27 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 1) 03:28:27 executing program 3: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0xa031, 0xffffffffffffffff, 0xce894000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:28:27 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x40000000, 0x0, 0x0, 0x3) 03:28:27 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:27 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 48) 03:28:27 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 37) 03:28:27 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x50f100, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000200)=0x4, 0x9, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = dup3(r0, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, r2, 0x8000000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="08002cbd7000fcdbdf25440000000c009900010400004e00000008000d000900000008000c006400000008006b00010000000a001800030303030303000070005a806c00018014000300ff000800ff7f120f74430500fcffff07210001004116056001180318180502600c032301010300247e07030616030305210000000a000200034f334a540a0000050004000200000014000300ee00030008000080300906008009fd0405000400020000000400cc000400bf00"], 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0xc000) 03:28:27 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:27 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x72, 0x1, 0xfffffffffffffffa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:28:27 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 2) [ 2375.450242] FAULT_INJECTION: forcing a failure. [ 2375.450242] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.453081] CPU: 0 PID: 12932 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2375.454717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.456646] Call Trace: [ 2375.457282] dump_stack+0x107/0x167 [ 2375.458131] should_fail.cold+0x5/0xa [ 2375.459034] ? create_object.isra.0+0x3a/0xa30 [ 2375.460095] should_failslab+0x5/0x20 [ 2375.460985] kmem_cache_alloc+0x5b/0x310 [ 2375.461923] ? mark_held_locks+0x9e/0xe0 [ 2375.462901] create_object.isra.0+0x3a/0xa30 [ 2375.463937] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2375.465131] kmem_cache_alloc+0x159/0x310 [ 2375.466119] xas_alloc+0x336/0x440 [ 2375.466971] xas_create+0x34a/0x10d0 [ 2375.467862] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2375.469102] xas_store+0x8c/0x1c40 [ 2375.469955] __xa_store+0x164/0x2d0 [ 2375.470820] ? xa_delete_node+0x280/0x280 [ 2375.471809] ? trace_hardirqs_on+0x5b/0x180 [ 2375.472837] xa_store+0x31/0x50 [ 2375.473619] __io_uring_add_tctx_node+0x1cf/0x520 [ 2375.474766] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2375.475980] ? alloc_fd+0x2e7/0x670 [ 2375.476839] io_uring_setup+0x1fbb/0x2980 [ 2375.477818] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2375.479022] ? wait_for_completion_io+0x270/0x270 [ 2375.480178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.481400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2375.482616] do_syscall_64+0x33/0x40 [ 2375.483499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2375.484692] RIP: 0033:0x7fc2d9b3db19 [ 2375.485572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.489869] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2375.491668] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2375.493334] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2375.495020] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2375.496680] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2375.498346] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:28:27 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffff000, 0x0, 0x0, 0x3) [ 2375.512039] FAULT_INJECTION: forcing a failure. [ 2375.512039] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.514843] CPU: 0 PID: 12935 Comm: syz-executor.1 Not tainted 5.10.256 #1 [ 2375.516453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.518389] Call Trace: [ 2375.519020] dump_stack+0x107/0x167 [ 2375.519871] should_fail.cold+0x5/0xa [ 2375.520774] ? create_object.isra.0+0x3a/0xa30 [ 2375.521842] should_failslab+0x5/0x20 [ 2375.522738] kmem_cache_alloc+0x5b/0x310 [ 2375.523697] create_object.isra.0+0x3a/0xa30 [ 2375.524730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2375.525925] kmem_cache_alloc+0x159/0x310 [ 2375.526946] vm_area_dup+0x78/0x290 [ 2375.527804] ? mark_lock+0xf5/0x2df0 [ 2375.528682] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2375.529919] ? __lock_acquire+0x1657/0x5b00 [ 2375.530957] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2375.532175] ? SOFTIRQ_verbose+0x10/0x10 [ 2375.533128] ? lock_downgrade+0x6d0/0x6d0 [ 2375.534095] ? vm_area_alloc+0x110/0x110 [ 2375.535053] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2375.536283] ? SOFTIRQ_verbose+0x10/0x10 [ 2375.537254] ? lock_acquire+0x197/0x470 [ 2375.538189] ? __do_sys_mremap+0x206/0x1310 [ 2375.539217] ? lock_release+0x680/0x680 [ 2375.540151] ? lock_acquire+0x197/0x470 [ 2375.541081] ? find_held_lock+0x2c/0x110 [ 2375.542040] ? vmacache_find+0x55/0x2a0 [ 2375.542988] __split_vma+0xa8/0x4e0 [ 2375.543840] __do_munmap+0xfae/0x1260 [ 2375.544733] ? ksys_write+0x12d/0x260 [ 2375.545628] __do_sys_mremap+0x100f/0x1310 [ 2375.546630] ? wait_for_completion_io+0x270/0x270 [ 2375.547765] ? move_vma.constprop.0+0xb20/0xb20 [ 2375.548851] ? rcu_read_lock_any_held+0x75/0xa0 [ 2375.549930] ? vfs_write+0x354/0xb10 [ 2375.550811] ? fput_many+0x2f/0x1a0 [ 2375.551658] ? ksys_write+0x1a9/0x260 [ 2375.552554] ? __ia32_sys_read+0xb0/0xb0 [ 2375.553509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.554747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2375.555962] do_syscall_64+0x33/0x40 [ 2375.556836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2375.558046] RIP: 0033:0x7fa23edc4b19 [ 2375.558933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.563251] RSP: 002b:00007fa23c33a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2375.565036] RAX: ffffffffffffffda RBX: 00007fa23eed7f60 RCX: 00007fa23edc4b19 [ 2375.566711] RDX: 0000000000003000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2375.568386] RBP: 00007fa23c33a1d0 R08: 0000000020ffc000 R09: 0000000000000000 [ 2375.570044] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2375.571714] R13: 00007ffc133eb2ef R14: 00007fa23c33a300 R15: 0000000000022000 03:28:27 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x12, 0xffffffffffffffff, 0xbd17d000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) [ 2375.596747] FAULT_INJECTION: forcing a failure. 03:28:28 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x110, 0xffffffffffffffff, 0x740ee000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x100010, r0, 0xbd561000) [ 2375.596747] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.599621] CPU: 0 PID: 12946 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2375.601235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.603183] Call Trace: [ 2375.603809] dump_stack+0x107/0x167 [ 2375.604671] should_fail.cold+0x5/0xa [ 2375.605568] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2375.606747] should_failslab+0x5/0x20 [ 2375.607637] kmem_cache_alloc_trace+0x55/0x320 [ 2375.608712] __io_uring_add_tctx_node+0x15c/0x520 [ 2375.609838] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2375.611068] ? alloc_fd+0x2e7/0x670 [ 2375.611931] io_uring_setup+0x1fbb/0x2980 [ 2375.612911] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2375.614091] ? wait_for_completion_io+0x270/0x270 [ 2375.615260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.616482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2375.617690] do_syscall_64+0x33/0x40 [ 2375.618568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2375.619764] RIP: 0033:0x7f0f2173bb19 [ 2375.620628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.624914] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2375.626713] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2375.628380] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2375.630042] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2375.631709] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2375.633372] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:28:28 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffff7f, 0x0, 0x0, 0x3) 03:28:28 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:28 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) [ 2388.636749] FAULT_INJECTION: forcing a failure. [ 2388.636749] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.639270] CPU: 0 PID: 12974 Comm: syz-executor.1 Not tainted 5.10.256 #1 [ 2388.640934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.642743] Call Trace: [ 2388.643345] dump_stack+0x107/0x167 [ 2388.644136] should_fail.cold+0x5/0xa [ 2388.644960] ? vm_area_dup+0x78/0x290 [ 2388.645785] should_failslab+0x5/0x20 [ 2388.646606] kmem_cache_alloc+0x5b/0x310 [ 2388.647509] vm_area_dup+0x78/0x290 [ 2388.648309] ? kmem_cache_free+0xa7/0x2d0 [ 2388.649237] ? stack_trace_save+0x8c/0xc0 [ 2388.650175] ? stack_trace_consume_entry+0x160/0x160 [ 2388.651328] ? kmem_cache_free+0xa7/0x2d0 [ 2388.652263] ? mark_lock+0xf5/0x2df0 [ 2388.653099] ? slab_free_freelist_hook+0xa9/0x180 [ 2388.654180] ? kmem_cache_free+0xa7/0x2d0 [ 2388.655112] ? remove_vma+0xd4/0x100 [ 2388.655941] ? __do_munmap+0x98a/0x1260 [ 2388.656826] ? __do_sys_mremap+0x100f/0x1310 [ 2388.657810] ? do_syscall_64+0x33/0x40 03:28:41 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 38) 03:28:41 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0xb0222000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:28:41 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x4) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:41 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000000000, 0x0, 0x0, 0x3) 03:28:41 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 49) 03:28:41 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0xfffffffffffffff8, 0x33b281) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:28:41 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x12) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6, 0x9, 0x9, 0x8, 0x0, 0x1, 0xc6010, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x88, 0xfc, 0x4, 0x1, 0x100000000, 0x6, 0x5, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:41 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 3) [ 2388.658687] ? lock_chain_count+0x20/0x20 [ 2388.659858] ? mark_lock+0xf5/0x2df0 [ 2388.660694] ? lock_chain_count+0x20/0x20 [ 2388.661627] ? release_pages+0x806/0xc20 [ 2388.662539] ? vm_area_alloc+0x110/0x110 [ 2388.663464] ? lock_acquire+0x197/0x470 [ 2388.664353] ? find_held_lock+0x2c/0x110 [ 2388.665269] ? can_vma_merge_before+0x89/0x250 [ 2388.666293] ? vma_merge+0x37f/0xbf0 [ 2388.667148] copy_vma+0x3b8/0x860 [ 2388.667940] move_vma.constprop.0+0x1d0/0xb20 [ 2388.668947] ? memset+0x20/0x50 [ 2388.669686] ? vmacache_find+0x55/0x2a0 [ 2388.670579] ? move_page_tables.part.0+0x1c40/0x1c40 [ 2388.671720] ? cap_mmap_addr+0x50/0x310 [ 2388.672618] ? security_mmap_addr+0x79/0xa0 [ 2388.673591] __do_sys_mremap+0xf5a/0x1310 [ 2388.674528] ? move_vma.constprop.0+0xb20/0xb20 [ 2388.675578] ? rcu_read_lock_any_held+0x75/0xa0 [ 2388.676154] FAULT_INJECTION: forcing a failure. [ 2388.676154] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.676610] ? vfs_write+0x354/0xb10 [ 2388.676634] ? fput_many+0x2f/0x1a0 [ 2388.680866] ? ksys_write+0x1a9/0x260 [ 2388.681715] ? __ia32_sys_read+0xb0/0xb0 [ 2388.682628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.683811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.684971] do_syscall_64+0x33/0x40 [ 2388.685805] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2388.686962] RIP: 0033:0x7fa23edc4b19 [ 2388.687793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.691924] RSP: 002b:00007fa23c33a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2388.693626] RAX: ffffffffffffffda RBX: 00007fa23eed7f60 RCX: 00007fa23edc4b19 [ 2388.695234] RDX: 0000000000003000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2388.696829] RBP: 00007fa23c33a1d0 R08: 0000000020ffc000 R09: 0000000000000000 [ 2388.698430] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2388.700034] R13: 00007ffc133eb2ef R14: 00007fa23c33a300 R15: 0000000000022000 [ 2388.701674] CPU: 1 PID: 12982 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2388.703322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.705320] Call Trace: [ 2388.705948] dump_stack+0x107/0x167 [ 2388.706801] should_fail.cold+0x5/0xa [ 2388.707754] ? xas_alloc+0x336/0x440 [ 2388.708623] should_failslab+0x5/0x20 [ 2388.709508] kmem_cache_alloc+0x5b/0x310 [ 2388.710453] xas_alloc+0x336/0x440 [ 2388.711288] xas_create+0x34a/0x10d0 [ 2388.712166] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2388.713379] xas_store+0x8c/0x1c40 [ 2388.714219] __xa_store+0x164/0x2d0 [ 2388.715080] ? xa_delete_node+0x280/0x280 [ 2388.716046] ? trace_hardirqs_on+0x5b/0x180 [ 2388.717043] xa_store+0x31/0x50 [ 2388.717805] __io_uring_add_tctx_node+0x1cf/0x520 [ 2388.718918] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2388.720114] ? alloc_fd+0x2e7/0x670 [ 2388.720962] io_uring_setup+0x1fbb/0x2980 [ 2388.721924] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2388.723095] ? wait_for_completion_io+0x270/0x270 [ 2388.724227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.725355] FAULT_INJECTION: forcing a failure. [ 2388.725355] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.725433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.729066] do_syscall_64+0x33/0x40 [ 2388.729913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2388.731093] RIP: 0033:0x7fc2d9b3db19 [ 2388.731935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.736096] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2388.737819] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2388.739437] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2388.741047] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2388.742656] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2388.744273] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2388.745918] CPU: 0 PID: 12985 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2388.747484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.749336] Call Trace: [ 2388.749928] dump_stack+0x107/0x167 [ 2388.750742] should_fail.cold+0x5/0xa [ 2388.751605] ? create_object.isra.0+0x3a/0xa30 [ 2388.752620] should_failslab+0x5/0x20 [ 2388.753479] kmem_cache_alloc+0x5b/0x310 [ 2388.754403] create_object.isra.0+0x3a/0xa30 [ 2388.755393] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2388.756530] kmem_cache_alloc_trace+0x151/0x320 [ 2388.757587] __io_uring_add_tctx_node+0x15c/0x520 [ 2388.758662] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2388.759831] ? alloc_fd+0x2e7/0x670 [ 2388.760657] io_uring_setup+0x1fbb/0x2980 [ 2388.761587] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2388.762711] ? wait_for_completion_io+0x270/0x270 [ 2388.763816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.764987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.766148] do_syscall_64+0x33/0x40 [ 2388.766992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2388.768148] RIP: 0033:0x7f0f2173bb19 [ 2388.768984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.773089] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2388.774788] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2388.776388] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2388.777979] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2388.779571] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2388.781161] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:28:41 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x13, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/76, 0x4c, 0x4) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:28:41 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 50) 03:28:41 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf0ffffffffffff, 0x0, 0x0, 0x3) 03:28:41 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 4) 03:28:41 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x13, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x29) [ 2388.932742] FAULT_INJECTION: forcing a failure. [ 2388.932742] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.935512] CPU: 1 PID: 12996 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2388.937143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.939112] Call Trace: [ 2388.939742] dump_stack+0x107/0x167 [ 2388.940609] should_fail.cold+0x5/0xa [ 2388.941513] ? ___slab_alloc+0x155/0x700 [ 2388.942479] ? create_object.isra.0+0x3a/0xa30 [ 2388.943568] should_failslab+0x5/0x20 [ 2388.944468] kmem_cache_alloc+0x5b/0x310 [ 2388.945442] create_object.isra.0+0x3a/0xa30 [ 2388.946476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2388.947682] kmem_cache_alloc+0x159/0x310 [ 2388.948664] xas_alloc+0x336/0x440 [ 2388.949505] xas_create+0x34a/0x10d0 [ 2388.950397] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2388.951638] xas_store+0x8c/0x1c40 [ 2388.952494] __xa_store+0x164/0x2d0 [ 2388.953354] ? xa_delete_node+0x280/0x280 [ 2388.954337] ? trace_hardirqs_on+0x5b/0x180 [ 2388.955365] xa_store+0x31/0x50 [ 2388.956152] __io_uring_add_tctx_node+0x1cf/0x520 [ 2388.957290] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2388.958522] ? alloc_fd+0x2e7/0x670 [ 2388.959515] io_uring_setup+0x1fbb/0x2980 [ 2388.960575] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2388.961756] ? wait_for_completion_io+0x270/0x270 [ 2388.962918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.964135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.965337] do_syscall_64+0x33/0x40 [ 2388.966205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2388.967404] RIP: 0033:0x7fc2d9b3db19 [ 2388.968270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.972537] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2388.974298] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2388.975955] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2388.977595] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2388.979242] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2388.980881] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2388.995525] FAULT_INJECTION: forcing a failure. [ 2388.995525] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.998176] CPU: 1 PID: 12999 Comm: syz-executor.1 Not tainted 5.10.256 #1 [ 2388.999789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2389.001658] Call Trace: [ 2389.002277] dump_stack+0x107/0x167 [ 2389.003135] should_fail.cold+0x5/0xa [ 2389.004023] ? create_object.isra.0+0x3a/0xa30 [ 2389.005060] should_failslab+0x5/0x20 [ 2389.005899] kmem_cache_alloc+0x5b/0x310 [ 2389.006856] create_object.isra.0+0x3a/0xa30 [ 2389.007873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2389.009035] kmem_cache_alloc+0x159/0x310 [ 2389.009958] vm_area_dup+0x78/0x290 [ 2389.010808] ? kmem_cache_free+0xa7/0x2d0 [ 2389.011783] ? stack_trace_save+0x8c/0xc0 [ 2389.012752] ? stack_trace_consume_entry+0x160/0x160 [ 2389.013931] ? kmem_cache_free+0xa7/0x2d0 [ 2389.014870] ? mark_lock+0xf5/0x2df0 [ 2389.015743] ? slab_free_freelist_hook+0xa9/0x180 [ 2389.016862] ? kmem_cache_free+0xa7/0x2d0 [ 2389.017762] ? remove_vma+0xd4/0x100 [ 2389.018629] ? __do_munmap+0x98a/0x1260 [ 2389.019567] ? __do_sys_mremap+0x100f/0x1310 [ 2389.020643] ? do_syscall_64+0x33/0x40 [ 2389.021727] ? lock_chain_count+0x20/0x20 [ 2389.022920] ? mark_lock+0xf5/0x2df0 [ 2389.023982] ? lock_chain_count+0x20/0x20 [ 2389.025160] ? release_pages+0x806/0xc20 [ 2389.026329] ? vm_area_alloc+0x110/0x110 [ 2389.027502] ? lock_acquire+0x197/0x470 [ 2389.028621] ? find_held_lock+0x2c/0x110 [ 2389.029685] ? can_vma_merge_before+0x89/0x250 [ 2389.031004] ? vma_merge+0x37f/0xbf0 [ 2389.032032] copy_vma+0x3b8/0x860 [ 2389.032862] move_vma.constprop.0+0x1d0/0xb20 [ 2389.033917] ? memset+0x20/0x50 [ 2389.034718] ? vmacache_find+0x55/0x2a0 [ 2389.035736] ? move_page_tables.part.0+0x1c40/0x1c40 [ 2389.036950] ? cap_mmap_addr+0x50/0x310 [ 2389.037887] ? security_mmap_addr+0x79/0xa0 [ 2389.038934] __do_sys_mremap+0xf5a/0x1310 [ 2389.039918] ? move_vma.constprop.0+0xb20/0xb20 [ 2389.041008] ? rcu_read_lock_any_held+0x75/0xa0 [ 2389.042066] ? vfs_write+0x354/0xb10 [ 2389.042885] ? fput_many+0x2f/0x1a0 [ 2389.043752] ? ksys_write+0x1a9/0x260 [ 2389.044658] ? __ia32_sys_read+0xb0/0xb0 [ 2389.045533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2389.046749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2389.047989] do_syscall_64+0x33/0x40 [ 2389.048872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2389.049973] RIP: 0033:0x7fa23edc4b19 [ 2389.050885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2389.055249] RSP: 002b:00007fa23c33a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2389.057006] RAX: ffffffffffffffda RBX: 00007fa23eed7f60 RCX: 00007fa23edc4b19 [ 2389.058606] RDX: 0000000000003000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2389.060308] RBP: 00007fa23c33a1d0 R08: 0000000020ffc000 R09: 0000000000000000 [ 2389.062017] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2389.063740] R13: 00007ffc133eb2ef R14: 00007fa23c33a300 R15: 0000000000022000 03:28:56 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 5) 03:28:56 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) 03:28:56 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 51) 03:28:56 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:28:56 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000000000000, 0x0, 0x0, 0x3) 03:28:56 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2538861}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000002e0004002abd7000fbdbdf2501000000e00400000000000000ab1b50348529d92935d5924336f6d8bba9976f4dbaaff4857fb8dcb15f1cd5d6521e84fe7a2570bdb72b0be3d1eb7e308643903dfba86528e1e0827ee4883075314f92f9fb53d871cc9e829b61ff5129a2dd7e5d986e647c440e1c11558c70816a885e178ce32fba2cb1e0e447ce0bedb2e71e757e8a85559abd8dc6f1a077b10795e778dd0456713ef5c370b707df02b953b0c500294df64f88276fdc3200"], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2007, @fd_index=0x3, 0x401, &(0x7f0000000040)=""/249, 0xf9, 0x1a, 0x1}, 0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xd0000004}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:56 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 39) 03:28:56 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xbe4]}, 0x8) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r1, 0x0, 0x5, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4804}, 0x20008015) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 2404.562616] FAULT_INJECTION: forcing a failure. [ 2404.562616] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.565070] CPU: 1 PID: 13013 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2404.566537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.568280] Call Trace: [ 2404.568849] dump_stack+0x107/0x167 [ 2404.569614] should_fail.cold+0x5/0xa [ 2404.570430] ? xas_alloc+0x336/0x440 [ 2404.571232] should_failslab+0x5/0x20 [ 2404.572035] kmem_cache_alloc+0x5b/0x310 [ 2404.572889] ? stack_trace_consume_entry+0x160/0x160 [ 2404.573970] xas_alloc+0x336/0x440 [ 2404.574726] xas_create+0x34a/0x10d0 [ 2404.575536] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2404.576588] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2404.577720] xas_store+0x8c/0x1c40 [ 2404.578485] __xa_store+0x164/0x2d0 [ 2404.579282] ? xa_delete_node+0x280/0x280 [ 2404.580163] ? trace_hardirqs_on+0x5b/0x180 [ 2404.581086] xa_store+0x31/0x50 [ 2404.581790] __io_uring_add_tctx_node+0x1cf/0x520 [ 2404.582803] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2404.583907] ? alloc_fd+0x2e7/0x670 [ 2404.584691] io_uring_setup+0x1fbb/0x2980 [ 