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", 0x1000}, {&(0x7f000000b800)="9e48b48cb8d18a468e968aab9e74d3bae701eea2d5925434e1333d9ee923cd9367ad9ae61436e95d116cf1d211e511af26564fd495bc733704be002967953030826596d488e5c240424ded3942213e1913374d1875b28be01f17a82adfbcc23c2911fcff9a1f562e696d2197e72755527ec997bb8766aa4cc79a30cda2af62a604cf2d3b45a5c73503bacb7cae43d03e94cd74d6069187bc5baab4e83b850da4b098054f006fb198808753e6ecf144e84fc475f472450fe77754bdc8031b3d5168c4598c9797134b7e6fc993770fcc72189cde786f36b02c05eee4a2561f1b2a793074d67f0c407602fad5d76fa280", 0xef}], 0x8, &(0x7f000000ba00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r9, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r12, r4, 0xffffffffffffffff, r4]}}], 0x70, 0x20040081}}], 0x7, 0x40) r13 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r13, 0x0, 0x10000000c) 10:46:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x340, 0x0) accept$unix(r2, 0x0, &(0x7f0000000240)) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="c20f000068a9044bf77841ed01dd2e33"]) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x24000, 0xc) r4 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x19}, 0x0) io_uring_enter(r4, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:35 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10d000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1e000/0x3000)=nil, 0x3000, 0x0, 0x10010, r3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:35 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r4, 0x8000000) 10:46:35 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 10:46:35 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r6, &(0x7f0000000100)='./file0\x00', 0x424042, 0x82) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0xc4) lseek(r7, 0x6, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1b000/0x1000)=nil, 0x1000, 0x5, 0x10010, r4, 0x0) 10:46:35 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="01001504ebff34e89ea7b93157779cd5002b4315fd4bf12db613a77ab4a8784686fdbbdd779147135db999b281000000c0d7e54050", @ANYRESDEC, @ANYBLOB="41c5f27909668c91b65c36fc871782320f782dc382980e744631e284b38e70d94a0680066a35240e6809"]) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000414000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x878a3000) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) shmat(0x0, &(0x7f0000150000/0x7000)=nil, 0x4000) r4 = dup2(r2, r3) r5 = fcntl$dupfd(r0, 0x406, r0) connect$inet6(r5, &(0x7f0000001840)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0xffa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r6, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000000c0)=0xfffffffa, 0x4) 10:46:35 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r6, &(0x7f0000000100)='./file0\x00', 0x424042, 0x82) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0xc4) lseek(r7, 0x6, 0x2) 10:46:35 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x67e2, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:35 executing program 2: r0 = syz_io_uring_complete(0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00', 0x0, [0x80000001, 0x9, 0x3, 0x6, 0x88a2]}, &(0x7f0000000100)=0x54) r1 = syz_io_uring_setup(0x37c, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r1, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:35 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 10:46:35 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) 10:46:35 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r6, &(0x7f0000000100)='./file0\x00', 0x424042, 0x82) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0xc4) 10:46:50 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r6, &(0x7f0000000100)='./file0\x00', 0x424042, 0x82) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0xc4) 10:46:50 executing program 2: r0 = syz_io_uring_setup(0x37a, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x16c}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(r3, &(0x7f0000000900)='./file1\x00', 0x0, 0x0, 0x800) r4 = memfd_create(&(0x7f0000000640)='\x00', 0x4) r5 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x6) io_uring_enter(r5, 0x59ad, 0x34ad, 0x0, &(0x7f0000000940)={[0x1]}, 0x8) syncfs(r4) recvmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000080), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/110, 0x6e}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000340)=""/76, 0x4c}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/214, 0xd6}], 0x7, &(0x7f0000000640)}, 0x2000) 10:46:50 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r6, &(0x7f0000000100)='./file0\x00', 0x424042, 0x82) 10:46:50 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd=r3, 0x0, 0x0, 0x0, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:50 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) 10:46:50 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="01001504ebff34e89ea7b93157779cd5002b4315fd4bf12db613a77ab4a8784686fdbbdd779147135db999b281000000c0d7e54050", @ANYRESDEC, @ANYBLOB="41c5f27909668c91b65c36fc871782320f782dc382980e744631e284b38e70d94a0680066a35240e6809"]) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000414000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x878a3000) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) shmat(0x0, &(0x7f0000150000/0x7000)=nil, 0x4000) r4 = dup2(r2, r3) r5 = fcntl$dupfd(r0, 0x406, r0) connect$inet6(r5, &(0x7f0000001840)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0xffa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r6, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000000c0)=0xfffffffa, 0x4) 10:46:50 executing program 1: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r5, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:50 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) 10:46:50 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) 10:46:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b7}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40042}, 0x40) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4010, r6, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:50 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 10:46:50 executing program 7: ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000000c0)={'vlan0\x00', 0x2}) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0}, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r3 = open$dir(&(0x7f0000000500)='./file1\x00', 0x540700, 0x44) r4 = creat(&(0x7f0000000600)='./file1\x00', 0x0) io_submit(0x0, 0x4, &(0x7f0000000680)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000080)="8209bbb2daf9c6", 0x7, 0x4, 0x0, 0x1, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x78, r0, &(0x7f00000002c0)="f3582526eec4f6566077c14fb321f2b4a536cdcdb728a2bc70615d4175dc5054127115391f1c9d6ba5957dc6bc9d02efe55cab24d01abf72a474709ecbc4ca8823428a9666a2c080d89cd5e0f6c7b2afe26687a50686ce48e78fdacdfea156cdda1e9066be", 0x65, 0x1, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4, 0x40, r0, &(0x7f00000003c0)="6b7d30d049517d4a12127a7d38f5f1d2662af6f38888b92ba960f63c18312b629cdf5cb0df75c7fbb4c72b23158e5710ab1a6c5f47fc37ac770452ca1f58685bd90324216bf24b65523a439f0d4d0d276641132b5e039b410bb1276bad04745481341e1dcbdfd5c71eeecd87f7bf6b9d528ba64f7b38aebac9b8f620f89d8aa77b133399a034fb1e2d47eca6f173ea0efae4c06dcd62f29749858d57ebe1be409b60e77399a9d64f1e372ddeaa981913fac402b46b866edd346386aaf265ce63e504019fdb6d672643fec08bcf180dfbb3c38e7bfc8f7a", 0xd7, 0x10000}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f0000000540)="5fbbce25995f9babf25a6572c5830499f765ee9bfc47b95dd2d65d8ed1c8d2569ea1ee2fc3d47aa52bd350bc379820c4bf273eaf710294c24bef248e708334039235a3d9ecc3e024c805f86a29a6cd5cd7eb8cd486eb4ab27cbdf0889b01c6d03a00dcab78836eb1dc1001eadb89f6ecfece0152fa4c18a2b48a79079858322e6718fa69fb53098082", 0x89, 0x0, 0x0, 0x3, r4}]) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000000)={'macvlan0\x00', 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x3, 0x6) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000000), 0x400000d, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, 0x0, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x105142, 0x40) setns(r7, 0x20000000) 10:46:50 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r6, &(0x7f0000000100)='./file0\x00', 0x424042, 0x82) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0xc4) 10:46:50 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1843, 0xcbfc, 0x0, &(0x7f0000000080)={[0x7]}, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:50 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) 10:46:50 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg1\x00'}) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:50 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) dup(r5) 10:46:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(r0, 0xe4c60000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000060000000c009900000000000041dca1"], 0x20}}, 0x0) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000000c0)={0x4, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x20}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={{}, 0x0, 0x3, 0x6a}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 10:46:50 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) tee(r3, 0xffffffffffffffff, 0x5, 0xc) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:46:50 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x604800, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x1100) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0xad9fea6cfe301535) execveat(r3, &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/vcs#\x00', &(0x7f0000000300)=')-){t\x00', &(0x7f0000000340)='bridge0\x00', &(0x7f0000000380)='(^!\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='//&&^\x00', &(0x7f0000000440)='bridge0\x00', &(0x7f0000000480)=']\'}B\x00'], &(0x7f0000000700)=[&(0x7f0000000540)='\x00', &(0x7f0000000580)=':\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='!&%\x00', &(0x7f0000000640)='@\x00', &(0x7f00000006c0)='\x00'], 0x100) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x80000001, 0x1, 0x8, [0x8, 0x4, 0x9, 0x5, 0xe94b, 0x1, 0x400, 0x200]}}) 10:47:06 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r6, &(0x7f0000000100)='./file0\x00', 0x424042, 0x82) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0xc4) 10:47:06 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000e, 0x1f012, r3, 0x0) pread64(r3, &(0x7f00000000c0)=""/214, 0xd6, 0x2000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x3}, 0x200000}], 0x1, 0x4048000) 10:47:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) lseek(r2, 0x1, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x40000, &(0x7f0000000240)) 10:47:06 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b7}]]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b7}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x600, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6f}}}}, [@NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xf3, 0x8000, 0x6, 0x2, 0x1, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x18, 0x6, 0x60, 0x18, 0x1, 0x30, 0x12, 0x9, 0x16, 0x12, 0x1b, 0x1, 0x60, 0x4, 0xb, 0x9, 0x9, 0x4, 0x48, 0x18, 0x36, 0x2, 0x16, 0x48, 0x3, 0x12, 0x48, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x18, 0x25, 0x36, 0x3, 0x12, 0x5, 0x9, 0x60, 0xb, 0x12, 0x9, 0x9, 0x36, 0xc, 0x1b, 0x48, 0x4, 0xc, 0x6c, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x4}, {0x4, 0xa}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x6}, {}, {0x4, 0x8}, {0x6, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x7, 0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x6, 0x8}, {0x5}, {0x4, 0x3}, {0x4, 0x3}, {0x3, 0x4}, {0x3, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x4, 0x7}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x5}, {0x2}, {0x1, 0x5}, {0x7, 0x3}, {}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0xa}, {0x3, 0x8}, {0x7, 0x3}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x3, 0xa}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x2}, {0x6, 0x5}, {0x3, 0x7}, {0x7, 0x2}, {0x4, 0x5}, {0x2}, {0x4, 0x8}, {0x1, 0x4}, {0x6, 0x15}, {0x6, 0x9}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x6}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x7}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x6}, {0x4, 0x1}, {0x1, 0x9}, {0x2, 0x8}, {0x5, 0x6}, {0x1, 0x9}, {0x2, 0x8}, {0x2, 0x9}, {0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x1ff, 0x3, 0x9, 0x8, 0x4a2, 0x6b, 0x9]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x5, 0xb, 0x24, 0x30, 0xc, 0x6c, 0x9, 0x6, 0xc, 0x9, 0x30, 0x24, 0xc, 0xc, 0x6c, 0x3, 0xb, 0x16, 0x4, 0x2, 0x40, 0x36, 0x30, 0x5, 0x6c, 0x6c, 0x9, 0x60, 0xc, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x1f, 0x0, 0x7fff, 0x36, 0x2f4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x80, 0x1, 0x3ff, 0x5, 0x7, 0x0, 0x8000]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {}, {0x4, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x7, 0x9}, {0x6, 0x6}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x1, 0x8}, {}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x9}, {0x7, 0x4}, {0x5, 0x2}, {0x2}, {}, {0x1, 0x4}, {0x4, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x6, 0x8}, {0x4, 0x5}, {0x7, 0x9}, {0x2, 0x6}, {0x0, 0x3}, {0x2}, {0x1}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x60, 0x4, 0xc, 0x1b, 0x1, 0x6, 0x5, 0x4, 0x12, 0xa, 0x5, 0x3, 0x18, 0xb, 0xb, 0x4, 0x30, 0x4, 0x12]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x8}, {0x3, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0x9}, {0x5, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0x4}, {0x7}, {0x6, 0x1}, {0x0, 0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x3, 0x2}, {}, {0x6, 0x4}, {0x2, 0x9}, {0x3, 0x5}, {0x6, 0xa}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x7}, {0x3, 0x2}, {0x4, 0x5}, {0x4, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x36, 0xb, 0xc, 0x3, 0x60, 0x7, 0x48, 0x24, 0x3, 0x36, 0x48, 0x1b, 0x37, 0x4, 0x60, 0x60, 0x60, 0x4, 0x48, 0x3, 0x48, 0x12, 0x6, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4, 0x4, 0x6, 0x9, 0x0, 0x100, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf801, 0x45c, 0x0, 0x5, 0x4, 0x6, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x3}, {0x6, 0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x4, 0x7}, {0x6, 0x1d}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf79, 0xfff, 0xc9, 0x2, 0x401, 0xfff, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xc440, 0xd5fe, 0x2, 0x50, 0x7f, 0x2, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x12, 0x2, 0x2, 0x4, 0x9, 0xb, 0x48, 0x1, 0x1b, 0x2, 0xc, 0x24, 0x9, 0x3, 0x4, 0x12, 0x1, 0x6, 0x36, 0x48, 0x18, 0x48, 0x68, 0xb, 0x1b, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7a53, 0x1ff, 0xff, 0x20, 0x1, 0x8000, 0x7, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x13, 0x2, 0x0, 0x12, 0x2, 0x1b, 0x12, 0x5, 0xb, 0x36, 0x60, 0x12, 0x1b, 0x24, 0x36, 0x48, 0x1b, 0x2, 0x4, 0x2, 0x5, 0x24, 0x12, 0x6c]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x9}, {0x7, 0x7}, {0x2, 0x7}, {0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x5, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x2}, {0x4, 0x9}, {0x5, 0xa}, {0x2, 0x1}, {0x7, 0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x7, 0x7}, {0x5, 0x3}, {0x7, 0x7}, {0x5, 0x6}, {0x6, 0x2}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x3, 0x8}, {0x7, 0x3}, {0x0, 0x4}, {0x6, 0x5}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x1}, {0x6, 0x3}, {0x6, 0x9}, {0x3, 0x5}, {0x5, 0xa}, {0x4, 0x8}, {0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x8}, {0x2, 0x4}, {0x6, 0x1}, {0x3}, {0x6, 0x1}, {0x4}, {0x7, 0x9}, {0x3, 0x4}, {0x4, 0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x2, 0x5}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x400, 0x8f, 0x8, 0xc1f, 0x81, 0x3ff, 0x2c]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x7, 0x9}, {0x7}, {0x3, 0x6}, {0x4, 0x4}, {0x6, 0x6}, {0x4, 0x9}, {0x3, 0x4}, {0x3}, {0x3, 0x8}, {0x7, 0x6}, {0x4, 0x9}, {0x7, 0x6}, {0x2, 0x9}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x3}, {0x5}, {0x3, 0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x3}, {0x4, 0x5}, {0x4, 0x8}, {0x5, 0x5}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x20, 0x4, 0x80, 0x4, 0xed25, 0x1ff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1, 0x1b, 0x18, 0x30, 0x48, 0x16, 0x3, 0x30, 0x9, 0x48, 0x1b, 0x36, 0x1b, 0x36, 0x30, 0x60, 0x5, 0x3, 0x16, 0xc, 0x4, 0x24, 0x30, 0x18, 0x1b]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x24, 0x6, 0x5, 0x5, 0x9, 0x6, 0x6c, 0x5, 0x2, 0x36, 0x24, 0x3, 0x4, 0x18, 0x9, 0x48, 0x2, 0xc, 0x3, 0x48, 0x60, 0x6, 0x9, 0x3, 0x30, 0x16, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x6, 0x6440, 0x70a9, 0x3, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x7, 0x5, 0x8, 0x200, 0x400, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1, 0x200, 0x663, 0x3ff, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x8000, 0xf007, 0x8000, 0x0, 0xd66, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0x80, 0x4, 0x1, 0x2, 0x7, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1ff, 0x3ff, 0x100, 0x1000, 0xfffe, 0x959, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x40, 0x7, 0x1f, 0xfffe, 0x4, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x60, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x0, 0x5, 0x7, 0x2, 0x3ff, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x5, 0x80, 0x5, 0x7, 0x20, 0xff81]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x6}, {0x1, 0x4}, {0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x4}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x0, 0x8}, {0x7, 0x1}, {0x2}, {0x7, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x27, 0x0, 0x3f, 0x4, 0x1, 0x532f, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x8}, {0x6, 0x4}, {0x3, 0x8}, {0x3, 0x6}, {0x0, 0xa}, {}, {0x3, 0x9}, {0x3, 0x7}, {0x7, 0x2}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x7, 0x1}, {0x6, 0x4}, {0x5, 0x4}, {0x5, 0x9}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x2}]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x4}, {0x2, 0x8}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x1}, {0x2}, {0x1, 0x6}, {0x3}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x2, 0xa}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x4, 0x6}, {0x3, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0xa}, {0x7, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x2}, {0x5, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0xa}, {0x2, 0x1}, {0x5, 0xa}, {0x0, 0x7}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x7, 0x2}, {0x2, 0x3}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x3}, {0x1}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x9, 0x1ff, 0xf62, 0xfff, 0x4, 0x8, 0x8171]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x600}}, 0x4008001) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:06 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) socket$unix(0x1, 0x1, 0x0) 10:47:06 executing program 2: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) r1 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8ee2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r1, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:06 executing program 3: r0 = syz_io_uring_setup(0x406, &(0x7f0000000180)={0x0, 0x8886, 0x1, 0x4, 0x2dc}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="07008000000000070000000448ec00200065000000049078000000000007ff0000000000000000000000000098b125f71b91c5ef5c000a73ec1a"]}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x17, r4, 0x1, 0x80, 0x6, @random="f5b9cfc5f97a"}, 0x14) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) accept$inet6(r6, &(0x7f0000000340), &(0x7f0000000300)=0x1c) close(r3) 10:47:06 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) 10:47:07 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) 10:47:07 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) 10:47:07 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r6, &(0x7f0000000100)='./file0\x00', 0x424042, 0x82) 10:47:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000001140)) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r0}}, 0xaf) 10:47:07 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fstat(r4, &(0x7f00000000c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:07 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc1}) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000080)=0x2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{}]}, 0xc) close(r0) syz_io_uring_setup(0x1ef4, &(0x7f0000000080)={0x0, 0xeef4, 0x4, 0x3, 0x1d7, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4007, @fd=r4, 0x1ff, &(0x7f00000001c0)=""/87, 0x57, 0xa, 0x0, {0x0, r8}}, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 10:47:07 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1bc7, &(0x7f0000000700)={0x0, 0x46a1, 0x2, 0x0, 0x266, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f0000000780)=0x0) syz_io_uring_submit(r1, r7, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x400000) r8 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r8, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1b000/0x3000)=nil, 0x3000, 0x80000d, 0x10, r3, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r12, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r10, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x4, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="e047b6412ca55806d42f12d63fe4bef1eccb4575c99fbfc9269eb6a56472a8339f9029b227809a8c08d0e5eb71b0728f7d9769930f18afe444dbb3377de9670221dc64b25083bff40216bb0424c5bffcca7d9929323294fbcd20cf6db6204f7c2744d800ac93cd55f69f487edba5df68135891bfa3d846bf3982223376f8e7e8070266678fcebf3a8313b4ad663a5569acc4726b29ade0321d98150a7cd48e2d9b32c296", 0xa4}, {&(0x7f0000000140)="e061ca469cce6b1c0d59bf1e8090f1b89adcca6d1a7aaef63606ce7754faf900583b385f1fcf", 0x26}, {&(0x7f0000000240)="5c7208c46f51ef0f721de0d43ef3089e42440cfc4079a3512874b440bdd98597fe6220c8068818b41ba969f713fec462b07401533f78db7ac01a47ba9d6eec732ba081de2a3d50666e923ad12a282a10dcd5e46035af23badb2eddba2c204c5b24cdc02368f1ceacf9a231973ae6585edc0c7c52816e5980ce8c", 0x7a}, {&(0x7f00000002c0)="74e12dd446001285ed5bfa4b04f0cbc736d920ffbe992abbd833e40263153c652d3887947924c4124ddc68e2839115c2fe721349c2d5b82059389be7f6e53f4edf81c99cf8303a0041fee780845d6d071039046ccb0245559d96657e97033bde33486cacdd362456b1db6bb8ebfa26a31f689dd95f8897cea8a2156d28ae230ea6ae287c34cf42f56b8f9be6c2633e5100a34f51f1e66a9dd5fbb9a32aaf9e", 0x9f}, {&(0x7f0000000380)="5f5504b4afea860bc7e2ec43ba8ac1a81ea56d03324be97b", 0x18}, {&(0x7f00000003c0)="e0620e9f3d83694e99e9c582b3192c0649ada1a04d3de56dc253db39eb0840e115b4d13c7641bb0e927a9a9444e065fbf12f86152c0d0c12583dfddc0e74e6048b24ea81d5099a9d22fbabfb3b87f097b3a3aa9118c1748a882cb8ddf32f2a5dda30af8527c6eb453462c97ba15a83b90979ae0e61d817bd2b4c45acd9e439c86f02c5358df0abb256e4d1cf3e7c769a2e6328b5e1a2a5", 0x97}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="00fd3c888233c60d048206f43477e99964864e04ba5c2eb06fb084dde3b82306d10b0069d6cc83877cf56a1f2b701468db988f5c251c", 0x36}, {&(0x7f0000000500)="2ae29c5e11b5a612af9a70ca79a7695014c35d0f187e071952b8352b73f466b392189a639111666c9229891125a7ce01ddc3ed93230484586b84b15a1105d64452e0a293e2c6daee518c26194c331aaaafee3232a4ca485d2521b553a8dadab886c80bd2f33ee66d55193baf090cac2a6f2ddb5ec51690291e4ffc9f22aee4857e9bf161748776fca13851501297054461f569b26a084362c1652e0558da96049bd0a56912ec357d886074359afa6985a6d7e1943d", 0xb5}], 0x9, 0xb, 0x1, {0x3}}, 0x5) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r13, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:21 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x6}) execveat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000400)=[0x0, 0x0, 0x0, &(0x7f0000000300)='veth0_to_bond\x00', 0x0, &(0x7f00000003c0)='veth0_to_bond\x00'], &(0x7f0000000700)=[0x0, &(0x7f0000000540)='(!-.-\x00', 0x0, 0x0, &(0x7f0000000600)='veth0_to_bond\x00', &(0x7f0000000640)='-/\x00', &(0x7f0000000680)='veth0_to_bond\x00'], 0x1000) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$addseals(r2, 0x409, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cbc0)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x7, "9cc3d2f815816e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r5, &(0x7f0000000080)=0x80, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x0, 0x40000}, 0xfffffffb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup(r6) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mkdirat(r7, &(0x7f0000000100)='./file1\x00', 0x50) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r1, 0x0) 10:47:21 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:21 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) r11 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r15, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x8001) r16 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r16, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:21 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r0, &(0x7f0000000500), 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x402100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x5, 0x0, 0x4f, 0x4, 0x0, 0x8, 0x1021, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0xcf39}, 0x2, 0x54, 0x8, 0x0, 0x1, 0x10001, 0x800, 0x0, 0x40, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0xa) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000e3ffffffffffffff00"/288], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) 10:47:21 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) 10:47:21 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) 10:47:21 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 10:47:21 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0x101}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:21 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) r5 = socket$unix(0x1, 0x1, 0x0) dup(r5) 10:47:21 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000d1a000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) mknodat$null(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:38 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup(r1) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$inet6(r2, &(0x7f0000002c00)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x8, @loopback, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="c8a6a78b9e235c1095e93dcc69291316ad22a27f8f3de6e90179405bdf437d114e156715a50e6b7fdf024c5429d00d6bad416dd4d1b1e2c8d6ef064c1c082d13eeff1c93b12060106351947e069e2b43f2a63dcdcd3b83c8e66454237517513c4e1b85a1fc0f9e22bcc9b26d2670139fc5597054d99d30adc1ab33cb72ea44fbd3313c20461be9791ad9ef1de10271f8332ca80fe82cad7cff724d1b67cd869a8ac0cd078a59979f7005ea508d413c93e16db5f34cc3e27a7e4cabc1ef7da930efd3a5bf0bd6281a47449e4e77b377fb7361c2d4fceb0e931f134850632e9618e0623ddffa286db093b81b693f", 0xed}, {&(0x7f0000000380)="139bf5632da60c21302ddfe81d0dd1d8271c7dac14e57850fd5790751183b50144875b1de34f6ad0b451451a401e213b42da36321e2cb7234e0d95f1fb546a810feb0d426c31e6edbf5cbf3d0647b2db073e4fde01ed0860ca8d02adc38bfa887a82fb3a13c7138b7a920055d1b7a007feb48cc1c61ddc75a48211ab52f690e96d1214d3b9c0e200749722e47cc196a33bd4432f62e38d377a6da11a7f8dd22387cbdcbd363ba5153d08d617922ed0c14113c75551e6c26e3ce3fdb3ed3a89641cd2bcc92d8f5d0d2883d4308c440b5463039b29b5215cf8e8ae3b436e775fa93a557bfba063", 0xe6}, {&(0x7f0000000080)="ca537c770124ddf54441ae1262847383c4ad625f822b23f9f9ca23a7f6824be87f0e7d06c6f5b0b80bec7746656e8670551f56811f0dd36539c6fdd48e837a14b69935e25965a3617effa1a0dcfd4f9652dc44be23dda2544aff5f266741d9328b07e9eed53b1e9aa47b7c8cededfdddcce826a0645076f1b1c354dd6f99b00eaf1940864c78c22e210d995d70d7a974b85e697ee5ce4e2aa1331bffac07deeee5ddf1efcf08defed528bae2243fc102c0ec4cb48a2c43e4a8a914e144ab", 0xbe}, {&(0x7f0000000180)="b9bd23ada0c022a45f8edd964b0867d187ddb5be71c2677ee09490d5afa9d3900772cb3e77d780a173b8d9ccb119d6dbf1faa19fe3d1add35775c7e6ce1da41c79ad2db27332db7675c11789dc6bb8ade8347fe8fa57099e542adabfdf84e6d1df1430e61db5e3c601557d3f96f351d3cf9cbf4259d61e6dff393b29dfedd21b", 0x80}, {&(0x7f0000000480)="2b50fda60bf9d2d3fda8cbbeb30410e95a54d9052453fb8daf6f1c63dfa24073543bbe049129fa889318d4914ef447a3a7bb4eb99007a922980f1d2abdb50533713c78926e5dd73956bf97089e252bc33b4ebd498a3ff1e8c8408cfbb9d39f88a020102860d35247b6d055eb83d6d845595018c90b1895ecc812ff1dc2fdf293666534823486aa01e9a576f12a2e7c481d351a431ddf7255f121c69b6727599555c56f77f440a6b26d4a532be53b59695b28e5ea95752d79bbcc26b1f9bf6dbc37431ea5f003b958551d498a4537f93affd5fa", 0xd3}, {&(0x7f0000000200)="acfdbc9f19748fc57b624faa3b6ad0f3a5109d2e1b68e384cd4fb94a3a87a0902ee4db4dbe7626045ce0ca97bddab997b45a97", 0x33}], 0x6}}, {{&(0x7f0000000600)={0xa, 0x4e22, 0x8, @loopback, 0x10000}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000640)="655e1122f2e1104202c29e7735b8ceb5d1f00adf0053a0cbfa0e9958745aa6084e0e911f7f724a1437254144a2b2596c3265bdd0d44da2d4078429dfb03b492be0cde517d6ded7fd91c26542755a27c0faba898f02e1f36cc5ae8178ebbc4587a482d9c6efcb05e89e56e4dd56e5458864199b9ab3250b6ab5c9c1df633c50b73de32d9a957ff9d1a53e63a3ef10ab103f53b94b383909d62a29713a26ba124f5751b97ccee79d4574f8e87b28c74e05e5fd03b945ca44025aa6dac0f89f5e45114348c506ebfb6c7a39d41212b94b64847a", 0xd2}], 0x1, &(0x7f0000000780)=[@hopopts={{0xe0, 0x29, 0x36, {0x1d, 0x18, '\x00', [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3f, 0x8672, [0xb8, 0x9c, 0xf2, 0x1]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0xee1}, @generic={0x1, 0x76, "e259e04378ee7ef29b8959e762753eeaadab2b402f0e888f8752b3bd62d902e5d48e44b98f3c027bb6811771e6fe2446068421488dd25e2150d63a106c6acf327cc3eeaa3d91f7f1ad810b1b10935c6fc5431dc2bad932a3524a362df0177e29ed7b419f0523ba954f529959465f74cb50e4fd58f523"}]}}}], 0xe0}}, {{&(0x7f0000000880)={0xa, 0x4e20, 0x20, @mcast2, 0x101}, 0x1c, &(0x7f0000002b40)=[{&(0x7f00000008c0)="4ef907cea279ab6ff8c04b78dbf504167fd19b02640f606e125401d0ff438a06faf217f2c51472e7e7c8bfab34ac7a605128d224c6bca61d59d6dddc3fe2413594eb86b3b873400b1c0df78c0df464673573e0dbc32c0424d9faa9fe0e48cf11dc18824a5358feec498e752c331adcfb8ce8080e5d467457d77f1d55d4254a2f790d3adb9ab71901fa0ee01b3700900cb44560640b741fa1b7cec5ca9923202ca6f3a3cbb22fe38bf983da105e33dc15bc5512526cd2b2c11cd149a9c5df2ad88412fd3c5d11693bc1b8315d54350ec93175837f8bae80452652bb56d0c8b972195c0e841dfa996c4de45cbf88d4cff310dfb7e18525f12a29d5919cfd654649ba772a15e653839f7983e7bdb7b40243e5b313a269569fb7d9ad890c583f3154cdbcb4c99dfa8f5a3fb8936573ef5435173945d13dfd4d7cbd11f231e55b668dafa87a8ba195a44463cdcec65767aa903b79e88a6cfd3d840e77b4d24d0694c2ad46b629a0ca17009054337d1121021b756193429155046d42999b3cbdfef6d755f5e39e0282e0dc787d7be1f119b67b5ed7a76490609c2ebd8646da81e70158efd26872f4a0899de86633d22fda0c939e5318e061bbf3a4b16c6cba64ba2f9639ef6699509da6d5fea70eb1193bc183b8c88aecba50acf395a91ba79b3fe2baf471a591081a35d3f8e4b49459b59c47b7d2ec4b8798b01a83becb5ae3cfdb5315596c8940a676c7653a42fb6c2fe2093865b5bc0cd70004ab95937a1a27794560a76dedd40da9e9ed079ea18b812cad966dc1d784324ae2f499fef2da3f3f39326f2f68e175ba5d5ed9966cbbe98e3934ebc9de433a2689d43ca82be355c4f98942488b03186c35445aef90c7511d139349491b3901392a55922432c19b27fc0d8d535856033ceb360244cfe8385e4700271aaa5ba99f39b35659bbc4324f4b66e48b5fd7d16cb83cb51354cfe54f36cbd0ad2c9ef9c562989164421afeebe8ab209e6c395fa73c332698a0d540b6bb7e41fdc4e0c4f47e551bfde3d7636a3a91f3a324a3d451a60276c452a72b4b96ff55d6b10627bbeca1beae4eb87ae1433b5a9d9e7b6a24aa9e5dce2a8ebfe598a928abd95cf2689299aee307da9607661b35a113cd7613c2bddcf2e8af29f1abbbe427f99b5452d03ca95e6e6944f44609a5f1dfd21d9f97c6505887c7a9335018ea51b48ed2a0e433ef7593d2013349b15f00af32c7daa00dbbfa60dfe598aaac9de4b2e2a2cf45e3ce6747cff8a6ebcf4813e616c85c78e2e8f8982216d03f36535e9156a47ffafd28342a2b4fc50ef07bb2bc3fffed0207811cb1236fc38ac44f6ef85c14557b30f087615b64a8fd7d82f94ef6b6f955b6cb0e76631d1961493e632fc23ecde9d6ce62559fcb180bb161e00046c0a16dfbd1fdeefc8ddfc811385834853f020f2d4950453aa8833b6968c8cb528fc5a352d591de29c40d7f97543bfe5a6f0fd5160b1832e4be551e870fc2fb7602c8663aa860fd429b1ac02fa6225c637a6aa86bd8838d2891e3e51d60753013d0274bb4f03eb724068cac19f6f179778338235592aa3b57a3fd48aa8573915b049a051e75ebe2c2b40b6bae671b0d8633cb8535a1351588592af9511a8ab9bf8b8cbd4d8170f2c9fca53d58911f971960aa5012e0dbd2d7624f03ae65bc3f061001ded39395ef14b989fafaba59f6f76689c23fafadff07e7684dcc0ddb7210c94a9ad51f814eb279773c46c79e32502fe04ee8dafed0118b1927ee9c96ba33ff2a03ec1b9e4b8efe131932cc0c3ba9e5f954c3558cc1214bd845ad9c983005f2f83ec4419e202b8adf4f0b179467c417f15d35b717acdc15acb8a035c1755e01ab42fbaeabed739a7ad46084d3a2c06b811d82378b3760add5abb4d2cac530b5216c1e2f2b2ab97328e33af3117c58cfbdc90a623ff6320549c806b6956ce39b2dd68124bc39fb3c3ba670565ed084c39634b4017cc679ca1b27a1507ae8839af58962278ae53f7904e5dd7913250e125bc866abf0d937bd43afe24a70f1b4b8f871a06b67a27b0bb268ed001a4a12a6f434cd492767f147023a59fa698cbdd106977e3a0f8ce59f9114eab1bfbd15df0f2e693c6750475964478459adb5fbada8c236e17220e6e2ca507b4d2eed5eb2fa272c2045ca9a530c0494e5884b3b97e800d6df07af30e4d69d951c95f5445b6d282e4ba2fa84d3875dd205668a1dbd6da829432e7ac9f676f6f7036583b32beb82115d044ab98ba52c3540851a6262d87dee7f2688c44076e7e40c07500532c44fb66f7566d33daf924b02bf630b1e73109f9b4068bb3f85e11c42b5efdbf27043e19956a0f7505bc2b63251d5d34c2ad1dc14ffbf61948b4acdc3acdd62ed426061e6b5b277235e214653aa27f6365d0fb9a46214e0c4695ca5d4c3e874eddc4d034ba6be4579535dee6192764eadac13aab92be91bfdb3b1a27508f0bf89573b39b44f98e61099e32f756a7e48a19c5cb0d92f314ded96bcd9a4f1c716a5fdbba311b34a8236e679b6378c34fd6091cdbbc1105a83244e06beeedb7fb2c45a27b083df0e979932a3aa708fa5be8ff64248af9a5573fc10cd247038b7bafe0b558328134006e31e65938dbd9883dd2fd79db0a89248cda5d8f8417c2eff5cb69cd27b4147d49d8624847d3c0d42fd7088905490a0f0b38dbaaadf69837bfd7ca8c8b6471d7d68f82516ddb713f087356cf18d87ca3b7224bc478ad41241546aac08674b5f6c373f3f1d9888dc92845a61908d106f26a006991558cf02f6b4ff6872f89b941a2a8c70133a40a683a1c45d71c084a2fb8020c4b34c311639e5e16014267fa5b4372554021c5e8c8ab412b963c3998e11eaf6765d439a7890a46a0307a0b366ef909c79064996a6800e169e260bb42f55359ed479d0819fdbf2955e16e22802a2865ea801287a9951b95cd862c010c4ae29ad1c54692da484cebd5f7fb000e2afd7439427d226336463c04236f649fa23d03399b2c17a1c4b7d055bf8e37a43e655d239be818db7c6e85d8c7cda2b712caa3b1b4019728168af269fd4334f147477115fbf116a8740e8a6a5ecf7311014f45eef297b616a3fdc0947c9f6d84156e19e5afdcca4377419d1592c2eef10a0e21f244c24e88e0f57d311d106f3e4add533519cd4bcdb206ac49f03b36156d49f0ba9b3c8291c99f4e5a6f6c8617cf35643d6f70522046263b7bd7513e6e1393f81f317aefac079cd15749f197611b1700c3cca076a91aeeeb423a86ab5932a58ed414dc9310a935c5b1aeacdcafaa8a9938c350b47d04c87053f1742cb44ff5538011d0a183a22a8f5958cb158f6d5470ddd92bfe87646212a6d38afe14ecf45931c3919993cd8621e6454ea41cc300949e9d03ff6787cdc4ac01d083dfe67345c91289a01407c20100d0f5be8c20b5f4de58cd0be31115ef26e4f6f89c210844535d0f7c825854c3e29ce003737f33259f27de714e5486eb4a6f87289200ffbba979c79fba4932bb6a4d46d76c3ae2607a4a189312a8b7fe0636661a6e4983a8fdd30065737d99c128d554bd1debeccc521866adc1aa3cf60d7337e929cef18128a60cc176359cc10bf25c0735218797f9e8ba08b8d45d42fa601b0899cb1b80a22949a0a6145ae56271c43ffcfbdb6c9007c8e70b5ac57b9cdda6f6fc67bc86e46d9672280b62de81a6697e8807b25a93a1d7b96a3ee3462585926406ae1cbbe6a202c38791bb124320eeb15d1df6cbf9966cfbf194aef00447009199702cfdec3ba52dfd16b113b61a2450bdf84c6dc5db9a33352f9d9f972ce1f2097ecb97ba24fba744300cebe721f4f52389954196d07f62b2c88468f752017fa5a0827cc0cb3f8035f624dc9ac8972b67076e13478192a31c18cf0b7327fffdfa36ee94147bd140a9adab21eb497b5761a5ba99a4fee9b8e981f7f42ff84875be6d31dbcef9de8d51bf6ac172acd0bc0e97e8d720f5705038c7d2b263cee14d11335389ecbc3742e9ae418e500acf5953672e409a7f651762bcb094d5adb7d9ad36fc8607cc9a5aa09a991fdb0963beb621cbe9f654bfc6c84e46deb5d2e4c7821bffd18c1e8183c107104a80272d037f2dbed0888728abee768cfd5cd9cc37f402accad0d6398da5275a609ea113a03c240955c14ce01232b59715153a46e8a0b34bcc7fa67d2dd55fbee6f86232616f5def9960e623730bb652a3cf721009e217e2d705286a133048ea6abe35f61e42a6451109c4caa71803cad0de7b5c7711da5d2725d121a6aaee29cfdc78d68c2ea02bccfce177c461cf9cc206d242077869ea1df6b47b6c013e55ea911ffbbbf4f182c0f3ad7b1cd1d8aaa530f9d572ccfe438250f8952a997b733d0faaa65d87f393cdc3f54f49eba1ac47b4b6253d92e7002c23aae4e884fc8de97a3a5ac5c59a035eae6e7a5c04dd90a68312e29d8db7a2f490032635fc551f42d101ea29f919a3e9ca46174a581e4a0abaab3fb6de9aae50f9d237dec0396bff7f2109b933cf7f3cd299bd34d86aa2f73e45981017e8baedb357bf181da59428bb7ea8cee0630def6e575fd75cc895e47c8ad6491f7c19d64b63a9ab14c6c8a5c4ae237d27d8d3dc6d72145bb7df38feb1bec78f9e6f94215cbef2b7bdc91770fb02cc0a7f5e482302c00456d6487dc0ecbe7aeffaea37e5e1e888cc046eab73e3fbd765811dab80fe66172e3485a74d3c928f916c777e439c332da112f6b5457dd8253c7a2b019b03e3aba1435876f654ffa890846697b849a545f8f786d38791201d86d35d70b51b1d53ce7a8ce0bdd1b2a01922f775c2587cfbcc1b6faf034363cee125669ed3fa10535efdcf177311c25efb5d4c9380a5f18900e8a99caa1579f4931dfcdb38d06ee99a8b70de319d26fab6f0304577096cf45ddf718a7df0a1f45e31e3d2a142731e8756648459fba0462aead04489fdffdb10de7d03260b999e5566ce5c926d741f981191c4257f90e6277fc4a3b4b2a6ffb983124fd79fc56f03b397c5556e4cc1257d54ee3cab31fb7cbdcb2ac7c97fedd9b6953f66232f2fda3dea8398cc056b848267127ae5f405c98d73e4b0a9588957671ef0558322b0c237a198781856da35b4ddd793b0da4f3716d752376c358a468f7d28536f3b7bc740b0338499c179b7b88458da69e33785f0cd7b67699689650cd06781cddd6e951ab5c8696fc399cda4b614e00d28e69bdf68e8efdc9f3afcca610c172db81fe6eef11a6785e54b74b294e151604aa7977a2e190ee3b5577e87096a487bf7fcc050f39ee3e573b8f92b60281d90e33f8215e4d872b468a91adc75b7555bd5ca3f349eca0ec0153a232f2877bdc14b406ce0052f46649542dfc17d813346894a29e6fef1765e6fdbd82426098e2d37d576ec6e8578bd2d54eecb017da9ab5400dbefcbaa991f19574a925c79abf109684f5647b0cf0c75b0705b5b0ce72919712d9251505222bdb43126a01da2045ab24f31cbd2e5270b1e980ecc5ec2968ce4be856efa54f7609c609f0d3e0511ea2b66b178a6157d128d7e1664083cd64148c8939c4e69dd80b4bdfaa42da4245d6edb1c890964ac9d74bcc459fb92b8226560c6e0f3fcc378408e4541676106d648a44d76b9640cdbee330b861c82717dc18ae4fad3341c4773c1fb77b74bfb2c012fc7c6c5e760d13fd468da736b815fd454e8a4c8d29317c796e9f3f8c917aac1278bd82f6ff0592622cccbc29d37c5de6e69cb4dffb54e3fce509fbf1e5a41303a5a3c65fad352bdbb59bea40a202196175acf1fc7fbd", 0x1000}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="123df0e12dcc9fffa68698edd674", 0xe}, {&(0x7f0000002900)="15b64e21e3b82cefe827917d69641c188d11caefdc61416d46c40a359d015f3d70533117469b7b4127fe6bf5d362d72e1ecea6e181dead52ecffc2b2cfca5d94b99bbb370a1b727e926e89a25a78dfcac52912e67d7e676c3ed85720350a8b0694397610473c22ac90d4fc6febaf426711fee16cb576820809dca44adfd609ecd3085bcada0eefb33453f4a380689154026b8928540763e2991034c23538e9bde0a23c9bbb7205b1cc79a293d07df8eebf4b0d8b4c765eab48207fa1dadb0be814b2a7a034", 0xc5}, {&(0x7f0000002a00)="519bf7e15b6d3f9d24ef5a1371b2b722a92bfd2d436d68478c28b792ee4850185df9cb9d5c0ee0bb266457ced4e6f22330d2e46753f2934cb49248604b6e42fa4e979a82e8ce6dcfdb435f84", 0x4c}, {&(0x7f0000002a80)="618ee6e652f043e3702fd1043745714004cd7d0177c3c7850dd9b1ea60e30f89a17e3e7cbce8c6399ce9fe49d45de0d7ab06d1988c1b4a0cdd9397c5d40faadffe098475e670d47b629c1d7f96ed56a07d8b4b7576d8a3d3fb08e4be3cbc11867aa37be394236d91a433bd7366d54f8889b3a979c0d9f4ab399d0e800cb6ffdc3411707aecdff5c87e", 0x89}], 0x6, &(0x7f0000002bc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}], 0x18}}], 0x3, 0x4040004) 10:47:38 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) socket$unix(0x1, 0x1, 0x0) 10:47:38 executing program 5: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}]}) 10:47:38 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) 10:47:38 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x355}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345}, 0x5c1) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x1ff, 0x40) r5 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x100011, r3, 0x8000000) r10 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r14, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x4, 0x5, &(0x7f0000000340)="68ba9ed2238137e32c05e2713a71a9a662d61928bac2863f922e07286696c1af434d2c581337490e8ad4ecd97a0881eea755de8079d9a23ec4d167ca55f578e381d6eca08614275448fd07a2194ae02fdc7649817113c14680a0353654f7b6cfc3bf427e474809dea45a26b54b58c1b82f1a9c40fac06fba2f394c9299c6868867360ace82a49877c34e97a0dac0e29154b89bb77d83adde4c91c5d6eaa03997e71befa788138aa4e6e649c637903e67e72a3120a8f3c138ac1d2fa0c94026ac515192789f713ade93e0c393418f", 0xce, 0xc, 0x1, {0x0, r13}}, 0x1) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r15, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r8}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000240)={0x1, 0x3, 0xb1}) 10:47:38 executing program 2: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:38 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 1) 10:47:38 executing program 3: r0 = syz_io_uring_setup(0x8037a, &(0x7f00000000c0)={0x0, 0x29dd, 0x1, 0x3, 0x339}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x0, 0x7}, 0x100, './file0\x00'}) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:38 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) [ 2642.473363] loop5: detected capacity change from 0 to 2048 [ 2642.483193] FAULT_INJECTION: forcing a failure. [ 2642.483193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2642.484590] CPU: 1 PID: 14056 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2642.485391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2642.486359] Call Trace: [ 2642.486678] dump_stack+0x107/0x167 [ 2642.487106] should_fail.cold+0x5/0xa [ 2642.487563] _copy_from_user+0x2e/0x1b0 [ 2642.488037] io_uring_setup+0x9b/0x2980 [ 2642.488507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2642.489070] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2642.489659] ? wait_for_completion_io+0x270/0x270 [ 2642.490234] ? rcu_read_lock_any_held+0x75/0xa0 [ 2642.490776] ? vfs_write+0x354/0xb10 [ 2642.491207] ? fput_many+0x2f/0x1a0 [ 2642.491633] ? ksys_write+0x1a9/0x260 [ 2642.492078] ? __ia32_sys_read+0xb0/0xb0 [ 2642.492559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2642.493175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2642.493779] do_syscall_64+0x33/0x40 [ 2642.494228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2642.494829] RIP: 0033:0x7f768f557b19 [ 2642.495271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2642.497396] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2642.498282] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2642.499107] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2642.499941] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2642.500776] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2642.501596] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:47:38 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x81, 0x1f, 0x1, 0x0, 0x0, 0xb78, 0x2600a, 0x10, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0x5}, 0x4010, 0x4, 0x2, 0x5, 0x10001, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x8}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:38 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) statx(r3, &(0x7f0000000080)='./file0\x00', 0x1000, 0x800, &(0x7f0000000240)) 10:47:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x523080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100b02ad1f0de5f8b331dc60f00000000000007f8000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00') r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1b000/0x2000)=nil, 0x2000, 0x3000001, 0x100010, r2, 0x0) pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x8001, 0x0, 0x1, {0x0, r1, r2}}, 0xb7) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0, 0x920420, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES64]) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x800, 0x1, @thr={&(0x7f0000000600)="a72331956f20a0b94ac2e80000a41985834009a6e72c7dfdb32a142f38771dfbc545a94087055beb0c4929da29f5ff75be12c33119ecee6d2917275200f9dd8e385167e5d39d8f98d2646e8952ba54c600"/93, &(0x7f0000000400)="6055001410289801a9ad3355d3e775b732077b6765097350757e7d8c4c77b4e16ed65ad0cdad3887e510daec8f35ea73114cd688af7bda582b694b68ffd45970dc8eab587d5b8c17b12f0c23bdaaba8d80890747df29aa8df9990fc4b90c6344dc7d5f63a31bca3202209c0b92b3f3afb67a5028cdd7737b58c80e00"}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x1, &(0x7f0000000140)="46384e13ac35c4e29b094153a2ea4792291b0d6ae642b6958c4edef3af27566a34b51903dd1642aadd149258824643932152f1cccca1d422a261a365a1fe2fec10e7ae12a2bff248", 0x2, 0x0, 0x0, {0x3, r1}}, 0x20000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000340)=0xc) r4 = socket$unix(0x1, 0x1, 0x0) dup(r4) getpeername$unix(r4, &(0x7f0000000680), &(0x7f0000000040)=0x6e) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000300)=""/14, 0xe}], 0x2}, 0x0) 10:47:38 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x102) 10:47:38 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 2) 10:47:38 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 10:47:38 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) eventfd(0xd2) [ 2642.632935] FAULT_INJECTION: forcing a failure. [ 2642.632935] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.635446] CPU: 0 PID: 14073 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2642.636931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2642.638715] Call Trace: [ 2642.639294] dump_stack+0x107/0x167 [ 2642.640101] should_fail.cold+0x5/0xa [ 2642.640912] ? io_uring_setup+0x258/0x2980 [ 2642.641829] should_failslab+0x5/0x20 [ 2642.642667] kmem_cache_alloc_trace+0x55/0x320 [ 2642.643662] io_uring_setup+0x258/0x2980 [ 2642.644549] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2642.645610] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2642.646720] ? wait_for_completion_io+0x270/0x270 [ 2642.647799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2642.648926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2642.650075] do_syscall_64+0x33/0x40 [ 2642.650874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2642.651993] RIP: 0033:0x7f768f557b19 [ 2642.652819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2642.656860] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2642.658507] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2642.660040] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2642.661566] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2642.663106] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2642.664634] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:47:56 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:56 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x523080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100b02ad1f0de5f8b331dc60f00000000000007f8000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00') r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1b000/0x2000)=nil, 0x2000, 0x3000001, 0x100010, r2, 0x0) pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x8001, 0x0, 0x1, {0x0, r1, r2}}, 0xb7) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0, 0x920420, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES64]) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x800, 