2404.585571] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2404.586645] ? wait_for_completion_io+0x270/0x270 [ 2404.587685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2404.588799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2404.589889] do_syscall_64+0x33/0x40 [ 2404.590681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2404.591787] RIP: 0033:0x7f0f2173bb19 [ 2404.592588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.596459] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2404.598077] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2404.599594] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2404.601108] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2404.602636] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2404.604138] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2404.610617] FAULT_INJECTION: forcing a failure. [ 2404.610617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2404.613221] CPU: 1 PID: 13016 Comm: syz-executor.1 Not tainted 5.10.256 #1 [ 2404.614680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.616459] Call Trace: [ 2404.617021] dump_stack+0x107/0x167 [ 2404.617788] should_fail.cold+0x5/0xa [ 2404.618611] _copy_to_user+0x2e/0x180 [ 2404.619447] simple_read_from_buffer+0xcc/0x160 [ 2404.620445] proc_fail_nth_read+0x198/0x230 [ 2404.621354] ? proc_sessionid_read+0x230/0x230 [ 2404.622338] ? security_file_permission+0xb1/0xe0 [ 2404.623373] ? proc_sessionid_read+0x230/0x230 [ 2404.624349] vfs_read+0x228/0x620 [ 2404.625088] ksys_read+0x12d/0x260 [ 2404.625840] ? vfs_write+0xb10/0xb10 [ 2404.626636] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2404.627744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2404.628842] do_syscall_64+0x33/0x40 [ 2404.629639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2404.630718] RIP: 0033:0x7fa23ed7769c [ 2404.631519] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2404.635438] RSP: 002b:00007fa23c33a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2404.637049] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 00007fa23ed7769c [ 2404.638567] RDX: 000000000000000f RSI: 00007fa23c33a1e0 RDI: 0000000000000003 [ 2404.640440] RBP: 00007fa23c33a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.641959] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2404.643493] R13: 00007ffc133eb2ef R14: 00007fa23c33a300 R15: 0000000000022000 [ 2404.649246] FAULT_INJECTION: forcing a failure. [ 2404.649246] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.651732] CPU: 0 PID: 13012 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2404.653223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.655019] Call Trace: [ 2404.655590] dump_stack+0x107/0x167 [ 2404.656385] should_fail.cold+0x5/0xa [ 2404.657197] ? xas_alloc+0x336/0x440 [ 2404.658007] should_failslab+0x5/0x20 [ 2404.658826] kmem_cache_alloc+0x5b/0x310 [ 2404.659720] xas_alloc+0x336/0x440 [ 2404.660486] xas_create+0x34a/0x10d0 [ 2404.661308] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2404.662443] xas_store+0x8c/0x1c40 [ 2404.663237] __xa_store+0x164/0x2d0 03:28:57 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x23) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) pipe2$9p(&(0x7f00000011c0)={0xffffffffffffffff}, 0xd000) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r2, 0x0, &(0x7f00000006c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r5, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x3}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="02fb1b097d6fb40596f5fac5ab74eb7fb1331d29af8c9135c67307b776d967f555ff6eb2e593a02f647a70a6c9f927090054c3b776249da081598c99bf638bfe758fd9c0d698e033de7af4fe5998fab47d60c09f4f9dc23a805f000def0b557c85ae68448d026f9c", 0x68}, {&(0x7f0000000100)="1f1f62433cc776824b1251ff2710eabc75686a18025e6d072623249954481462099587ae4c82296268c049e9ddab9bcbf0350f706da59993e8e173cf5c98b6e689b73149de9b42166fa3cf122ae503b5d9fa80722c0fa7b68edae7b09871d7c8c73e", 0x62}, {&(0x7f0000000180)="67b42206222db2659918089ca99e34c76c78d72d0865b0d5f2f48d7753befd5f5d1591e77f65d0f1d27ac8845085614f4ba2797eaaf9f484a2c24f3b47f162b1ecac2e254f9f9c4d1f424cc6dce87aea5994c1d31867b5d5b31f89ad54e675222210dbdd271c63894cb04c6f258975ed929e02887c0c6191a95040ce2dee349ca53c291752c8c8b5bad17e5881c5a29a134f3b91e38eb24d825592f097d7b29a2d52581b95c0066498f41f80a5f287187ce0175615e0607828a9533897171207e58c", 0xc2}, {&(0x7f0000000280)="55753ba9525b3ebc589bfa6e73b8decc70cf456ff3b4d609d94b99e00e3776263c7fced4003d735b4c2c8b6574258dd64bd6a08f0b5f05fd5334d34ddccc387fff5bbc5842d8936d562ba5dc1c1f150d0de8d79a1eaa9073edf5c2325c71bfffb228eafeeee2141a9c891629ab0eaaed34a9e6163bebb07db4a15db4dc9850f408a0840003", 0x85}, {&(0x7f0000000340)="d2e6bc3e3bf97d376f778b9d5067e29093efba050393b72750b6b110a45e24d20e2eb2bfe340683421255b6ce7d0ee539b655f5d8a4758eb503e8941a45a9121fe573797c145a78706cd5fabb49729cc6c4454ce3178eb1d74c479c08a0d09caffcd079a9b053dae35f06bde099be979ccfc886c3f988d7ab381e1d1b543129c23158896bf4d352a668853b59d51b4d7b70d195b2f12087c8faa4fa47001a4e25e55d0474953c57996d87804361f5cd59e88f301e8c037dfd572e78a4b80", 0xbe}, {&(0x7f0000000400)="5693415402ef5d1953a3d0ba4c6d1a1ca3adce3e84", 0x15}], 0x6, &(0x7f00000004c0)=[{0xb0, 0x101, 0x2, "5bc6455333ce0fc0a0e4789945637a2559401ab179005f8fe9cc14e630efe0b1056b6a7338a4a0115bc8ca5dcf3b954e7061421babead410a4a5ed1181c45b5c33dd319b1dd726a9a69e1bb1e3d06d8bc850cbbfce0412f8d5356c2073b4ebb001d608f151dfd4e14b90dfa28283af43e3c5e795462354eca1f77b741247579de990049152d24a7798493761ef4021f01875792c5a11bf3c1b2a"}, {0xf0, 0x6, 0x7fff, "452b3112847000d1bfbbc4bfd6a0fdf21b422534f6d27a7a51206896c0f5972edc2da53761997b94f98323a064e88680fa716d23b7c54f5cb704d4183ed5183f4d9b91dd8418df821c3c20a0e68744d254fdf62cf909c6b6161120871d51502e3b5a88283c18b8eb7c3ba9933c6b8fb29ce3c1dd57d4e572eedf9a7ecef0fd50a0ee9b49d1113a65c32e8dd1a4ea729360f854335c38b4fbe0716b90774f2994c26f2f4f3660fe76868db8a59c304d46c2249888b2364d6ce79737d6fab8f478eb2933c1e5ead414129f8d9a27fdf9f164d5e46b4e9e74693fee7fdc"}, {0x20, 0xff, 0x0, "0702025da17c482ce10984"}], 0x1c0}, 0x0, 0x20044040}, 0xb4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001200)=[r1, r0], 0x2) [ 2404.664029] ? xa_delete_node+0x280/0x280 [ 2404.665103] ? trace_hardirqs_on+0x5b/0x180 [ 2404.666039] xa_store+0x31/0x50 [ 2404.666760] __io_uring_add_tctx_node+0x1cf/0x520 [ 2404.667824] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2404.668963] ? alloc_fd+0x2e7/0x670 [ 2404.669771] io_uring_setup+0x1fbb/0x2980 [ 2404.670692] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2404.671809] ? wait_for_completion_io+0x270/0x270 [ 2404.672880] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2404.674013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2404.675144] do_syscall_64+0x33/0x40 [ 2404.675954] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2404.677062] RIP: 0033:0x7fc2d9b3db19 [ 2404.677868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.681854] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2404.683509] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2404.685050] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2404.686608] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2404.688154] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2404.689696] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:28:57 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000000000000, 0x0, 0x0, 0x3) 03:28:57 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, 0xffffffffffffffff, 0x2d059000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:28:57 executing program 7: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:29:11 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) write$binfmt_aout(r0, &(0x7f0000000000)={{0x108, 0x80, 0x1, 0x3a5, 0x33a, 0x3, 0x298, 0xe4f}, "49bd59e1270fb7b4c8e2912e488fc4ed464252fee491d40f1f5c1f1de23c682a60720431ca87a8cd00203d875aae621cf8ec20a24751b1d66fa54d50211445beb120aeaf149d456d39d425dbc8bf3e8a6799043ebb9e66b82b31ecebf5a10d533f686559d1e47612fbd9d49a1aa83649457b065d5971247b517d58628375ff65debb1b8aba1fd67850a673a1c8724220608b4c5ab25cf4682d53a2d748e29b6fc3c13d859bcc8509e65177a69d45a4dd9f956ac35409a6a00b4fd5b2f6b17121dce59fcccdcdc80ebc986f2d686ce92494831f3f36510ed118991ae48f9752549dad5cb5741c571bcdf51bb73bbfed133e2189c64f352e221c08e8c47296605425ade7a21d6cd08f92453053606fe96810ef5f6603092a9132a91577d8e932ded5cee962aa3d33314ad3b802753e4697d67cefb8566bbe3477938292f6597ed6e7dbb1a911f5a54af6bfc958c20d0ac426e89eb22758eed541bf430781ac36c22beeae58442c138678f7bdcebb574b2c4845ef5a6fdd2b9b1641c76d29e3dec6cd52bf7d7e888f129cc02d02f1c8ef64e5e3f6a2869fb87902c002ffd7d409d67c122ae847fd5bc21e4406bf61760659c54896dab8ce5c8cbe9debb456a67b2490312b56bea604809617a830930b7df7b74187cf75eafcc747c909657dc87a054e04d5bc0222784ca976d0c852c6dfbc02245782af6d65571274514db1e0e8aba1e5fd8eb3d01a0267ead4ca8c8c490253de77ff71d76722110bc500c19c78995bfd3932dbf1adcf8b6b182f36d6d4521ff289ef99d7780ea008060a911b91aca8d50c150a542ea070250f9bd7bf2571f9cccdad64eea699a28f6a3913bf2c54827fc9c6c1df0cb6b8d2ee8c9646997c057ded92ea193c33e298149f0b2382ac9f4d76bae217ab2cbb53c8221b8cffd6b2eef506ce305fffb7ea114f163787a18594920b3fcc0cf14d279bcbbf155e70708150e687adb687f30a30fc616ec946c12aa168be2ee058669338065c8defc09f968f85c8e32256feee792ba692705cb2d2cb42ef4c624c6dba6bd1d7bfe8da919a5e8819f68ba5a04b4d19abee35a37d3fa9f24f35764ba88a1bee9355be87400ba85297597026513c9cca7cfead25e8f3aa44cc3ae624bb81392d6daac10c1d7b3c7084e9c2c568a650a8c7882b71ff7ba7fe0bf1f34504bcc042ca7e2ecfcd329b5b4a38764ba858e9823238144b1ee16fea19347d38ded2e2caa9fc273c44e1e6cdcfec703f60ce49c675c9256f4beee097d01d4a86069b9a8ade51bb59298e05cd26a04b22bf3ee6bf7b9a63e6b2639806fb747a55be8142d35d21fcad892346ba632da14db1912e1d78f5d88a5f1ed995139b332f7eb0d9ec54ad9b118bb1851046eac9f6992e0061e93b53bd135e130d0d58f5bf172bf06bf495f7563fa97452e1a8c5650d70ba42a6e19665edbb82a68574b9a9eaa70bae8fb148faeb141961c0abc235e9943e71950e794eb96b6267f89bda063dfa6d2fd6f9f564666fc3202fc9012dedc5e6b7f6e7b00f11f2373e92fc366b3b396fa36ea6452e9656fe576b714805ba550a7222b229cfb5cbc04e2b653ade357d23760e7b3a672996e0e1c181578f44a3d3a467219683397d14c1bf7dbbfcab78fd809d4a1c4461d4de7a6e482beb8f0da62ca56ffd642e35a40f215441bc48cfd9be7fa10c5db37f11fcf5a20d1ce529bb569389757e2d53ea08996fe45a209f1dc5631272dd074cb1c3ae50ce16c79350e410d6593a5e026b6727f116844a61501ceee81205ab0864e23e6d57ada9287a07a27b377dead2b4b31eee99138ca83c7957055106e63ea20a533bfcacb41aa36c1d58f709258c7cd890a00328c8219a9bfe85cf19e548f02b4a1af2d9f5b72613c24756a83732b2b36d92166fe85897be76dec141a9707a51351ea2d6b788521a92a34ac26d3f494d8de2bdf08fd5439dc7e03a6adb5d1d57a79b8c8c1ad1489f74bca1225bd4dbac1ba7a513117dd1404e282eb4fe75ed98aa814324a2fb21c409c8bb1bc009d3e96b618e2fa7504f70aad43fcb96c990ef48989fea1531510cf693ed2b3e236a2a3172daebefc7f36552bac6b95f1420baf40aaf44286a65938e8981becce7e381e1f9d7d4b2611d2e35cb3082c964cf91077314d5c23121ccb752cfc469440f6056b8c2162eecfcd8299e29c1a1308c18e1c03b4aa5bbc5b46e308fb125c0d3b6a5876a7a5d8d06f719b96a82bbaa9cc2c259979d56c88383d75242e277f856fe8340d90904e6221aa9ba9d9551ab85935b33f723e0a29b3e9f0d44affd2c1600c5eec78c7dc337e2ccda9e35d687a109f94f17a684ce47d9ab412ff3d53ec416f382a2ca8688011e99692108921ef50a761cd593d9f734c727ff3740a736b48094e1ed7f5d129e906b4ef65172bf613e5bb3674884b2c27223d4a4f4965617bb558376d46738a7608830fb17c11e042bab88021e8fc26c5b86e93dff3673d5df37b0075abd25ea03ddaacde392aa6152ca0ce466e1588dc39e332f5eb76e74f1e5492f5ca49cefa06ec3af82447a40040263d5a840ea438f619e1c57148b392687c51a5ceac28129c6e10d96fdd6848206749d320eae7216ce73f4c9852612c4b4d9dee1fea7e4716be958eeeadcdb956bdbed83317feec595e1378767065fa481f44684cb1c1bf343f1142bed9f36693cc29a7ca7212f553ac3e4c4c2535f31aafd77dfc71e6a455e7b5b143cc6690e31e55b9882ad9cc365ef12583b44d2629c8c8bbdec70b6aba6e940e1b02287e99e37b7a507af2d3034b5116491bb0cee2118a4f61ec84f89525d3f7f52b4adbf57e10f91a6afd71b1c295256ec9ccb1fd3509c149c6002ba83b59d3c75240b80617ad5aa55deeaf4cc99c68ded6694ccb4583c8cb630c93898ddffc528485dbd8a8533448ef5a9e5345ceeeda5aea57177dd4fc46f334f964a27587c6b34462e31370943c6505610b2489fd97ee158657cdd4850932bdca7e1fef5bd2e55b81a37c9aea11320749bc43aaec232fa3d324d2ef21c702e571763bfa2d9b8f41e4164bd3fec4091d18a23d3a239ebc155dcf1a73cf809ad18490ea5469f6e5e16228b419acea84aa14198a05dd30d93c5ec4e0bef607ea4c7467d03856404c0d72d9694af6b5f87af55b9eb983d0dc7224dd766c434683f91f90ad2ebe8eb32c5063d38be28c565a1fbcb825114be16cba041faab961aa7ce71853d31e475e1a7423ca8e4750bd0282ababbf544722aa4a0614ff932bcf46e5543c3ea394d4ea4ef801ba1c13e78a2ec0d3cd2951b4004b24001599a7c355631152f73b00caada50fa7afcde87db8fd67f88278fef41147dde3891c669b15333ba802b3284df34237260442aa821ef7adb115dad2ca3469e636625523e02c0e25e73bdf33c73fe3f9623d63206b3bdb9b68016b764f11aa6067f1929aec1bb986c3069a01070435c508ed94ba67cc4e7bc026fccc68022cafb6a2399758cbc0d2af08f48afe82831c83c8f21e06d6a5d27b58aec6a63645922dc187b887b7af247cd1686dd44315f0f72e26b559894ccbdee96ad3b4b646f04b51886472fabff7627968ddb2725fc869d922d43b66a346097966d29474444cec865d0e6c27ccf14fa9ca666f91342d719f401e2e924a20b54277bf5593cc5082412bf898e02f54a4cbc244ac9ff5c944f92004a5451725b68865f4cd8caada0968e983f8996128b1dc49db3fbc275f8b3e2e7a553a51fcc810e189818ace87cafedfa5a715a8758dad686f58960d12396aab448e7e8f53e4d6163a1e1e5751de5e84666564908e10ffc82ecaa1f4cde10c3df7a05d16ee00b0ae88268d6bf3998df6d778323a5e6b2c09e217e9a5a93aa0b36b9e9278048d8b2c242ec1b765fba59004f3884cd1cca8e43e189a5c91761c9590c59069ec5e9060247332022074c6bec186ee1a372048e050b516df0b09f83c0d1e97043a0d4faa321a114740875fd11d20afce837e5fb9a2d0074dad87d34c557951735baad38aa6e8946eba99c4e5d4173e32f75f63c12aeba607afec74cd7242b89ce779b617a3b156a41563fe6ada719c6d7b08d4dfb41f41a0655850c9a6968b451cd816136c7589b24c5f1e69fdb14a9e8e2b7bb5b673d082c041d702c73fd5e68c32a70f2c6fa3ca0d27d3127ea9f19fd24b2fd6e0d7c32e0ef19c46f22f52cc990099eebc40028fe846fd72c91cd388cee0c3e8ec8b68b49207dc2878f66feffb6445fec41681cfec0b9fd4a397acc86f405cbef36412cb19a36ec60b30df13b4d3381f335fb30ab49308b771ac7f273ce2f8a16728b8f71b1e1971268dc559ea5e2d054862e1c695ad438f84c8df69b34301ca98c4ad2dcb19796dd7e3c68249dc2d266fe925a97b7f1f9bc41d2885f02d13315ee9fe9555e8b07a4f6d640a01e0ca3785d132a642f164d9407cf2b00f50e293da26012f0dfe86d2963124d266f46fa76438538e8cfbb55f25ce537c84b6928c82fdb9b733dbaf3c88800b7b43d0933b0b5a303105017dcfaba76f3a8b47f4fbbbbc656d0f0657d7c7c3b117566ab114a47d82ad2767db103f8b907b8e654a652e7877620b267577c8036ec050dfd24d6a7759f08f80e781df9eaee57da8dca5576a13940956b6e4632216f0bd456696dd11bb64996827c52b6fd15d34a4ab66d9e54470ebc0d10057cec36d27ed9180c7f494bc909904e0e958c823c506580f1d22188b013660af2e2740e3f74e6f25f96a7c032970a98e515030a84ee2c06b3f0a35c71f8804a051648704d4909d37a490fc1f0a1ca771f12d779b3a5ac12afc9cb03db04b2d71e7d7812ccd5efb14adeb7d51b66dcfa3f3460fa850c6be12877b86011660480ad88741bf2758413965276c7440f8c18343c6c302cab791ce26b161d01d89def012644456b4316fa8ad12508ac10d61225954213c202b4a7523f61df805883171b6bac0ad53a488b6eab83ac3b1198063291291fcfbcc8588b14b0a1a425693aec1b5752b1814a7f914fb3420bbec69258e54b1e94bdd2c576ea03fba6635af19f48e2c6a5dce9367b6ec653cc7e9339a2d2b57824debd67e0c30b926c46cc17de74948b3980af52c15aef20496910b0436daefb03453fd628a0c3585b68846a4bf2073f58b8701f3baf214fa6a284f865cd08bb3f7dd3204605d88072d238dcdffc68761e95750199dee6345daf3dab24ac741347fcf2993e95b19386b3fcba787c9c849847dfd2dfbad24f18025fc1c28010d31ec3a89a02353bcb25cf16300e0a7d0c4e394ff17af5957a4d182531f6d051453b796d539cebe416e7957d007538e3688209fd2aead8774aae3bad767401a374563e6211ba4946f6e9f605618f3348de5cd9ef790e2f17c1f2bb0263f5630e000631d1063a57a68332703c430f93f7c1853fcf1d0c4f14d67223155ee9584f9badf9833c1d02e5e60533d510b9d8bfba862103930f5562138b7abfea11c862eb65c64a05c8639330b5b4d856e364ddbad059aeada744570cefdde5d6204907db89a26eddbd8ff72f0bb3b389755103db3a1895e0a08f51a18a022147726c7fa5c6841567d3bb679648c4b9308e99bbb4882def5130e556e42b904be2d07c862173c44d92c282174448994d65d70af05e1c289722e311f72c6def473643e68330b2fb4bffbb46f8707f00f044af6ee31d1a2b2bb73253c0ff7cc48fbd35d5336875edea25a2a33989b1b2bc5bfee81c95eada52f96331118b06760e399efb63748ad6f5d1e4244d199990aa03893aa979441d2c5bd7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1620) 03:29:11 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000000000000, 0x0, 0x0, 0x3) 03:29:11 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:29:11 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 52) 03:29:11 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:29:11 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 40) 03:29:11 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x24c, 0x2e, 0x300, 0x70bd2c, 0x25dfdbfb, {0xa}, [@typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x148, 0x6e, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x8000}, @typed={0x102, 0x12, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x95, 0x0, 0x0, @pid=r1}, @typed={0x14, 0x46, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x14, 0x70, 0x0, 0x0, @ipv6=@remote}]}, @nested={0xdb, 0x3d, 0x0, 0x1, [@typed={0xc, 0x69, 0x0, 0x0, @u64=0x1000}, @generic, @generic="24c3b526bdf5d4b35112b60888360edc56282918acde81b4a22dda55653f743527bb845da9457c9f0fd75167d6b06eb75a3dc8219cfd12d2b429b2788d35a9d7eaae95ea9b46c73de8ea1bb1221b3657be95b3ecd6902d3f01a3bf6efb69b42d67bddd48b4994950f3fee5151c646e0c1e907b7da5127865a802c7ed6c273531793d711ac1f8bfd23dab0f87bc348158635d580dddde700604798cc1a372e7b492cc517df44ec2ef78ce7c9b06aa29bf5158393a4431a22720e14e696a9e0535654cd4", @typed={0x8, 0x24, 0x0, 0x0, @u32=0x9}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2419.304956] FAULT_INJECTION: forcing a failure. [ 2419.304956] name failslab, interval 1, probability 0, space 0, times 0 [ 2419.307992] CPU: 1 PID: 13048 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2419.309782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2419.311926] Call Trace: [ 2419.312606] dump_stack+0x107/0x167 [ 2419.313545] should_fail.cold+0x5/0xa [ 2419.314532] ? create_object.isra.0+0x3a/0xa30 [ 2419.315721] should_failslab+0x5/0x20 [ 2419.316711] kmem_cache_alloc+0x5b/0x310 [ 2419.317752] ? mark_held_locks+0x9e/0xe0 [ 2419.318807] create_object.isra.0+0x3a/0xa30 [ 2419.319957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2419.321252] kmem_cache_alloc+0x159/0x310 [ 2419.322317] xas_alloc+0x336/0x440 [ 2419.323243] xas_create+0x34a/0x10d0 [ 2419.324213] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2419.325564] xas_store+0x8c/0x1c40 [ 2419.326609] __xa_store+0x164/0x2d0 [ 2419.327572] ? xa_delete_node+0x280/0x280 [ 2419.328704] ? trace_hardirqs_on+0x5b/0x180 [ 2419.329844] xa_store+0x31/0x50 [ 2419.330842] __io_uring_add_tctx_node+0x1cf/0x520 [ 2419.332081] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2419.333451] ? alloc_fd+0x2e7/0x670 [ 2419.334406] io_uring_setup+0x1fbb/0x2980 [ 2419.335589] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2419.336860] ? wait_for_completion_io+0x270/0x270 [ 2419.338115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2419.339691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2419.341010] do_syscall_64+0x33/0x40 [ 2419.341962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2419.343274] RIP: 0033:0x7fc2d9b3db19 [ 2419.344400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2419.349334] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2419.351269] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2419.352976] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2419.354501] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2419.356018] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2419.357559] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2419.396380] FAULT_INJECTION: forcing a failure. [ 2419.396380] name failslab, interval 1, probability 0, space 0, times 0 [ 2419.399045] CPU: 1 PID: 13063 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2419.400554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2419.402302] Call Trace: [ 2419.402865] dump_stack+0x107/0x167 [ 2419.403650] should_fail.cold+0x5/0xa [ 2419.404454] ? create_object.isra.0+0x3a/0xa30 [ 2419.405414] should_failslab+0x5/0x20 [ 2419.406212] kmem_cache_alloc+0x5b/0x310 [ 2419.407085] create_object.isra.0+0x3a/0xa30 [ 2419.408078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2419.409180] kmem_cache_alloc+0x159/0x310 [ 2419.410236] xas_alloc+0x336/0x440 [ 2419.410990] xas_create+0x34a/0x10d0 [ 2419.411828] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2419.412949] xas_store+0x8c/0x1c40 [ 2419.413730] __xa_store+0x164/0x2d0 [ 2419.414613] ? xa_delete_node+0x280/0x280 [ 2419.415693] ? trace_hardirqs_on+0x5b/0x180 [ 2419.416691] xa_store+0x31/0x50 [ 2419.417386] __io_uring_add_tctx_node+0x1cf/0x520 [ 2419.418423] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2419.419943] ? alloc_fd+0x2e7/0x670 [ 2419.420905] io_uring_setup+0x1fbb/0x2980 [ 2419.421975] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2419.423297] ? wait_for_completion_io+0x270/0x270 [ 2419.424508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2419.425695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2419.426865] do_syscall_64+0x33/0x40 [ 2419.427720] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2419.428877] RIP: 0033:0x7f0f2173bb19 [ 2419.429724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2419.433893] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2419.435614] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2419.437223] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2419.438846] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2419.440460] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2419.442090] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:29:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10010, r1, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:29:11 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1b63400000, 0xffff, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) syz_io_uring_setup(0x7d09, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001980)=0x0, &(0x7f00000001c0)=0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000001940)=0x101, 0x9, 0x2) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r1, &(0x7f0000001a40)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x8, &(0x7f0000000640)={0x0, 0x989680}, 0x1, 0x0, 0x2}, 0x7f) r4 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0x7, &(0x7f0000000580)=[{&(0x7f00000000c0)="f59b09bc1a90842f849d72d5e8e45d4d09fc29ca1d805e0b3827e0ad11be979ac0a1f85abcb190538280f77df04fcc95fdb161dac48ae7e97ac411be87496dbdc6986d836c72ceceda698d876274f2d4b594a5f21e", 0x55, 0x973}, {&(0x7f0000000140)="d3b356ed67dc7c0389501292ef14ebd1eb80bcc6b48a783925db63ac0e3549da8ed0d48f64dbc563073aad7c953c29b135e58bdbf15651ecede1202b5570c37090a1ab206f6807bd76f1104f40ab328bcba67c15613af29a4340ef7b6f30d10d0c6b5927156d483e9c0d153a8105ed6cec6f8746e6b0afa23c58575b8ca8d975e364bbf830076d36bee9e8d27e9529eb08b35ee7370ec96f1884acfd6c1c3f535a2bd5ff4272bc761ebd7b3e18c1af0e2e630b091ed3def1c5b6a573876479d6eb32fbf19c", 0xc5, 0xb3}, {&(0x7f0000000240)="f14e97d3f0e6f305adaffd20f5fb0bbf48f9de229b900848ab187490258d6cce6f5a4731fc9baebc", 0x28, 0x7}, {&(0x7f0000000280)="5f68de183cfc80911e2881a777bcaadd360dba34ce3591cdab55130c3d936843712b070b9623b961e418f7064033abadb400b0311800a9a5bd6e616a1ec3a039cc5a65bcd0b8c1e48280b6f157a8535c7ab9157690644d997e7236de78e2b30ef66e7ceed28d1eb0c513f0aeab16294e9abcfad8d06fc9e2479d5a5b7611e272e86cb82522e74e16b48df440f61d6d4c1d79b9a303284f5a758b4451275e56efc37126564b402c03058252282e9f3746804e72e3ad785b12d3ebdfca2b841d", 0xbf, 0xd54}, {&(0x7f0000000340)="d2706d2ffc1da472a70a4b8a127a2e57accd97a6f1f21f4398c229509026a01f8ec365e263d76d86c236c91ff7da0d7ac0b6e217ea55710b20c44fe23ab8b63e4063f7a3179c53a3bdb6e81565c79e127d34bacf576abb9ccda77ad6c7904e7f3ca995", 0x63, 0x9c96}, {&(0x7f00000003c0)="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", 0xfe, 0x7f}, {&(0x7f00000004c0)="40d1a18d1be3a04e0046280441939658bec0a15169ef73653340498b92e1023e6aa96b8cd66b18d208c90917fa95c1e76b9d5332745cfe5e4b777f298d391b594f43f402d3f01f64fa26c11f057affbe06da5f49a663cb560591130815c458a82c72780157735772e15a251e93d27fb57fed9725049ac09cbd162a98127a18158595709e3d0f5a", 