0x1, @thr={&(0x7f0000000600)="a72331956f20a0b94ac2e80000a41985834009a6e72c7dfdb32a142f38771dfbc545a94087055beb0c4929da29f5ff75be12c33119ecee6d2917275200f9dd8e385167e5d39d8f98d2646e8952ba54c600"/93, &(0x7f0000000400)="6055001410289801a9ad3355d3e775b732077b6765097350757e7d8c4c77b4e16ed65ad0cdad3887e510daec8f35ea73114cd688af7bda582b694b68ffd45970dc8eab587d5b8c17b12f0c23bdaaba8d80890747df29aa8df9990fc4b90c6344dc7d5f63a31bca3202209c0b92b3f3afb67a5028cdd7737b58c80e00"}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x1, &(0x7f0000000140)="46384e13ac35c4e29b094153a2ea4792291b0d6ae642b6958c4edef3af27566a34b51903dd1642aadd149258824643932152f1cccca1d422a261a365a1fe2fec10e7ae12a2bff248", 0x2, 0x0, 0x0, {0x3, r1}}, 0x20000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000340)=0xc) r4 = socket$unix(0x1, 0x1, 0x0) dup(r4) getpeername$unix(r4, &(0x7f0000000680), &(0x7f0000000040)=0x6e) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000300)=""/14, 0xe}], 0x2}, 0x0) 10:47:56 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) 10:47:56 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffc}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x523080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000740)=ANY=[@ANYBLOB="0100b02ad1f0de5f8b331dc60f00000000000007f8000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00') r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1b000/0x2000)=nil, 0x2000, 0x3000001, 0x100010, r2, 0x0) pread64(r2, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x8001, 0x0, 0x1, {0x0, r1, r2}}, 0xb7) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0, 0x920420, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES64]) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x800, 0x1, @thr={&(0x7f0000000600)="a72331956f20a0b94ac2e80000a41985834009a6e72c7dfdb32a142f38771dfbc545a94087055beb0c4929da29f5ff75be12c33119ecee6d2917275200f9dd8e385167e5d39d8f98d2646e8952ba54c600"/93, &(0x7f0000000400)="6055001410289801a9ad3355d3e775b732077b6765097350757e7d8c4c77b4e16ed65ad0cdad3887e510daec8f35ea73114cd688af7bda582b694b68ffd45970dc8eab587d5b8c17b12f0c23bdaaba8d80890747df29aa8df9990fc4b90c6344dc7d5f63a31bca3202209c0b92b3f3afb67a5028cdd7737b58c80e00"}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x1, &(0x7f0000000140)="46384e13ac35c4e29b094153a2ea4792291b0d6ae642b6958c4edef3af27566a34b51903dd1642aadd149258824643932152f1cccca1d422a261a365a1fe2fec10e7ae12a2bff248", 0x2, 0x0, 0x0, {0x3, r1}}, 0x20000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000340)=0xc) r4 = socket$unix(0x1, 0x1, 0x0) dup(r4) getpeername$unix(r4, &(0x7f0000000680), &(0x7f0000000040)=0x6e) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000300)=""/14, 0xe}], 0x2}, 0x0) 10:47:56 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb25}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0x0, 0x0, 0x80, 0x0, 0x0, 0x10811, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffff9}, 0x0, 0x70, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x0, 0xff, 0x0, 0x1000}, 0x0, 0x7, 0xffffffffffffffff, 0xf5a1def87fe0c67d) openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:56 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 3) 10:47:56 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r6, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)}, {&(0x7f0000000240)=""/171, 0xab}], 0x2, &(0x7f0000000300)=""/248, 0xf8}, 0x0, 0x1, 0x1}, 0xe9) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2660.395962] FAULT_INJECTION: forcing a failure. [ 2660.395962] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.398409] CPU: 1 PID: 14106 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2660.399872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2660.401620] Call Trace: [ 2660.402185] dump_stack+0x107/0x167 [ 2660.402971] should_fail.cold+0x5/0xa [ 2660.403781] ? create_object.isra.0+0x3a/0xa30 [ 2660.404756] should_failslab+0x5/0x20 [ 2660.405567] kmem_cache_alloc+0x5b/0x310 [ 2660.406437] create_object.isra.0+0x3a/0xa30 [ 2660.407362] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2660.408437] kmem_cache_alloc_trace+0x151/0x320 [ 2660.409430] io_uring_setup+0x258/0x2980 [ 2660.410296] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2660.411285] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2660.412337] ? wait_for_completion_io+0x270/0x270 [ 2660.413376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.414499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2660.415596] do_syscall_64+0x33/0x40 10:47:56 executing program 0: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2660.416386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2660.417695] RIP: 0033:0x7f768f557b19 [ 2660.418480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2660.422406] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2660.424002] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2660.425491] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2660.426982] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2660.428479] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2660.429957] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2660.457105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.458614] print_req_error: 403 callbacks suppressed [ 2660.458633] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2660.462158] buffer_io_error: 414 callbacks suppressed [ 2660.462170] Buffer I/O error on dev sr0, logical block 0, async page read [ 2660.465353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.466757] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 0 [ 2660.469039] Buffer I/O error on dev sr0, logical block 1, async page read [ 2660.470741] Buffer I/O error on dev sr0, logical block 2, async page read [ 2660.472444] Buffer I/O error on dev sr0, logical block 3, async page read [ 2660.474106] Buffer I/O error on dev sr0, logical block 4, async page read [ 2660.475825] Buffer I/O error on dev sr0, logical block 5, async page read [ 2660.477509] Buffer I/O error on dev sr0, logical block 6, async page read [ 2660.479215] Buffer I/O error on dev sr0, logical block 7, async page read [ 2660.481913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.483539] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2660.485659] Buffer I/O error on dev sr0, logical block 0, async page read [ 2660.487419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.489128] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2660.491717] Buffer I/O error on dev sr0, logical block 1, async page read [ 2660.493617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.495182] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2660.498175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.499470] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2660.501768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.503041] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2660.508411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.509663] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2660.511966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.513672] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2660.516212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.517443] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2660.519759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.521976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.525227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.527122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.528565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.530151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.532628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.534018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.535531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.536936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.538662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.540048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.541454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.542858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.544312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.545676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.547146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.548609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.551008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.553846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.555616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.557423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.559070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.560552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.562162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.563563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.565344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.566696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.568062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.569456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.570923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.572381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.573735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.575327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.577044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.578475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.579902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.581334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.582822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.584505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.585925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.587652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.589180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.590567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.591992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.593495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.594853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.596317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.597695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.599416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.600999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.602527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.603931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.605423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.606860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.608608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.610558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.611981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.613970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.615644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.617036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.618478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.619889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.621322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.622673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.632183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.633973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.635655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.636946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.638735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.643529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.645393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.646809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.648422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.649711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.651184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.652467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.653855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.658387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.659738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.661119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.662965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.665221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.666691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.668335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.669694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.671072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.672466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.674006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.675939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.677246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.678830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.680121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.681612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.682856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.691088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.692704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.694049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.695429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:47:56 executing program 0: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2660.696719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.698475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.699773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.701120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.702527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.703881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.705183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.706518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.707811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.709143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.710833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:47:56 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x13, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x6) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x140}, 0x1, {0x0, r6}}, 0x3) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:56 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x1cd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) openat(r3, &(0x7f0000000080)='./file0\x00', 0x329000, 0x1) [ 2660.713759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.715301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.716920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.718329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:47:56 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) [ 2660.719635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.721125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.722464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.723773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.725079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.726491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.727825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.729125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.733420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.734759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.736056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:47:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x14e000, 0x2, &(0x7f0000000180)="0dbfeb1084ad27f3497665a6d32631bf5f905ee822c2c43beed2b5927108abcc3c60c159a9307b882f8cba0bcfd23025db5ab29d781ed8371ee17a41eadabc96a93a88fb75dc6aff60848007b9e03e302381897906", 0x80}, 0x6673) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6) [ 2660.737404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.738957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.740497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.744425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.745739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.747226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.748537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.750099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.751499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.752801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.754162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.755481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.756898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.758187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.759523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.760828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.762289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.763604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.764910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.766294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.767595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.768889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.770209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.771526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.772904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.774380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.775671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.776983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.778463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.779820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.781133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.782489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.783953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.785448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.786995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.788389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.789727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.791055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.792459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.793780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.795137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.796526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.797852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.799177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.800492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.801798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.803089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.804430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.805831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.807136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.808471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.809792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.811146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.812477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.814444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.815781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:47:56 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 2660.817172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.818723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.820665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.821980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.823390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.824697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.826032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.827371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.828771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.830089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.831455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.832769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.834110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.835466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.836807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.838141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.839550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.840978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.842759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.844168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.845486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.846927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.848276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.849588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.851029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.852607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.853938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.855838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.857150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.858551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.859872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.861359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.862736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.864121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.865628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.866993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.868375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.869704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.871025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.872382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.873813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.878401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.879693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.881560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.882869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.884223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.885521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.887023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.888812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.890143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.891488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.893209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.894527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.895902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.897215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.898670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.900089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.901399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.902741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.904030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.905333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.906684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.907982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.909438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.910787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:47:57 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 4) [ 2660.912792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.918530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.920082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.921697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.923191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.924451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.925744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.928092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.929405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.930700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.931997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.933290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.934942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.936209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.937545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2660.990743] FAULT_INJECTION: forcing a failure. [ 2660.990743] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.992982] CPU: 1 PID: 14133 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2660.994337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2660.995945] Call Trace: [ 2660.996466] dump_stack+0x107/0x167 [ 2660.997179] should_fail.cold+0x5/0xa [ 2660.997924] ? io_uring_setup+0x33c/0x2980 [ 2660.998766] should_failslab+0x5/0x20 [ 2660.999517] __kmalloc+0x72/0x390 [ 2661.000200] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2661.001208] io_uring_setup+0x33c/0x2980 [ 2661.002006] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2661.002967] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2661.003942] ? wait_for_completion_io+0x270/0x270 [ 2661.004893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2661.005905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2661.006909] do_syscall_64+0x33/0x40 [ 2661.007626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2661.008613] RIP: 0033:0x7f768f557b19 [ 2661.009330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2661.012864] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2661.014333] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2661.015689] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2661.017063] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2661.018443] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2661.019807] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:47:57 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c80)='./file0\x00', 0x108, 0x303, 0x23456}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r6 = syz_io_uring_setup(0x2c04, &(0x7f00000002c0)={0x0, 0x4e01, 0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r6, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x6) r7 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f0000000140)=[r7, r4]}, 0x2) 10:47:57 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) 10:47:57 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x63) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:47:57 executing program 1: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_setup(0x3866, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd_index=0x7, 0x4, 0x5, 0x8, 0x6, 0x1}, 0xe0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x5, 0x1, 0x0, 0xc0, 0x0, 0x7f, 0x80a20, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3ff, 0x296f}, 0x1421, 0xc1, 0x4, 0x24c143855a836403, 0x7f, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r2, 0x1) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:13 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) 10:48:13 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) 10:48:13 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x19, 0x1, {0x0, r7}}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000210000000000c5d7afe18a50fe31c9a65b4da15e642a47d1215b67ee380e2a117eb60a7ac4f20ac057fdd07db14ffa5690d603b38f556a6e8bcf57974f7a7c9ebf2952cacc9ef7600ebfb82135ea89ab0665c4deed9760e2c4c34727d2b7c18842e8b687021b769400176b2fdb0af427e072d30dc9ade9923f9106c039a15f126e2480440e1705ed451aa172f1bb42af22ccff562e90a9b152264c1694839fa371f214cad4d7e6060b1ab101d7929046b0ed01aca72d985d894ab162c30ab545ec5a92d8af69e879e2654c33fea76610860b", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r10 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r10, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x800001, 0x810, r9, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x40, 0x1) io_uring_enter(r10, 0x58ab, 0x0, 0x0, 0x0, 0x6) sendfile(r9, r10, &(0x7f0000000100)=0x2, 0x6) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:13 executing program 1: r0 = syz_io_uring_setup(0x378, &(0x7f0000000180)={0x0, 0x99af, 0x1, 0x0, 0x299}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000d1d000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) io_uring_enter(r4, 0x7b23, 0x1d28, 0x1, &(0x7f00000000c0)={[0x48000000000000]}, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:13 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 5) 10:48:13 executing program 0: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:13 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 10:48:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b7}]]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020d5a00200000000000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x20000000) r6 = syz_io_uring_setup(0x754b, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1d000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x103720, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r6, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2677.368398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2677.374964] FAULT_INJECTION: forcing a failure. [ 2677.374964] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.377365] CPU: 0 PID: 14163 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2677.378833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2677.380574] Call Trace: [ 2677.381143] dump_stack+0x107/0x167 [ 2677.381928] should_fail.cold+0x5/0xa [ 2677.382750] ? create_object.isra.0+0x3a/0xa30 [ 2677.383720] should_failslab+0x5/0x20 [ 2677.384541] kmem_cache_alloc+0x5b/0x310 [ 2677.385417] create_object.isra.0+0x3a/0xa30 [ 2677.386345] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2677.387441] __kmalloc+0x16e/0x390 [ 2677.388212] io_uring_setup+0x33c/0x2980 [ 2677.389083] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2677.390114] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2677.391191] ? wait_for_completion_io+0x270/0x270 [ 2677.392247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2677.393366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2677.394486] do_syscall_64+0x33/0x40 [ 2677.395280] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2677.396367] RIP: 0033:0x7f768f557b19 [ 2677.397156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2677.401024] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2677.402655] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2677.404160] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2677.405677] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2677.406096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2677.407206] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2677.407223] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:48:13 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:13 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) 10:48:13 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:13 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) 10:48:13 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x6601, &(0x7f0000000080)={0x0, 0x2f97, 0x0, 0x1, 0x20e, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x2, 0x6, &(0x7f00000002c0)=[{&(0x7f0000000240)="4a031f12728447771f0f4e5274258e60b484dafdb8751d8d9bf8e710b03246158d6a73725d68e63a8dff6ac60f8cbb5a79ba60f315da99b2d252208d6005816f42", 0x41}], 0x1, 0x17, 0x1, {0x3}}, 0x7f) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:13 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r6, 0x5a42000) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:13 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000d1e000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:13 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 6) [ 2677.724786] FAULT_INJECTION: forcing a failure. [ 2677.724786] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.727430] CPU: 1 PID: 14193 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2677.728916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2677.730669] Call Trace: [ 2677.731231] dump_stack+0x107/0x167 [ 2677.732004] should_fail.cold+0x5/0xa [ 2677.732813] ? io_uring_setup+0x40b/0x2980 [ 2677.733713] should_failslab+0x5/0x20 [ 2677.734523] kmem_cache_alloc_trace+0x55/0x320 [ 2677.735489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2677.736570] io_uring_setup+0x40b/0x2980 [ 2677.737441] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2677.738472] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2677.739538] ? wait_for_completion_io+0x270/0x270 [ 2677.740588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2677.741702] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2677.742804] do_syscall_64+0x33/0x40 [ 2677.743594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2677.744683] RIP: 0033:0x7f768f557b19 [ 2677.745465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2677.749300] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2677.750872] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2677.752345] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2677.753861] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2677.755367] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2677.756880] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:48:29 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 7) 10:48:29 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x6ee0, 0x10}, &(0x7f0000d1c000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x1, '\x00', @c}) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:29 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:29 executing program 4: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:29 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) 10:48:29 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) 10:48:29 executing program 2: r0 = syz_io_uring_setup(0x580c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:29 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2693.650149] FAULT_INJECTION: forcing a failure. [ 2693.650149] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.652528] CPU: 0 PID: 14213 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2693.653976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.655741] Call Trace: [ 2693.656301] dump_stack+0x107/0x167 [ 2693.657084] should_fail.cold+0x5/0xa [ 2693.657895] ? create_object.isra.0+0x3a/0xa30 [ 2693.658870] should_failslab+0x5/0x20 [ 2693.659678] kmem_cache_alloc+0x5b/0x310 [ 2693.660544] create_object.isra.0+0x3a/0xa30 [ 2693.661469] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2693.662550] kmem_cache_alloc_trace+0x151/0x320 [ 2693.663562] io_uring_setup+0x40b/0x2980 [ 2693.664427] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2693.665451] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2693.666520] ? wait_for_completion_io+0x270/0x270 [ 2693.667579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.668687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.669792] do_syscall_64+0x33/0x40 [ 2693.670592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2693.671666] RIP: 0033:0x7f768f557b19 [ 2693.672455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.676358] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2693.677963] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2693.679458] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2693.680923] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2693.682390] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2693.683859] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:48:29 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) 10:48:29 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:29 executing program 4: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:29 executing program 3: syz_usb_connect$uac1(0x7, 0xed, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x8, 0x13a70e87335ec1ea, 0xdb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x5}, [@selector_unit={0x6, 0x24, 0x5, 0x5, 0x5, "12"}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, 0x4, [0x5, 0x6, 0x5, 0x7], 0x5}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0x8, "0ae1a063"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x0, 0xff, "1e"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x5, 0x6, "f7f1bf"}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x5, 0x6, [0x4, 0x3, 0x4, 0x9, 0x8, 0x1], 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xff, 0x4, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2a}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x4f, 0x1, "fa48ee"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0x90, 'e', "32f8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe0, 0x0, 0xf0, {0x7, 0x25, 0x1, 0x0, 0x5e, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0x0, "f591d8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x40, 0x8, 0x4, {0x7, 0x25, 0x1, 0x81, 0x0, 0x5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xf9, 0x6, 0x7, 0x20, 0x7}, 0x4e, &(0x7f0000000340)={0x5, 0xf, 0x4e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x20, 0x80}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0xee0000, 0xff00, 0x7, [0xffc000, 0x0, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x7, 0xff, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x12, 0x68, 0x0, 0x101}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x0, 0x81}, @generic={0xb, 0x10, 0x6, "1aa6435c44e1ea4f"}]}, 0x2, [{0xc6, &(0x7f00000003c0)=@string={0xc6, 0x3, "1e8c890b2ef0eee0cb4e47324383c9cb04309b512221e5cce49598e2f672ff93495b29c1048a6adc13503ec33dd89cc94e0c5d65a2df4973292b44590ee9da0d56fa0979a4216ebc791b1ca4fb6b2c13d91717e68948499c1eb920cbec2c9fffb65c9650369b610fb2ce6dfc09a3b8f2be9d855c48141b3e80ddcf0c98a78ef66e064cb67e36a7bcc04d10df32425eb432f65f1224097c8ca6878fcd8fafc0b4e26bef93679638d2d74df7303c4a2ca26b97cc175866de202043e2829a8165a0083cab17"}}, {0x60, &(0x7f00000004c0)=@string={0x60, 0x3, "3dfe9489699191637d68e5e2a5ea56ac782315a38a15022f27a237e3be3435abb22c8bcf2172995311d21f19231f439edafe54de17dc613b374b14af7a75edbe172ca58c3bd850370432e19778fdcb3bcb5cb2d3498b45acc6fb6e6fe38f"}}]}) r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x653b, &(0x7f0000000080)={0x0, 0xe727, 0x0, 0x3, 0x146}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000d1c000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 10:48:29 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000d1e000/0x4000)=nil, 0x4000, 0x5, 0x30, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x6) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x3202}}, 0xff71) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup(r6) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000283dc9fa99fea321ee67b6d3ae08fbbecb1cb77d0bb3420937e9723c1c874d497c", @ANYRES32, @ANYBLOB="6362cd88000000102e00800000653000"]) 10:48:29 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) 10:48:29 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r7, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r11, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r9, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x9, 0x6, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x10001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:29 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 8) 10:48:48 executing program 4: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0xffffffff, 0x1, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r3 = io_uring_setup(0x7019, &(0x7f0000000080)={0x0, 0xc7b6, 0x1, 0x3, 0x1c6}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x3) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000d1c000/0x3000)=nil, 0x3000, 0x64, 0x0, {0x0, r4}}, 0x7) 10:48:48 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_setup(0x6d70, &(0x7f0000000280)={0x0, 0x46af, 0x4, 0x0, 0x16b, 0x0, r3}, &(0x7f0000d1e000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x19}, 0x5) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat2(r5, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x101000, 0x1ce, 0x10}, 0x18) openat(r3, &(0x7f0000000080)='./file0\x00', 0xc0400, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) signalfd4(r8, &(0x7f0000000380)={[0x9]}, 0x8, 0x800) 10:48:48 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) 10:48:48 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2712.345117] FAULT_INJECTION: forcing a failure. [ 2712.345117] name failslab, interval 1, probability 0, space 0, times 0 [ 2712.347082] CPU: 1 PID: 14258 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2712.348222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2712.349597] Call Trace: [ 2712.350039] dump_stack+0x107/0x167 [ 2712.350648] should_fail.cold+0x5/0xa [ 2712.351308] ? create_object.isra.0+0x3a/0xa30 [ 2712.352062] should_failslab+0x5/0x20 [ 2712.352698] kmem_cache_alloc+0x5b/0x310 [ 2712.353389] create_object.isra.0+0x3a/0xa30 [ 2712.354126] kmemleak_alloc_percpu+0xa0/0x100 [ 2712.354907] pcpu_alloc+0x4e2/0x1240 [ 2712.355548] ? io_tctx_exit_cb+0xf0/0xf0 [ 2712.356230] percpu_ref_init+0x31/0x3d0 [ 2712.356898] io_uring_setup+0x47a/0x2980 [ 2712.357574] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2712.358383] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2712.359246] ? wait_for_completion_io+0x270/0x270 [ 2712.360072] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2712.360952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2712.361814] do_syscall_64+0x33/0x40 [ 2712.362432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2712.363279] RIP: 0033:0x7f768f557b19 [ 2712.363891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2712.366927] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2712.368174] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2712.369360] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2712.370532] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2712.371734] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2712.372916] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:48:48 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 9) 10:48:48 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) io_uring_enter(r0, 0x3564, 0xf1b5, 0x0, &(0x7f0000000100)={[0x1f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x0, @broadcast}}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)={r4, r5+60000000}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x47}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8f, 0x20, 0x4, 0x4, 0x0, 0x456c, 0x84108, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5f67, 0x2bb}, 0x3c8, 0x1, 0x20, 0x9, 0x0, 0x0, 0x40, 0x0, 0x7e0000, 0x0, 0x3}, r4, 0xc, r3, 0xd) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x3a46}}, './file0\x00'}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 5: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x8ed, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4000000, 0x390, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)) [ 2712.580337] FAULT_INJECTION: forcing a failure. [ 2712.580337] name failslab, interval 1, probability 0, space 0, times 0 [ 2712.582784] CPU: 0 PID: 14273 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2712.584243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2712.585996] Call Trace: [ 2712.586569] dump_stack+0x107/0x167 [ 2712.587356] should_fail.cold+0x5/0xa [ 2712.588165] ? create_object.isra.0+0x3a/0xa30 [ 2712.589131] should_failslab+0x5/0x20 [ 2712.589936] kmem_cache_alloc+0x5b/0x310 [ 2712.590823] create_object.isra.0+0x3a/0xa30 [ 2712.591758] kmemleak_alloc_percpu+0xa0/0x100 [ 2712.592717] pcpu_alloc+0x4e2/0x1240 [ 2712.593523] ? io_tctx_exit_cb+0xf0/0xf0 [ 2712.594386] percpu_ref_init+0x31/0x3d0 [ 2712.595248] io_uring_setup+0x47a/0x2980 [ 2712.596112] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2712.597136] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2712.598208] ? wait_for_completion_io+0x270/0x270 [ 2712.599264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2712.600373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2712.601468] do_syscall_64+0x33/0x40 [ 2712.602263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2712.603361] RIP: 0033:0x7f768f557b19 [ 2712.604145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2712.608033] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2712.609645] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2712.611169] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2712.612672] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2712.614178] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2712.615702] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:48:48 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) sendfile(r0, r4, &(0x7f0000000080)=0xfacb, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:48:48 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r3, r4) r6 = dup(r5) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x28006, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r7, &(0x7f0000000340)=0x80, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, 0x800, 0x1}, 0x7f) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_io_uring_setup(0x105d, &(0x7f0000000240)={0x0, 0x238a, 0x1, 0x0, 0xe8, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000d1e000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) execveat(r6, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x800) 10:49:06 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 10) 10:49:06 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) openat(r3, &(0x7f0000000080)='./file0\x00', 0x84300, 0x8) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x108) 10:49:06 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2729.894459] FAULT_INJECTION: forcing a failure. [ 2729.894459] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.897402] CPU: 0 PID: 14293 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2729.899188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2729.900915] Call Trace: [ 2729.901596] dump_stack+0x107/0x167 [ 2729.902370] should_fail.cold+0x5/0xa [ 2729.903190] ? percpu_ref_init+0xd8/0x3d0 [ 2729.904062] should_failslab+0x5/0x20 [ 2729.905041] kmem_cache_alloc_trace+0x55/0x320 [ 2729.905988] ? io_tctx_exit_cb+0xf0/0xf0 [ 2729.907049] percpu_ref_init+0xd8/0x3d0 [ 2729.908086] io_uring_setup+0x47a/0x2980 [ 2729.909139] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2729.910374] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2729.911686] ? wait_for_completion_io+0x270/0x270 [ 2729.912773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2729.914096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2729.915205] do_syscall_64+0x33/0x40 [ 2729.916170] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2729.917215] RIP: 0033:0x7f768f557b19 [ 2729.918170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2729.921927] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2729.923868] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2729.925701] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2729.927535] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2729.929355] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2729.931199] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:49:06 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r1 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r1, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 5: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 2: r0 = epoll_create1(0x0) write(r0, &(0x7f0000000080)="72df4117376a9fc6b613e3e7a3c9c998356dfbb1372458d126c7a53d59f0b6c5c2d152afa793f35a93acf2a9aead1111555d53e21ba37a0e9d42781b24f5a671c477fbcb14f506159733e84735695d6e20d034b17565a105561195c97096587e", 0x60) r1 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) epoll_pwait(r6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7f, &(0x7f0000000240)={[0x3]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000380)=ANY=[@ANYBLOB="525231a3010047e357fd7c79c2b7377ff3ffb3876a0f0aa2f941d92cdd262ca5a6dd2524898542eb8da7d695b1714483d232d2e85bf1f62f041e6f4e9c3a40339f3c38b72e9706c3e38e1f6cd429dcde573b2e663be584a7a33ac30c5a25be0298533eb026937ddc873e44aefa8ec1a5545ba674af1a6ce87a2657b6823c2e1f7a68cd386eb5e05398eb93ee13ddb25106f80cec70879fd30f8a27d7b01080ce5af5f5519e2c3156fbeec8e3eef1a6e9b760fa3738ba5ac015c9fbd224b8493f3e9dd352ab04b19bd5e432083eacda44585ad7b4", @ANYRES32=r6, @ANYBLOB="02000000000000002e2f66696c653000"]) ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f00000002c0)) io_uring_enter(r1, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) r9 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r9, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) io_uring_enter(r9, 0x58ab, 0x0, 0x0, 0x0, 0x6) copy_file_range(r8, &(0x7f0000000300)=0x7, r9, &(0x7f0000000340)=0x4, 0x7, 0x0) 10:49:06 executing program 7: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002e40)={0x28, 0x1e, 0x69844ea0a6ddcd11, 0x0, 0x0, {0x0, 0x2}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}, 0x28}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x2}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x90000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'}) 10:49:06 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 5: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:06 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:21 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:21 executing program 7: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:21 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x19, 0x0, {0x0, r1}}, 0x0) r2 = syz_io_uring_setup(0x839, &(0x7f0000000080)={0x0, 0xec7c, 0x20, 0x0, 0x2d1, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x200, 0x1a7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x800000, 0x20010, r5, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x2c38, &(0x7f0000000340)={0x0, 0x1bfd, 0x8, 0x0, 0x1c5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = syz_open_procfs(0x0, &(0x7f0000000480)='autogroup\x00') syz_io_uring_submit(r3, r7, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[r2, r10, r2], 0x3, 0x0, 0x1}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000180), 0x1, 0x1, 0x1, {0x0, r11}}, 0x4) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:21 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x20}, &(0x7f0000d1c000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:21 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 11) 10:49:21 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:21 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@random={'security.', '\x00'}, &(0x7f0000000280)='[\xc8-\\\x00', 0x5, 0x2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$incfs(r5, &(0x7f0000000080)='.pending_reads\x00', 0x408000, 0x80) [ 2745.848154] FAULT_INJECTION: forcing a failure. [ 2745.848154] name failslab, interval 1, probability 0, space 0, times 0 [ 2745.849883] CPU: 0 PID: 14342 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2745.851181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2745.852737] Call Trace: [ 2745.853243] dump_stack+0x107/0x167 [ 2745.853935] should_fail.cold+0x5/0xa [ 2745.854656] ? create_object.isra.0+0x3a/0xa30 [ 2745.855537] should_failslab+0x5/0x20 [ 2745.856247] kmem_cache_alloc+0x5b/0x310 [ 2745.857000] create_object.isra.0+0x3a/0xa30 [ 2745.857694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2745.858646] kmem_cache_alloc_trace+0x151/0x320 [ 2745.859340] ? io_tctx_exit_cb+0xf0/0xf0 [ 2745.860101] percpu_ref_init+0xd8/0x3d0 [ 2745.860684] io_uring_setup+0x47a/0x2980 [ 2745.861439] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2745.862203] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2745.863211] ? wait_for_completion_io+0x270/0x270 [ 2745.863939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2745.864904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2745.865721] do_syscall_64+0x33/0x40 [ 2745.866409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2745.867376] RIP: 0033:0x7f768f557b19 [ 2745.867920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2745.871324] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2745.872740] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2745.874078] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2745.875414] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2745.876735] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2745.878063] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:49:22 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:22 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 12) [ 2745.986619] FAULT_INJECTION: forcing a failure. [ 2745.986619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2745.988388] CPU: 0 PID: 14355 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2745.989377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2745.990614] Call Trace: [ 2745.991028] dump_stack+0x107/0x167 [ 2745.991576] should_fail.cold+0x5/0xa [ 2745.992145] __alloc_pages_nodemask+0x182/0x600 [ 2745.992847] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2745.993742] ? cap_capable+0x1cd/0x230 [ 2745.994328] alloc_pages_current+0x187/0x280 [ 2745.994974] __get_free_pages+0xc/0xa0 [ 2745.995550] io_uring_setup+0xe27/0x2980 [ 2745.996164] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2745.996925] ? wait_for_completion_io+0x270/0x270 [ 2745.997661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2745.998446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2745.999220] do_syscall_64+0x33/0x40 [ 2745.999779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2746.000518] RIP: 0033:0x7f768f557b19 [ 2746.001071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2746.003758] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2746.004877] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2746.005929] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2746.006982] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2746.008025] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2746.009059] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:49:35 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 13) 10:49:35 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = syz_io_uring_setup(0x9a9, &(0x7f0000000100)={0x0, 0xcf5b, 0x1, 0x1, 0x1a7, 0x0, r3}, &(0x7f0000d1c000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = socket(0x18, 0x2, 0x3) write$binfmt_script(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x101e) syz_io_uring_submit(r1, r5, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x100, 0x3}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000d1b000/0x4000)=nil, 0x4000, 0x2000009, 0x20010, r3, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x3, 0x6000, @fd_index=0xa, 0x5, &(0x7f00000004c0)="528def7e219008af6740f8f9f58eecfd7c05e69e3a1d5c7662d74b8b89629271a0fdb7ce5ede3606c1df3fe4b014a2bb40bcd9c311cc9a833929fd6fe7b58e8093c97657eb4884780cc608371d907073af772aedf415f40124a33259441ec1070a0eb27f7eaccbdf88714a2cf9c5e9739db6edc1cb6fcf3dcdf1aa88c9639aa68b", 0x81, 0x8, 0x1}, 0x6) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='\x00', 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x6b6d, &(0x7f00000002c0)={0x0, 0x5c9b, 0x4, 0x3, 0x1d5, 0x0, r0}, &(0x7f0000d1c000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9f91e3024f148ea4, 0x20010, r4, 0x10000000) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000480)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)="d9c578e876ee7babbbeb4374238c8765d4f7c7ae33517cc3a41d020ab27f4b78662003042a42c470099b54900e56ce1800a6829bef0c2fba641e93e528249ad9f34966ed3537b162c28172d07ae4f81457e4a52af3502f09235a68a0a980e2", 0xff, 0x0, 0x1, {0x3, r12}}, 0x0) 10:49:35 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_open_dev$mouse(&(0x7f0000000080), 0x20, 0x840) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x2a00, 0x2) 10:49:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 7: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b7}]]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2442}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x94, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xad}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x40) r4 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r4, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) syz_io_uring_setup(0x2787, &(0x7f00000000c0)={0x0, 0x3629, 0x2, 0x3, 0x309, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240)) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mount$9p_xen(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2000, &(0x7f0000000380)={'trans=xen,', {[{@version_L}, {@aname={'aname', 0x3d, '^@%}{!{\\/'}}, {@loose}, {@debug={'debug', 0x3d, 0x100000000}}, {@fscache}, {@cache_loose}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@uid_gt}, {@smackfshat={'smackfshat', 0x3d, ']\'^@](-\'.'}}, {@smackfsdef={'smackfsdef', 0x3d, '--\xd2\'-+$[.\\'}}]}}) [ 2759.562585] FAULT_INJECTION: forcing a failure. [ 2759.562585] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2759.563968] CPU: 1 PID: 14378 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2759.564727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2759.565648] Call Trace: [ 2759.565946] dump_stack+0x107/0x167 [ 2759.566354] should_fail.cold+0x5/0xa [ 2759.566779] __alloc_pages_nodemask+0x182/0x600 [ 2759.567311] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2759.567980] ? cap_capable+0x1cd/0x230 [ 2759.568427] alloc_pages_current+0x187/0x280 [ 2759.568912] __get_free_pages+0xc/0xa0 [ 2759.569348] io_uring_setup+0xe27/0x2980 [ 2759.569802] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2759.570359] ? wait_for_completion_io+0x270/0x270 [ 2759.570907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2759.571497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2759.572064] do_syscall_64+0x33/0x40 [ 2759.572479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2759.573043] RIP: 0033:0x7f768f557b19 [ 2759.573455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2759.575470] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2759.576307] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2759.577087] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2759.577868] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2759.578653] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2759.579453] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:49:35 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = signalfd(r3, &(0x7f0000000280)={[0x4]}, 0x8) r10 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r14, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r3, &(0x7f0000000080)={0x40002000}, r9, 0x3, 0x0, 0x0, {0x0, r13}}, 0xfffffffc) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="a40f0000000000004d2f66696c6530001f7c8fe9"]) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002340)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000002440)=0xe8) sendmmsg$sock(r15, &(0x7f0000004a40)=[{{&(0x7f00000000c0)=@generic={0xa, "bd78736428411e54f914915dfc773b190833aef48d7f80fc36e42557047f7036c61e5c4cc9a9554067de364f2ad8f1d15cf6c719dc8075544b4636bb05094057ed11cd9d17733a6a05734d745c0100d54d70a8525d66f8b060db9fd577888b75394406fcc4b417ca28c2b676296f13e1c7785999c89e0ea4be4b94836a36"}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14}}], 0x30}}, {{&(0x7f0000002480)=@can={0x1d, r16}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002500)="0ada37c590648f9a579bc89c432c95de144fe9ffeffba88f80170d514e3411e1bf9c3fabc4137d77ea6b5a8274fc5a14250d622703df1de6fa32cd68887cba337c6249afb661e70e4118ac8f1f5668bc3cb65e9f4964a6e19e9c21890266f2ba5ed821453a6862a60036776484c0e84ee9274105ee9b504c367ee99918eb036db2e171e01db44e1978abc70c3dc0d8a7a7eabaf9b7f1e16f25b365", 0x9b}], 0x1, &(0x7f0000002600)=[@mark={{0x14, 0x1, 0x24, 0xfff}}], 0x18}}, {{&(0x7f0000002640)=@ll={0x11, 0xd, 0x0, 0x1, 0x9, 0x6, @local}, 0x80, &(0x7f0000002800)=[{&(0x7f00000026c0)="ee0c208810c4b0a3589d3a9fc931b106c5107e32cc35", 0x16}, {&(0x7f0000002700)="aac629e625bbf8ee979746a8ff8b1318cc2d5dfd5ffef79757e2314debc05f448e8d2c4c4585b316669d2f29fe466d72af648e8f4df2aaa6823ef53d03c9b7dc75f0c1b0d58991554f69f2329ef0350f01134435738c16602fd305c9216046203fabc161aa4c85ec16debf1ecbf9fa67708719aebf38bf3cbdb937c184fefe817c82b1036ccac5be3c8bac0ff1b60347974c8164a13c6942ea4e5a89416427", 0x9f}, {&(0x7f00000027c0)}], 0x3, &(0x7f0000002840)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2ba3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x221d9fe1}}, @txtime={{0x18}}], 0x90}}, {{&(0x7f0000002900)=@llc={0x1a, 0xfffe, 0x81, 0x3f, 0x5, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002980)="bb3a3614ab4bd566ea1872f0f3f91a84013af92edc0b7ce752945a15199eda7dc9c8b4c73230cccf3226675e2e7594949b21be05bdbc2ca9612ae90c9e134a73f1523809b0c72961e938d088ecfb949e00f2c3048b0c55989c9bf870aba43a3a73a557096d88ee2489143b00b7a2310342f985ecb5304e6a9ea6b18e503b531ea6d18052acda20410f848b8170389cfe52ecbd5a439a7482499c501f569a4918c5dd984adf15a83c7ba8b881361b55", 0xaf}, {&(0x7f0000002a40)="7582fb068295136d07b84f93b49a759d814f5c1e20250de89c2e2f4bb8adab249edfecd0edb40044beb5be0e4ad10373304228a1eaa064639942eae5b7d7e02c835e35866e4a195c1a81f1a65f5ed59d8d86ef0868ccb39c5bd6cc53c38fc7a73da4c68dbcb6839e668b699ec126c1c212a1d6c7c5759f4375ca3bcd04e7dda82e6ca446e255f858c875ba7012b8c4a3c6f19a16b5dca8acdb3c55dc3b635c54d84ff7bce8b271ade974e18a36336731a3caca9b8b87", 0xb6}, {&(0x7f0000002b00)="300f566b6321996150f8042035cd89a04f1884cf8f01a2f87c840d137fb88a6611d2dfc8806bec5633681277506a0ecaf9f41f9c2a8e9fde6700c5d869c04d6508fbcc8b0bc99b672aa02e7e9a6f1a98ee90382e9a1d0f428be32bd9875f34ce4ed88e3e76fb1fe9063b73fcdf44d8e296959fd2d15b6a5d5d1ca98a24768443bd363a90fbd46f3ef500652d", 0x8c}, {&(0x7f0000002bc0)="1a9d898132383b8269eda11fd4c9d45ac141db0aa7ff8510d49f43ed11714afbd175c210766b737416ab48ccd7a08d2b1b5c29ac83dfee47aefd2cd7e2c568008fbf6089abca78817edbbaa925d70dd24a395cb3c1ee", 0x56}, {&(0x7f0000002c40)="a61860dbb6e73342b0154c8bf79e9369849bcd22d2cae39edc6efb0e386d615f80d64683de1bbfe7a6cfead4342cd6609480c4d4525b34e8cec4ac196bb1bfa8b639b0b775a9a19604251d52bad2a4f606fb927361893b97b6f588be9d1c51a46974565d7505b8bd11ad3607feb121a5d4b38e5308aeaa1a5090c23b7194a3fbf8bc3195782e10c21e892cade5477c7295e15cb40c63cf5a53ce329e24be19c5a0f8912cd4c1c6a399", 0xa9}], 0x5, &(0x7f0000002d80)=[@txtime={{0x18, 0x1, 0x3d, 0xc0f}}], 0x18}}, {{&(0x7f0000002dc0)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002e40)="1310d590a41c9c076030bd64121e5ae72a01c07bbe22901153027b3580d7e44be0d96b737d86531e89d79e1777472901427aa417608cf6fcdfb36129f33f3427533cdfbb12978beb8199af812c8f53430a0e03d9db539fdc3730115883a671316f087b2f22d0fa800235489bbc2221918a2373d3d1b1dd5a4205da631accab24aaa23fd664dd0f77b142cdef8d5f2185ddece16181af0fabf3edc2e344e50f72af78412cbc25cec01c6e05ffdec24792e9cd67199a289712719dd9d3c420924ef932d560513d148c1f7f06d0b14d02952294fd52ad18d29eb0dba8", 0xdb}, {&(0x7f0000002f40)="1b2ec94f736a5c2cc39c80c665d1fbec2126cf9f66e38b1df141975a4c8942", 0x1f}], 0x2, &(0x7f0000002fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000003040)="9ba4ba4356f73c7dbfa1924d198c", 0xe}, {&(0x7f0000003080)="ac065af75c27081613fb6f52f691138a3ccbad279d439fccfbd7509c0f5fe981d336f2c79af6692f4687bb98a85f8bc586c0f2778a25b8cc1f7a444fc8b6877ffce8f810d18c8e98b4fe0f1018a97d2f0d2b612523b150eaac1e9d4a335c36fdae003a279ff55d065601c4c2d9b91eca", 0x70}, {&(0x7f0000003100)="75936335f3396d581f42792f8ebbe5b50fc8ae4f1d7350642a872e41f2b588ddfa812f38b8b73b4dc6fef8a6f262ad251f557a1dbddfeecc02fcbd425930bd455bef999a47b2500c80bdc8a4ab6d1bba365ab2e5bfd83108797e6805f51cc34600a5de377cd66de13c3e96164be99f92f1bbdd27e72ac4590d2ad82af91a2544d924dd24b3194cf94f1caf1beff758c7a72652904cf240b60b33528d6701d9da1bbd00c160", 0xa5}, {&(0x7f00000031c0)="49c0b1af1e32de74ec90759457ac65a53f4d14c4dca4881d2aa3ad063ec0eaa4579f0890492999df4c5eb4277847dd9cd4601cb803b57dc0dc5cb165f90c3285622ea2801b4784728a27652bf5020dab9447", 0x52}, {&(0x7f0000003240)="26a23f6f4ff3313dc2689850ae5a53cd4bd037f9b89d7139cc14c1f8fb79aa41e63f8b274137b6cb4d96205eab8a64898e71abff8b0b52ac8c89ed2b2141fd81557c7ad144ff1c5c9444cbdb7aaeff0f48be1d66e0cd867ba833ff1c2bb0b6678fb201c9a9092b26eb9457d63a9bd60bf4fb858e938eac9f957095794fb034ef1eaebf2440b410fc477c016e9a4a5830c9cc73476e477222", 0x98}, {&(0x7f0000003300)="ccedcc8ac348a477e2d5f0a103b74f6d7aa7b418f238fcc5fb428d9f27432383448a570cfba875ef37c3e7dd1c3f25ed83728afc54a94f9c382fcc9aa552c88ae0ddada334046df0d789dc74c80b94f728c1d08c650910741c0465c878f57c857cf4422cbd", 0x65}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="76fc09d49f4f100600704b563eca336c6dd18c3c1ca93f97209008d6ed97669ba5ee50264047cf6f80ca6d895f826babc6641360e3a526c358603ca1599a118bf0faa63029b75d299199faed4e6fb1194b74a9e6776f024597bd216a18c2dbdbe8688a4fb4656574584a1b3c7d0af024eca8a964f7740342b7f5831de06b213c55b6efb3d903d81121ace342d3399415425131746ce93306c387ddc17df8db00e49b7d441cd603bdb7c717dea0062420f361a0a3fb49f3b369050ea1cf0d1e3c7ba234cb495e1a4c0df709ac1a3ae7a856a5e9b7b295be0f4d0b6a65d5ac0f01b236a068a24733b6c25df115aa", 0xed}], 0x8, &(0x7f0000004500)=[@mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x3ddb6570}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8c58}}], 0xf0}}, {{&(0x7f0000004600)=@ax25={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004680)="e29c574186c0eb03a271e43af3acefefebf3b3adedfb34b7adf5b95356ded69f45b7c42deb73a2133d0b7ed624a4a4fcda478caac0c4f453676111e98e707e2d33a70085970117d67a5ad99af85eff541b2df85aae84478d2966f00337fee9e15370c7d107060bf235850ed26aaa8e4d904a6cf452100c0804fd0a312f5e0fb0fd73a587f248edf6aa7bad8d627c1479b5c62d6b21809092b5a5b69c94b10a72593faa7acb032ee26a19efefae825420c68f2b948d54833fb3d96853a0375b4a41561c5ad6ec", 0xc6}, {&(0x7f0000004780)="ccc8c15b5f32ca0df71ea61ebe52743ab9c8e63ad4c5c8ada66cff3186e9e5675483aff0bb5e3ecc2108a6c80d92f5a07f13278c55119c6dd3bc83f89ec9348f45fdba6d78984e3ddfa62ce1d6d1f10313bc3a78bde05b5dbc7fefca973accd83dfe9040ed4472453307eb6e3342129408790736a71050c33f5bed8e66eab8acc79eb24328820a1d2e4e30af4f5e40681354c7e9670f19a08fd6ded21d868d25e7885b1bfadac5cabcfa17", 0xab}, {&(0x7f0000004840)="804a7fa14a50749ab33939f4d1ebc7144ebff98127119b804b05b4635960f621fe17575eef619b1029bc06f8a2d70ab497563d8278198c8d0a56f4bdee97a207eb9a3131cd90b5a775132730ce8fd64737a9b8e70923ad5697c6e38ae7a33407af49a3d575db9646db20b2", 0x6b}, {&(0x7f00000048c0)="b37c61c145242dbce6e4c77ae347d5a279ba9fa7c4469859a34ca59913a2a785d94fe6145d29e3399ca611d5bc7351a1158d79d1d3b9ec7be69dff6a4d24fb021621c256212cd9c09f079f605813f24a5eb7d135ae3c3b2379", 0x59}, {&(0x7f0000004940)="c5ac807ef90c14cf9b7f051e77443e11bff6b48af3ad9b015a8af6c4a4ef64a6756fd5f1", 0x24}, {&(0x7f0000004980)="b2", 0x1}], 0x6}}], 0x7, 0x804) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x800, 0x1c6) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) copy_file_range(r6, 0x0, r9, &(0x7f0000000080)=0xfff, 0x5, 0x0) 10:49:35 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 14) 10:49:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:35 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1100) [ 2759.820955] FAULT_INJECTION: forcing a failure. [ 2759.820955] name failslab, interval 1, probability 0, space 0, times 0 [ 2759.822340] CPU: 1 PID: 14407 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2759.823099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2759.824023] Call Trace: [ 2759.824326] dump_stack+0x107/0x167 [ 2759.824730] should_fail.cold+0x5/0xa [ 2759.825171] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2759.825788] should_failslab+0x5/0x20 [ 2759.826207] kmem_cache_alloc_trace+0x55/0x320 [ 2759.826721] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2759.827336] io_uring_setup+0x14f6/0x2980 [ 2759.827797] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2759.828360] ? wait_for_completion_io+0x270/0x270 [ 2759.828917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2759.829502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2759.830072] do_syscall_64+0x33/0x40 [ 2759.830489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2759.831054] RIP: 0033:0x7f768f557b19 [ 2759.831474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2759.833486] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2759.834333] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2759.835123] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2759.835915] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2759.836697] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2759.837491] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:49:51 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r5, &(0x7f0000000400)='./file0\x00', 0x58000, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r6, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r10, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x10000000) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x80007, 0x0, &(0x7f0000000440)="e28726db86a4cbbfb93f981e563fd370ac4ce1c6451ef65dc963970c6e84e3c97f180fe18d87a71261f3c46cb18846c6c9c4f75569ecc64673b2fc9b3247020603b9bb431ed66d24bc65d5e08e11c2375a57353b88b386675d14499be27c7faecb9520cc9b2087206b08c541a0da3d8bbf2cae5094de975ccbbd93a06438e1beaabcf94e5253aa8fff49a8fbfa7e8bf6c5e80e715026497dd202908133825dd2433441194da6a18238ff88abb83128a3a1c561a0cdf08af255e86a714252e5dbe5ab06eb6877beaacd", 0x5, 0x0, 0x0, {0x2, r12}}, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r13 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r13, &(0x7f00000005c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1, &(0x7f0000000300)=""/193, 0xc1}, 0x0) 10:49:51 executing program 2: r0 = syz_io_uring_setup(0x6747, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x100000001, 0x1, &(0x7f0000000100)=[{&(0x7f0000000240)="e1d3d7266cd135cf0ea61bb753be9be23e062fc86ff9d695cdcef871edea1652b795feff85e7ba8d0d639965e20cf3e001c17cc8cdaed0c25aecd527563fad7125cc533f85936e5cfe27782599a59ce23a0380a9e0869dc618d5c669cc4585f814bf975f1e88749fba65fc246409f4f5c56e0ee017c79c76f843f6eb1f4abe53ab26da769228d1a008f59a472310484d3abd513768a4613004d5c1a324ec0f3bcfb761e00ebbcba08fb3a472b28350d888d7cdc612318f10332d6cfec41696ba8381a7bd9bbcfa406b657ea403fda623f5", 0xd1, 0x9}], 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB='unhide,map\a\x00\x00\x00\x00\x00\x00\x00hash,smackfshat=\x00,\x00']) faccessat2(r4, &(0x7f0000000340)='./file0\x00', 0x10, 0x1100) lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x3) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000380)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000480)) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) r7 = socket$unix(0x1, 0x1, 0x0) r8 = open_tree(r3, &(0x7f0000000840)='./file0\x00', 0x80800) recvmmsg$unix(r8, &(0x7f0000007340)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000002d40)=[{&(0x7f0000000900)=""/170, 0xaa}, {&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000000ac0)=""/40, 0x28}, {&(0x7f0000000b00)=""/44, 0x2c}, {&(0x7f0000000b40)=""/253, 0xfd}, {&(0x7f0000000c40)=""/193, 0xc1}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x8, &(0x7f0000002dc0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000702c7091feac392c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8}}, {{&(0x7f0000002ec0)=@abs, 0x6e, &(0x7f0000005280)=[{&(0x7f0000002f40)=""/87, 0x57}, {&(0x7f0000002fc0)=""/52, 0x34}, {&(0x7f0000003000)=""/40, 0x28}, {&(0x7f0000003040)=""/63, 0x3f}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/167, 0xa7}, {&(0x7f0000005140)=""/133, 0x85}, {&(0x7f0000005200)=""/87, 0x57}], 0x9, &(0x7f0000005340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000005440)=@abs, 0x6e, &(0x7f0000006980)=[{&(0x7f00000054c0)=""/180, 0xb4}, {&(0x7f0000005580)=""/106, 0x6a}, {&(0x7f0000005600)=""/253, 0xfd}, {&(0x7f0000005700)=""/209, 0xd1}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000006800)=""/225, 0xe1}, {&(0x7f0000006900)=""/91, 0x5b}], 0x7, &(0x7f0000007540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bc69fbc690d28b7a9469dd435da54762cc"], 0xd8}}, {{&(0x7f0000006b00), 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006b80)=""/10, 0xa}, {&(0x7f0000006bc0)=""/213, 0xd5}, {&(0x7f0000006cc0)=""/32, 0x20}, {&(0x7f0000006d00)=""/8, 0x8}, {&(0x7f0000006d40)=""/121, 0x79}], 0x5}}, {{&(0x7f0000006e40), 0x6e, &(0x7f0000006f80)=[{&(0x7f0000006ec0)=""/185, 0xb9}], 0x1, &(0x7f0000006fc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000007000)=@abs, 0x6e, &(0x7f0000007100)=[{&(0x7f0000007080)=""/126, 0x7e}], 0x1, &(0x7f0000007140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000007240), 0x6e, &(0x7f0000007300)=[{&(0x7f00000072c0)=""/13, 0xd}], 0x1}}], 0x7, 0x61, &(0x7f0000007500)) r9 = dup(r7) connect$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) execveat(r9, &(0x7f0000000200)='./file0\x00', &(0x7f0000000780)=[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='[$+\xc4.\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\'\x00'], &(0x7f0000000800)=[&(0x7f00000007c0)='\\)\x00'], 0x100) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000500)=""/106) 10:49:51 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 15) [ 2775.123039] FAULT_INJECTION: forcing a failure. [ 2775.123039] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.124789] CPU: 0 PID: 14426 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2775.125795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.126995] Call Trace: [ 2775.127393] dump_stack+0x107/0x167 [ 2775.127934] should_fail.cold+0x5/0xa [ 2775.128493] ? create_object.isra.0+0x3a/0xa30 [ 2775.129161] should_failslab+0x5/0x20 [ 2775.129718] kmem_cache_alloc+0x5b/0x310 [ 2775.130306] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2775.131178] create_object.isra.0+0x3a/0xa30 [ 2775.131819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2775.132571] kmem_cache_alloc_trace+0x151/0x320 [ 2775.133265] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2775.134058] io_uring_setup+0x14f6/0x2980 [ 2775.134675] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2775.135425] ? wait_for_completion_io+0x270/0x270 [ 2775.136139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.136897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2775.137647] do_syscall_64+0x33/0x40 [ 2775.138185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2775.138930] RIP: 0033:0x7f768f557b19 [ 2775.139472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.142145] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2775.143282] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2775.144330] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2775.145362] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2775.146407] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2775.147450] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:49:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 16) 10:49:51 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x114, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf4b9}}, {0x8}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d19000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc6660, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat(r5, &(0x7f0000000100)='./file0\x00', 0x270042, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) io_uring_enter(r6, 0x311c, 0x73fe, 0x0, &(0x7f00000000c0)={[0x7fffffff]}, 0x8) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) close(r3) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 2: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x6) io_uring_enter(r3, 0xc0e, 0x2342, 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x50, r4, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2775.337504] FAULT_INJECTION: forcing a failure. [ 2775.337504] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.339062] CPU: 0 PID: 14451 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2775.339978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.341062] Call Trace: [ 2775.341414] dump_stack+0x107/0x167 [ 2775.341892] should_fail.cold+0x5/0xa [ 2775.342398] ? create_object.isra.0+0x3a/0xa30 [ 2775.342990] should_failslab+0x5/0x20 [ 2775.343500] kmem_cache_alloc+0x5b/0x310 [ 2775.344036] create_object.isra.0+0x3a/0xa30 [ 2775.344613] kmemleak_alloc_percpu+0xa0/0x100 [ 2775.345219] pcpu_alloc+0x4e2/0x1240 [ 2775.345721] ? io_async_queue_proc+0x80/0x80 [ 2775.346299] percpu_ref_init+0x31/0x3d0 [ 2775.346830] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2775.347564] io_uring_setup+0x14f6/0x2980 [ 2775.348107] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2775.348770] ? wait_for_completion_io+0x270/0x270 [ 2775.349418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.350091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2775.350758] do_syscall_64+0x33/0x40 [ 2775.351249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2775.351932] RIP: 0033:0x7f768f557b19 [ 2775.352416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.354823] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2775.355819] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2775.356738] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2775.357684] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2775.358617] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2775.359544] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:49:51 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:49:51 executing program 3: r0 = syz_io_uring_setup(0x6e3b, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x37d}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x2e}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xbc11}}, './file0\x00'}) 10:50:07 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1b000/0x4000)=nil, 0x4000, 0x200000d, 0x100010, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000d1c000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r3, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r3, 0x80, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x0, 0x0, 0x1}, 0x7fffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:07 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 17) 10:50:07 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x1000009, 0x11, r3, 0x0) r5 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="1e423b8fdd7e27bfee222a3864ac624a8f5efec740b44eda1bf03077edfde637d31e65be55a4f59615e9478ef0ca145727222f06bc30ce2dc360f7a27d1816e6bd86975a8e3ae86755ebef4883d575c05fe35434a0e6ba5a1dbcda2aebd6f2f47ed0858aa1464a7270", 0x10000, 0x0, 0x1, {0x3, r8}}, 0x1) [ 2790.866161] FAULT_INJECTION: forcing a failure. [ 2790.866161] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.867686] CPU: 0 PID: 14469 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2790.868563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2790.869617] Call Trace: [ 2790.869958] dump_stack+0x107/0x167 [ 2790.870431] should_fail.cold+0x5/0xa [ 2790.870914] ? create_object.isra.0+0x3a/0xa30 [ 2790.871497] should_failslab+0x5/0x20 [ 2790.871997] kmem_cache_alloc+0x5b/0x310 [ 2790.872521] create_object.isra.0+0x3a/0xa30 [ 2790.873085] kmemleak_alloc_percpu+0xa0/0x100 [ 2790.873659] pcpu_alloc+0x4e2/0x1240 [ 2790.874144] ? io_async_queue_proc+0x80/0x80 [ 2790.874703] percpu_ref_init+0x31/0x3d0 [ 2790.875210] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2790.875899] io_uring_setup+0x14f6/0x2980 [ 2790.876430] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2790.877067] ? wait_for_completion_io+0x270/0x270 [ 2790.877694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2790.878355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2790.879016] do_syscall_64+0x33/0x40 [ 2790.879490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2790.880140] RIP: 0033:0x7f768f557b19 [ 2790.880606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:50:07 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:07 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:07 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:07 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) fallocate(r6, 0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl(r0, 0xfffffffc, &(0x7f0000000080)="b3da511abea12b6afa5cc069244e5de0d9218ee3f143b3557ef5f28e8c3371e7b7266847f37ae8793a3abc67eccc6818b6d15a7dbffdc0daf4d8dd1d30cdeda3edd55d7e70ec8031d07043cce1a9aeb592f08cc109daadba6e191b7d3431b62683dc2451906452635392fefa08b2b0487269f2ebadb4da4908d69608e495e8f7db67e900d14d0c24fbe0dc129cba1a7485d796041efa6580db43305da1bc1dd297e70f12296cc5fa85a8d5659f092816ff969dec9a281cea30b21b63e1ce") io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:07 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2790.882915] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2790.884114] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2790.885006] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2790.885900] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2790.886800] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2790.887724] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:50:07 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:07 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:07 executing program 0: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2807.647579] FAULT_INJECTION: forcing a failure. [ 2807.647579] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.649330] CPU: 0 PID: 14500 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2807.650324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.651498] Call Trace: [ 2807.651894] dump_stack+0x107/0x167 [ 2807.652416] should_fail.cold+0x5/0xa [ 2807.652967] ? percpu_ref_init+0xd8/0x3d0 [ 2807.653561] should_failslab+0x5/0x20 [ 2807.654105] kmem_cache_alloc_trace+0x55/0x320 [ 2807.654770] ? io_async_queue_proc+0x80/0x80 [ 2807.655398] percpu_ref_init+0xd8/0x3d0 [ 2807.655974] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2807.656972] io_uring_setup+0x14f6/0x2980 [ 2807.657569] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2807.658289] ? wait_for_completion_io+0x270/0x270 [ 2807.658994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.659746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.660480] do_syscall_64+0x33/0x40 [ 2807.661006] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.661726] RIP: 0033:0x7f768f557b19 [ 2807.662251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.664962] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2807.666036] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2807.667042] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2807.668057] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2807.669061] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2807.670068] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:50:23 executing program 0: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 4: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 18) 10:50:23 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000100)="45a56ca7266001fd742b793c1f177de7663511baf48b747672d5748b7e2c7f7bc6e139e3b85d47a732afbd50c8846059c26a446c050999dbad5bad018ec10fc184aa8dca9690", 0x46, 0x2}, {&(0x7f0000000240)="f6e557df0ba760e9f48b4da5a3fa4415ea486f5f4e312d44d4775cf54ce91fd156935905241fa704a256d6308759b3164d91c1d6af42ae787c4c31661306e4593e1f75291a9bd66465d9813549bd17380f568b2dfcf9472e76eaa4a68f80351173234a4584205b0d4b6c3a03f86112713a1f6b29efcd24b963299f9bf3ee9683fe60ef6ec106fc1c5a22db5fe098ef5fb7de6586301db135edb20522bfa52095381a20d6b29b", 0xa6, 0x10000}, {&(0x7f0000000300)="0954c20b6d7ff2072c2aaa14873db4823e8d72a540798f8802188e99c5453110d2dda570a006865a66b0953ff71d5b8fda7b9a9954afe236e91905206b75bbc98c7a109ae7f70486220db8eb24d41d10efb5d7001b6f5aa8b85530a5867c1ccb3e7d51dcedfc023b700654e2dfdb5796e0bb6862a9c035bbc7a7b680b9794f746eb85524abeb8c380b70f7771b53146a61643bcba18cdf04da454e381dc61769340f878db176a1103a76a72a6625e30a4f063884fc0f4c1c115556ea6bbcdf5fa31c6adaa52ebd5c2babd85c64d497e57d087bb35766fa3ab37ff64e7a6bb9c7a8b5164ef6215f856c7a0f45a60b436869c4d519d623a0", 0xf7, 0x4}, {&(0x7f0000000400), 0x0, 0xdd7}, {&(0x7f0000000440)="b86eaa1a0663a1f22a90b5436a176b4b1e088a03958c9262d764bc10c24f9d1144415b4858effdec6f2fd0b3862fa216e1492db57bd7ad6b46904d8eda9d245c15dfeb3f4a836e2c98a186d5cf602624262f566e8bafa67427b3fc1da687168109ba52a5d100b93ce3", 0x69}, {&(0x7f00000004c0)="c6e47dc6b75466d6c25f372f43e3a3ee180f4fe83077c917f9ce11178ef0579142a54ba4d2c955a32b7025bf752e5776958a659799d134be601a66669858d68a05c5c44cce616af9f4977598d32e3d91f189b24c3755dcb1b5367670fec5d5c1ff828109e4bd87ae320fca5263991573b600b15d61804f1305c72a3f6892f7c3eb45fc458e63227b77c0500216cf6acf5aec8a843eee6e72a633607a00fbfcd4b524a8ae136875132d49fbde33373c24ae48a726f78322156038542bd2c94bb96b661cba29f1de5da44e9456e3a4e1d704934f507421f742a360b12341753fee7a8176c3e1c97a78805aacf455c168524ed043deab3f32", 0xf7, 0xd3a}], 0x400, &(0x7f00000006c0)={[{@mode={'mode', 0x3d, 0xffff}}, {@huge_never}, {@huge_within_size}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x25]}}, {@mode={'mode', 0x3d, 0x4}}, {@nr_blocks={'nr_blocks', 0x3d, [0x38, 0x30, 0x70, 0x67, 0x31, 0x78, 0x31, 0x78, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x65]}}, {@huge_advise}, {@mode={'mode', 0x3d, 0xe}}], [{@pcr={'pcr', 0x3d, 0x28}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x215}}]}) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40002003, 0x0, {0x1}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r5 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r5, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "e2275c722a8cd101daf9ac6b4c59a2b3"}, 0x11, 0x2) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x2000006, 0x2010, r0, 0x10000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000280)={0x1, 0x6, 0x7}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r5 = open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x8101) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r6, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x34001, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e7bc2412d1245128a1f0000000000f0e78d47eba58f3c", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',loose,mmap,aname=@,afid=0x0000000000000101,cache=fscache,aname=\x00,euid=', @ANYRESDEC, @ANYBLOB=',fsname=[,fowner<', @ANYRESDEC, @ANYBLOB=',\x00']) 10:50:23 executing program 4: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 0: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:23 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000d1e000/0x4000)=nil, 0x4000, 0x2000007, 0x20011, r0, 0x8000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:24 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 19) 10:50:24 executing program 4: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2807.916624] FAULT_INJECTION: forcing a failure. [ 2807.916624] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.918079] CPU: 0 PID: 14539 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2807.918939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.919968] Call Trace: [ 2807.920305] dump_stack+0x107/0x167 [ 2807.920762] should_fail.cold+0x5/0xa [ 2807.921238] ? create_object.isra.0+0x3a/0xa30 [ 2807.921803] should_failslab+0x5/0x20 [ 2807.922277] kmem_cache_alloc+0x5b/0x310 [ 2807.922783] create_object.isra.0+0x3a/0xa30 [ 2807.923330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2807.923968] kmem_cache_alloc_trace+0x151/0x320 [ 2807.924552] ? io_async_queue_proc+0x80/0x80 [ 2807.925105] percpu_ref_init+0xd8/0x3d0 [ 2807.925605] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2807.926284] io_uring_setup+0x14f6/0x2980 [ 2807.926804] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2807.927433] ? wait_for_completion_io+0x270/0x270 [ 2807.928056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.928709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.929354] do_syscall_64+0x33/0x40 [ 2807.929819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.930461] RIP: 0033:0x7f768f557b19 [ 2807.930925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.933191] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2807.934129] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2807.935010] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2807.935898] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2807.936778] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2807.937652] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:50:24 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x7, 0x0, r5, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x74af26, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)="fd63260a5f4053e0b2a7763b2a0f9ad0d1f9cf5e7238b155239f2a90d06006132c92d68acd3a4fbd9aa751e7477d94e9b9cb1765f3c027ea63dd2758e5c4d7ca3a6672c188b1b70026363c218d77ebb64be8c39df10fd26e91923ff215fa68bc9b540b8666ca160fcf8d2f466c250f1c439967d14e60304fb3485b312138535876f9dc008fb990168cfb4fabdde24126c89cd3a257538a18df513fb7672d3f295881426cc95a405aef15ac0457374037fbabff230d91762f952747d83c8334e7171dacd30ba627158c43923a3a52c8e2e8c69d2f33b9f2d77f49185f", 0xdc}, {&(0x7f0000000140)="bdaec175bd5e913c3bc2e3a6d7", 0xd}, {&(0x7f0000000340)="1c54fc9bde6d38cdc9217386d357facf8a1b404f6a81e5696257fd6e8cde9379f2fd07d3a2b99708f0cb4bb318380e8373776ceee6d65bb79bcca56293e0e176612df5348c54a9a871f87348d0bb75fb7da94d04608596ef3693347d885e6d5568dc0e", 0x63}], 0x3, &(0x7f00000006c0)=[{0x108, 0x107, 0x2000000, "99966b9411bd90a5d549d120f03831fba60392d609001ff63e23840ab6e78f64f9e515fa39a0a70afec840e7439b1aea287c3bdaaf9ccde42fa6002f3940e2d547e1a8b66e65d6f70bced8ece8187d9e22e6d408c44961a797e7276a90054614fc0c4bf8d92c16ca5e7b81b1191162eb3ed7035478bdd08eeebfe1ff47ca9442ce11f3fc39b3992d6b864c09b122b37c28533f46075efa0e268deb6029dde67e4474371b3aa8b0ca4a73924a73eb65c16a66d383e0a32fbcf60a6351ad15bdf35a9d232a17f8c977f2df89961156d99e8c14309dbea5cd161c2f06d5739bf5e5909f66da56d2dfe2dc4b47e0035f046ac9"}, {0x40, 0x10d, 0x10001, "4953cc0219cd056b4fc95db6732feb93086903c0f708a44566e12fcf651932260365c4d131d1cc25c69ac748256b01"}, {0x38, 0x1, 0x7, "04853157ae05bf0ed6815cea04ec92afc303205033771aef8ccb98e5d3b788dcf76936"}, {0x60, 0x108, 0x4, "9e1ed319eed6dd534d79ad49df7ccd5aac2828df5e25909dba0571885bc83e67bce58e4acbdd999cc4416d933016706847875192ea6c23ee7948db7a34be941d9a87614d0fba2ae523a160d9"}, {0x90, 0x3a, 0xa895, "5a03826d3d727aabf530734e3044b5198ffe839189d1dd1def77139051e3eaa4cf049a144a72c1dafa68b1bdf4a66f398ff0f1806e0d9ea71ff45269afa342b08e7a45b933b3609a6e70b67c84c7e0e321475b9fa4d2640d5b1a1510cfab3d6e0680d5f2a7ce645be03387916346fba988315af85d867a7597bf0e0f18e1e0"}, {0x68, 0x105, 0x0, "b73903bab51b5b28eae5f02102730447effa08fc496a1024e125610479e4751981ccb2081ed40b86a05ad53b7f569e3eca57125ae80935081143c591c7944cd033de276678e156205cb0d703191658b2737a71dec8d60423"}, {0xf8, 0x116, 0xfffff33c, "e809e5f7e2947629e774d59ec9605bf5a8359b5394d4c928e146415a7191ea377b831e3230308c80add2cc9585860a90b61ce399dc5b950d574b2dee53907a20d4088e3ea855cf4c200e3466b889484757ea3ec5fbfa162d1550e5ab8db79304ca2a67c1dfd575f6a115a1f9c3cfea5cd7d30df59a65bd9447a40ce922448c0929f74fb69839ba969e6dc1fa5f38dd4d547a9b5956f9e5400286121fda0df0897e66af214f24e465aef4ecfebd266dc3cea4a56d37e7dc737927a21c69a8be4b56485132cc3b44d8704a728ca608a51d3906137d7e5c86a8d6638da19e66e9b7515565"}, {0xd8, 0x15, 0x2d, "91efdcc0e576afb3a3c7809c9e18637b469723456831bbb5fcd7dfc34a300e2372c7f1a3f8758883d5065a2bf04fda3bb03c0f80c12d7779824661b8cff471fa13dee83dfecc0d5c23a189078856a470878c0ac10bee18db6de3c3b824ccf63025b28c9ce8811bb3852ffd61751279713097bd221d076289343d78970595ef05f425a62bcaa0ecd9d4ea635fd885098c98e2b8575ce41e8671dab4435d07724a8790ed3007fedffc41a7e34bfd98a973bb474046d33ba85efa35e233e82f0806ac0a9491d122"}], 0x4a8}, 0x0, 0x20044841, 0x1, {0x0, r9}}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_enter(r0, 0x1251, 0x2254, 0x6, &(0x7f0000000080)={[0x4000649ba52c]}, 0x8) 10:50:37 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 1: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x3b4, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xcd, 0x3, "68651215178e91bd66820caa12228ca6f2f58e690f42adb775e45bdfa694669f219045ad59b85943b7d65dbf5e280452c60d3689e3fed693499763d5b4afb8026dfec747900a2f76a09781b8efc72108ef3349f7fe68ed6a91cf2cb0a62c35d26459a0d86074c64371a30c388f2686ed85f4eeab12fc121205484549bd2a77918bf762a25def4a52e1d5435493e0e1f2038742b1d2f897449c738d0ac54bf8626a800d070573d7e5be7bd8700a994c3229a6f8408973382939091b33305e28c9e362e5f93f640ae31d"}, @TIPC_NLA_NODE_ID={0x96, 0x3, "f15202f1029d41b486e7e83c002cbd0def3930dd8a82180ac78e88d06e64b501ee88f81ca3cd0ba60e1e4f426d9eabf7bd94c92a114c3e90cfd6c774219929ba7c030012d3cd2608fdb8c5128d7d313514facaef2c96c3f783ec0ed7b72b22368bbe3f43d3f24c34e5fbfacb0d372d3268ddebba60c762b4f6e9aae7ef0d161c1619c53916b6c2ead581fffb1a6153e9ce37"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbb59}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x180}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb08}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x36351ea1}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffc1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4547}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x22bd, 0xfba9, 0x1, &(0x7f0000000080)={[0x800]}, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r5 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r5, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r10, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0) io_uring_enter(r10, 0x58ab, 0x0, 0x0, 0x0, 0x6) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r10, 0x6, 0x0, 0x1f, 0x0, 0x1, {0x0, r11}}, 0x7) 10:50:37 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 20) 10:50:37 executing program 2: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x240, 0x0, 0x512a918e1bbb75e2}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b7}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64791811fd23d0ca}, 0x4000000) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r8, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4010) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2821.535521] FAULT_INJECTION: forcing a failure. [ 2821.535521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2821.537227] CPU: 0 PID: 14562 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2821.538172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2821.539354] Call Trace: [ 2821.539729] dump_stack+0x107/0x167 [ 2821.540266] should_fail.cold+0x5/0xa [ 2821.540816] _copy_to_user+0x2e/0x180 [ 2821.541366] io_uring_setup+0x11b5/0x2980 [ 2821.541961] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2821.542693] ? wait_for_completion_io+0x270/0x270 [ 2821.543402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2821.544158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2821.544897] do_syscall_64+0x33/0x40 [ 2821.545432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2821.546164] RIP: 0033:0x7f768f557b19 [ 2821.546700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2821.549326] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2821.550407] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2821.551422] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2821.552448] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2821.553465] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2821.554486] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:50:37 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x80) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x400}, 0x1}, 0x98) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) lseek(r4, 0x100000000, 0x14fe6ced6d466635) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 10:50:37 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = syz_io_uring_setup(0x4000037c, &(0x7f0000000180)={0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r1, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 21) 10:50:37 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2821.695311] FAULT_INJECTION: forcing a failure. [ 2821.695311] name failslab, interval 1, probability 0, space 0, times 0 [ 2821.696979] CPU: 1 PID: 14581 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2821.697955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2821.699128] Call Trace: [ 2821.699507] dump_stack+0x107/0x167 [ 2821.700027] should_fail.cold+0x5/0xa [ 2821.700557] ? __d_alloc+0x2a/0x990 [ 2821.701057] should_failslab+0x5/0x20 [ 2821.701587] kmem_cache_alloc+0x5b/0x310 [ 2821.702155] __d_alloc+0x2a/0x990 [ 2821.702645] ? find_held_lock+0x2c/0x110 [ 2821.703224] d_alloc_pseudo+0x19/0x70 [ 2821.703760] alloc_file_pseudo+0xce/0x250 [ 2821.704354] ? trace_hardirqs_on+0x5b/0x180 [ 2821.704959] ? alloc_file+0x5a0/0x5a0 [ 2821.705512] anon_inode_getfile+0xc8/0x1f0 [ 2821.706114] io_uring_setup+0x138b/0x2980 [ 2821.706708] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2821.707418] ? wait_for_completion_io+0x270/0x270 [ 2821.708118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2821.708846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2821.709575] do_syscall_64+0x33/0x40 [ 2821.710097] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2821.710812] RIP: 0033:0x7f768f557b19 [ 2821.711335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2821.713911] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2821.714981] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2821.715991] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2821.716989] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2821.717994] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2821.719005] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:50:37 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0xa003, @fd=r3, 0x0, 0x0, 0x0, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x10000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r9 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r13, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x535ff531f8a67d71, 0x0, r3, 0x80, &(0x7f00000000c0)=@ll={0x11, 0xd, r8, 0x1, 0x1, 0x6, @remote}, 0x0, 0x0, 0x0, {0x0, r12}}, 0x4ab) 10:50:37 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:37 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_setup(0xf2c, &(0x7f0000000080)={0x0, 0x2d8d, 0x8, 0x1, 0x43, 0x0, r3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_setup(0x6d35, &(0x7f0000000480)={0x0, 0x9d6d, 0xc, 0x0, 0xef, 0x0, r3}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r13, r2, &(0x7f0000000c80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)="8e85f6d5865608651b54162b1a265a2b30a728addd6aa19e82afe651c5962f7aaccf6edd9bef7d63a3f567bb4fa44e80a2b2578483668da3a312a0433baf847120b50d0c9ad25070b7fbadcbc914a9f1f04140c4cd0035caf64bdf680d99346c81f31d74c2ff09b0b6c7744ce07b1ccd53d69dc0eaac99596abfc97c683d0184d6aa9615bcaf4427b6f2165aa451679ee079e30b5c627a88f73c3dd4b14c04fdeab4e0b7c10cbcfa233cd6ad0dd5a9af176fe8c08a2ad0366f133a7ded7ce2ae371c0ca3664824395d8b8fcaa46e72", 0xcf}, {&(0x7f0000000900)="b02d2bfa17c75d3ec4be3c5856f37f527464fdab2fa7", 0x16}, {&(0x7f0000000940)="ea45b47480cfdffc78b04ac980493a97f6d873f24eab0d6280e3f2f8ff4aa01c0dee15ecbe7a8424e7a6fc2b89ba8721d5c8b237832572cf52f1e8c531d17e8273579018263e6dbea5321bdc2a52067e1ef1bcccc5b0ff07d68f0d2f32b89c3bf96c22f07ead3b23e70e483f082c608f6d8acc2f24173f6d277b323ce5eb9056c1025d50eceb", 0x86}, {&(0x7f0000000a00)="146a4a306a24821a452558f22d89366932dd41441d6a024ab4635ac0d71e46cda17ccf48a77abf026d14ef693f15ca7843e3efbd891263e54d6da021f0f09972191841c954723fcba81977107d35fcf146e3aa8060da8932dd74cf2687ec2e41385de226dc2f70957ce5cd9e7163897c2620a0cdf03000bbbdd62d20dd903c94dfc31514c59a70e4033bae4c16", 0x8d}], 0x5, &(0x7f0000000b40)=[{0xe0, 0x84, 0x6, "a6e535d8a7617f92a0914315a831b1565e08d03aaba15b7fd2167dd791930e0bcf897ffa02740d9b869fcbb6efbe081214df41b077c5a572be3541ab44ff18d9c794e02f04786111a068f22a6d3bc528f27f03a311a93d17ae5b5d438caa94e4f760cc3fec4b921dd0bf94d1e21c5831d7fdbc59033b7d92cded26d2e0d2bf93a6fba4850eb9d0c081e457bdad3dfa39d57a75e52ae09ff1ed8643554689161606e0ab80d9987878ade609697a717e81da22150d655b7122c9f890c9be2046c4e6cae71af5e69ddf3d14"}], 0xe0}, 0x0, 0x4000050, 0x0, {0x0, r11}}, 0x7ff) syz_io_uring_submit(r1, r4, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000340)=""/229, 0xe5}], 0x2, &(0x7f00000006c0)=""/207, 0xcf}, 0x0, 0x20, 0x0, {0x1, r11}}, 0xfffffff9) syz_io_uring_setup(0x16dc, &(0x7f0000000cc0)={0x0, 0xc765, 0x1, 0x0, 0x352, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000d40)) syz_io_uring_submit(r14, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x8}, 0x20000) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2835.922059] FAULT_INJECTION: forcing a failure. [ 2835.922059] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.923874] CPU: 1 PID: 14602 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2835.924985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2835.926299] Call Trace: [ 2835.926706] dump_stack+0x107/0x167 [ 2835.927563] should_fail.cold+0x5/0xa [ 2835.928209] ? create_object.isra.0+0x3a/0xa30 [ 2835.928938] should_failslab+0x5/0x20 [ 2835.929546] kmem_cache_alloc+0x5b/0x310 10:50:52 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 22) 10:50:52 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0x3ce0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) openat(r3, &(0x7f0000000080)='./file0\x00', 0x101000, 0x0) 10:50:52 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:52 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000440)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000d1a000/0x3000)=nil, 0x3000, 0x10, 0x30, r2, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd_index=0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x19, 0x1}, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) r5 = syz_io_uring_setup(0x3866, &(0x7f00000003c0)={0x0, 0xd627, 0x2, 0x0, 0x0, 0x0, r4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x8010, r5, 0x10000000) io_uring_enter(r5, 0x7320, 0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup(r6) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) fchmodat(r7, &(0x7f0000000080)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1a000/0x2000)=nil, 0x2000, 0x3000000, 0x2030, r0, 0x0) r8 = open$dir(&(0x7f0000000280)='./file0\x00', 0x10000, 0x2) execveat(r8, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x100) 10:50:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:52 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:50:52 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2835.930194] create_object.isra.0+0x3a/0xa30 [ 2835.931029] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2835.931810] kmem_cache_alloc+0x159/0x310 [ 2835.932450] __d_alloc+0x2a/0x990 [ 2835.932973] ? find_held_lock+0x2c/0x110 [ 2835.933602] d_alloc_pseudo+0x19/0x70 [ 2835.934177] alloc_file_pseudo+0xce/0x250 [ 2835.934819] ? trace_hardirqs_on+0x5b/0x180 [ 2835.935473] ? alloc_file+0x5a0/0x5a0 [ 2835.936072] anon_inode_getfile+0xc8/0x1f0 [ 2835.936716] io_uring_setup+0x138b/0x2980 [ 2835.937382] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2835.938167] ? wait_for_completion_io+0x270/0x270 [ 2835.938952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2835.939791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2835.940602] do_syscall_64+0x33/0x40 [ 2835.941190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2835.941977] RIP: 0033:0x7f768f557b19 [ 2835.942555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2835.945437] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2835.946595] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2835.947685] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2835.948799] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2835.949904] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2835.950993] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:50:52 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/134, 0x86}], 0x3, &(0x7f00000006c0)=""/4096, 0x1000}, 0x0, 0x2000, 0x1, {0x2}}, 0x3) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup(r3) connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r5 = openat(r4, &(0x7f00000000c0)='./file0\x00', 0x66e2, 0x31) r6 = syz_open_dev$vcsn(&(0x7f0000000040), 0x20, 0x10000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b7}]]}, 0x30}}, 0x0) [ 2854.235215] FAULT_INJECTION: forcing a failure. [ 2854.235215] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.237684] CPU: 1 PID: 14639 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2854.239131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0xc38, r8, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2a}}}}, [@NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x104}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd195}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}]}]}, @NL80211_ATTR_TID_CONFIG={0x13c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x460}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fe9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1f}]}]}, @NL80211_ATTR_TID_CONFIG={0xa20, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x4}, {0x1, 0x7}, {0x3}, {0x6, 0x9}, {0x4, 0x2}, {0x0, 0x3}, {0x2, 0xa}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x3, 0x3}, {0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x1}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x3}, {0x3, 0xa}, {0x4, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0xa}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x5, 0x2}, {0x1}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x20, 0x4, 0x9, 0x4, 0xffff]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x7}, {0x3, 0x5}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x3, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x6, 0x8}, {0x1, 0x6}, {0x4}, {0x7, 0x5}, {0x4, 0x1}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0x2}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x5, 0x7}, {0x2, 0x1}, {0x7, 0x8}, {0x1, 0x5}, {0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x7, 0x9}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0x9}, {}, {0x5, 0x5}, {0x3, 0x3}, {0x4, 0x8}, {0x4, 0x2}, {0x1, 0x6}, {0x2, 0x8}]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x6}]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x3}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x4}, {0x1, 0xc}, {0x6, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x3, 0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0x4}, {0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x2, 0xa}, {0x3}, {0x3, 0x6}, {0x7, 0x6}, {0x7, 0x8}, {0x4, 0x7}, {0x2, 0x8}, {0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x3}, {0x7, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x7}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x7}, {0x7}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x9}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x18, 0xb, 0x3, 0x4a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfbff, 0x0, 0x8, 0x3ff, 0xed, 0x3ff, 0x6, 0x5]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x4, 0x6, 0xb, 0x9, 0xb, 0x4, 0x30, 0x18, 0xb, 0x5, 0x12, 0x4, 0x5, 0xb, 0x5, 0x24, 0x1a, 0x36, 0x4, 0x3, 0x1, 0x60, 0x1, 0x3, 0x9, 0x60, 0x1b, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x21c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0xff, 0x8, 0x1, 0x9a6, 0x0, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x30, 0x6, 0xc, 0x9, 0x12, 0x0, 0x30, 0x4, 0x12, 0x36, 0xb, 0x24, 0x48, 0x4, 0x36, 0x12, 0x18, 0x48, 0x3, 0x3, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x9}, {0x5, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x7}, {0x1, 0x6}, {0x6, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x0, 0x4}, {0x3, 0x8}, {0x6}, {0x6}, {0x3, 0x7}, {0x2, 0x8}, {0x6}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {0x5, 0x1}, {0x5, 0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x3}, {0x5, 0x8}, {0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0xa}, {0x4, 0x7}, {0x7, 0x6}, {0x4}, {0x5, 0x1}, {0x4, 0x9}, {0x2, 0x5}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x6, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x6}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x6}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x6}, {0x4, 0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x9, 0x6, 0x5, 0x1ff, 0x8001, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x6, 0x30, 0x1, 0x5, 0x9, 0x9, 0x6, 0x6, 0x12, 0x12, 0x60, 0x4, 0x1, 0x3, 0x2, 0x48, 0xb, 0x9, 0x24, 0x1, 0x30, 0x3c, 0x4, 0xb, 0x6, 0x16, 0x36]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x8}, {0x5, 0x3}, {0x1}, {0x0, 0x8}, {0x6, 0xa}, {0x2, 0x7}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x9}, {0x1}, {0x5, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x3, 0x5}, {0x4, 0x7}, {0x3, 0x3}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x2}, {0x4, 0x7}, {0x4, 0x7}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x6, 0x3}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x3}, {0x5, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x6, 0x8}, {0x7, 0x2}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x12, 0x32, 0x24, 0x0, 0x12, 0x0]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x16, 0x9, 0x60, 0x2, 0x60, 0x36, 0x4, 0x36, 0x24, 0x3, 0x6, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x2, 0x2}, {0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x4, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x6, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x4, 0x3}, {0x4, 0xa}, {0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0xc}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x3}, {0x6, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x6, 0x3}, {0x6, 0x7}, {0x5, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x6}, {0x6, 0x9}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x2}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x3b, 0x0, 0x3, 0x5, 0x12, 0x5, 0x2, 0x34, 0x6, 0xc, 0x9, 0xb, 0x5]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x9, 0x1b, 0x6, 0xb, 0x12, 0x12, 0x6c, 0x16, 0x36, 0x5, 0x12, 0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x12, 0x12, 0x30, 0x16, 0x4, 0xb, 0x30, 0x48, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x5b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x57c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x6}, {0x2, 0x4}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x876, 0x0, 0xea, 0x28, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x4}, {0x2, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x1}, {0x3, 0x5}, {0x4, 0x9}, {0x4, 0x7}, {0x2}, {0x6, 0x6}, {0x6}, {0x3, 0x2}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x7, 0x9}, {0x4, 0x5}, {0x1, 0x4}, {0x4, 0x9}, {0x6, 0x5}, {0x2}, {}, {0x3, 0x7}, {0x6}, {0x5, 0x9}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x6, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x8}, {0x0, 0x3}, {0x2, 0x7}, {0x6, 0x2}, {0x3, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x5, 0x9}, {0x3, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x0, 0x6}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {0x5, 0x8}, {0x7, 0x2}, {0x4, 0x7}, {}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x9}, {0x6, 0x2}, {0x4, 0x4}, {0x3}, {0x7, 0x4}, {0x0, 0xa}, {0x4, 0x7}, {0x6, 0x9}, {0x5, 0x1}, {0x5, 0x7}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0x7}, {0x1, 0x4}, {0x3, 0x3}, {0x4, 0xa}, {0x2, 0x9}, {0x2, 0x7}, {0x5}, {0x0, 0x1}, {0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x3}, {0x5, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe000, 0x100, 0x0, 0x1, 0x1, 0x100]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x3}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0xa}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x3}, {0x6, 0x8}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x2, 0x9}, {0x2, 0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x6, 0x60, 0x18, 0x3, 0xb, 0x48, 0x30, 0x18, 0x18, 0xc, 0x9, 0x48, 0x1, 0x18, 0x3, 0x9, 0x6, 0x6c, 0x18, 0x60, 0x6c, 0x2, 0x48, 0x16, 0x12]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x2, 0xa}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x4, 0x6}, {0x3, 0x2}, {0x6, 0x5}, {0x6, 0x5}, {0x3, 0x5}, {0x6, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x18, 0x3, 0xc, 0x0, 0x6c, 0x12, 0x4, 0x6c]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x9}, {}, {0x2, 0x8}, {0x5, 0x3}, {0x2}, {0x7, 0x3}, {0x4, 0xa}, {0x2, 0x3}, {0x4, 0x8}, {0x5, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {}, {0x0, 0xa}, {0x6, 0x8}, {0x3, 0x4}, {0x5, 0x3}, {0x4, 0xa}, {0x7, 0xa}, {0x2, 0x2}, {0x2, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x6}, {0x4, 0x9}, {0x0, 0x7}, {0x4, 0x5}, {0x5}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0xa}, {0x1, 0xa}, {0x2, 0xa}, {0x3, 0x7}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x3}, {0x4}, {0x4, 0xa}, {0x6, 0x9}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x2, 0xb, 0x60, 0x3, 0x18, 0x24, 0x1, 0x9, 0x6, 0x4, 0x60, 0x6d, 0x30, 0x1, 0xc, 0x9, 0x6c, 0x16, 0x2, 0x16, 0xc, 0x1b, 0x36, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x2, 0x3, 0x0, 0x3, 0xcde7, 0x100, 0x1000]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x2}, {0x5, 0x4}, {0x5}, {0x5}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x3}, {0x2}, {0x4, 0x5}, {0x2, 0x5}, {0x1, 0x9}, {0x6, 0x1}, {0x7}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x6}, {0x4, 0x8}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8000, 0x1000, 0x9f, 0xfffe, 0x4, 0x8, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x60, 0x30, 0x5, 0x36, 0x48, 0x5, 0x60, 0x18, 0x6c, 0xb, 0x48, 0xb, 0x6c, 0x7, 0x60, 0x5, 0xc, 0x1b, 0x1b, 0x4, 0x4, 0x36, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x0, 0xc, 0x48, 0x1b, 0x4, 0x3, 0x24, 0x60, 0x0]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x5}, {0x3, 0x1}, {0x4, 0x9}, {0x5, 0x3}, {0x0, 0x6}, {0x6}, {0x0, 0x1}, {0x6}, {0x6, 0x4}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x7}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x7}, {0x4}, {0x5, 0x3}, {0x0, 0x2}, {0x6}, {0x2, 0x3}, {0x3, 0x7}, {0x3}, {0x4}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x3}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x2}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x2}, {0x1}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0xa}, {0x5, 0x2}, {0x6}, {0x7, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x7}, {0x7, 0xa}, {0x6, 0x2}, {0x2}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe67, 0x7, 0x9, 0x9, 0x81, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x5, 0x1, 0x96b, 0x8, 0x9, 0xfffc]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0xc, 0x886ceccbf24c0adc, 0x60, 0x12, 0x18, 0x1b, 0x12, 0x60, 0x2, 0x12, 0x12, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x4}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x2, 0x5}, {}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x5, 0x1}, {0x2, 0x4}, {0x6, 0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x5, 0x1}, {0x2, 0x3}, {0x5, 0x7}, {0x6, 0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x2, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0x7}, {0x7, 0x8}, {0x5, 0x1}, {0x3, 0x4}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x3, 0x1}, {}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x3, 0x1}, {0x4}, {0x6, 0x8}, {0x3}, {0x5, 0x7}, {0x7}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x2}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0x5}, {0x1}, {0x6, 0x8}, {0x3, 0x9}, {0x4, 0x8}, {0x3, 0x8}, {0x1}, {0x7, 0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x3}, {0x6, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x8}, {0x6, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xef648be5b8e128ba, 0x9, 0x5, 0x60, 0x4, 0x3e, 0x9, 0xc, 0xb, 0x18, 0x5, 0x6c, 0x60, 0x9, 0x48, 0x24, 0x1]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x1, 0x4, 0x2, 0x6, 0x800, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x4}, {0x0, 0x6}, {}, {0x3, 0x9}, {0x2, 0x5}, {0x5, 0x2}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x6, 0x7}, {0x3}, {0x1, 0xa}, {0x1}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x2, 0x7}, {0x7, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x16, 0x36, 0x60, 0xc, 0x30, 0x16, 0xb, 0x1, 0x9, 0x18, 0x4, 0x36, 0xc, 0xc, 0x24, 0x9, 0x12, 0x1b, 0x1, 0x9, 0x1, 0x60, 0xe, 0x1, 0x1, 0x18, 0x0, 0xc, 0x56, 0x12, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x3, 0xa}, {0x7, 0x1}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0x4}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0x5}, {0x4, 0x1}, {0x4}, {0x2, 0x5}, {0x6, 0xa}, {0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {0x7}, {0x4, 0x9}, {0x2, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x2}, {0x4, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x1}, {0x6, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x3}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x5}, {0x6, 0x1}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x5}, {0x3, 0xa}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x4}, {0x6, 0xa}, {0x4, 0x5}, {0x1, 0x3}, {0x2, 0x6}, {0x2, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x6, 0x5}, {0x3, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x9}, {0x6, 0x8}, {0x1}, {0x2, 0x9}, {0x7, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x5, 0xa}, {0x0, 0x1}, {0x7}, {0x1, 0x3}, {0x2, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x5, 0x2}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x12, 0x0, 0x36, 0x6, 0x1, 0x5, 0x60, 0x16, 0x2, 0x12, 0x9, 0x5cc9d9a9ccbc9a15, 0xb, 0xc]}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1ff, 0x6, 0x1, 0xfffe, 0x101, 0x7f, 0x7]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0x4}, {0x6, 0xa}, {0x5, 0x3}, {0x6, 0x9}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0xa}, {0x1}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x1}, {0x1, 0x7}, {0x3, 0x6}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x3}, {0x2}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x4}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x4, 0x4}, {0x1, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x7, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x3}, {0x5, 0x3}, {0x6, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x3, 0xa}, {0x2, 