0x87, 0x1000}], 0x810b1, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"]) syz_io_uring_submit(r0, r3, &(0x7f0000001900)=@IORING_OP_WRITEV={0x2, 0x2, 0x2000, @fd=r4, 0x401, &(0x7f0000001880)=[{&(0x7f0000000680)="f87b8867e3f6b07d6583", 0xa}, {&(0x7f00000006c0)="059d3616b9bb11a7d7c633fb5e3559c4aea0bd2e2a60102b7015b50b915dda23be941c2d62f5c693d7563bda7a5c7b06dfe6587deccac9e166a04b2a2c1c7281ad8235f89e920e662275ecd0df701a463dd1caed2ca3086bfaad4b248fac", 0x5e}, {&(0x7f0000000740)="bf1a6d2cb2e281b50790e81de2e6f2c391d0ccf1f0fdfc1cc070e94f6c1d1d4f44e86fa3abda31a71d", 0x29}, {0xfffffffffffffffe}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="36575166ab0bdfbcbd45da87a30ce35f14186ee97f8480df3298d5878f42d80d11282031692bf423f33f13a8d979e92ce35026deaab26c76e25ddc6a8027bba0c21cd58e0a9ce82b25fbfe7fef590e42a0ac425a041d6363bf01272abe7d40680464c3eb172a547155da7dbc690c8dc8a750338656f8375b8b61d206efe1b76e0770e79d1a131dcef662064e4c5461947c1442c46b5a5e3db837a0e8653f7a4ba0", 0xa1}, {&(0x7f0000001840)="d7d419a7f496a757aec2c0878b4f4515cf4838fd838611dfac89e527f6a57fccd4f9b9d92a378572f91552173bc7fd97c705", 0x32}], 0x7, 0x14}, 0x0) 03:29:11 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x400000000000000, 0x0, 0x0, 0x3) 03:29:11 executing program 2: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000040)=[0x10000, 0x80000000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe) 03:29:11 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ftruncate(0xffffffffffffffff, 0x10000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:29:11 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:29:11 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x100, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c804}, 0x4000800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 03:29:12 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x9) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:29:12 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="de0b5495f6fbd81d44b99100e97d56751f3d712461e6d5a62749042502f34261acc8402a57d9ef207c3086f36d6dc135c0ffefeb23c9d4b2028037b2d9f62e7d9bf9b613124b71826140abe01ae3345299eb6bb8dcce2a689c6248f0de82ac89d070d65d9ac1a14691e8dc5a4b0ea300dd7e", 0x72}, {&(0x7f0000000080)="39552b3c417d91a1f7b370064bb76c7bbc2546140c38a7a1da5298de30a1168588391c3f160c7c38bfa75fcd52d14a442ac8c8101450b753b7c799ab58e23b72e958d5a8640dd06d945c80df2c86c062339375498acf3d10e1062c37c2eb0d56e25d2beac43f170f96fee15f571ae7c39d5ea9b02c199ae174b81b60efac369a6c25754f8a5097a4954f47774908b1627a", 0x91}], 0x2) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 03:29:12 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 53) 03:29:12 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 41) 03:29:12 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3f00000000000000, 0x0, 0x0, 0x3) 03:29:12 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x5, 0x7f, 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:29:12 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) [ 2419.703840] FAULT_INJECTION: forcing a failure. [ 2419.703840] name failslab, interval 1, probability 0, space 0, times 0 [ 2419.706348] CPU: 0 PID: 13090 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2419.707856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2419.709658] Call Trace: [ 2419.710239] dump_stack+0x107/0x167 [ 2419.711033] should_fail.cold+0x5/0xa [ 2419.711873] ? xas_alloc+0x336/0x440 [ 2419.712683] should_failslab+0x5/0x20 [ 2419.713509] kmem_cache_alloc+0x5b/0x310 [ 2419.714394] xas_alloc+0x336/0x440 [ 2419.715166] xas_create+0x34a/0x10d0 [ 2419.716005] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2419.717141] xas_store+0x8c/0x1c40 [ 2419.717925] __xa_store+0x164/0x2d0 [ 2419.718712] ? xa_delete_node+0x280/0x280 [ 2419.719634] ? trace_hardirqs_on+0x5b/0x180 [ 2419.720574] xa_store+0x31/0x50 [ 2419.721304] __io_uring_add_tctx_node+0x1cf/0x520 [ 2419.722356] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2419.723492] ? alloc_fd+0x2e7/0x670 [ 2419.724295] io_uring_setup+0x1fbb/0x2980 [ 2419.725216] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2419.726308] ? wait_for_completion_io+0x270/0x270 [ 2419.727388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2419.728535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2419.729652] do_syscall_64+0x33/0x40 [ 2419.730469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2419.731590] RIP: 0033:0x7fc2d9b3db19 [ 2419.732403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2419.736404] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2419.738056] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2419.739616] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2419.741166] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2419.742710] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2419.744261] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2419.761318] FAULT_INJECTION: forcing a failure. [ 2419.761318] name failslab, interval 1, probability 0, space 0, times 0 [ 2419.763823] CPU: 0 PID: 13101 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2419.765323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2419.767123] Call Trace: [ 2419.767704] dump_stack+0x107/0x167 [ 2419.768502] should_fail.cold+0x5/0xa [ 2419.769343] ? xas_alloc+0x336/0x440 [ 2419.770158] should_failslab+0x5/0x20 [ 2419.770985] kmem_cache_alloc+0x5b/0x310 [ 2419.771881] xas_alloc+0x336/0x440 [ 2419.772647] xas_create+0x34a/0x10d0 [ 2419.773471] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2419.774597] xas_store+0x8c/0x1c40 [ 2419.775388] __xa_store+0x164/0x2d0 [ 2419.776186] ? xa_delete_node+0x280/0x280 [ 2419.777087] ? trace_hardirqs_on+0x5b/0x180 [ 2419.778038] xa_store+0x31/0x50 [ 2419.778750] __io_uring_add_tctx_node+0x1cf/0x520 [ 2419.779795] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2419.780932] ? alloc_fd+0x2e7/0x670 [ 2419.781732] io_uring_setup+0x1fbb/0x2980 [ 2419.782639] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2419.783744] ? wait_for_completion_io+0x270/0x270 [ 2419.784820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2419.785958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2419.787077] do_syscall_64+0x33/0x40 [ 2419.787893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2419.789009] RIP: 0033:0x7f0f2173bb19 [ 2419.789809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2419.793798] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2419.795468] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2419.797020] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2419.798569] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2419.800129] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2419.801666] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:29:28 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 42) 03:29:28 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1003, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:29:28 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 54) 03:29:28 executing program 0: semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x4, 0x14, &(0x7f0000000000)=""/228) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:29:28 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:29:28 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x524fd000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) lseek(0xffffffffffffffff, 0x7, 0x2) 03:29:28 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000000000000, 0x0, 0x0, 0x3) 03:29:28 executing program 3: r0 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0xffffffff, 0xf9, 0x2) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x13) [ 2436.395604] FAULT_INJECTION: forcing a failure. [ 2436.395604] name failslab, interval 1, probability 0, space 0, times 0 [ 2436.398153] CPU: 0 PID: 13127 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2436.399645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2436.401433] Call Trace: [ 2436.402009] dump_stack+0x107/0x167 [ 2436.402804] should_fail.cold+0x5/0xa [ 2436.403637] ? create_object.isra.0+0x3a/0xa30 [ 2436.404633] should_failslab+0x5/0x20 [ 2436.405451] kmem_cache_alloc+0x5b/0x310 [ 2436.406326] ? mark_held_locks+0x9e/0xe0 [ 2436.407204] create_object.isra.0+0x3a/0xa30 [ 2436.408155] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2436.409256] kmem_cache_alloc+0x159/0x310 [ 2436.410170] xas_alloc+0x336/0x440 [ 2436.410943] xas_create+0x34a/0x10d0 [ 2436.411770] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2436.412904] xas_store+0x8c/0x1c40 [ 2436.413689] __xa_store+0x164/0x2d0 [ 2436.414475] ? xa_delete_node+0x280/0x280 [ 2436.415386] ? trace_hardirqs_on+0x5b/0x180 [ 2436.416322] xa_store+0x31/0x50 [ 2436.417036] __io_uring_add_tctx_node+0x1cf/0x520 [ 2436.418077] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2436.419201] ? alloc_fd+0x2e7/0x670 [ 2436.420009] io_uring_setup+0x1fbb/0x2980 [ 2436.420911] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2436.421997] ? wait_for_completion_io+0x270/0x270 [ 2436.423062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2436.424197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2436.425308] do_syscall_64+0x33/0x40 [ 2436.426110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2436.427215] RIP: 0033:0x7fc2d9b3db19 03:29:28 executing program 2: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x1000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000440), &(0x7f0000000480)={0x0, 0xfb, 0x52, 0x2, 0x6, "549395293b62762ead908a6a7ec49b76", "e4ee98d63c7a45f85f56f093c85b2ca1b55a752f1a69af06bc6452a8d0531be4e5246b061b94707962812ea3246191db3ba9888e1c7905371ac6f70dd7"}, 0x52, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2436.428024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2436.432157] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2436.433780] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2436.435299] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2436.436823] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2436.438340] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2436.439863] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2436.443038] FAULT_INJECTION: forcing a failure. [ 2436.443038] name failslab, interval 1, probability 0, space 0, times 0 [ 2436.445497] CPU: 0 PID: 13125 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2436.446970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2436.448743] Call Trace: [ 2436.449310] dump_stack+0x107/0x167 [ 2436.450090] should_fail.cold+0x5/0xa [ 2436.450906] ? create_object.isra.0+0x3a/0xa30 03:29:28 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) [ 2436.451890] should_failslab+0x5/0x20 [ 2436.452831] kmem_cache_alloc+0x5b/0x310 [ 2436.453697] ? mark_held_locks+0x9e/0xe0 [ 2436.454571] create_object.isra.0+0x3a/0xa30 [ 2436.455515] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2436.456632] kmem_cache_alloc+0x159/0x310 [ 2436.457520] xas_alloc+0x336/0x440 [ 2436.458288] xas_create+0x34a/0x10d0 [ 2436.459098] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2436.460236] xas_store+0x8c/0x1c40 [ 2436.461009] __xa_store+0x164/0x2d0 [ 2436.461788] ? xa_delete_node+0x280/0x280 [ 2436.462674] ? trace_hardirqs_on+0x5b/0x180 [ 2436.463609] xa_store+0x31/0x50 [ 2436.464314] __io_uring_add_tctx_node+0x1cf/0x520 [ 2436.465347] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2436.466466] ? alloc_fd+0x2e7/0x670 [ 2436.467253] io_uring_setup+0x1fbb/0x2980 [ 2436.468152] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2436.469224] ? wait_for_completion_io+0x270/0x270 [ 2436.470272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2436.471406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2436.472509] do_syscall_64+0x33/0x40 [ 2436.473305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2436.474377] RIP: 0033:0x7f0f2173bb19 [ 2436.475159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2436.479061] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2436.480667] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2436.482169] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2436.483689] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2436.485189] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2436.486688] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:29:28 executing program 0: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, 0xffffffffffffffff, 0x32412000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:29:41 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x13, 0xffffffffffffffff, 0x3b137000) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:29:41 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000001340)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x0, 0x1, 0x0, 0x4}, 0x20) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000012c0)={{'\x00', 0x3}, {0x401}, 0x12, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x14a, 0x0, &(0x7f0000000240)={0x2, 0x72, {0x0, 0xc, 0x46, "f921d8be9bc5fa7ee76d60294cd2134589581afc18115d8528271d7020b8382c06a24556a979406057057bfa8d6385b3960dc43e3870d2917b781e6cf72bb9412cfdaddd2381", 0x1f, "c8a013d07f7ded52e6efca38f45fafaa7c67ea19005cddae6e114f64d8be6c"}, 0x1000, "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"}, 0x107e}) 03:29:41 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 55) 03:29:41 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r0, 0x7f, 0x0, 0x0, 0x2}, 0x8) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040, 0x0, {0x0, r2}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/137, 0x89}, {&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)=""/48, 0x30}, {&(0x7f0000000340)=""/72, 0x48}], 0x6}, 0x0, 0x12160, 0x0, {0x1, r2}}, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 03:29:41 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffff7f00000000, 0x0, 0x0, 0x3) 03:29:41 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:29:41 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x16) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 03:29:41 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 43) 03:29:41 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x200000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) [ 2449.229844] FAULT_INJECTION: forcing a failure. [ 2449.229844] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.231443] CPU: 0 PID: 13159 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2449.232420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2449.232778] FAULT_INJECTION: forcing a failure. [ 2449.232778] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.233572] Call Trace: [ 2449.233598] dump_stack+0x107/0x167 [ 2449.237015] should_fail.cold+0x5/0xa [ 2449.237545] ? xas_alloc+0x336/0x440 [ 2449.238061] should_failslab+0x5/0x20 [ 2449.238589] kmem_cache_alloc+0x5b/0x310 [ 2449.239157] xas_alloc+0x336/0x440 [ 2449.239661] xas_create+0x34a/0x10d0 [ 2449.240186] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2449.240913] xas_store+0x8c/0x1c40 [ 2449.241418] __xa_store+0x164/0x2d0 [ 2449.241927] ? xa_delete_node+0x280/0x280 [ 2449.242515] ? trace_hardirqs_on+0x5b/0x180 [ 2449.243126] xa_store+0x31/0x50 [ 2449.243598] __io_uring_add_tctx_node+0x1cf/0x520 [ 2449.244270] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2449.245003] ? alloc_fd+0x2e7/0x670 [ 2449.245521] io_uring_setup+0x1fbb/0x2980 [ 2449.246106] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2449.246807] ? wait_for_completion_io+0x270/0x270 [ 2449.247495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2449.248240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2449.248956] do_syscall_64+0x33/0x40 [ 2449.249472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2449.250179] RIP: 0033:0x7fc2d9b3db19 [ 2449.250694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.253264] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2449.254332] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2449.255310] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2449.256297] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2449.257274] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2449.258255] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2449.259261] CPU: 1 PID: 13163 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2449.260881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2449.262805] Call Trace: [ 2449.263419] dump_stack+0x107/0x167 [ 2449.264274] should_fail.cold+0x5/0xa [ 2449.265144] ? xas_alloc+0x336/0x440 [ 2449.265991] should_failslab+0x5/0x20 [ 2449.266856] kmem_cache_alloc+0x5b/0x310 [ 2449.267805] xas_alloc+0x336/0x440 [ 2449.268617] xas_create+0x34a/0x10d0 [ 2449.269477] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2449.270675] xas_store+0x8c/0x1c40 [ 2449.271502] __xa_store+0x164/0x2d0 [ 2449.272349] ? xa_delete_node+0x280/0x280 [ 2449.273304] ? trace_hardirqs_on+0x5b/0x180 03:29:41 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2449.274309] xa_store+0x31/0x50 [ 2449.275244] __io_uring_add_tctx_node+0x1cf/0x520 [ 2449.276384] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2449.277592] ? alloc_fd+0x2e7/0x670 [ 2449.278449] io_uring_setup+0x1fbb/0x2980 [ 2449.279421] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2449.280598] ? wait_for_completion_io+0x270/0x270 [ 2449.281742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2449.282953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2449.284165] do_syscall_64+0x33/0x40 [ 2449.285027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2449.286211] RIP: 0033:0x7f0f2173bb19 [ 2449.287074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.291328] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2449.293095] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2449.294733] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2449.296373] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2449.298008] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2449.299649] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:29:41 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0xeb, 0x2, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:29:41 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x20ffc000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:29:41 executing program 7: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r1}, 0x1f, 0x28c, 0xff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x6, 0x7, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)) 03:29:41 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffff00000000, 0x0, 0x0, 0x3) 03:29:41 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r0 = syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000340)=@tipc=@id}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) syz_io_uring_submit(r4, 0x0, &(0x7f00000012c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r5, 0x0, &(0x7f0000001280)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/24, 0x18}, {&(0x7f00000010c0)=""/198, 0xc6}], 0x3, &(0x7f0000001200)=""/126, 0x7e}, 0x0, 0x31}, 0x1) 03:29:41 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002800)={'syztnl1\x00', &(0x7f0000002780)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x1, 0xfff, 0x1, @private0, @private0, 0x7800, 0x8000, 0x2689ae, 0x120}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000040)="0b76a64ee543526a8deb7b7dcee205164649ab1215c1e0dc1454cb2d6066a927ecb52dad3842d87535ffbf26811001dd1bec95a444176107890bcd3047dc285aefefcea00de5d62d4d9e047a311c244eecaf99cf6b84e052f3299978518cd08e6ee8ffe076455d2fe4e65faca3bc0d7713d514b598889be1754bcda91a8ab8272ee936009ed1b252d72cb0eb663870405b9aaa58e8e4cea78aca08", 0x9b}, {&(0x7f0000000100)="00239b7511b06c8886fb40d04f49f61453a6ba48878513932b3e2c54fe2f9ac96ee8a98fb70c5bcd9873a6484c52511149574d1b3ab0243f41752b68c9b77095f17187a9f7e36812810c478a6dd8ea3412c972cb111cb1ac7edf79a6dac2d0c54edb03e4a8eae736e71c5160ec7159cc0eaee1b76ea268cdff22549c3b0771d8a5a2cc15d566291fd560ea9a9dc12245f11a93551cabb35768d11543d1406afa8dd6de5165cf8edcfbadab1076e8934e912d3c596f0f23d511670fb2c7f934e6b2f39281ebc6cec017767c2e8b10a6ff1d5af9ecac9a560482421d7c", 0xdc}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="adf12c7972b9ddd3c3fbae9865acc6c222425a7669251b31", 0x18}, {&(0x7f0000001240)="0db7094c8d0261a7dc611df08234ad46fc6244f172d669d15ae7bb133d", 0x1d}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="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", 0xfb}], 0x7, &(0x7f0000002840)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@rr={0x7, 0x7, 0xeb, [@private=0xa010101]}, @noop, @lsrr={0x83, 0x7, 0xb4, [@remote]}, @lsrr={0x83, 0x27, 0xb9, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local, @empty, @broadcast, @remote]}, @ssrr={0x89, 0xf, 0x79, [@empty, @multicast2, @loopback]}, @lsrr={0x83, 0x17, 0x99, [@rand_addr=0x64010102, @local, @multicast2, @remote, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @rand_addr=0x64010102, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xc0}}, {{&(0x7f0000002900)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002940)="cfc811d1fa81207e66b38d5ffba9031f8365bfbdb601e033ce683f5a59e4254be3212b6062622d4cbe71b68abab37644767e9485bc6024d6dd52acc667eaa997bb53f0a879ab0f114d552d2a0d86f88d51028a2f529313704ab232de3ff72a6dd2e3606bf5b91eb9a56f72bae4ebc3fa6062fbc674bdbb285f5739f9ccfcb1a76755c9090b22756f8e1ccb791074cf46f6185368e47ddd83258a163473120f2f1cb92912da02cb89270aa29c77ebc96c76ea81482a76861ad5813dc26d0fd5e4f1586ccf72", 0xc5}], 0x1, &(0x7f0000002a80)=[@ip_retopts={{0xac, 0x0, 0x7, {[@cipso={0x86, 0x11, 0x0, [{0x2, 0x4, "e616"}, {0x0, 0x4, "19fd"}, {0x1, 0x3, "8b"}]}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x0, 0x7, "68388bcfc3"}, {0x5, 0x4, '97'}]}, @cipso={0x86, 0x2a, 0x3, [{0x2, 0x2}, {0x7, 0xf, "ab234d04ab0830c17beb816c2e"}, {0x0, 0x2}, {0x0, 0xb, "4cfca68954b92e29f8"}, {0x1, 0x6, "c2c65dc0"}]}, @timestamp_addr={0x44, 0x4c, 0x26, 0x1, 0x1, [{@empty, 0xa02}, {@local, 0xffffffff}, {@broadcast, 0xe50}, {@multicast2, 0x961d}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x9}, {@private=0xa010102, 0x9}, {@local, 0x7}, {@broadcast, 0x1}, {@broadcast, 0x27d}]}, @noop, @end]}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@cipso={0x86, 0x69, 0x1, [{0xc, 0x5, "0d30ea"}, {0x0, 0xe, "cbcb2edbc68fb24594b9f19f"}, {0x5, 0xd, "0f5fb73ef97c8dbb215c95"}, {0x6, 0xe, "07850ccac6681492168a8454"}, {0x6, 0x10, "a905e7b6d25943a1eda3f71856b1"}, {0x7, 0xb, "2f4b48967ec4b800e4"}, {0xc, 0x3, 'o'}, {0x2, 0x6, "9d4dd6a2"}, {0x5, 0x7, "93a4de306d"}, {0x1, 0xa, "e27be3da6edefbc2"}]}, @lsrr={0x83, 0xf, 0x6a, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_prespec={0x44, 0x14, 0x25, 0x3, 0xc, [{@private=0xa010101, 0x7}, {@multicast2, 0x20}]}, @rr={0x7, 0x1b, 0xe2, [@broadcast, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101]}, @rr={0x7, 0x23, 0x11, [@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x1b0}}, {{&(0x7f0000002c40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002c80)="8c50de20c39e0f998d29167bd1371a83b92708787955181e35150857e6588aa2c606f2a1bc7271294df6c1ab58ed8e5f1d8b6b506373cb72e94a2103ea863f02ab24ad894acf86564a76f0b188fe5c1fb6c6fbdc6a00316d90507a7726361cb2f874cb8b356337b3df882c55eed165dced222256933020436fba19d0d3b385d51f79e0545b53c444a1f9ac398c8ec75d400805ffb0b8409c8d9885dcae248496d9efc6d44779bf880acbaaed7e9e5339e779ee0bb08adb4c25b1db91476365839b221bea8a533cf2972a377e74c0f437193dfacb507e2e46f3cdb53f549cff054999db47b2a8c9da8d9ffb22f05ab538", 0xf0}, {&(0x7f0000002d80)="089d28315885feef5530fcf4d34bb9a02c241431a3b388168d61e78968a11eb2ae07c6ac4083320ce7da98dcc54f8555e33f09085eb3ef06a8016772159699e9020073b16aa6dbb2e208edbe34d00f36cb436af8d73db0b235950111c456a4dda9fc6c70e6004f5da784e141fd0c", 0x6e}, {&(0x7f0000002e00)="331b277191f5dd6632568264487739838c1a98", 0x13}], 0x3, &(0x7f0000002e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0xea, 0x1, 0x0, [{@rand_addr=0x64010100, 0xffff005d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x321a80}, {@private=0xa010102, 0xffff8001}, {@local, 0x7f}, {@rand_addr=0x64010102, 0x1}, {@broadcast, 0x4}, {@multicast1, 0x7}, {@multicast1, 0xef11}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}]}, @noop, @noop, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@generic={0x86, 0x9, "961032e548594c"}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x8, [{@local, 0xb56}]}, @ssrr={0x89, 0xf, 0xd8, [@rand_addr=0x64010102, @loopback, @rand_addr=0x64010101]}, @generic={0x0, 0xb, "416be590f33793d572"}, @generic={0x86, 0xc, "0c05fe1016cb2edf9f65"}, @timestamp_prespec={0x44, 0x1c, 0x68, 0x3, 0xb, [{@multicast2, 0x1}, {@rand_addr=0x64010100}, {@remote, 0x4}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x130}}], 0x3, 0x4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:29:41 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x7fffdf000000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:29:41 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) fcntl$getown(0xffffffffffffffff, 0x9) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:29:41 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 56) 03:29:41 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) [ 2449.511743] FAULT_INJECTION: forcing a failure. [ 2449.511743] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.513263] CPU: 0 PID: 13193 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2449.514114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2449.515125] Call Trace: [ 2449.515455] dump_stack+0x107/0x167 [ 2449.515922] should_fail.cold+0x5/0xa [ 2449.516393] ? create_object.isra.0+0x3a/0xa30 [ 2449.516954] should_failslab+0x5/0x20 [ 2449.517422] kmem_cache_alloc+0x5b/0x310 [ 2449.517921] ? mark_held_locks+0x9e/0xe0 [ 2449.518408] create_object.isra.0+0x3a/0xa30 [ 2449.518930] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2449.519558] kmem_cache_alloc+0x159/0x310 [ 2449.520055] xas_alloc+0x336/0x440 [ 2449.520485] xas_create+0x34a/0x10d0 [ 2449.520937] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2449.521559] xas_store+0x8c/0x1c40 [ 2449.521986] __xa_store+0x164/0x2d0 [ 2449.522418] ? xa_delete_node+0x280/0x280 [ 2449.522911] ? trace_hardirqs_on+0x5b/0x180 [ 2449.523423] xa_store+0x31/0x50 [ 2449.523822] __io_uring_add_tctx_node+0x1cf/0x520 [ 2449.524391] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2449.525004] ? alloc_fd+0x2e7/0x670 [ 2449.525440] io_uring_setup+0x1fbb/0x2980 [ 2449.525935] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2449.526531] ? wait_for_completion_io+0x270/0x270 [ 2449.527114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2449.527741] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2449.528351] do_syscall_64+0x33/0x40 [ 2449.528792] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2449.529397] RIP: 0033:0x7fc2d9b3db19 [ 2449.529838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.532024] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2449.532921] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2449.533774] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2449.534624] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2449.535472] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2449.536316] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:29:41 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 44) 03:29:41 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffff000, 0x0, 0x0, 0x3) [ 2449.553937] FAULT_INJECTION: forcing a failure. [ 2449.553937] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.556580] CPU: 1 PID: 13199 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2449.558136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2449.560011] Call Trace: [ 2449.560605] dump_stack+0x107/0x167 [ 2449.561429] should_fail.cold+0x5/0xa [ 2449.562298] ? create_object.isra.0+0x3a/0xa30 [ 2449.563321] should_failslab+0x5/0x20 [ 2449.564195] kmem_cache_alloc+0x5b/0x310 [ 2449.565120] ? mark_held_locks+0x9e/0xe0 [ 2449.566043] create_object.isra.0+0x3a/0xa30 [ 2449.567058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2449.568248] kmem_cache_alloc+0x159/0x310 [ 2449.569219] xas_alloc+0x336/0x440 [ 2449.570047] xas_create+0x34a/0x10d0 [ 2449.570925] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2449.572147] xas_store+0x8c/0x1c40 [ 2449.572990] __xa_store+0x164/0x2d0 [ 2449.573837] ? xa_delete_node+0x280/0x280 [ 2449.574805] ? trace_hardirqs_on+0x5b/0x180 [ 2449.575822] xa_store+0x31/0x50 [ 2449.576590] __io_uring_add_tctx_node+0x1cf/0x520 [ 2449.577708] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2449.578887] ? alloc_fd+0x2e7/0x670 [ 2449.579753] io_uring_setup+0x1fbb/0x2980 [ 2449.580723] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2449.581903] ? wait_for_completion_io+0x270/0x270 [ 2449.583048] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2449.584277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2449.585478] do_syscall_64+0x33/0x40 [ 2449.586342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2449.587530] RIP: 0033:0x7f0f2173bb19 [ 2449.588391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.592640] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2449.594399] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2449.596055] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2449.597697] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2449.599338] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2449.600988] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:29:56 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 45) 03:29:56 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2, 0x3) 03:29:56 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="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", 0x1000, r0}, 0x68) [ 2464.037238] FAULT_INJECTION: forcing a failure. [ 2464.037238] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.039118] CPU: 1 PID: 13212 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2464.040228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.041504] Call Trace: [ 2464.041911] dump_stack+0x107/0x167 [ 2464.042486] should_fail.cold+0x5/0xa [ 2464.043079] ? xas_alloc+0x336/0x440 [ 2464.043647] should_failslab+0x5/0x20 [ 2464.044257] kmem_cache_alloc+0x5b/0x310 [ 2464.044896] xas_alloc+0x336/0x440 [ 2464.045451] xas_create+0x34a/0x10d0 [ 2464.046030] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2464.046856] xas_store+0x8c/0x1c40 [ 2464.047416] __xa_store+0x164/0x2d0 [ 2464.047950] ? xa_delete_node+0x280/0x280 [ 2464.048456] ? trace_hardirqs_on+0x5b/0x180 [ 2464.048978] xa_store+0x31/0x50 [ 2464.049379] __io_uring_add_tctx_node+0x1cf/0x520 [ 2464.049956] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2464.050585] ? alloc_fd+0x2e7/0x670 [ 2464.051035] io_uring_setup+0x1fbb/0x2980 [ 2464.051827] ? __do_sys_io_uring_enter+0x1890/0x1890 03:29:56 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 57) 03:29:56 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000d, 0x4010, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0x85219000) 03:29:56 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3002, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:29:56 executing program 2: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd003400fbffffff050029000100"/30], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mlock2(&(0x7f0000281000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) [ 2464.052617] ? wait_for_completion_io+0x270/0x270 [ 2464.053235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.053920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.054562] do_syscall_64+0x33/0x40 [ 2464.055086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2464.055801] RIP: 0033:0x7fc2d9b3db19 [ 2464.056323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.058513] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000000040)={0x11dc, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x6}}}}, [@NL80211_PMSR_ATTR_PEERS={0x528, 0x5, 0x0, 0x1, [{0x3bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x378, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3e}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x839}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}]}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfbff}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0x43c, 0x5, 0x0, 0x1, [{0x438, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x222}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x308}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x31c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x88e4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x92}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x858, 0x5, 0x0, 0x1, [{0x414, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x404, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa7a5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xb6cda053fd1d17c9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x813}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf4a9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x160, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x48}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd03}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7237a0cf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14ad}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff49}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}]}]}, 0x11dc}}, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) perf_event_open(&(0x7f0000001440)={0x3, 0x80, 0xff, 0x33, 0x1, 0x1, 0x0, 0xfffffffffffffffb, 0x71, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x3}, 0x14402, 0x306, 0xfffffff8, 0x5, 0x10001, 0xffffffff, 0x20, 0x0, 0x1f, 0x0, 0x101}, 0x0, 0xa, 0xffffffffffffffff, 0xa) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) sendfile(r0, r2, &(0x7f0000001400)=0x7, 0x1) mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0xc) 03:29:56 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) [ 2464.059550] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2464.060455] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2464.061312] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2464.062124] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2464.062967] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2464.070050] FAULT_INJECTION: forcing a failure. [ 2464.070050] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.071453] CPU: 1 PID: 13209 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2464.072283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.073276] Call Trace: [ 2464.073592] dump_stack+0x107/0x167 [ 2464.074027] should_fail.cold+0x5/0xa [ 2464.074475] ? xas_alloc+0x336/0x440 [ 2464.074914] should_failslab+0x5/0x20 [ 2464.075368] kmem_cache_alloc+0x5b/0x310 [ 2464.075842] xas_alloc+0x336/0x440 [ 2464.076263] xas_create+0x34a/0x10d0 [ 2464.076693] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2464.077314] xas_store+0x8c/0x1c40 [ 2464.077726] __xa_store+0x164/0x2d0 [ 2464.078140] ? xa_delete_node+0x280/0x280 [ 2464.078610] ? trace_hardirqs_on+0x5b/0x180 [ 2464.079099] xa_store+0x31/0x50 [ 2464.079494] __io_uring_add_tctx_node+0x1cf/0x520 [ 2464.080045] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2464.080667] ? alloc_fd+0x2e7/0x670 [ 2464.081088] io_uring_setup+0x1fbb/0x2980 [ 2464.081565] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2464.082162] ? wait_for_completion_io+0x270/0x270 [ 2464.082718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.083337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.083920] do_syscall_64+0x33/0x40 [ 2464.084365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2464.084944] RIP: 0033:0x7f0f2173bb19 [ 2464.085381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.087425] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2464.088321] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2464.089152] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2464.089979] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2464.090811] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2464.091641] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:29:56 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ea3, &(0x7f0000000000)={0x0, 0x7cb9, 0x2, 0x0, 0x8a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r2, 0x7f, 0x0, 0x0, 0x2}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040, 0x0, {0x0, r4}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x8) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) 03:29:56 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 58) 03:29:56 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3, 0x3) 03:29:56 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) write(0xffffffffffffffff, &(0x7f0000000040)="0ce0ed26", 0x4) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x3638, 0xfffffffffffffff7, 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x1]}, 0x8) 03:29:56 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3003, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:29:56 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x40010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16) [ 2464.161866] FAULT_INJECTION: forcing a failure. [ 2464.161866] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.163201] CPU: 1 PID: 13235 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2464.164000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.164898] Call Trace: [ 2464.165206] dump_stack+0x107/0x167 [ 2464.165627] should_fail.cold+0x5/0xa [ 2464.166064] ? ___slab_alloc+0x360/0x700 [ 2464.166525] ? create_object.isra.0+0x3a/0xa30 [ 2464.167044] should_failslab+0x5/0x20 [ 2464.167473] kmem_cache_alloc+0x5b/0x310 [ 2464.167947] create_object.isra.0+0x3a/0xa30 [ 2464.168444] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2464.168998] kmem_cache_alloc+0x159/0x310 [ 2464.169475] xas_alloc+0x336/0x440 [ 2464.169867] xas_create+0x34a/0x10d0 [ 2464.170297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2464.170871] xas_store+0x8c/0x1c40 [ 2464.171287] __xa_store+0x164/0x2d0 [ 2464.171711] ? xa_delete_node+0x280/0x280 [ 2464.172189] ? trace_hardirqs_on+0x5b/0x180 [ 2464.172683] xa_store+0x31/0x50 [ 2464.173063] __io_uring_add_tctx_node+0x1cf/0x520 [ 2464.173611] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2464.174207] ? alloc_fd+0x2e7/0x670 [ 2464.174629] io_uring_setup+0x1fbb/0x2980 [ 2464.175105] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2464.175653] ? wait_for_completion_io+0x270/0x270 [ 2464.176223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.176821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.177381] do_syscall_64+0x33/0x40 [ 2464.177806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2464.178388] RIP: 0033:0x7fc2d9b3db19 [ 2464.178812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.180911] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2464.181772] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2464.182586] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2464.183393] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2464.184219] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2464.185027] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:29:56 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 46) 03:29:56 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4, 0x3) 03:29:56 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:29:56 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65) 03:29:56 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x6}, 0xf) setfsgid(0xee00) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x9, 0x200000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x100000a, 0x13, r1, 0xf9d8c000) [ 2464.255169] FAULT_INJECTION: forcing a failure. [ 2464.255169] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.256543] CPU: 1 PID: 13248 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2464.257338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2464.258283] Call Trace: [ 2464.258593] dump_stack+0x107/0x167 [ 2464.259016] should_fail.cold+0x5/0xa [ 2464.259458] ? create_object.isra.0+0x3a/0xa30 [ 2464.259988] should_failslab+0x5/0x20 [ 2464.260409] kmem_cache_alloc+0x5b/0x310 [ 2464.260875] ? mark_held_locks+0x9e/0xe0 [ 2464.261340] create_object.isra.0+0x3a/0xa30 [ 2464.261840] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2464.262419] kmem_cache_alloc+0x159/0x310 [ 2464.262899] xas_alloc+0x336/0x440 [ 2464.263311] xas_create+0x34a/0x10d0 [ 2464.263750] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2464.264349] xas_store+0x8c/0x1c40 [ 2464.264750] __xa_store+0x164/0x2d0 [ 2464.265168] ? xa_delete_node+0x280/0x280 [ 2464.265630] ? trace_hardirqs_on+0x5b/0x180 [ 2464.266129] xa_store+0x31/0x50 [ 2464.266508] __io_uring_add_tctx_node+0x1cf/0x520 [ 2464.267056] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2464.267624] ? alloc_fd+0x2e7/0x670 [ 2464.268055] io_uring_setup+0x1fbb/0x2980 [ 2464.268538] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2464.269118] ? wait_for_completion_io+0x270/0x270 [ 2464.269681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2464.270279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2464.270838] do_syscall_64+0x33/0x40 [ 2464.271265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2464.271858] RIP: 0033:0x7f0f2173bb19 [ 2464.272286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.274382] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2464.275252] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2464.276037] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2464.276805] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2464.277571] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2464.278338] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:29:56 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xf0, 0x3) 03:29:56 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x10000, 0x9, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:29:56 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) 03:30:10 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x300, 0x3) 03:30:10 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000040)={0x0, 0x4, @start={0x0, 0x1, "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", "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"}, [0xb9, 0x100000001, 0xdef, 0x9, 0x7, 0x1, 0xd8, 0x2, 0x7ff, 0x5, 0xfffffffffffffffe, 0x7, 0x2, 0x7, 0x3, 0x200, 0x9, 0x2, 0x0, 0x1, 0x11, 0xf0bc, 0xfffffffffffff793, 0x7, 0x6, 0x4000000000000000, 0x1ff, 0x9, 0x1f, 0x5, 0x1f, 0x81, 0x3, 0x3, 0x5, 0x6, 0x7f, 0x65, 0x6, 0x5, 0x7, 0x1, 0x7fff, 0x6, 0x0, 0x81, 0x9, 0x3f, 0xc3, 0x3, 0x800, 0xfd, 0x10001, 0x1, 0x3, 0x100000001, 0x4, 0x309, 0xfff, 0x2, 0xa42f, 0x80, 0x2, 0xfff]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000a80)={r1, "757c3dff61f13cd3e0d24f1ea0cfccca"}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) 03:30:10 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 47) 03:30:10 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x810, 0xffffffffffffffff, 0xa2016000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:30:10 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 59) 03:30:10 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffa000/0x2000)=nil) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x98, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/254, 0xfe, 0x2, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}, @free_buffer, @dead_binder_done, @dead_binder_done, @release={0x40046306, 0x1}, @dead_binder_done, @increfs={0x40046304, 0x1}, @request_death, @exit_looper], 0xeb, 0x0, &(0x7f00000002c0)="3b6409dea23eb1a0a26be5cb44c17525ebc21bbb739ede348cf16abcff892a1f8dde89daecfb97c445223c98ea13ef7b55ae0e31bf48355853f6f5077ace07c01553a105ad4de7f32816489002620e7dfa857c8e66b8f61c7d130f36315b045e043a57cc2c3fd44c2cc46765f951e1ee24e9d59ca5fa6bc59e52d995958b67e7e647f6fbdab087419849b24de060b55dc9a75ce6eb62b9c2ef45f5b79aa2f287b0e08d4fdd4e21c340cab5f1b5dad88d28e60400ec2788d19525ba8c51e12949a146c85ef8292b3e0d74f5797de15e6d2e56aef53e5b5cdf827dda501147901d24022f657c296dcc474bcf"}) 03:30:10 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7fffdf003000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:30:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000289000/0x2000)=nil, 0x2000, 0x2000008, 0x1f012, r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @any, 0x2, 0x1}, 0xe) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2478.385553] FAULT_INJECTION: forcing a failure. [ 2478.385553] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.387332] CPU: 0 PID: 13284 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2478.387859] FAULT_INJECTION: forcing a failure. [ 2478.387859] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.388415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.388430] Call Trace: [ 2478.392591] dump_stack+0x107/0x167 [ 2478.393146] should_fail.cold+0x5/0xa [ 2478.393738] ? xas_alloc+0x336/0x440 [ 2478.394303] should_failslab+0x5/0x20 [ 2478.394893] kmem_cache_alloc+0x5b/0x310 [ 2478.395519] xas_alloc+0x336/0x440 [ 2478.396063] xas_create+0x34a/0x10d0 [ 2478.396632] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 2478.397408] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2478.398231] xas_store+0x8c/0x1c40 [ 2478.398771] __xa_store+0x164/0x2d0 [ 2478.399341] ? xa_delete_node+0x280/0x280 [ 2478.399983] ? trace_hardirqs_on+0x5b/0x180 [ 2478.400628] xa_store+0x31/0x50 [ 2478.401126] __io_uring_add_tctx_node+0x1cf/0x520 [ 2478.401861] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2478.402636] ? alloc_fd+0x2e7/0x670 [ 2478.403201] io_uring_setup+0x1fbb/0x2980 [ 2478.403822] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2478.404605] ? wait_for_completion_io+0x270/0x270 [ 2478.405376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2478.406160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.406929] do_syscall_64+0x33/0x40 [ 2478.407499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2478.408285] RIP: 0033:0x7fc2d9b3db19 [ 2478.408840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.411539] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2478.412681] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2478.413741] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2478.414799] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2478.415875] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2478.416940] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2478.418054] CPU: 1 PID: 13281 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2478.419967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.422181] Call Trace: [ 2478.422903] dump_stack+0x107/0x167 [ 2478.423906] should_fail.cold+0x5/0xa [ 2478.424942] ? xas_alloc+0x336/0x440 [ 2478.425953] should_failslab+0x5/0x20 [ 2478.426989] kmem_cache_alloc+0x5b/0x310 [ 2478.428121] xas_alloc+0x336/0x440 [ 2478.429104] xas_create+0x34a/0x10d0 [ 2478.430139] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2478.431556] xas_store+0x8c/0x1c40 [ 2478.432567] __xa_store+0x164/0x2d0 [ 2478.433557] ? xa_delete_node+0x280/0x280 [ 2478.434685] ? trace_hardirqs_on+0x5b/0x180 [ 2478.435877] xa_store+0x31/0x50 [ 2478.436781] __io_uring_add_tctx_node+0x1cf/0x520 [ 2478.438084] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2478.439494] ? alloc_fd+0x2e7/0x670 [ 2478.440518] io_uring_setup+0x1fbb/0x2980 [ 2478.441648] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2478.443017] ? wait_for_completion_io+0x270/0x270 [ 2478.444378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2478.445790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.447191] do_syscall_64+0x33/0x40 [ 2478.448219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2478.449611] RIP: 0033:0x7f0f2173bb19 [ 2478.450623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.455552] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2478.457619] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2478.459531] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2478.461454] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2478.463372] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2478.465294] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:30:10 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) syz_io_uring_setup(0x6af6, &(0x7f0000000000)={0x0, 0xbff7, 0x20, 0x1, 0x172}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x9, 0x8010, 0xffffffffffffffff, 0x10000000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000140)={r2, r3+10000000}}, 0x7) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:30:27 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 48) 03:30:27 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3f00, 0x3) 03:30:27 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x10b380, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000001c0)={0x0, 0xffff, 0x1, [0x8, 0x2, 0x9, 0x9, 0x9], [0x413, 0x3, 0x4, 0x200, 0x8, 0x7ff, 0x1, 0x9, 0x7ff, 0x3, 0x200, 0x3, 0x40d, 0x2000000004, 0x5, 0x7ff, 0x1, 0x56b6, 0x9, 0xbd, 0x40, 0x2, 0x9, 0x0, 0x100000000, 0x5, 0x6, 0x9, 0x7, 0x7, 0x800, 0x719, 0x3, 0x7f, 0x800, 0x200, 0x1f, 0x7fffffff, 0x6, 0x5, 0x9, 0x20, 0x4, 0xfffffffffffffffd, 0x20000000, 0x0, 0x41, 0x8, 0x0, 0x1, 0xeb51, 0xfffffffffffffff9, 0x7, 0x7fff, 0x6, 0x2, 0xfffffffffffffff9, 0x2, 0xff, 0xfffffffffffffffd, 0x0, 0x1, 0x8000, 0xffffffffffffffff, 0x8, 0x100000001, 0x7a9e, 0x3, 0x1f, 0x2, 0x7fffffff, 0x100, 0x401, 0x10100000000000, 0x7, 0xcd3, 0x8000, 0x1, 0x401, 0x7, 0x6, 0x3e, 0x13, 0x8000, 0xffffffffffffffff, 0x4, 0xffffffffffffff7f, 0x7, 0x3, 0x2, 0x5, 0x2, 0x9, 0x7fff, 0xffffffff00000001, 0xea7, 0x20, 0x10001, 0x6, 0x80000000, 0x2, 0x1000000, 0x5, 0x9, 0x6, 0x10000, 0x5, 0xd236, 0x18, 0x8000, 0x9, 0x80000001, 0x6, 0x50e1, 0x1, 0x100000000, 0x0, 0x3, 0x8, 0x240000, 0x3ff]}) r1 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private0}, &(0x7f0000000040)=0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) mincore(&(0x7f000046c000/0x1000)=nil, 0x1000, &(0x7f0000000600)=""/241) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf254c0000000c00990000100000110000000c00580039000000000000000c0058003600000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:30:27 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 03:30:27 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) pread64(r0, &(0x7f0000000040)=""/198, 0xc6, 0x46) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x11, 0xffffffffffffffff, 0xa2614000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:30:27 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) [ 2494.821809] FAULT_INJECTION: forcing a failure. [ 2494.821809] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.824331] CPU: 1 PID: 13303 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2494.825785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.827536] Call Trace: [ 2494.828110] dump_stack+0x107/0x167 [ 2494.828889] should_fail.cold+0x5/0xa [ 2494.829251] FAULT_INJECTION: forcing a failure. [ 2494.829251] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.829694] ? xas_alloc+0x336/0x440 [ 2494.832003] should_failslab+0x5/0x20 [ 2494.832824] kmem_cache_alloc+0x5b/0x310 [ 2494.833683] xas_alloc+0x336/0x440 [ 2494.834448] xas_create+0x34a/0x10d0 [ 2494.835254] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2494.836372] xas_store+0x8c/0x1c40 [ 2494.837133] __xa_store+0x164/0x2d0 [ 2494.837905] ? xa_delete_node+0x280/0x280 [ 2494.838781] ? trace_hardirqs_on+0x5b/0x180 [ 2494.839701] xa_store+0x31/0x50 [ 2494.840416] __io_uring_add_tctx_node+0x1cf/0x520 [ 2494.841436] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2494.842540] ? alloc_fd+0x2e7/0x670 [ 2494.843330] io_uring_setup+0x1fbb/0x2980 [ 2494.844223] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2494.845285] ? wait_for_completion_io+0x270/0x270 [ 2494.846326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2494.847426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2494.848530] do_syscall_64+0x33/0x40 [ 2494.849305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2494.850377] RIP: 0033:0x7f0f2173bb19 [ 2494.851156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2494.855019] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2494.856620] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2494.858121] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2494.859617] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2494.861127] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2494.862621] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2494.864157] CPU: 0 PID: 13310 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2494.865085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.866189] Call Trace: [ 2494.866557] dump_stack+0x107/0x167 [ 2494.867054] should_fail.cold+0x5/0xa [ 2494.867561] ? xas_alloc+0x336/0x440 [ 2494.868077] should_failslab+0x5/0x20 [ 2494.868583] kmem_cache_alloc+0x5b/0x310 [ 2494.869134] xas_alloc+0x336/0x440 [ 2494.869618] xas_create+0x34a/0x10d0 [ 2494.870121] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2494.870832] xas_store+0x8c/0x1c40 [ 2494.871315] __xa_store+0x164/0x2d0 [ 2494.871796] ? xa_delete_node+0x280/0x280 [ 2494.872370] ? trace_hardirqs_on+0x5b/0x180 03:30:27 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r0 = pidfd_open(0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{}, 0x400, 0x9, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:30:27 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 60) [ 2494.872950] xa_store+0x31/0x50 [ 2494.873498] __io_uring_add_tctx_node+0x1cf/0x520 [ 2494.874137] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2494.874840] ? alloc_fd+0x2e7/0x670 [ 2494.875335] io_uring_setup+0x1fbb/0x2980 [ 2494.875897] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2494.876571] ? wait_for_completion_io+0x270/0x270 [ 2494.877232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2494.877930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2494.878620] do_syscall_64+0x33/0x40 [ 2494.879116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2494.879794] RIP: 0033:0x7fc2d9b3db19 [ 2494.880301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2494.882726] RSP: 002b:00007fc2d70b3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2494.883730] RAX: ffffffffffffffda RBX: 00007fc2d9c50f60 RCX: 00007fc2d9b3db19 [ 2494.884675] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2494.885624] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2494.886577] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2494.887516] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:30:27 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) mlock2(&(0x7f00001a0000/0x4000)=nil, 0x4000, 0x1) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x2, 0x1, 0x5}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) dup2(r0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x1c5300, 0x61) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:30:27 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x12, r0, 0x0) 03:30:27 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x5, 0x0, 0x2) 03:30:27 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 03:30:27 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f0000bc6000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) fcntl$dupfd(r0, 0x0, r1) 03:30:27 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000, 0x3) 03:30:27 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 49) [ 2495.044600] FAULT_INJECTION: forcing a failure. [ 2495.044600] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.046051] CPU: 0 PID: 13337 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2495.046918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2495.047929] Call Trace: [ 2495.048267] dump_stack+0x107/0x167 [ 2495.048718] should_fail.cold+0x5/0xa [ 2495.049191] ? xas_alloc+0x336/0x440 [ 2495.049646] should_failslab+0x5/0x20 [ 2495.050114] kmem_cache_alloc+0x5b/0x310 [ 2495.050614] xas_alloc+0x336/0x440 [ 2495.051054] xas_create+0x34a/0x10d0 [ 2495.051522] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2495.052175] xas_store+0x8c/0x1c40 [ 2495.052620] __xa_store+0x164/0x2d0 [ 2495.053068] ? xa_delete_node+0x280/0x280 [ 2495.053579] ? trace_hardirqs_on+0x5b/0x180 [ 2495.054114] xa_store+0x31/0x50 [ 2495.054524] __io_uring_add_tctx_node+0x1cf/0x520 [ 2495.055114] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2495.055753] ? alloc_fd+0x2e7/0x670 [ 2495.056213] io_uring_setup+0x1fbb/0x2980 [ 2495.056724] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2495.057345] ? wait_for_completion_io+0x270/0x270 [ 2495.057952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2495.058588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2495.059229] do_syscall_64+0x33/0x40 [ 2495.059685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2495.060318] RIP: 0033:0x7f0f2173bb19 [ 2495.060769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2495.062997] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2495.063914] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2495.064777] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2495.065634] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2495.066493] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2495.067355] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:30:43 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 61) 03:30:43 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 50) 03:30:43 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) 03:30:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf253000000008000300", @ANYRES32=r0, @ANYBLOB="0c009900050000002900004552363af323ba6e00060036000a0000000600360042000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x10) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000140)="d1a737dc4becb8c4ca9c8c2780d69701750a", 0x7ff}, 0x7) 03:30:43 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0x5e3a2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 03:30:43 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xf000, 0x3) 03:30:43 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x100000001, 0x223, 0x4) 03:30:43 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00040000cce41daefc3723f4920000ffdbdf25170000007055894344b60386", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000200766972745f7769666930000000000000"], 0x44}}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001980)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) r1 = syz_io_uring_setup(0x7895, &(0x7f00000019c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x18) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000000)=""/81) syz_io_uring_submit(r2, 0x0, &(0x7f0000001940)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4007, @fd_index=0xa, 0x2, &(0x7f0000001900)=""/12, 0xc, 0x2}, 0xffffffe0) readv(r5, &(0x7f0000001840)=[{&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000580)=""/243, 0xf3}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000680)=""/44, 0x2c}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/107, 0x6b}, {&(0x7f0000001780)=""/141, 0x8d}], 0xa) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) [ 2511.367687] FAULT_INJECTION: forcing a failure. [ 2511.367687] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.370608] CPU: 1 PID: 13347 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2511.372334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.374407] Call Trace: [ 2511.375070] dump_stack+0x107/0x167 [ 2511.375985] should_fail.cold+0x5/0xa [ 2511.376946] ? vm_area_dup+0x78/0x290 [ 2511.377897] should_failslab+0x5/0x20 [ 2511.378852] kmem_cache_alloc+0x5b/0x310 [ 2511.379870] vm_area_dup+0x78/0x290 [ 2511.380798] ? lock_release+0x680/0x680 [ 2511.381787] ? mark_lock+0xf5/0x2df0 [ 2511.382714] ? lock_chain_count+0x20/0x20 [ 2511.383733] ? mark_lock+0xf5/0x2df0 [ 2511.384668] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2511.385963] ? lock_chain_count+0x20/0x20 [ 2511.386994] ? mark_lock+0xf5/0x2df0 [ 2511.387921] ? vm_area_alloc+0x110/0x110 [ 2511.388937] ? __lock_acquire+0x1657/0x5b00 [ 2511.390037] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2511.391330] ? SOFTIRQ_verbose+0x10/0x10 [ 2511.392347] ? vmacache_find+0x55/0x2a0 [ 2511.393332] __split_vma+0xa8/0x4e0 [ 2511.394238] __do_munmap+0x365/0x1260 [ 2511.395187] ? arch_get_unmapped_area+0x450/0x450 [ 2511.396390] ? lock_release+0x680/0x680 [ 2511.397372] mmap_region+0x7cc/0x1500 [ 2511.398327] do_mmap+0x868/0x1370 [ 2511.399193] vm_mmap_pgoff+0x198/0x1f0 [ 2511.400160] ? randomize_page+0xb0/0xb0 [ 2511.401171] ksys_mmap_pgoff+0x41c/0x560 [ 2511.402179] ? find_mergeable_anon_vma+0x250/0x250 [ 2511.403402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2511.404759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.406027] do_syscall_64+0x33/0x40 [ 2511.406943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2511.408196] RIP: 0033:0x7fc2d9b3db62 [ 2511.409115] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2511.413633] RSP: 002b:00007fc2d70b30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2511.415503] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fc2d9b3db62 [ 2511.417279] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 2511.419032] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2511.420798] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2511.422549] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:30:43 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:30:43 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xf0ffff, 0x3) 03:30:43 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2511.471494] FAULT_INJECTION: forcing a failure. [ 2511.471494] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.474165] CPU: 1 PID: 13366 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2511.475809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.477784] Call Trace: [ 2511.478421] dump_stack+0x107/0x167 [ 2511.479299] should_fail.cold+0x5/0xa [ 2511.480208] ? ___slab_alloc+0x360/0x700 [ 2511.481182] ? create_object.isra.0+0x3a/0xa30 [ 2511.482268] should_failslab+0x5/0x20 [ 2511.483175] kmem_cache_alloc+0x5b/0x310 [ 2511.484147] create_object.isra.0+0x3a/0xa30 [ 2511.485195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2511.486404] kmem_cache_alloc+0x159/0x310 [ 2511.487399] xas_alloc+0x336/0x440 [ 2511.488253] xas_create+0x34a/0x10d0 [ 2511.489157] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2511.490403] xas_store+0x8c/0x1c40 [ 2511.491265] __xa_store+0x164/0x2d0 [ 2511.492129] ? xa_delete_node+0x280/0x280 [ 2511.493120] ? trace_hardirqs_on+0x5b/0x180 [ 2511.494142] xa_store+0x31/0x50 [ 2511.494922] __io_uring_add_tctx_node+0x1cf/0x520 [ 2511.496057] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2511.497292] ? alloc_fd+0x2e7/0x670 [ 2511.498161] io_uring_setup+0x1fbb/0x2980 [ 2511.499150] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2511.500351] ? wait_for_completion_io+0x270/0x270 [ 2511.501512] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2511.502751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.503966] do_syscall_64+0x33/0x40 [ 2511.504852] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2511.506057] RIP: 0033:0x7f0f2173bb19 [ 2511.506929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.511258] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2511.513040] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2511.514699] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2511.516364] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2511.518023] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2511.519679] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:30:59 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:30:59 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xbb437000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 03:30:59 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 51) 03:30:59 executing program 2: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, 0xffffffffffffffff, 0xe7fc3000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) 03:30:59 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 62) 03:30:59 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1000000, 0x3) 03:30:59 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) 03:30:59 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) [ 2526.821795] FAULT_INJECTION: forcing a failure. [ 2526.821795] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.823232] CPU: 0 PID: 13381 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2526.824039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.825014] Call Trace: [ 2526.825326] dump_stack+0x107/0x167 [ 2526.825751] should_fail.cold+0x5/0xa [ 2526.826202] ? create_object.isra.0+0x3a/0xa30 [ 2526.826736] should_failslab+0x5/0x20 [ 2526.827191] kmem_cache_alloc+0x5b/0x310 [ 2526.827667] create_object.isra.0+0x3a/0xa30 [ 2526.828178] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2526.828782] kmem_cache_alloc+0x159/0x310 [ 2526.829272] vm_area_dup+0x78/0x290 [ 2526.829699] ? lock_release+0x680/0x680 [ 2526.830167] ? mark_lock+0xf5/0x2df0 [ 2526.830603] ? lock_chain_count+0x20/0x20 [ 2526.831089] ? mark_lock+0xf5/0x2df0 [ 2526.831524] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.832136] ? lock_chain_count+0x20/0x20 [ 2526.832628] ? mark_lock+0xf5/0x2df0 [ 2526.833063] ? vm_area_alloc+0x110/0x110 [ 2526.833535] ? __lock_acquire+0x1657/0x5b00 [ 2526.834052] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.834658] ? SOFTIRQ_verbose+0x10/0x10 [ 2526.835135] ? vmacache_find+0x55/0x2a0 [ 2526.835597] __split_vma+0xa8/0x4e0 [ 2526.836026] __do_munmap+0x365/0x1260 [ 2526.836475] ? arch_get_unmapped_area+0x450/0x450 [ 2526.837042] ? lock_release+0x680/0x680 [ 2526.837509] mmap_region+0x7cc/0x1500 [ 2526.837964] do_mmap+0x868/0x1370 [ 2526.838374] vm_mmap_pgoff+0x198/0x1f0 [ 2526.838834] ? randomize_page+0xb0/0xb0 [ 2526.839307] ksys_mmap_pgoff+0x41c/0x560 [ 2526.839780] ? find_mergeable_anon_vma+0x250/0x250 [ 2526.840353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.840984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.841592] do_syscall_64+0x33/0x40 [ 2526.842028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2526.842623] RIP: 0033:0x7fc2d9b3db62 [ 2526.843063] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2526.845213] RSP: 002b:00007fc2d70b30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2526.846097] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fc2d9b3db62 [ 2526.846928] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 2526.847755] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2526.848588] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2526.849417] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2526.862194] FAULT_INJECTION: forcing a failure. [ 2526.862194] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.863547] CPU: 0 PID: 13386 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2526.864355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.865325] Call Trace: [ 2526.865634] dump_stack+0x107/0x167 [ 2526.866063] should_fail.cold+0x5/0xa [ 2526.866512] ? xas_alloc+0x336/0x440 [ 2526.866947] should_failslab+0x5/0x20 [ 2526.867390] kmem_cache_alloc+0x5b/0x310 [ 2526.867868] xas_alloc+0x336/0x440 [ 2526.868283] xas_create+0x34a/0x10d0 [ 2526.868728] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.869342] xas_store+0x8c/0x1c40 [ 2526.869768] __xa_store+0x164/0x2d0 [ 2526.870199] ? xa_delete_node+0x280/0x280 [ 2526.870684] ? trace_hardirqs_on+0x5b/0x180 [ 2526.871192] xa_store+0x31/0x50 [ 2526.871577] __io_uring_add_tctx_node+0x1cf/0x520 [ 2526.872148] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2526.872761] ? alloc_fd+0x2e7/0x670 [ 2526.873194] io_uring_setup+0x1fbb/0x2980 [ 2526.873679] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2526.874271] ? wait_for_completion_io+0x270/0x270 [ 2526.874842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.875456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.876064] do_syscall_64+0x33/0x40 [ 2526.876505] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2526.877109] RIP: 0033:0x7f0f2173bb19 [ 2526.877541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2526.879691] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2526.880586] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2526.881419] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2526.882253] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2526.883081] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2526.883915] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:30:59 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000ffc000/0x3000)=nil) 03:30:59 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2000000, 0x3) 03:30:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/93) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x2a031, r0, 0xce72000) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) r2 = timerfd_create(0x7, 0x80800) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/81) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000000)=""/81) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000000)=""/81) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f00000013c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000002340)=[{&(0x7f0000001400)={0x4bc, 0x2a, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@nested={0xc, 0x31, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x4a, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x244, 0x2b, 0x0, 0x1, [@generic="3157497625e00f1c24c9b15be26f6fe616f22b6356688bddef4463cdb43906d6bca51b5c3db444f4f767e1ae8b002d6499697a9243b3f7986263f73c1cb5090850ea5bfdd388c651375fbd5820d3ba232939ed342b41d99176198b169f2756109e2b904f1b67199528fa3d79e98ed86e78bed28a4c0febd386854f86abef3485d7f6ddbf74bfd12d6cdefa8e894e87ceb21b07cfc0d3e96c8acbbd1696f6ea66ed3f075206666c5531c2181da1217f3d65363b30b99759c3ed0d1cd1ebaccd94c2c5f9b8c9d45e", @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x7}, @generic="5a0900dd8edda15d1d113627fe1d46db015e5f9bdd98d628eac1782c8f8b9bb9dc88bbba685ed0da05e7bea44e48dc4e125b8c2bbe436a268a7f06067c32961832f847195266b83d499e105b7c21e6dbe6453adfce0a2f8b1c67e6065e8181fc445cd35a35a4fd4e368f4c4b506d2e8041eb3d446c06d52616d923ac47935c0a503a9f5fb9f1c9232d1d611ea1a1", @generic="153164e2af50f4d2a6c67bdc1d1a17eea3fa6969d4848cdad147bec05b7a5c84f3241a", @generic="8cfcccc27f1af03bd7d5aefa449d82043e7d299c48e2ab0dcb182ac8515c4263de4dfe2045a7f9f9a8720bc7b4868265fd4e454abfa2e9832836cebc6d60c982a4dafee35b873fa58a0839d8be98933b4439d2e4ad2ada894f4db5447db59dbd338e793820f2adae09c3599f46dac507e551f6cd99c98729adfc1b5c9c11b43aea3084c0e5e531d9223796528b225218", @generic="d6bde1e399dabfe9ac63a0eeb7588046834bf27268e76389304da0f6610011710a86a38646ee333f2609decf079ebf6b"]}, @nested={0x23b, 0x4, 0x0, 0x1, [@generic="4cf6e83fd11144b7edbfa98676ac1c2c7996a83e0ee505f1ee5d1b082087caac3187eaba7244fec9a2eed15f02d34e16d08ec8e0212353b67939fc2c6b69938e5f859313b779ad93f7a8681d", @generic="3969be032ebffc37236a4080d8f088d2b2fab518b56ea236729200e3352c4555ef4a5d301e4628380ad42603424457a6421899d010c8653a341356c0a771b39a0b050dbb5137f6989fe6449fab6bf5a50f39f5e58d51b5c5cbabe5d9ddac1001389ee8509086d7a4fb98a9e8f15ed7", @generic="04e3d48d2353a33eb45443a747d986cb24e9e2c43c71f3e4bfc63a40414cd569b66e8169384d6a45c3240ee5771e4cc1899e9a113e402376eefa8e68afaa0d857e10ba483735e00d279faa48dfebdacb52fd6572672976b035d9fbec2fe966cb8af12460f5c1eb37283cea125013e614188d493cf440422576480703ff2185a51dd9194e4fa494a1b67e6933418fa9678231dba71484fecd9708220f37fa9d56cadda4d0e3355b389ca46288407ca459c031f4", @generic="24158d6a4d09b1d230c0921cf17ac084bcfdf9408179d5e4a30fdb19eb00033c0fe20d9b5d2975f21734a1559efc44c1b1c9ae95fcedced4f30e593a8d874a5e38d772995f60110e507de9a8f3790a00daca541749bae17c88f296606a1333ad5bdc1672edd7e38b1259afd214bd4d8cbfa8283d7cd8fd75db4ea1d6612e174110c4e50afed4ed5c70428e2368213beb3d3ed38a0c42a399da924663f5eb21596c7760b3c2fd61b6da0aa110df480b42e85f5d9879eaa48869", @typed={0x8, 0x95, 0x0, 0x0, @u32}, @typed={0x6, 0x63, 0x0, 0x0, @str='(\x00'}]}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0xf03}, @nested={0xc, 0x18, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @fd=r0}]}]}, 0x4bc}, {&(0x7f0000001900)={0x314, 0x23, 0x200, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x7c, 0x0, 0x0, @fd}, @typed={0x16, 0x51, 0x0, 0x0, @str='/dev/input/event#\x00'}, @generic="adae07ef1bb114d400cd965ba161239522c2a629d04d67c0b19cbde4a171ee912015000a0b55ec720348d4a8727d0daed0342f2816f4e3ecf59dc2b70fd525fa59931faa40c63683e627c4e9e4f1964cdf751bf0183ec498", @nested={0x88, 0x23, 0x0, 0x1, [@generic="d41bbaff26a82698d8bb3679f11f1bcf3f1ce43322e999765b54ffc012adf7b9b06f0fa659627ddae8d68118235e01cb666d34fd0e66a73804d3195d592e9db6356915627da797710aaeb7932efe26236ae14bc10c4cf53eb716fd3902c7b98db7987a1477d35cedf06c41dd6dc097a3c18db96219b4746359ee7ab6cac7597d96e4e9ac"]}, @nested={0x68, 0x61, 0x0, 0x1, [@typed={0x13, 0x5a, 0x0, 0x0, @binary="c60264da8fda1be131e9e3d27da208"}, @typed={0x45, 0x36, 0x0, 0x0, @binary="4f1031850432703bada72d0c5d49cd4dfae7599388223275b3fd4fcd06b6209945c17746711b070bc1b772752cba5f8ffd23c81d26a3e3018698b440a000d8fd70"}, @typed={0x8, 0x24, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0x19a, 0x53, 0x0, 0x1, [@generic="11c893f67cfd565df5f707f4984a49b06f03a0d160dbec5a4ce42ced891d8b6f5caa6ac2f6b787c7a1756e1969366689", @typed={0xc6, 0x5e, 0x0, 0x0, @binary="da3f115bae3620407cd40aba33be713674c3d21e2b6721922166e95c3a7aee96c25384c4fb0a22ce7fddcda3de8ef86aa7706891dd7b56571b8a5c6982b15c69dae9403b66a4a36a052f9f6575cef447f46e5b9662b3b08f1d0b7f54b28345f6b86a0f28093f1aa34b5d07b450279d640bf3ee3a1e95ca2cd5600c1255c4401694f8572f8009ee5e5a028a4e31b7f9f700a71fca80f8141a4216b4f0752f6665740756a2d8c975d351ebf0a14ac815a1ce6f5912e0eff69b4b896ab07c8b864b3e6c"}, @generic="5631db14960e197ef0", @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x4a, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="b20ef54c5fc2411274730c4e0af25c7f1398b940d2a6e97218cd922728405b4b14269f67e05bd0ea1e261dec79cf8ada17596ce1d450149d3b5a45142e81cf4a433ad7dc9c5e12df743baa3bd585f5d1bfc57fe52e03014cf3eff2f9d2a290299981b136da413d332571939cb67848abc317cec6fb1953a65a7b6ae7adda3bee1f946db240"]}]}, 0x314}, {&(0x7f0000001c40)={0x6d4, 0x2d, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@generic="cce4d2a4f55ef8e6da5801e4087cb8ce1abe8b5f9ef06ea041b8d9e3e31e7f8b97e42167d7f93197bcdad454993853d2ed754f597f0a2f2ae19dc53a1836e4065b5fffe6eebd7b91081df4a97a92ed73c446118fca1d582fe14123b6317c6fa2ce88ab9e7c00b4d6d48fee0e57fa8db208f6903bc365c0354034e8218d8ce3eefea3f0bc36d7486a83945fe74f683568d78df019a0eab503b3b9c5003e9dbac7caa2be9843c502cb0179510a777b16dbc49ea3d0c372d000717da8084312a8a126133a4e779ae3cd40236d4f040f5151d8b42fd7de3208fe92bc5dbe6cd86b56858db52cb809", @nested={0x248, 0x53, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @uid=0xee01}, @generic='!', @typed={0x16, 0x95, 0x0, 0x0, @str='/dev/input/event#\x00'}, @generic="f0af74b2aa6a204fba4e17a5c20e3562d7bda5a4bec8de1ce4d7d1599d206211f7c7e30c865bfdf0684df068d3dbdcd3a95b0a5860e2db94c5e1370165fe707a41fda2aef0c06e8269b0d135c63d391a627bbbbea2f7f7e3f2258a8e4f91c424f628e7b031625bdb2c7bcf5479de2effe76d9e79", @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, @typed={0x1f, 0x68, 0x0, 0x0, @binary="8b562692edd1f1160ac8e986dede1ef6d4f718613c921cebee222a"}, @typed={0x4, 0x8c}, @generic="8bc18334207e3d3a23366f3e5183b9b1f58b74df660d715ba732b16ab30e8577fc4369dabfc42fc7367cab652d91214cdba83c5fd05c6c4fe9082f930ea4b23ede344e4e2c54457f575ad5b550f6bd9b728c81716539a361a99310a9bb109ec6dc3a11700830f65424ad0e7280f4974abed50887840ac76a8087c68aebf1e6e0fd8e77203a9e2271981ecd4ad0156f9ff5898849c2538be6699f", @generic="99b853e95c005bd1dac611a5162634b32bfbf0597f6c0b36af7465cea141ee2d877ff29cc95af40994cb0f2922fe31d0c473aafbe673579978f9869f6ed39ce81221a4324b6d984a491e4e60b9d85094245bdfd3cda987076f938caa9ef718ba0a53640f0c4bbf2965b11f5e49deddb90b8b6de2f645179308cea56f8b0efd2e6b23a467f93f2ea4674c0f156ffc53294c524b79c845e32bca3babdd12414908fd54941ddb1aba07d9a07ff78a2e43cd5d1b4d22ab7472bb7c5854d1a9328ae527d4efa3701f3ecf23", @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@private0}]}, @nested={0x37d, 0x3f, 0x0, 0x1, [@generic="ab0035997c14df8a2887d00bb4b2b84bbfc1c4e452a0f3a9997ca1a38b2bae85e7a0575ef7a724df78b6b2986a43368845abf2dffcdfdb6afb9ffc64cda27d1ec2d6e3894bfcac3589ce7502108f216fac12c21659eca6e2da0229cbbb65ab0db64b8edd62d543647c3c6fa9dcb04b9d758b4d428f042f046233ea63e1237c2618a277f2dd6750a57102aacec1301bbc63a58ce0d81c9b139688bac8b5c5619153b5443f30bd1fd21c7658621add588331086a482071e0a61fbee7279a003c10d9084c2b9fa71c5e", @typed={0x8, 0x3d, 0x0, 0x0, @fd=r0}, @generic="b67b8b41e7840d9ed9ca7b184f864c417e4dae7d6accabe45fc5ebc1b41d3bbdb728b400b432abc148eb22449748be5fd6e9e8d6aed26c5d3e14cdcb620cde6e062765896708417c5c3770d41258e23cdd4a369cd56a968566339909182d0f6e0ad64579b6b67cddf5b1b404675f74c30a7dec942c680fa9b7e017c21de6d3ab400e20ded9f2841bb1b79fe135683565e9926b0bea74a66f9e77396330143f424e15bf03e5fec8707ba7c1fb0f66b4d798b9042312a9ad979414bc385b59393c12d4f1bf61eb80d75087c74c73348b900e593688614aa4755a778a9d56691b3bc4b91bf32eeda88ce73e15c9f8e716b34b91c59119f71b2d6c", @generic="6645c491b8b2453e100d8923d0da9c53bc749dbf9f2606993e16ef314340c3bb47f4ed985093bcabd19418fe30d88d31a5e0e77768953bf64abd2f005565c63dfe9f215edece7416197c2f87ab61c0413d1e8936c2d8d098134d30166cffa79012e17b87b8aa4a4f3934525f2dbe0ef681a61d01a55f254b9355b18c58fde92c6659e674a3b198b05cd868454233f4f74d456da4b6f4c0d92a99b348000457928bcee5d70874be1991d114fdcd961f5e42a8cbf2dbb858f68c2aa9bb5077879c660a05b13b665c8241d4809121e010686de528af3f2363122f0efe42eea9746d2e4e37b45bcabfe2951896", @generic="4cce02d2a68ae5a16a6690a379f5cf764244ce5b1b01162cb542b7319a931f4ac38790d8486e5f7ae361fa74b31504a9f6376653fc578754eb682b92cc347073fee38d636b46fb6a71152e029c8346504a6ed7c49ecf9f0296770724c57c2cf50de39bde39765a3e00c994b1e0272eb906a0d62e173fb24e19b81c21eb09e1e818f7165e23fad56628b41be519b124197fc214bd63d52a5a5fda7d3f16fa777b41817424b9bd5e8c874782c936a7590ffe57032bb474cb1c7e28e16c15", @typed={0x8, 0x86, 0x0, 0x0, @u32=0x9}]}, @generic="d6c820310fac09089f6d057ceefbdace0f2e28fa89ea"]}, 0x6d4}], 0x3, &(0x7f0000002380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r0, r3, r4, r5]}}], 0x88, 0x800}, 0x40) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f0000000000)=""/81) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/145, 0x91}, {&(0x7f0000001280)=""/37, 0x25}], 0x3, &(0x7f0000001300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x40010001) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000000000)=[0x8000008, 0xb]) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:30:59 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3000000, 0x3) 03:30:59 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 03:30:59 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 52) 03:30:59 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) [ 2526.975101] FAULT_INJECTION: forcing a failure. [ 2526.975101] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.976565] CPU: 0 PID: 13405 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2526.977374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.978346] Call Trace: [ 2526.978662] dump_stack+0x107/0x167 [ 2526.979096] should_fail.cold+0x5/0xa [ 2526.979541] ? create_object.isra.0+0x3a/0xa30 [ 2526.980074] should_failslab+0x5/0x20 [ 2526.980530] kmem_cache_alloc+0x5b/0x310 [ 2526.981010] ? mark_held_locks+0x9e/0xe0 [ 2526.981487] create_object.isra.0+0x3a/0xa30 [ 2526.982000] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2526.982589] kmem_cache_alloc+0x159/0x310 [ 2526.983085] xas_alloc+0x336/0x440 [ 2526.983499] xas_create+0x34a/0x10d0 [ 2526.983943] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.984560] xas_store+0x8c/0x1c40 [ 2526.984986] __xa_store+0x164/0x2d0 [ 2526.985411] ? xa_delete_node+0x280/0x280 [ 2526.985909] ? trace_hardirqs_on+0x5b/0x180 [ 2526.986415] xa_store+0x31/0x50 [ 2526.986802] __io_uring_add_tctx_node+0x1cf/0x520 [ 2526.987367] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2526.987977] ? alloc_fd+0x2e7/0x670 [ 2526.988413] io_uring_setup+0x1fbb/0x2980 [ 2526.988906] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2526.989494] ? wait_for_completion_io+0x270/0x270 [ 2526.990070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.990679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.991286] do_syscall_64+0x33/0x40 [ 2526.991717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2526.992317] RIP: 0033:0x7f0f2173bb19 [ 2526.992759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2526.994898] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2526.995784] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2526.996672] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2526.997496] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2526.998320] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2526.999150] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:30:59 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000, 0x3) 03:30:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = getpgrp(0xffffffffffffffff) r3 = epoll_create1(0x0) r4 = getpgrp(r2) epoll_create(0x5) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r1, &(0x7f0000000240)={r3}) syz_open_procfs(r4, &(0x7f0000000000)='net/tcp6\x00') madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:30:59 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 63) 03:30:59 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) [ 2527.056857] FAULT_INJECTION: forcing a failure. [ 2527.056857] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.059549] CPU: 1 PID: 13419 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2527.061126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.062977] Call Trace: [ 2527.063573] dump_stack+0x107/0x167 [ 2527.064409] should_fail.cold+0x5/0xa [ 2527.065269] ? __mpol_dup+0x72/0x4d0 [ 2527.066118] should_failslab+0x5/0x20 [ 2527.066973] kmem_cache_alloc+0x5b/0x310 [ 2527.067893] __mpol_dup+0x72/0x4d0 [ 2527.068702] ? mempolicy_nodemask_intersects+0x190/0x190 [ 2527.069926] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2527.071109] vma_dup_policy+0x49/0xd0 [ 2527.071960] __split_vma+0x157/0x4e0 [ 2527.072808] __do_munmap+0x365/0x1260 [ 2527.073666] ? arch_get_unmapped_area+0x450/0x450 [ 2527.074747] ? lock_release+0x680/0x680 [ 2527.075642] mmap_region+0x7cc/0x1500 [ 2527.076525] do_mmap+0x868/0x1370 [ 2527.077317] vm_mmap_pgoff+0x198/0x1f0 [ 2527.078196] ? randomize_page+0xb0/0xb0 [ 2527.079099] ksys_mmap_pgoff+0x41c/0x560 [ 2527.080013] ? find_mergeable_anon_vma+0x250/0x250 [ 2527.081128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2527.082309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2527.083471] do_syscall_64+0x33/0x40 [ 2527.084310] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2527.085472] RIP: 0033:0x7fc2d9b3db62 [ 2527.086309] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2527.090464] RSP: 002b:00007fc2d70b30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2527.092172] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fc2d9b3db62 [ 2527.093774] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 2527.095370] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2527.096980] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2527.098580] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:30:59 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:31:13 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 53) 03:31:13 executing program 3: shmctl$IPC_RMID(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x3, 0x3, 0x0, 0x3}, 0x8000, 0x1f}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:31:13 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:31:13 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 64) 03:31:13 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) mmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x9, 0x4010, r0, 0x21999000) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0x5, 0x10000, 0x101, 0x6, 0xffffffff, 0x5}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:31:13 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="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", 0x1000, r0}, 0x68) 03:31:13 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3f000000, 0x3) 03:31:13 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0xf, &(0x7f0000ffc000/0x3000)=nil) [ 2540.845358] FAULT_INJECTION: forcing a failure. [ 2540.845358] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.848112] CPU: 1 PID: 13440 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2540.849792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2540.851788] Call Trace: [ 2540.852435] dump_stack+0x107/0x167 [ 2540.853332] should_fail.cold+0x5/0xa [ 2540.854252] ? xas_alloc+0x336/0x440 [ 2540.855139] should_failslab+0x5/0x20 [ 2540.856048] kmem_cache_alloc+0x5b/0x310 [ 2540.857030] xas_alloc+0x336/0x440 [ 2540.857886] xas_create+0x34a/0x10d0 [ 2540.858802] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2540.860060] xas_store+0x8c/0x1c40 [ 2540.860936] __xa_store+0x164/0x2d0 [ 2540.861810] ? xa_delete_node+0x280/0x280 [ 2540.862817] ? trace_hardirqs_on+0x5b/0x180 [ 2540.863858] xa_store+0x31/0x50 [ 2540.864683] __io_uring_add_tctx_node+0x1cf/0x520 [ 2540.865838] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2540.867097] ? alloc_fd+0x2e7/0x670 [ 2540.867982] io_uring_setup+0x1fbb/0x2980 [ 2540.868990] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2540.870192] ? wait_for_completion_io+0x270/0x270 [ 2540.871359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2540.872613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2540.873836] do_syscall_64+0x33/0x40 [ 2540.874728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2540.875969] RIP: 0033:0x7f0f2173bb19 [ 2540.876853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2540.881282] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2540.883075] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2540.884776] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2540.886469] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2540.888186] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2540.889893] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:31:13 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x40000000, 0x3) 03:31:13 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000000)) 03:31:13 executing program 7: shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) (fail_nth: 1) [ 2540.919490] FAULT_INJECTION: forcing a failure. [ 2540.919490] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.921098] CPU: 0 PID: 13450 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2540.922045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2540.923164] Call Trace: [ 2540.923523] dump_stack+0x107/0x167 [ 2540.924029] should_fail.cold+0x5/0xa [ 2540.924563] ? create_object.isra.0+0x3a/0xa30 [ 2540.925184] should_failslab+0x5/0x20 [ 2540.925693] kmem_cache_alloc+0x5b/0x310 [ 2540.926250] create_object.isra.0+0x3a/0xa30 [ 2540.926842] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2540.927561] kmem_cache_alloc+0x159/0x310 [ 2540.928125] __mpol_dup+0x72/0x4d0 [ 2540.928619] ? mempolicy_nodemask_intersects+0x190/0x190 [ 2540.929354] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2540.930095] vma_dup_policy+0x49/0xd0 [ 2540.930629] __split_vma+0x157/0x4e0 [ 2540.931164] __do_munmap+0x365/0x1260 [ 2540.931698] ? arch_get_unmapped_area+0x450/0x450 [ 2540.932378] ? lock_release+0x680/0x680 [ 2540.932952] mmap_region+0x7cc/0x1500 [ 2540.933500] do_mmap+0x868/0x1370 [ 2540.933999] vm_mmap_pgoff+0x198/0x1f0 [ 2540.934554] ? randomize_page+0xb0/0xb0 [ 2540.935129] ksys_mmap_pgoff+0x41c/0x560 [ 2540.935703] ? find_mergeable_anon_vma+0x250/0x250 [ 2540.936401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2540.937154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2540.937889] do_syscall_64+0x33/0x40 [ 2540.938412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2540.939130] RIP: 0033:0x7fc2d9b3db62 [ 2540.939649] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2540.942238] RSP: 002b:00007fc2d70b30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2540.943311] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fc2d9b3db62 [ 2540.944318] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 2540.945327] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2540.946332] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2540.947325] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2540.950662] FAULT_INJECTION: forcing a failure. [ 2540.950662] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.952497] CPU: 0 PID: 13459 Comm: syz-executor.7 Not tainted 5.10.256 #1 03:31:13 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2540.953475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2540.954797] Call Trace: [ 2540.955154] dump_stack+0x107/0x167 [ 2540.955639] should_fail.cold+0x5/0xa [ 2540.956150] ? kvmalloc_node+0x119/0x170 [ 2540.956714] should_failslab+0x5/0x20 [ 2540.957224] __kmalloc_node+0x76/0x420 [ 2540.957748] kvmalloc_node+0x119/0x170 [ 2540.958277] newseg+0x222/0xe40 [ 2540.958730] ? shm_close+0x730/0x730 [ 2540.959225] ? down_write_killable+0x180/0x180 [ 2540.959829] ? lock_downgrade+0x6d0/0x6d0 [ 2540.960382] ? find_held_lock+0x2c/0x110 [ 2540.960942] ipcget+0xf4/0xd90 [ 2540.961382] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2540.962027] ? ipc_obtain_object_check+0x130/0x130 [ 2540.962687] ? rcu_read_lock_any_held+0x75/0xa0 [ 2540.963309] ? vfs_write+0x354/0xb10 [ 2540.963823] __x64_sys_shmget+0x139/0x1b0 [ 2540.964380] ? ksys_shmget+0x130/0x130 [ 2540.964917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2540.965613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2540.966311] ? trace_hardirqs_on+0x5b/0x180 [ 2540.966891] do_syscall_64+0x33/0x40 [ 2540.967386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2540.968081] RIP: 0033:0x7feef6c3fb19 [ 2540.968584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2540.971062] RSP: 002b:00007feef41b5188 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2540.972075] RAX: ffffffffffffffda RBX: 00007feef6d52f60 RCX: 00007feef6c3fb19 [ 2540.973036] RDX: 0000000000000800 RSI: 0000000000002000 RDI: 0000000000000000 [ 2540.973989] RBP: 00007feef41b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2540.974940] R10: 0000000020ff9000 R11: 0000000000000246 R12: 0000000000000001 [ 2540.975900] R13: 00007ffe5b119d4f R14: 00007feef41b5300 R15: 0000000000022000 03:31:13 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:31:13 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:31:13 executing program 7: shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) (fail_nth: 2) [ 2541.020157] FAULT_INJECTION: forcing a failure. [ 2541.020157] name failslab, interval 1, probability 0, space 0, times 0 [ 2541.021694] CPU: 0 PID: 13463 Comm: syz-executor.7 Not tainted 5.10.256 #1 [ 2541.022591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.023688] Call Trace: [ 2541.024046] dump_stack+0x107/0x167 [ 2541.024530] should_fail.cold+0x5/0xa [ 2541.025037] ? create_object.isra.0+0x3a/0xa30 [ 2541.025638] should_failslab+0x5/0x20 [ 2541.026129] kmem_cache_alloc+0x5b/0x310 [ 2541.026654] create_object.isra.0+0x3a/0xa30 [ 2541.027230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2541.027891] __kmalloc_node+0x1ae/0x420 [ 2541.028432] kvmalloc_node+0x119/0x170 [ 2541.028940] newseg+0x222/0xe40 [ 2541.029391] ? shm_close+0x730/0x730 [ 2541.029866] ? down_write_killable+0x180/0x180 [ 2541.030481] ? lock_downgrade+0x6d0/0x6d0 [ 2541.031016] ? find_held_lock+0x2c/0x110 [ 2541.031560] ipcget+0xf4/0xd90 [ 2541.031995] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2541.032650] ? ipc_obtain_object_check+0x130/0x130 [ 2541.033315] ? rcu_read_lock_any_held+0x75/0xa0 [ 2541.033935] ? vfs_write+0x354/0xb10 [ 2541.034434] __x64_sys_shmget+0x139/0x1b0 [ 2541.034988] ? ksys_shmget+0x130/0x130 [ 2541.035509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2541.036209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2541.036907] ? trace_hardirqs_on+0x5b/0x180 [ 2541.037483] do_syscall_64+0x33/0x40 [ 2541.037983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2541.038666] RIP: 0033:0x7feef6c3fb19 [ 2541.039144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2541.041631] RSP: 002b:00007feef41b5188 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2541.042668] RAX: ffffffffffffffda RBX: 00007feef6d52f60 RCX: 00007feef6c3fb19 [ 2541.043623] RDX: 0000000000000800 RSI: 0000000000002000 RDI: 0000000000000000 [ 2541.044597] RBP: 00007feef41b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2541.045596] R10: 0000000020ff9000 R11: 0000000000000246 R12: 0000000000000001 [ 2541.046592] R13: 00007ffe5b119d4f R14: 00007feef41b5300 R15: 0000000000022000 03:31:13 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 54) 03:31:13 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 65) [ 2541.088766] FAULT_INJECTION: forcing a failure. [ 2541.088766] name failslab, interval 1, probability 0, space 0, times 0 [ 2541.090424] CPU: 0 PID: 13475 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2541.091369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.092491] Call Trace: [ 2541.092857] dump_stack+0x107/0x167 [ 2541.093342] should_fail.cold+0x5/0xa [ 2541.093857] ? create_object.isra.0+0x3a/0xa30 [ 2541.094467] should_failslab+0x5/0x20 [ 2541.094982] kmem_cache_alloc+0x5b/0x310 [ 2541.095528] ? mark_held_locks+0x9e/0xe0 [ 2541.096080] create_object.isra.0+0x3a/0xa30 [ 2541.096675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2541.097358] kmem_cache_alloc+0x159/0x310 [ 2541.097920] xas_alloc+0x336/0x440 [ 2541.098394] xas_create+0x34a/0x10d0 [ 2541.098900] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2541.099596] xas_store+0x8c/0x1c40 [ 2541.100080] __xa_store+0x164/0x2d0 [ 2541.100570] ? xa_delete_node+0x280/0x280 [ 2541.101141] ? trace_hardirqs_on+0x5b/0x180 [ 2541.101725] xa_store+0x31/0x50 [ 2541.102175] __io_uring_add_tctx_node+0x1cf/0x520 [ 2541.102815] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2541.103516] ? alloc_fd+0x2e7/0x670 [ 2541.104009] io_uring_setup+0x1fbb/0x2980 [ 2541.104575] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2541.105256] ? wait_for_completion_io+0x270/0x270 [ 2541.105915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2541.106617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2541.107307] do_syscall_64+0x33/0x40 [ 2541.107805] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2541.108487] RIP: 0033:0x7f0f2173bb19 [ 2541.108985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2541.111402] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2541.112411] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2541.113364] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2541.114306] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2541.115247] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2541.116193] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2541.167535] FAULT_INJECTION: forcing a failure. [ 2541.167535] name failslab, interval 1, probability 0, space 0, times 0 [ 2541.170327] CPU: 1 PID: 13479 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2541.171985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.173979] Call Trace: [ 2541.174616] dump_stack+0x107/0x167 [ 2541.175492] should_fail.cold+0x5/0xa [ 2541.176405] ? vm_area_alloc+0x1c/0x110 [ 2541.177364] should_failslab+0x5/0x20 [ 2541.178275] kmem_cache_alloc+0x5b/0x310 [ 2541.179253] vm_area_alloc+0x1c/0x110 [ 2541.180159] mmap_region+0x982/0x1500 [ 2541.181089] do_mmap+0x868/0x1370 [ 2541.181924] vm_mmap_pgoff+0x198/0x1f0 [ 2541.182854] ? randomize_page+0xb0/0xb0 [ 2541.183814] ksys_mmap_pgoff+0x41c/0x560 [ 2541.184789] ? find_mergeable_anon_vma+0x250/0x250 [ 2541.185960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2541.187206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2541.188434] do_syscall_64+0x33/0x40 [ 2541.189333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2541.190547] RIP: 0033:0x7fc2d9b3db62 [ 2541.191426] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2541.195773] RSP: 002b:00007fc2d70b30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2541.197570] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fc2d9b3db62 [ 2541.199244] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 2541.200930] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2541.202605] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2541.204282] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:31:26 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x8010, r0, 0x8a2ca000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x81, 0x6c, 0x0, 0xdb, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x3, 0x4}, 0x204, 0x1, 0xc7a, 0x3, 0x5, 0x9, 0x3e4, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, 0x0, 0xe, 0xffffffffffffffff, 0x8) 03:31:26 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 66) 03:31:26 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 55) 03:31:26 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0xe10, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:31:26 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xfffff000, 0x3) 03:31:26 executing program 3: r0 = getpid() wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:31:26 executing program 7: shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) (fail_nth: 3) 03:31:26 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb1d0}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000280)={0x1, 0x3}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="00001001", @ANYRES16=r2, @ANYBLOB="100029bd7000fcdbdf2515000000240007800c00030040000000000000000c000300010000000100000008000200010000006800018008000300c000000014000280080001001800000008000300990000003c000280080001001b0000000800030081000000080001001b0000000800020001000000080001000e000000080004004000000008000200040f00000c0002800800040074070000"], 0xa0}}, 0x20004015) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x374, r2, 0x804, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c5a5fee}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xda18}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xeda}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x48c5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}, @TIPC_NLA_NODE={0x218, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "1ebad8aad855da74f3786cf174a800b6e936dbb4b85533d2750c5df53567"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "f5907deb4f8cc05a7eed7c0d6b27c06a41727cec20480c089179af386d218d767e6eb7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "48acdc9890202327e691a747c2c937c005ba99e0b7105eb6c54a3a2b8814b41413d0c7c6"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "339565c128229aaa1f8d7bfebe3bf50e0542e06c0834"}}, @TIPC_NLA_NODE_ID={0xe0, 0x3, "8f0a627127fe52d06a07579c505ee4db873ba817df68417efdfd8c7bf8a102439f906e80ec7804ee8f240d01f007986ee70250263b2abf7df4a0f21841305eb076b38d71dbccb8810e8714e6728db485d63c40190ddbe297eb78a5ce456268f517da9cb4b2222e25b778a1025ecf0110bb7a5b15a314ab7ea29bdea7913092dadc2e69bc90ca99d25215d58b824fe16e1ad6f7c4f87f78f2c77299eb223bb180ad155f53ce686af6a8526394ebc9b7e4db5c75f634e5c9210db8b7fa839898c7a8454347016495c4135e1abd3f432e5aaa26ee5fc71030fb2c5f4209"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x48004}, 0x20000014) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}}, 0x8001) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x854}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x864}, {0x6, 0x11, 0x2a5a}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 2553.672591] FAULT_INJECTION: forcing a failure. [ 2553.672591] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.674168] FAULT_INJECTION: forcing a failure. [ 2553.674168] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.674684] CPU: 1 PID: 13501 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2553.678539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.679943] Call Trace: [ 2553.680396] dump_stack+0x107/0x167 [ 2553.681027] should_fail.cold+0x5/0xa [ 2553.681675] ? create_object.isra.0+0x3a/0xa30 [ 2553.682448] should_failslab+0x5/0x20 [ 2553.683092] kmem_cache_alloc+0x5b/0x310 [ 2553.683784] create_object.isra.0+0x3a/0xa30 [ 2553.684526] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2553.685398] kmem_cache_alloc+0x159/0x310 [ 2553.686105] vm_area_alloc+0x1c/0x110 [ 2553.686747] mmap_region+0x982/0x1500 [ 2553.687405] do_mmap+0x868/0x1370 [ 2553.688001] vm_mmap_pgoff+0x198/0x1f0 [ 2553.688666] ? randomize_page+0xb0/0xb0 [ 2553.689365] ksys_mmap_pgoff+0x41c/0x560 [ 2553.690053] ? find_mergeable_anon_vma+0x250/0x250 [ 2553.690891] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2553.691788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2553.692665] do_syscall_64+0x33/0x40 [ 2553.693301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2553.694171] RIP: 0033:0x7fc2d9b3db62 [ 2553.694797] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2553.697921] RSP: 002b:00007fc2d70b30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2553.699209] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fc2d9b3db62 [ 2553.700414] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 2553.701630] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2553.702837] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2553.704050] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2553.705300] CPU: 0 PID: 13503 Comm: syz-executor.7 Not tainted 5.10.256 #1 [ 2553.707100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.708007] FAULT_INJECTION: forcing a failure. [ 2553.708007] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.709251] Call Trace: [ 2553.709278] dump_stack+0x107/0x167 [ 2553.709305] should_fail.cold+0x5/0xa [ 2553.713687] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2553.715037] should_failslab+0x5/0x20 [ 2553.716025] __kmalloc_node+0x76/0x420 [ 2553.717056] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2553.718376] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2553.719670] ? trace_hardirqs_on+0x5b/0x180 [ 2553.720800] __kmalloc_node+0x1c6/0x420 [ 2553.721823] kvmalloc_node+0x119/0x170 [ 2553.722818] newseg+0x222/0xe40 [ 2553.723675] ? shm_close+0x730/0x730 [ 2553.724628] ? down_write_killable+0x180/0x180 [ 2553.725805] ? lock_downgrade+0x6d0/0x6d0 [ 2553.726866] ? find_held_lock+0x2c/0x110 [ 2553.727913] ipcget+0xf4/0xd90 [ 2553.728757] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2553.729991] ? ipc_obtain_object_check+0x130/0x130 [ 2553.731241] ? rcu_read_lock_any_held+0x75/0xa0 [ 2553.732418] ? vfs_write+0x354/0xb10 [ 2553.733397] __x64_sys_shmget+0x139/0x1b0 [ 2553.734454] ? ksys_shmget+0x130/0x130 [ 2553.735452] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2553.736795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2553.738114] ? trace_hardirqs_on+0x5b/0x180 [ 2553.739216] do_syscall_64+0x33/0x40 [ 2553.740174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2553.741495] RIP: 0033:0x7feef6c3fb19 [ 2553.742449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.747174] RSP: 002b:00007feef41b5188 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2553.749134] RAX: ffffffffffffffda RBX: 00007feef6d52f60 RCX: 00007feef6c3fb19 [ 2553.750960] RDX: 0000000000000800 RSI: 0000000000002000 RDI: 0000000000000000 [ 2553.752779] RBP: 00007feef41b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.754594] R10: 0000000020ff9000 R11: 0000000000000246 R12: 0000000000000001 [ 2553.756408] R13: 00007ffe5b119d4f R14: 00007feef41b5300 R15: 0000000000022000 [ 2553.758263] CPU: 1 PID: 13500 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2553.759430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.760827] Call Trace: [ 2553.761268] dump_stack+0x107/0x167 [ 2553.761881] should_fail.cold+0x5/0xa [ 2553.762723] ? xas_alloc+0x336/0x440 [ 2553.763344] should_failslab+0x5/0x20 [ 2553.763977] kmem_cache_alloc+0x5b/0x310 [ 2553.764661] xas_alloc+0x336/0x440 [ 2553.765404] xas_create+0x34a/0x10d0 [ 2553.766036] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2553.766912] xas_store+0x8c/0x1c40 [ 2553.767521] __xa_store+0x164/0x2d0 [ 2553.768136] ? xa_delete_node+0x280/0x280 [ 2553.768844] ? trace_hardirqs_on+0x5b/0x180 [ 2553.769560] xa_store+0x31/0x50 [ 2553.770106] __io_uring_add_tctx_node+0x1cf/0x520 [ 2553.770901] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2553.771763] ? alloc_fd+0x2e7/0x670 [ 2553.772393] io_uring_setup+0x1fbb/0x2980 [ 2553.773210] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2553.774208] ? wait_for_completion_io+0x270/0x270 [ 2553.775030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2553.776043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2553.777077] do_syscall_64+0x33/0x40 [ 2553.777760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2553.778754] RIP: 0033:0x7f0f2173bb19 [ 2553.779366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.782401] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2553.783656] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2553.784841] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2553.786020] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2553.787190] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2553.788362] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:31:26 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYBLOB="f8e8e3b2cb8cc5feae1eb88c1a6c6e8121b49d62e2492adad674e4fa42e12de11a09e6d59cb74d82fa55ad665f96ada7ecc849c457a8cb538ffcbc7fd7b412e684997231ee30ac140738930b362729f19b16ff146850e6144bd6cb4331fddd8d3f12664efba17961841dab16a7fa3853f4786e237f11cf9312eb68ca658cb7e69772c1d38361f6dc09d9a38909d92f4b4b6b3e306c87", @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="5663f91f0cc1c5fd31239fdf39c9897a2ff87ae795104bf325da257dcc4345c6d59d062782284d7a3d08bee5c45754bd7de0379c9e8874142bb7ca3c8d436db757e6263146d450c1db4bae1543da0bab5ee10494b882a326acc9c65809d7838e0cd5f44909a711a0a368a72070f2cb7c5a6c3f7d9f6561506c0fa1e8c93579add6a963549de2215397a71a651dc713bdaa", @ANYRES64]) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000080)=0x7fff, 0x8000000000000000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:31:26 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffff7f, 0x3) 03:31:26 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x108000, 0x25) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x80010, r0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:31:26 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xfffffffb, 0x3, 0x4, 0x1ff, 0x3f}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000180), 0x1, &(0x7f0000000240)) r1 = dup3(r0, r0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x3e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000200)) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x18) sendfile(r3, r0, &(0x7f0000000100)=0xffffffffffffffff, 0x3) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40) 03:31:26 executing program 7: shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) (fail_nth: 4) 03:31:26 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) [ 2553.956251] FAULT_INJECTION: forcing a failure. [ 2553.956251] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.958992] CPU: 0 PID: 13515 Comm: syz-executor.7 Not tainted 5.10.256 #1 [ 2553.960642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.962623] Call Trace: [ 2553.963256] dump_stack+0x107/0x167 [ 2553.964127] should_fail.cold+0x5/0xa [ 2553.965051] ? create_object.isra.0+0x3a/0xa30 [ 2553.966133] should_failslab+0x5/0x20 [ 2553.967036] kmem_cache_alloc+0x5b/0x310 [ 2553.968000] create_object.isra.0+0x3a/0xa30 [ 2553.969041] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2553.970240] __kmalloc+0x16e/0x390 [ 2553.971074] ? kasan_unpoison_shadow+0x33/0x50 [ 2553.972161] security_shm_alloc+0x102/0x240 [ 2553.973200] newseg+0x2fb/0xe40 [ 2553.973985] ? shm_close+0x730/0x730 [ 2553.974862] ? down_write_killable+0x180/0x180 [ 2553.975942] ? lock_downgrade+0x6d0/0x6d0 [ 2553.976922] ? find_held_lock+0x2c/0x110 [ 2553.977880] ipcget+0xf4/0xd90 [ 2553.978645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2553.979781] ? ipc_obtain_object_check+0x130/0x130 [ 2553.980946] ? rcu_read_lock_any_held+0x75/0xa0 [ 2553.982032] ? vfs_write+0x354/0xb10 [ 2553.982916] __x64_sys_shmget+0x139/0x1b0 [ 2553.983891] ? ksys_shmget+0x130/0x130 [ 2553.984821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2553.986055] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2553.987262] ? trace_hardirqs_on+0x5b/0x180 03:31:26 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1000000000000, 0x3) [ 2553.988277] do_syscall_64+0x33/0x40 [ 2553.989263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2553.990457] RIP: 0033:0x7feef6c3fb19 [ 2553.991324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.995619] RSP: 002b:00007feef41b5188 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2553.997402] RAX: ffffffffffffffda RBX: 00007feef6d52f60 RCX: 00007feef6c3fb19 [ 2553.999063] RDX: 0000000000000800 RSI: 0000000000002000 RDI: 0000000000000000 [ 2554.000727] RBP: 00007feef41b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2554.002389] R10: 0000000020ff9000 R11: 0000000000000246 R12: 0000000000000001 [ 2554.004047] R13: 00007ffe5b119d4f R14: 00007feef41b5300 R15: 0000000000022000 03:31:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 03:31:48 executing program 7: shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) (fail_nth: 5) 03:31:48 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x21583000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 03:31:48 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x7400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x0) poll(&(0x7f0000002900)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/81) poll(&(0x7f0000000040)=[{r1, 0x100}, {r2, 0xa37d}, {r0, 0xf09c}, {0xffffffffffffffff, 0x1001}], 0x4, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0xffffffffffffffc0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000440)=""/4096) 03:31:48 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 67) 03:31:48 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xf0ffffffffffff, 0x3) 03:31:48 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 56) 03:31:48 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000080)=0x80) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000100)={'U+', 0xdd}, 0x16, 0x3) 03:31:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf251100000008004018472b000408"], 0x24}}, 0x804) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x44}}, 0x4008000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x4000040) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="0e0000007fee0f01900583f07a9cbb2dd2be81562dd6", @ANYRES16=r3, @ANYBLOB="080025bd7000fcdbdf251100000008004018472b000408"], 0x24}}, 0x804) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000400)={0x4, 0x4, 0xffffffff, 0x5}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xfffffffffffffe95, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004004}, 0x20000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x1, 0x40}, 0x2) [ 2576.298908] FAULT_INJECTION: forcing a failure. [ 2576.298908] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.301063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13546 comm=syz-executor.3 [ 2576.301839] CPU: 0 PID: 13549 Comm: syz-executor.7 Not tainted 5.10.256 #1 [ 2576.306130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.308211] Call Trace: [ 2576.308244] dump_stack+0x107/0x167 [ 2576.308272] should_fail.cold+0x5/0xa [ 2576.308297] ? resv_map_alloc+0x3e/0x2d0 [ 2576.308319] should_failslab+0x5/0x20 [ 2576.308343] kmem_cache_alloc_trace+0x55/0x320 [ 2576.308366] ? map_id_range_down+0x1c4/0x340 [ 2576.308394] resv_map_alloc+0x3e/0x2d0 [ 2576.308417] hugetlbfs_get_inode+0x337/0x5f0 [ 2576.308450] hugetlb_file_setup+0x3eb/0x690 [ 2576.308480] newseg+0x9ea/0xe40 [ 2576.308510] ? shm_close+0x730/0x730 [ 2576.308531] ? down_write_killable+0x180/0x180 [ 2576.308559] ? lock_downgrade+0x6d0/0x6d0 [ 2576.308579] ? find_held_lock+0x2c/0x110 [ 2576.308607] ipcget+0xf4/0xd90 [ 2576.308638] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2576.308667] ? ipc_obtain_object_check+0x130/0x130 [ 2576.308693] ? rcu_read_lock_any_held+0x75/0xa0 [ 2576.308711] ? vfs_write+0x354/0xb10 [ 2576.308745] __x64_sys_shmget+0x139/0x1b0 [ 2576.308768] ? ksys_shmget+0x130/0x130 [ 2576.308796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2576.308822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.308841] ? trace_hardirqs_on+0x5b/0x180 [ 2576.308868] do_syscall_64+0x33/0x40 [ 2576.308893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.308908] RIP: 0033:0x7feef6c3fb19 [ 2576.308930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.308943] RSP: 002b:00007feef41b5188 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2576.308979] RAX: ffffffffffffffda RBX: 00007feef6d52f60 RCX: 00007feef6c3fb19 [ 2576.308992] RDX: 0000000000000800 RSI: 0000000000002000 RDI: 0000000000000000 [ 2576.309006] RBP: 00007feef41b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.309019] R10: 0000000020ff9000 R11: 0000000000000246 R12: 0000000000000001 [ 2576.309032] R13: 00007ffe5b119d4f R14: 00007feef41b5300 R15: 0000000000022000 [ 2576.315901] FAULT_INJECTION: forcing a failure. [ 2576.315901] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.315924] CPU: 0 PID: 13548 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2576.315936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.315942] Call Trace: [ 2576.315966] dump_stack+0x107/0x167 [ 2576.315992] should_fail.cold+0x5/0xa [ 2576.316015] ? create_object.isra.0+0x3a/0xa30 [ 2576.316035] should_failslab+0x5/0x20 [ 2576.316056] kmem_cache_alloc+0x5b/0x310 [ 2576.316078] ? mark_held_locks+0x9e/0xe0 [ 2576.316106] create_object.isra.0+0x3a/0xa30 [ 2576.316125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2576.316162] kmem_cache_alloc+0x159/0x310 [ 2576.316194] xas_alloc+0x336/0x440 [ 2576.316221] xas_create+0x34a/0x10d0 [ 2576.316258] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2576.316285] xas_store+0x8c/0x1c40 [ 2576.316326] __xa_store+0x164/0x2d0 [ 2576.316352] ? xa_delete_node+0x280/0x280 [ 2576.316383] ? trace_hardirqs_on+0x5b/0x180 [ 2576.316416] xa_store+0x31/0x50 [ 2576.316442] __io_uring_add_tctx_node+0x1cf/0x520 [ 2576.316465] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2576.316485] ? alloc_fd+0x2e7/0x670 [ 2576.316523] io_uring_setup+0x1fbb/0x2980 [ 2576.316557] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2576.316575] ? wait_for_completion_io+0x270/0x270 [ 2576.316627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2576.316650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.316677] do_syscall_64+0x33/0x40 [ 2576.316700] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.316713] RIP: 0033:0x7f0f2173bb19 [ 2576.316733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.316745] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2576.316768] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2576.316781] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2576.316793] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2576.316806] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2576.316819] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2576.321557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13546 comm=syz-executor.3 [ 2576.322587] FAULT_INJECTION: forcing a failure. [ 2576.322587] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.421990] CPU: 0 PID: 13545 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2576.423685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.425720] Call Trace: [ 2576.426380] dump_stack+0x107/0x167 [ 2576.427271] should_fail.cold+0x5/0xa [ 2576.428201] ? create_object.isra.0+0x3a/0xa30 [ 2576.429321] should_failslab+0x5/0x20 [ 2576.430246] kmem_cache_alloc+0x5b/0x310 [ 2576.431241] create_object.isra.0+0x3a/0xa30 [ 2576.432300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2576.433547] kmem_cache_alloc+0x159/0x310 [ 2576.434561] vm_area_alloc+0x1c/0x110 [ 2576.435487] mmap_region+0x982/0x1500 [ 2576.436426] do_mmap+0x868/0x1370 [ 2576.437288] vm_mmap_pgoff+0x198/0x1f0 [ 2576.438241] ? randomize_page+0xb0/0xb0 [ 2576.439221] ksys_mmap_pgoff+0x41c/0x560 [ 2576.440207] ? find_mergeable_anon_vma+0x250/0x250 [ 2576.441405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2576.442673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.443927] do_syscall_64+0x33/0x40 [ 2576.444830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.446090] RIP: 0033:0x7fc2d9b3db62 [ 2576.446998] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2576.451445] RSP: 002b:00007fc2d70b30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2576.453284] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fc2d9b3db62 [ 2576.454995] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 2576.456700] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2576.458420] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2576.460137] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 03:31:48 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x72fa8bb, 0x7fffffff, 0x2) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000f50000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000829000/0x1000)=nil, 0x1000, 0x4000, &(0x7f00000000c0)=0x8, 0x88, 0x1) 03:31:48 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) r0 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000000)={0x0, "f374f92b72e12c67eff4ef05db6427a5"}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) 03:31:48 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x100000000000000, 0x3) 03:31:48 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) 03:32:06 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 03:32:06 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x200000000000000, 0x3) 03:32:06 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) 03:32:06 executing program 5: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 68) 03:32:06 executing program 6: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d09, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) (fail_nth: 57) 03:32:07 executing program 7: shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil) (fail_nth: 6) 03:32:07 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc) 03:32:07 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0xa031, 0xffffffffffffffff, 0xc9dcf000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/81) fchdir(r0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x4, 0x5, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040)=0x20, 0x4, 0x4) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x1, 0x59d0, 0x1) [ 2594.624506] FAULT_INJECTION: forcing a failure. [ 2594.624506] name failslab, interval 1, probability 0, space 0, times 0 [ 2594.627210] CPU: 0 PID: 13585 Comm: syz-executor.7 Not tainted 5.10.256 #1 [ 2594.628844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2594.630814] Call Trace: [ 2594.631446] dump_stack+0x107/0x167 [ 2594.632308] should_fail.cold+0x5/0xa [ 2594.633221] ? create_object.isra.0+0x3a/0xa30 [ 2594.634302] should_failslab+0x5/0x20 [ 2594.635201] kmem_cache_alloc+0x5b/0x310 [ 2594.636158] ? cred_has_capability.isra.0+0x152/0x2b0 [ 2594.637398] create_object.isra.0+0x3a/0xa30 [ 2594.638438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2594.639650] kmem_cache_alloc_trace+0x151/0x320 [ 2594.640751] ? map_id_range_down+0x1c4/0x340 [ 2594.641806] resv_map_alloc+0x3e/0x2d0 [ 2594.642729] hugetlbfs_get_inode+0x337/0x5f0 [ 2594.643779] hugetlb_file_setup+0x3eb/0x690 [ 2594.644806] newseg+0x9ea/0xe40 [ 2594.645607] ? shm_close+0x730/0x730 [ 2594.646486] ? down_write_killable+0x180/0x180 [ 2594.647573] ? lock_downgrade+0x6d0/0x6d0 [ 2594.648552] ? find_held_lock+0x2c/0x110 [ 2594.649525] ipcget+0xf4/0xd90 [ 2594.650300] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2594.651443] ? ipc_obtain_object_check+0x130/0x130 [ 2594.652605] ? rcu_read_lock_any_held+0x75/0xa0 [ 2594.653711] ? vfs_write+0x354/0xb10 [ 2594.654603] __x64_sys_shmget+0x139/0x1b0 [ 2594.655586] ? ksys_shmget+0x130/0x130 [ 2594.656513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2594.657820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2594.659040] ? trace_hardirqs_on+0x5b/0x180 [ 2594.660057] do_syscall_64+0x33/0x40 [ 2594.660938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2594.662163] RIP: 0033:0x7feef6c3fb19 [ 2594.663040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2594.667383] RSP: 002b:00007feef41b5188 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2594.669190] RAX: ffffffffffffffda RBX: 00007feef6d52f60 RCX: 00007feef6c3fb19 [ 2594.670874] RDX: 0000000000000800 RSI: 0000000000002000 RDI: 0000000000000000 [ 2594.672558] RBP: 00007feef41b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2594.674250] R10: 0000000020ff9000 R11: 0000000000000246 R12: 0000000000000001 [ 2594.675937] R13: 00007ffe5b119d4f R14: 00007feef41b5300 R15: 0000000000022000 03:32:07 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x541b, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) [ 2594.697133] FAULT_INJECTION: forcing a failure. [ 2594.697133] name failslab, interval 1, probability 0, space 0, times 0 [ 2594.699866] CPU: 0 PID: 13587 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2594.701523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2594.703484] Call Trace: [ 2594.704114] dump_stack+0x107/0x167 [ 2594.704978] should_fail.cold+0x5/0xa [ 2594.705894] ? ptlock_alloc+0x1d/0x70 [ 2594.706789] should_failslab+0x5/0x20 [ 2594.707687] kmem_cache_alloc+0x5b/0x310 [ 2594.708656] ptlock_alloc+0x1d/0x70 [ 2594.709529] pte_alloc_one+0x68/0x1a0 [ 2594.710430] __pte_alloc+0x1d/0x330 [ 2594.711299] remap_pfn_range_internal+0x9a3/0xf60 [ 2594.712448] ? lookup_memtype+0x5b/0x200 [ 2594.713435] ? apply_to_existing_page_range+0x40/0x40 [ 2594.714666] remap_pfn_range+0xcd/0x160 [ 2594.715610] ? remap_pfn_range_notrack+0x70/0x70 [ 2594.716730] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2594.717968] io_uring_mmap+0x398/0x530 [ 2594.718891] mmap_file+0x5e/0xe0 [ 2594.719688] mmap_region+0xc4d/0x1500 [ 2594.720605] do_mmap+0x868/0x1370 [ 2594.721446] vm_mmap_pgoff+0x198/0x1f0 [ 2594.722372] ? randomize_page+0xb0/0xb0 [ 2594.723327] ksys_mmap_pgoff+0x41c/0x560 [ 2594.724290] ? find_mergeable_anon_vma+0x250/0x250 [ 2594.725468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2594.726710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2594.727933] do_syscall_64+0x33/0x40 [ 2594.728813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2594.730040] RIP: 0033:0x7fc2d9b3db62 [ 2594.730923] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2594.735272] RSP: 002b:00007fc2d70b30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2594.737070] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fc2d9b3db62 [ 2594.738768] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 2594.740453] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2594.742145] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2594.743828] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2594.753451] FAULT_INJECTION: forcing a failure. [ 2594.753451] name failslab, interval 1, probability 0, space 0, times 0 [ 2594.756172] CPU: 0 PID: 13586 Comm: syz-executor.6 Not tainted 5.10.256 #1 [ 2594.757818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2594.759774] Call Trace: [ 2594.760402] dump_stack+0x107/0x167 [ 2594.761278] should_fail.cold+0x5/0xa [ 2594.762181] ? xas_alloc+0x336/0x440 [ 2594.763064] should_failslab+0x5/0x20 [ 2594.763962] kmem_cache_alloc+0x5b/0x310 [ 2594.764928] xas_alloc+0x336/0x440 [ 2594.765789] xas_create+0x34a/0x10d0 [ 2594.766685] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2594.767929] xas_store+0x8c/0x1c40 [ 2594.768786] __xa_store+0x164/0x2d0 [ 2594.769663] ? xa_delete_node+0x280/0x280 [ 2594.770651] ? trace_hardirqs_on+0x5b/0x180 [ 2594.771678] xa_store+0x31/0x50 [ 2594.772462] __io_uring_add_tctx_node+0x1cf/0x520 [ 2594.773608] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2594.774840] ? alloc_fd+0x2e7/0x670 [ 2594.775713] io_uring_setup+0x1fbb/0x2980 [ 2594.776701] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2594.777906] ? wait_for_completion_io+0x270/0x270 [ 2594.779070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2594.780304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2594.781532] do_syscall_64+0x33/0x40 [ 2594.782719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2594.784009] RIP: 0033:0x7f0f2173bb19 [ 2594.784888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2594.789250] RSP: 002b:00007f0f1ecb1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2594.791046] RAX: ffffffffffffffda RBX: 00007f0f2184ef60 RCX: 00007f0f2173bb19 [ 2594.792733] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d09 [ 2594.794432] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2594.796117] R10: 0000000020000200 R11: 0000000000000202 R12: 00000000200001c0 [ 2594.797811] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 sendmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000000000)=@l2={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xdb, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="ba110ea2fb8c98cc678ca5db8de4aae61d1a8adf5c91dc1bf6a09a5ceced7d98c30427499b9e665ad0b5d515ea4b71bca74e9a117f9e7286cb22b698ffccd0ab108a79f5c208dcf7d810a262384d2d0c9dd7c56761d146bfadf29a8b40dbd10c14151edb2ce63659e8c8ce3deae3883a2a5dead47748946236e41366af5b44d1dff1c6ee5b2fb0e106231c8f7b50418a1a0a830d5d9fb388a98d497488d038fcd65c2b0ce800ff4bd4fe4e6b6aea9be13676f5ddb89c4fa6ba792e23276739aa74898f0d7a16c917b29cd4826577775facd808", 0xd3}, {&(0x7f0000000180)="41dfb1e0a50a038cafade0b3da6f8fb58823df466644261976298cb00d7b95143acb588ba351b61770db5922c89e21813f39d9edff2b999ceea3888b7a6dbc13e6168ccda2e7b58a636c048da5aac8872e9215453526aa28903b1e", 0x5b}, {&(0x7f0000000200)="fbfa1f45791869c770d22a8fe71a6f0ef03d7c192e7bcaf02905d3c66b25b42738e60980f81c33a5f60bbd4a2130b8ff0bc9e1497b9a733ce6ca80e34f5a5759c3cebef7ce68133eb3fef0401c31d9fd65959fadd6badefbd12b", 0x5a}, {&(0x7f0000000280)="a02de554585322b319506a362a9688e12e808f82c9bcaedabba112998dcb07360877575e3075eec08feb3e2aebd669f6f18a3df0baab8cf542bf93f3b5fd6da95ade989d32bd3e4af5052288ae8a141c", 0x50}], 0x4}}, {{&(0x7f0000000340)=@l2={0x1f, 0x7, @any, 0x3ff, 0x1}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000003c0)="cc776f7609a5338c22fbea0e688edd6df2a41dcbd758f981a386007e12f9cf24d8da165733ac139ab5740387dff5f9aa0e30c2f52d271c3914b4f1ec3606e821a6e00b82f1244cb53de12844f495384ea974466f84cd37666b76375c1e089f486c31ba6bd98dd87ac8afb3d1b2710d9ef8c08aa1f2db64ab101491e8e4d7e915f7602a636244e877a4f2f829298fada47dfe8a25bb978eb743589cd81b6bcf8c53ddc8a1d7c751ca95f0ee304f2c32567c88b76437335fa695e161c8896aa17546e1ee6b9ae01d55e3a43d95895eb68eccd521b22601c6e1c50286851ce17009a96eef3786dc5e6f493ac74e14c36266858173ca39a4", 0xf6}, {&(0x7f00000004c0)="0d3774418eeac3945534a0f9b012bfd24146f6add42f5d6136620b583f1c", 0x1e}, {&(0x7f0000000500)="9739b423080b91190b57754be1898f1e9dc995c595a4a73d518db6e0841c9c98cf446790d69fb412bd71a30edaf6a8a46a790f154d4f65cdf981ab7ed45931d3f5630f4d21db9f5f8cb64bddf0ff058df77696f7f69f7306cea90e621952e784c29ae73f3eaf85ad4aed0df6680a55d99bbf7bf91d1f3ca189ba9f816f06d19fed176fa2a7166beed0b4b4a2b1fec6349618f149e69a7c7de39b6842ed05f1cdd6f7b1484865fc739475ae586417a6a0ab4211040515b22cab6e4fe93a75aea672fc8c58c7cacd80d412f34332a0df2b972532f29c4f047a9aa7ff", 0xdb}, {&(0x7f0000000600)="559e921b70c8ddb2d1bbac0a521ad29f30a0d6f3221c498bd62de200a82fb88a163171bce56d631a9c8b2238744f30a7655b9542c6aa66c79f84cf08c41ea6bf222c505a08dfbb9bc72fecdca2d2f134b45d51b5a1e1b0a3031c0f972737d4333ca00769aa1e0c19c7d5430227de0bf6551be15ef2edba1480bd2a640e445e9485050c0a70651cce79895d01", 0x8c}, {&(0x7f00000006c0)="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", 0xfc}, {&(0x7f00000007c0)="ceeeb223cfa1cf060ac30ccb1713e2da3e9867972f743266809e609db94686f01fd72129c0d5e812b38091f9c9d0f9b2456880dd5cf32ecf8390af1768a83273eb0eab6c7426ac163005599ae1f71e4393a439773f86c9a86e6bed7074227db91d584fc7f60489381b569eff962e8f213e317e55be3f3e334f6833980c59315b80c0aa9094f5fc769bfc6c0f6984b45c5693df533b802a90091bcdd0fecd3ba2ca67082cd47b6563d943bb1832e9661b3b3342a1515254e166c9b0c3d0318c6cdc1021411112a5c186b789d035bb2d61aee48e8c05ec2cfb1d17fbc9454c3f5461a3b018dff4af8c177a72db386539", 0xef}, {&(0x7f00000008c0)="d9e73e7c22a1f318f9726255eb", 0xd}, {&(0x7f0000000900)="d1682f1c40e7c297d0fd94d9bf56aff01a037ed7818aa1d2f3f8a7b9e6d30ef2f5b94cd155e30a84bb7034e07e5b245c7728936bf3f42c7b55d5fcf0af04a99b84623c4ee1e9e3044dda7b76ed91087114b777e48cc8e5a98fb69c36191b125a8f4618d068b3f54fb391e88a4c", 0x6d}, {&(0x7f0000000980)="9f159abc68a4fc1a9ec27a741bc6ce262b62376ce72f83da1a91ed8f453b79f5bd3b44b4868ec9683454cc92c571110b387edda43f10d12fa2e2574fe13f18f69e92bcef767f5f4f204b26e520c6faa3da123ddd8c50272e2155537ab386e3d68b24f4a11324b0b385a541a40cce732b285c6e4d8f4b5559a01bac83fe00bce2341a793db9411b833e0c58192bbe9cf3629fe259181ed1e3d637ba9c911c689459b11a5353f4f6f8268d5379fc4d46aada96679d42c8cabe0ded1e297b59e350dec74c8f5dfa2803bc797a7c1b740399de0eddd1446f627ca436723e", 0xdc}, {&(0x7f0000000a80)="7b87daf8bd49d9351090627a2a66bc7fba94e45946ea978cf174a6c97e1058b37af1bfba4a36e85156ec6cd76f7a6b8557065fea82cf1c258d1467927327612f4f048856663b6bbf33f1823a1f02314925613262f1cbb7942202154cebd658154b827805a64cae7bbfa01704d408fe9767be9596452791d6fd4eb6", 0x7b}], 0xa, &(0x7f0000000bc0)=[{0xd0, 0x84, 0x2, "5ac62daf84d533478e661f19f117af211dc3ee2af6006261527f63dd98dd996723299fe9e826c867c50f0995dea09285d79b71f5be3567f1de94b3f2373b7ee881a7a66946096e2c8ad56ac3bf15daab80c85c4880dbab32d436df8294985fdfc68853395e7ddcfc9469bdbcfc1b74749bdef5deb37ce082dc801d8a007238875cee078b5db020234ce3b6f639a50b71060e253c398116ad9abe12bbdbd18c6980e91c5fb0521f4ba8333e910f2d416d0dc7214d56ca9fc7fd"}, {0x20, 0x103, 0x0, "584178d0fcb3b140d7374f1e6f0d0d6c"}, {0xc0, 0x116, 0x0, "6123d99e4c6506e8b2a5919a486d5942fd2e5089a250823fdb377c5851ffe923ac74c0c82b957cd58623db30053aab95b6d3ebb3bcf5bf4f2805c9abd4a07fe11756728f80ef67126e9ad15c081da8afc9090580eeca273ebe0657cbf80b5e00e2a523c25616852f0accf1d2917e8762ac09d7fa201ccdec44b8afca0cd7e4c58d30260a01554f4ed65a31a42d11dfeeb97fe134d6375e39be31aee2fb753e37f8b3a7370f0a7118d3e47b6376a31f43"}, {0x90, 0x111, 0x6, "fefe0a492d9b049793619e3887c7c0873025b0fda39b4b776d0845da0936702a7080cdef0956442986419e68cbce38a60c5e6a0f4eda783cb1d54e8df8f34c838daafe2011852e0070889760e42fc53642361f018646a2d5c9a31d5dbeb963a4654be57f56ab99e99b28f81dbc0796e19767db201c0eb1c0db533c53f6"}, {0xb8, 0xfaf6ba24bcea5b22, 0xff, "5625d2bf2609748a372c9ca05714041a6bbe7a56477d5df013d60355cb246e69210a55f7c9bfa57d9bee10209c34fe315c9e785d757da80366434ea25a41bc7337867ff64f147baad8c8bb248705e3501f500001b7b1a156be0e3c0bab4612e21fca1dfdffc6ffcd3b43c09c07c30f93249df5447162f767986e9ab22107c5c304fdf0ad8ba6a38be7c1bd1f24d91ccdf4dce27ae3b99bf767b2b9485d8362d3caa766c3b706ca"}, {0x30, 0x102, 0x4, "65f41a494daab9c3975edc48d63666433d33ffad1c40303a84e3a32c828c3c"}, {0x110, 0x109, 0x1, "12f08df0c68bf22953707c096297e3f75b13c1c3b9600be87ec3bc8404167b6245531cb38915d13395b423f260d5cb8369e65e1579d6144f4d82c9c86851634d1b5551b837ddb9b724813ffa23ef8b5b445d98c853bef2c35bd736a5f621d5ecedfa4449a8befa8733f532fca183346b7dfa371014a826f37c3f45771a4555ad693b059f5b56df9f406714264b73b2c62be5ba745018630d95443bbecc5698344f1e9cea6932567ab47b737c2fe8392aed2214cd119dbe2419bd9acf5e5255f399a1e5b10a42d7f53131c8ba14cd9b95c4993716034307a1dec5fd753878bce3a1bb205c31985a2e6f65331c32261c3a3a7e206534ca10e75aac1862993e"}, {0x30, 0x10f, 0x0, "f9a9f9fbb68cd868349438045da6ed34d317b0e6656905ec40"}, {0x10, 0xff, 0x5}], 0x478}}, {{&(0x7f0000001040)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000002380)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="b48733fb844d4f4b57bb87968e14043b23f743372dc9a9da357a731c233193b6c8d0c93d6f88f10a7b5ac4f38c59e88d74337fece75a10c115fbeabe31f2d3e12d6f47ce44defad2833b22f199be61c77b070c37ac395dff9dc701ffe49ae16a283e1297ddfa66c8debd92ab8af5684bf8ece728c5fbc1a5518ed2c11bc7a24857e2347c71f375c62cc24da0e2826eda9a257a8369", 0x95}, {&(0x7f0000002180)="181ef9c4d854a6ba54e0e5f903117dd0b7a607ceb580d98f4fedcc25edc4dce01db33e0d9f0a1f745bfc56b84e857b2f76fb09dce8e93eafb23821fc23073fac24cbf6bde6eebac0121fc7d910dc16fa06293543bba0a127d7c3bf0f0035adecc37ab31693ef0c104accf650f10441ba0ba7f6ec65ebee3163d3521f30a2ddaa2cd8d78d18da3b44df26089084514c9b2b7b4fb9539786638e39ee0fd3a7d152ed276dd8c6e0bf7986f0c96201d41d6ce1834f541d9b0e8a97badf8dd4f16b66ce36e21e418ed578cf8fa792f4c6c25a76df05161b8e6654b88d5447a1ea0f7f391e1b56e78cd7e8", 0xe8}, {&(0x7f0000002280)="faa1848a44fc5a64c9e491bc41a9d389271e8831d672c3a72d1633c150682f32a328b9a81c7680c26cd1cc543da3f2fd6ab02a864d3c4474bb1e95252bf7fb2175fb586e17316ca9f012cb12561f19e04549849431e65196ab1eaef580c8108c7958b185df799815cefa42a7b648b70d8d2b07a9ce0940dcb95f3597549002e38192a1be25d392ed4ec1fac46a33cc4c12d33c38630a472eabcbd3080d7a5d76ebaf4da9c81dec7780d4e6a9ee803e0c38d9e5e2d01f57d7758c9b0ee247b3bc923b5b75ecfb6ea07a78abcfe47853321e0fc1cb0c71a1c2e4367931c311cb", 0xdf}], 0x4, &(0x7f00000023c0)=[{0x80, 0x118, 0x7fff, "13c6d55b9da1f7d4eafc2947af452f2482cac3cf92f48bd9fd11a8afcf194c1b7031c655b1469f40e71995bcb772e9b1f0a1ce06185ab51295b440eb78fb3d577466dedc86b945e37880a606b2367d7bb589db6516f3650bcff0ffb187e11e17de24e670bcfebfa5042ec5b7b5136a"}, {0xa0, 0x105, 0x9fd6, "898fa64393f69fc49a9efd735dee23a0fcfc962db0109ea8d76074110e923938c4e6415d27d0456f81dcd9129f8c59e06f1f6789849b984e6cae5e132317940a83ba459c5a9af2eff9cd9314aa5d6f8fa6bb0e48181d15efdfe9f9549b93162ec3e5a506c2bdc7e9483966ae84336a85bb1ab06ea32423507cd6b3678d28d024ab959763eae606b8ce689bf9e3"}, {0xe0, 0x10a, 0x1, "7324a34fc0ce12d46813919d6ba0e5e2b247d6d7886e49a03de4d2329b721e2723903b3631cb4109a4907e76bf717f28ebf5b3f5cfc0f0cbccfe065ba49ee12f25e98e9b356d06ef0acffc2bc575952c832625d88b896fd262f6d8c56bfb01fb1a0ace125674f7bc3ec27bb3da6a96bd849a6208aceeddf1bfd8e6bcaf47e0101ebfdf2eba77dd9fee9498613b24f614a5e9cc2d285f63bbe262d22329b386b3488302b2576c368f3947cece1f2d7f53fff5be42c68a8a4bcbd115b24b78ce7366a8e3a49f1645ee721bd543"}], 0x200}}, {{&(0x7f00000025c0)=@phonet={0x23, 0x6, 0x3f, 0x4}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002640)="2ff0eee6fd8077605bb3861de21359fbd83125f20d4f9a34af81eb55127ab7cbf45d0be72bb17d2f097858244b99", 0x2e}, {&(0x7f0000002680)="b05a8725a5ccf9e08de05053c14f825852c1f47003e2f4667e8fc8e67472b0638e52d559f4599afc34a17db766e63c98b960de93d361f94596b51a2112d64b7a9c2b71d493ccbdba006f2a94ced5a7a5d58a4293bc2e76b19b41e2339f8bc9c95ea8ade09181cc351fa95238db4e81a82b356626b7c343688dc4899e66e6e1f1f45855786ffd772e8a01e396e97db4097d7b99064943df27722cb77748ba686bd76fe3cf9a078d6bee7387f16debd04f1a318e5fc8b476e516cce6c49606449c12dc1b232c74ecfb1f32fa386947", 0xce}, {&(0x7f0000002780)="c4b00e58cdc4e063e72e6be156269e4e57786a9919c5cc0a129a40f9a8637f9377c14ca8418a2d7d14ffff70e94772b06b53ff48c66d0ff372adc0deaf5faeb456614ae26db6421af38ed4872cd43e72032f97942732703c31f6560f44965bf826b6c040fa126864cf9b619db255c741d8d983ddfa0932120ad9bd70d3a55d4e053e0272fe6ca39cb2b7006c5643f145126f15", 0x93}, {&(0x7f0000002840)="95d8bed21e6ad1560bd302392b5651f34b5e0a9e062eaa0f7273f8336d815b622498b2ae183a9c54e7e1fe2852a334720d5b0d27096e750623dbe07172ccb53ee0228d3686899f2f5f2716325e8375712428720eeafa1adaae41d909751b77fc57f6348bc6f3517d223c0170b4846799e20fc51cc66691a797487627833281814b93ac6a311e38c35d2d889f4738b846451f09075982c032eeca5e49d7fef3b9", 0xa0}], 0x4, &(0x7f0000002940)=[{0x80, 0x118, 0x7f, "852af81d49bbbba65de1019bdee99f41f3c45ee6488b1ab55bc42d5901b00ff482e6f75a1309af0b1dc880ea34055a74aa9354b9e2161969a6b3d228048b010d04828b375573ee5ba156b8d62ae4cf6cdff983ec06784fefaf96b2398272f7babe1e24a1a546901a34e55da85b"}, {0x58, 0x115, 0xffffffff, "c9d3528b07cf7aa1f8dab2d3c0ee8517f01352d3bc1e61ef737d85a1f6de151adbae1e742ea04366d92205c0d51152688d08d4f6c4e04faa90cd7baae9387bc206e3a8"}, {0x1010, 0x109, 0x80000001, "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"}], 0x10e8}}], 0x4, 0x20000000) 03:32:07 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x300000000000000, 0x3) 03:32:07 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 03:32:07 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timerslack_ns\x00') openat(r2, &(0x7f0000000040)='./file1\x00', 0x0, 0x80) perf_event_open(&(0x7f0000001d80)={0xe9de9da47c76b02f, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8280, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) [ 2594.804982] ------------[ cut here ]------------ [ 2594.806507] WARNING: CPU: 0 PID: 13587 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2594.808847] Modules linked in: [ 2594.809629] CPU: 0 PID: 13587 Comm: syz-executor.5 Not tainted 5.10.256 #1 [ 2594.811446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2594.813634] RIP: 0010:get_pat_info+0x216/0x270 [ 2594.814936] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 61 8a 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 4a 8a 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 25 ae 5a 00 e9 [ 2594.824842] RSP: 0018:ffff8880468b7890 EFLAGS: 00010216 [ 2594.826373] RAX: 0000000000013754 RBX: ffff888046b9d200 RCX: ffffc90003e16000 [ 2594.828216] RDX: 0000000000040000 RSI: ffffffff81125456 RDI: 0000000000000007 [ 2594.830134] RBP: ffff8880468b7948 R08: 0000000000000000 R09: ffff8880468b7818 [ 2594.832041] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2594.833966] R13: 1ffff11008d16f12 R14: 0000000000000000 R15: ffff888046b9d250 [ 2594.835873] FS: 00007fc2d70b3700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2594.838012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2594.839867] CR2: 0000001b2d823000 CR3: 000000004b090000 CR4: 0000000000350ef0 [ 2594.842325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2594.844757] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2594.847287] Call Trace: [ 2594.848414] ? pgprot_writethrough+0xc0/0xc0 [ 2594.850098] ? finish_task_switch+0x126/0x5d0 [ 2594.851607] ? finish_task_switch+0xef/0x5d0 [ 2594.853182] untrack_pfn+0xdc/0x240 [ 2594.854418] ? track_pfn_insert+0x150/0x150 [ 2594.855729] ? lock_downgrade+0x6d0/0x6d0 [ 2594.856961] ? uprobe_munmap+0x95/0x560 [ 2594.858151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2594.859633] unmap_single_vma+0x1bc/0x300 [ 2594.860896] zap_page_range_single+0x2ce/0x450 [ 2594.862226] ? unmap_single_vma+0x300/0x300 [ 2594.863470] ? remap_pfn_range_internal+0xc56/0xf60 [ 2594.864905] ? lookup_memtype+0x5b/0x200 [ 2594.866074] ? apply_to_existing_page_range+0x40/0x40 [ 2594.867545] remap_pfn_range+0x139/0x160 [ 2594.868674] ? remap_pfn_range_notrack+0x70/0x70 [ 2594.870052] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2594.871446] io_uring_mmap+0x398/0x530 [ 2594.872397] mmap_file+0x5e/0xe0 [ 2594.873236] mmap_region+0xc4d/0x1500 [ 2594.874176] do_mmap+0x868/0x1370 [ 2594.875025] vm_mmap_pgoff+0x198/0x1f0 [ 2594.875971] ? randomize_page+0xb0/0xb0 [ 2594.876958] ksys_mmap_pgoff+0x41c/0x560 [ 2594.877949] ? find_mergeable_anon_vma+0x250/0x250 [ 2594.879127] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2594.880386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2594.881640] do_syscall_64+0x33/0x40 [ 2594.882546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2594.883809] RIP: 0033:0x7fc2d9b3db62 [ 2594.884673] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2594.888997] RSP: 002b:00007fc2d70b30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2594.890803] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fc2d9b3db62 [ 2594.892507] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 2594.894223] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2594.895926] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2594.897641] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 2594.899371] irq event stamp: 1401 [ 2594.900217] hardirqs last enabled at (1411): [] console_unlock+0x92d/0xb40 [ 2594.902244] hardirqs last disabled at (1420): [] console_unlock+0x839/0xb40 [ 2594.904280] softirqs last enabled at (750): [] asm_call_irq_on_stack+0x12/0x20 [ 2594.906392] softirqs last disabled at (695): [] asm_call_irq_on_stack+0x12/0x20 [ 2594.908493] ---[ end trace e1707f89d0ccff53 ]--- 03:32:07 executing program 1: sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xa090}, 0x8000080) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x11, 0xffffffffffffffff, 0x92ce1000) 03:32:07 executing program 4: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x400000000000000, 0x3) 03:32:07 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0xb778000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/81) r2 = syz_io_uring_complete(0x0) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x80) ioctl(r1, 0x20, &(0x7f0000000000)="e0f24b0d991f5c4a4e5d30da975b818de87a41e4f7b571b043e56a86ad978e30009360491371356901c2c74a0305515156f90c58fcb7a0e19c3a060e8a8ae0b8f688a6e24feb76a592c9c0089e0c8b43a1f002eb690032d77e93763f3c3f3a438093ee3ba2f66812cd91e4aba7ec3ec7a28365aac89df8769496d8712191b915caec86c8ac41ed3f1b79dcdefe30e5194082329457a596f5810682661bce07b107d3cc9aa2474f165697") mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000000c0)=0xffffffff80000000, 0x3, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x80010, 0xffffffffffffffff, 0x5d2e6000) 03:32:07 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7a) 03:32:07 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xa031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) VM DIAGNOSIS: 03:32:07 Registers: info registers vcpu 0 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e8ec1 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff8880468b7228 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000036 R13=0000000000000036 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e8f18 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc2d70b3700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d823000 CR3=000000004b090000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007fc2d9c247c800007fc2d9c247c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=fffffbfff0d0e6d6 RBX=fffffbfff0d0e6d7 RCX=ffffffff8126fb1c RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff868736b0 RBP=fffffbfff0d0e6d6 RSP=ffff88800fec7c58 R8 =0000000000000000 R9 =ffffffff868736b7 R10=fffffbfff0d0e6d6 R11=0000000000000001 R12=ffff888015b3cec0 R13=ffff888015b3d808 R14=0000000000000002 R15=0000000000040000 RIP=ffffffff816cff74 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f28e45828c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055eecbbe4f18 CR3=000000000edc0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffffffffff0f0e0d0c0b0a XMM03=0000000000000000000000307570632f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055eecbbc2c80000055eecbb8ee80 XMM06=000055eecbbc2c600000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000