0x4}, {0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x4}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x2}, {0x6}, {0x3, 0x3}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x7}, {0x6, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x4, 0x1}, {}, {0x4, 0x5}, {0x4, 0x9}, {0x2, 0xa}, {}, {0x4, 0xa}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x36, 0x20, 0x1b, 0xb, 0x0, 0x6, 0x36, 0xc, 0xc, 0x2, 0x5, 0x3, 0x60, 0x6, 0x6c, 0x36, 0x16, 0x30, 0xb, 0x6c, 0x1b, 0x57, 0xb, 0x24, 0x1, 0x6, 0x3, 0x2, 0x4, 0x16, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa93e, 0x7fff, 0xa20, 0x9, 0x6fab, 0x2, 0x100, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x9d52fe30cc2bb361}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}]}, 0xc38}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000d1e000/0x2000)=nil, 0x2000, 0x2000005, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r10, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2007, @fd_index=0x3, 0x50, 0x7, 0x1, 0x2, 0x0, {0x1}}, 0x7fff) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r13, 0x0, 0x0}, 0x0) sendmsg$unix(r4, &(0x7f00000015c0)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000380)="06057b378e0eb4cf588dbe42ff7effd959785f5f9c4ad2fd115c145364b757dd2ceb1e8be2967049b38a57c0881bda69ddb53c98ea632d28cf27122bd7d9f8a8e78f07e9d323f4fe184a76fc37a10e8fee25982e990c8fbe180f470679d26b7924223d968474c4b3e728bd075b17a773361bf14bbd6f16cf53ef98e8dd856b5febbaaf4df77c6e990ddddb168cba54b6896baab823e313898a23106c20f82b2cce5d8c3533494a9308becf09fcbde72b376c02a22d4d973da80a9f8c", 0xbc}, {&(0x7f0000000440)}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="12c72274da1db2bd097fda3de85366d1f8e0d827faf588b63b0628c68cc770a827d65b950d65a3d8fd01585b4baa9e39bab11975bf6d92fb9bb7b4b6e34bbbe97e608b0a43659e6409b505", 0x4b}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f0000001300)="9185aa861ac0bc87d33b00517cf1c35303d19baa62c5513a14e5a33ccf637ac4932bc4967a2340ebcbe721ee23f02cf85fd2e9f12ab63752b7e038d07a59bf94e2a110f83361c90e762d200fd6719b4ce5c48ac9015f0522bff59f31ada3ceb0faaf3bd1997feaaf7c0414abadb8cd16a5e362a4a218b4e1856f7c30ef013fa6a342db0a4d799b7128576dae402e1ea294115ec448f568a6f8765758719fa458e96fcf8152088023a868723fe862f7989789e8fc1b0dd4adb9827a967a64a579714c0011fb8448902480d7594a13dd8d500c6171fc5a5dbfaaf91edef6f8eebefc7dc6ccfd3d7b296cb4caa12611c85152619be16a0c9ecdaaac9b848bcf58", 0xff}, {&(0x7f0000001400)="ea8a8588b0f4f42241c1abb78f2fd0b1e1f699e1e33061f1eebd5afccb003c57386ca3429d79350a6e5978d68c40515b9b6dbe517fd5f9318afaeb25498743097023acdcd0ad122572336b320d75782e5cf97694edd452dccc85188c77e4cee0055328241d6a9db7e373d3f5665d4c323f3e8fce44d431fb2146f45c1ab694ec8349e344cd7b78bded65034ceaac34c87941b0279f26722ef8b48e860e66f6ce0409fa11269f032ba6fa4dc822f3351dbd7c6ef02870e4ef", 0xb8}], 0x7, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r5, r13, r3]}}], 0x48, 0x80}, 0x80) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2854.241268] Call Trace: [ 2854.242012] dump_stack+0x107/0x167 [ 2854.242864] should_fail.cold+0x5/0xa [ 2854.243655] ? create_object.isra.0+0x3a/0xa30 [ 2854.244604] should_failslab+0x5/0x20 [ 2854.245391] kmem_cache_alloc+0x5b/0x310 [ 2854.246228] create_object.isra.0+0x3a/0xa30 [ 2854.247129] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2854.248195] kmem_cache_alloc+0x159/0x310 [ 2854.249053] __d_alloc+0x2a/0x990 [ 2854.249774] ? find_held_lock+0x2c/0x110 [ 2854.250609] d_alloc_pseudo+0x19/0x70 [ 2854.251387] alloc_file_pseudo+0xce/0x250 [ 2854.252245] ? trace_hardirqs_on+0x5b/0x180 [ 2854.253125] ? alloc_file+0x5a0/0x5a0 [ 2854.253930] anon_inode_getfile+0xc8/0x1f0 [ 2854.254809] io_uring_setup+0x138b/0x2980 [ 2854.255668] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2854.256712] ? wait_for_completion_io+0x270/0x270 [ 2854.257730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 10:51:10 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1d46, &(0x7f0000000080)={0x0, 0xc045, 0x20, 0x3, 0x3cb, 0x0, r0}, &(0x7f0000d1b000/0x2000)=nil, &(0x7f0000d1c000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r3, &(0x7f00000008c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x2007, @fd_index=0x6, 0x3af6cfca, &(0x7f0000000800)=[{&(0x7f0000000240)="5bedc0c018f342500818542f4b4be88a0fd77868829ae731c764b1efa3edaa0eacc090226bc6dabf21e5abb99730fa8b392a548f9fec86b685a83a12462fbb04c5e0afae9efb285b10c1ebb64ad37c020edd57ebd9e0504e5139f0e8c4ab2ea90147d8a8d56df427c4d7b06cd4fe6359bef446c479431dbebf4c9c9ed4c29898072760e8285f2dbabcfecca193bc3d1089", 0x91}, {&(0x7f0000000300)="66432e01ec55b7e61b94b2548954996cbe84af7abc1ed88cd484c205329dfc4b1bdd654ecfcce313b6c6dd1db4f988ebd8a132acf6e1dfba1becb0b9b40c00b8bfc3e9353e70a28d7fccbea25fb571a4c79c1ef9590ec1bac6bf91e4d13a8fe5b2f947", 0x63}, {&(0x7f0000000380)="f9fe8f2ed07e7b891a6a9aba5a0830f3606dc9ab4c5cc0731ee93346a034b03f38a3493ec165acf443fcb4cd9fbdae072ca1412e87b0375f789cb6a5d1c96562c6b6a6164c1d8e114042439e2bd2928b674fdded20d1556b0eacd4ec8b7e89286b862fe986caf502a73596f13ea1bfa654b28c70ebc839beef362a6f07e88fb3f8b477a658762787fd84cf8172ad103cbd409d28b9abbf56ba3c5d618fd230819771c392826286ddfbd1ab8889095ba700ad7298", 0xb4}, {&(0x7f0000000440)="fae14e42c0aef907ff147f63a12b7f058452ad4a142a069367af191835857615ffce76eef50ba16dc2a8007aaf628fed077b38148328c454c1d832a64edec5eb0055eb57b140cc25a007f0c3bda21772d1e30792f7315d2d64dc3971922376326e0be0b65554da7c2e6960376ab0b730c37d9b468c7047f21cae8624cd0e239d2fa11336f5024f7a1b530badaad3e6ef78c9f1922060dbb42703fbab60cce934a4734c2caf89d5556c40cd6fa87f7cbf162b269f173d9496dd57b7d2177395a2", 0xc0}, {&(0x7f0000000500)="d07e2306057196f8a0377e9788cae05bfd042e29cd3b6d8fe4713192a17b169c705538f7564b4e047059", 0x2a}, {&(0x7f0000000540)="6f04583786bc9f931b37e2444094903fddc9d4b2fcd6da434b90c458a1417df799a2b6bc37e772d1b76ce97ec6faea744b48ccf067d3ea53300583dbb1cd8d9e76e7f6d61bb0c8a039633bbdb7c0ebb7366ae27c4385151a0ba7f3c659a36819856c1370072cfdeafd2cdb7485c2d5b56f1cffe5f845002a107793004eafd770ba59e382e9014bbc5ce9844d", 0x8c}, {&(0x7f0000000600)="c4317c3d5f2fc1aeb894aa2e52e3706ed80fd469b054ee5b5d3cd61aca3f8ea4217f5d7bebdae2a98fae25932a7cdf47724e0f0d0787b7bac9b5da0978bb0440efdeff5f6d404bedd4ce81a1f5937d208ae66b1ff8703bd10d3213d72627e7b6f7006697", 0x64}, {&(0x7f00000006c0)="948b93f213a5308fc0a3e2be5a3b9b27cb83bd9a2cf1912b83ea9b1cd945c30445c8ffa267cbcb0a8a93e71360c5f19d968198fe1c3543697b3ce7cfcd25c4207725c96ce48fd73d227271d0184d6215e4261171a3ac955c8de358b3455865eee04937ab26cd3f1946c9b208156a054ce0bc1ab91a8b42096362fbd4aed41e0133fcff7d8f7c9f05c759081c671410ffd967da2a8fc885c5c5d63e3147d98d8b6f0e645c6334af77106b3f6a91c187f4167090c7517d31a85b6e2dfa2b1af02114fc642c99d76d5701760586ef73", 0xce}, {&(0x7f00000007c0)="0d6ce897264df311b67e2fc6635c6234", 0x10}], 0x9, 0x5, 0x1}, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 23) 10:51:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2854.258810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2854.260329] do_syscall_64+0x33/0x40 [ 2854.261216] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2854.262270] RIP: 0033:0x7f768f557b19 [ 2854.263035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2854.266787] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2854.268351] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2854.269825] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2854.271289] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2854.272753] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2854.274211] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:51:10 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0xffffff7c, 0x19}, 0x5) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 2: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) r1 = syz_io_uring_setup(0x37c, &(0x7f0000000100)={0x0, 0xc619, 0x4, 0x0, 0x1e6, 0x0, r0}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1e000/0x1000)=nil, 0x1000, 0x2, 0x40010, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r1, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/16, 0x10}], 0x1) 10:51:10 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000d1e000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, r3, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r8, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r12, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, r10, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x8}}, 0x6) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r3, 0x1bb6, 0x1dd0, 0x2, &(0x7f00000000c0)={[0x6]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x0, {0x0, r13}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 24) 10:51:10 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06000000000000002e2f66696c65300025c1c7733f63d49282acea825667e1218534f4ca3979033db33ac419288ebed88afd45d5b54095967fbd17a131a215f83ec73df3bef5136c897da3bce207c6c1c26fa1d1ce987a2a8fe27cd6911d5f10de7bd8fed046445575eafcb95f48d7da7aef047b5a0e20ea53574f740843cb1af23ddb20066eedae470dc273f673f4b63c3cc2d475178cd1167846934a20f8b10b2336208daeb9541265d8cb0701903bd950a6d463a6a2d80910fc"]) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x30000, 0x0) 10:51:10 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2854.600914] FAULT_INJECTION: forcing a failure. [ 2854.600914] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.603666] CPU: 0 PID: 14666 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2854.605229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2854.607079] Call Trace: [ 2854.607677] dump_stack+0x107/0x167 [ 2854.608504] should_fail.cold+0x5/0xa [ 2854.609363] ? create_object.isra.0+0x3a/0xa30 [ 2854.610386] should_failslab+0x5/0x20 [ 2854.611238] kmem_cache_alloc+0x5b/0x310 [ 2854.612160] create_object.isra.0+0x3a/0xa30 [ 2854.613160] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2854.614306] kmem_cache_alloc+0x159/0x310 [ 2854.615255] __alloc_file+0x21/0x320 [ 2854.616097] alloc_empty_file+0x6d/0x170 [ 2854.617027] alloc_file+0x5e/0x5a0 [ 2854.617837] alloc_file_pseudo+0x16a/0x250 [ 2854.618797] ? alloc_file+0x5a0/0x5a0 [ 2854.619688] anon_inode_getfile+0xc8/0x1f0 [ 2854.620665] io_uring_setup+0x138b/0x2980 [ 2854.621617] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2854.622771] ? wait_for_completion_io+0x270/0x270 [ 2854.623895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2854.625091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2854.626262] do_syscall_64+0x33/0x40 [ 2854.627107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2854.628275] RIP: 0033:0x7f768f557b19 [ 2854.629117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2854.633270] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2854.634990] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2854.636611] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2854.638229] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2854.639833] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2854.641454] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:51:10 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:10 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0xc275}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000d1b000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x5, 0x5}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1000) 10:51:10 executing program 5: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:27 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 25) 10:51:27 executing program 5: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2871.820207] FAULT_INJECTION: forcing a failure. [ 2871.820207] name failslab, interval 1, probability 0, space 0, times 0 [ 2871.823249] CPU: 0 PID: 14689 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2871.825082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2871.827283] Call Trace: [ 2871.827996] dump_stack+0x107/0x167 [ 2871.829000] should_fail.cold+0x5/0xa [ 2871.830019] ? security_file_alloc+0x34/0x170 [ 2871.831226] should_failslab+0x5/0x20 [ 2871.832254] kmem_cache_alloc+0x5b/0x310 [ 2871.833364] security_file_alloc+0x34/0x170 [ 2871.834511] __alloc_file+0xb7/0x320 [ 2871.835510] alloc_empty_file+0x6d/0x170 [ 2871.836659] alloc_file+0x5e/0x5a0 [ 2871.837617] alloc_file_pseudo+0x16a/0x250 [ 2871.838747] ? alloc_file+0x5a0/0x5a0 [ 2871.839807] anon_inode_getfile+0xc8/0x1f0 [ 2871.840946] io_uring_setup+0x138b/0x2980 [ 2871.842069] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2871.843422] ? wait_for_completion_io+0x270/0x270 [ 2871.844748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2871.846130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2871.847514] do_syscall_64+0x33/0x40 [ 2871.848538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2871.849897] RIP: 0033:0x7f768f557b19 [ 2871.850884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2871.855754] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2871.857784] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2871.859693] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2871.861597] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2871.863487] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2871.865376] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:51:27 executing program 7: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:27 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:27 executing program 1: r0 = syz_io_uring_setup(0x38a3, &(0x7f0000000180)={0x0, 0xd482, 0x4, 0x0, 0x1f7}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x1, &(0x7f0000000080)="67180a6c277105bedbe321520a26b1359d17bddcc3aa70fd5a863067c9920ae618900ede506f988ba319685cc98db0590129a35363f8584863e6853224244d1552834214632f1964c5adbacb517fdc4e58357766c8348f9973db53ed190059d545e239eeb59d74a070228b96a33db22d1c553a1ba2968001b77899ca761c02142367ef8537661eb3eb67a4bbb9bbecdd68e3bb5876bc4c38dd572dc2719bc92db24d84cd63307c4f240748f5007af2d6faf0ec2a1a0a2b3d8dc0aeb12663d237ac835dc44b848b915d", 0x100, 0x0, 0x0, {0x2}}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:28 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000d1a000/0x4000)=nil, 0x4000, 0x200000d, 0x110, r3, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000a80)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000a40)={&(0x7f0000000080), 0x80, &(0x7f0000000900)=[{&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000240)=""/196, 0xc4}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/149, 0x95}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/209, 0xd1}], 0xa, &(0x7f00000009c0)=""/80, 0x50}, 0x0, 0x2000, 0x0, {0x3}}, 0x6) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:28 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:28 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000003c0)={0x0, 0x80000, 0x0, 0x0, 0xf5}, &(0x7f0000d1e000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r5, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000340)=[r0, r0], 0x2}, 0x4e) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x1f, 0x0) r10 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xff, 0x5b, 0x20, 0xa7, 0x0, 0xffffffffffffff00, 0x8000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xc000000000000000, 0x9}, 0x0, 0xfffffffffffffffe, 0x400, 0x7, 0x7, 0x401, 0xb8, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x10, r8, 0x9) r11 = dup(r8) r12 = pidfd_getfd(r8, r8, 0x0) r13 = accept4$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c, 0x800) ppoll(&(0x7f0000000280)=[{r9, 0x10}, {r10, 0x2202}, {r11, 0x2014}, {r12, 0x2000}, {r13, 0x8002}], 0x5, &(0x7f00000002c0), &(0x7f0000000300)={[0x6]}, 0x8) 10:51:28 executing program 7: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:28 executing program 5: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:28 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:28 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80200, 0x150) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000ec24030000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x20380, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, r5, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r8 = socket$unix(0x1, 0x1, 0x0) dup(r8) sendmsg$unix(r8, &(0x7f0000000600)={&(0x7f0000000100)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000240)="59d5eeac35750354a81cc754d1919ba1ef88f5c4291e38209ce01209cdc5f763cff279665afcf05757ea97200c9cefe1a7c76cb60480cf", 0x37}, {&(0x7f0000000340)="e19d29df86d7824686cc2ec0143e7479ab2a74ae5f31faa371f038ff8289321a12947be1d7efbac7fe799afa8e0d85cd2ce95ba344c579cb4f3eb1294452715adce59285ea84ac039045f45a12c9d7f3ec50a3ab64c5b90b278dd717a1ca5a36d7", 0x61}, {&(0x7f0000000280)="ad", 0x1}, {&(0x7f00000003c0)="3e85aa9bdd959748b9b02f66229e4d91f68e1bbeacbac5c14db356d31720d729434404448adbb8c6c2ab7dfd369956c5b242386504a040e87e2d3517f560c32f02f929694a85d1536d912df7871d31925b6e718defdaffba10a6eb1bd4b4b385f7dbd04a2dcace0271f78925a278822d6b3fcb401040dcd89c606e26c7e6e419a319a5532b93c60810c5219f11281e931a1bb0869450d667ffaacff01e7445e68f117462d7a1b28e05ff2ce820eef6961ca984", 0xb3}, {&(0x7f0000000480)="6370f05f6e11a70f471b3b5ba4b0f5c8a2040caeade0e1de30fa17cd240d31963c08c388147e0d7c4dd53055f62efb20696268e3449e894974ffdbedb7b64c96b89887670b9cd24f3aa440e0fdb9f667b97d240d27e4fa3623aed4da3564f45d07bcc0dc11901ce5a9944e0eb78aa1f70abd538d896a5af4ad84d86296408feafbc958319b1f9df5879626120223767dc9e419f83eb71c19c63b0e05c9faf3923432b41ae225bcdd19219156faa00d207ab280669448c09b1179467525c1f3629223213afdcc386bd94ce9274514b3f8cf", 0xd1}], 0x5, 0x0, 0x0, 0x4000000}, 0x10) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r9, 0x5000943a, &(0x7f00000006c0)={{r4}, 0x0, 0x18, @unused=[0x7ff, 0x6bc, 0x699, 0x40], @subvolid=0xff}) 10:51:43 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r9, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) io_uring_enter(r9, 0x58ab, 0x0, 0x0, 0x0, 0x6) r10 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r14, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x4, 0x4004, @fd_index=0x6, 0x7f, &(0x7f00000003c0)=[{&(0x7f00000000c0)='\x00'/16, 0x10}, {&(0x7f0000000340)="1563f6150f04fd675f57c7a4296752e84db27db922235fdc272b913b1b53c159e8afcfdf7aa210a7eaf92957c55355a0009b0518d371770e3987b2ccaab4a8856bd81c00b0e8e011ca684457616fcb7fb58af60d4f3358fe065188aac4ad0c60a22c06db75a00ac1b848c82ecbf6720429a0b29c946349bc1c58cb61e2", 0x7d}, {&(0x7f0000000280)="b649a9a1c996ca4825201f6972953ba5f20d5084015ecc508320c778663f335bafa98700830d1e3a394d1c", 0x2b}], 0x3, 0x14, 0x0, {0x3, r13}}, 0x5) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:43 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 26) 10:51:43 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2887.732559] FAULT_INJECTION: forcing a failure. [ 2887.732559] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.733841] CPU: 0 PID: 14725 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2887.734630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.735573] Call Trace: [ 2887.735872] dump_stack+0x107/0x167 [ 2887.736268] should_fail.cold+0x5/0xa [ 2887.736718] ? create_object.isra.0+0x3a/0xa30 [ 2887.737238] should_failslab+0x5/0x20 [ 2887.737671] kmem_cache_alloc+0x5b/0x310 [ 2887.738132] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2887.738758] create_object.isra.0+0x3a/0xa30 [ 2887.739236] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.739814] kmem_cache_alloc+0x159/0x310 [ 2887.740289] security_file_alloc+0x34/0x170 [ 2887.740789] __alloc_file+0xb7/0x320 [ 2887.741194] alloc_empty_file+0x6d/0x170 [ 2887.741658] alloc_file+0x5e/0x5a0 [ 2887.742047] alloc_file_pseudo+0x16a/0x250 [ 2887.742526] ? alloc_file+0x5a0/0x5a0 [ 2887.742969] anon_inode_getfile+0xc8/0x1f0 [ 2887.743454] io_uring_setup+0x138b/0x2980 [ 2887.743927] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2887.744501] ? wait_for_completion_io+0x270/0x270 [ 2887.745077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2887.745673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.746234] do_syscall_64+0x33/0x40 [ 2887.746659] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.747214] RIP: 0033:0x7f768f557b19 [ 2887.747636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.749617] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2887.750488] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2887.751294] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2887.752071] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2887.752882] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2887.753693] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:51:43 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x3, 0x3c7}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x3652, &(0x7f0000000080)={0x0, 0x5a1c, 0x1, 0x2, 0x81}, &(0x7f0000d1c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = epoll_create1(0x80000) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, r4, &(0x7f0000000240)={0x10000001}, r0, 0x3, 0x0, 0x1}, 0x3ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x8000, 0x0, 0x8}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x23456}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0xfffffffffffffffa, 0x0, 0xc, 0x19}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x200000d, 0x8010, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000000, 0x810, r5, 0x10000000) r8 = openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd, 0x3, 0x2, 0x200, 0x11, 0x0, {0x2}}, 0x79) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r13, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x8, 0x4, {0x0, r8}, 0x6, 0x1, 0x0, {0x0, r9, r13}}, 0x3ff) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:43 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:43 executing program 7: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:43 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf25020000000900010073797a30000000000900030073797a32000000000900030073797a30000000000900030073797a320000000005000400020000000900010063797a3000000000050004000100000005000400020000000500040002000000be229da05d4edb9473b764ed13156633105ca3170bec952da41147022e8962931863b68e764be980f492b8"], 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x4040000) 10:51:43 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:43 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:43 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 27) 10:51:43 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x509201, 0x160, 0x15}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1c000/0x3000)=nil, 0x3000, 0x3000002, 0x10010, r4, 0x0) 10:51:44 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:44 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2887.867933] FAULT_INJECTION: forcing a failure. [ 2887.867933] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.870302] CPU: 1 PID: 14745 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2887.871725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.873430] Call Trace: [ 2887.873978] dump_stack+0x107/0x167 [ 2887.874736] should_fail.cold+0x5/0xa [ 2887.875517] ? create_object.isra.0+0x3a/0xa30 [ 2887.876453] should_failslab+0x5/0x20 [ 2887.877243] kmem_cache_alloc+0x5b/0x310 [ 2887.878082] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2887.879214] create_object.isra.0+0x3a/0xa30 [ 2887.880115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.881170] kmem_cache_alloc+0x159/0x310 [ 2887.882029] security_file_alloc+0x34/0x170 [ 2887.882923] __alloc_file+0xb7/0x320 [ 2887.883683] alloc_empty_file+0x6d/0x170 [ 2887.884522] alloc_file+0x5e/0x5a0 [ 2887.885271] alloc_file_pseudo+0x16a/0x250 [ 2887.886136] ? alloc_file+0x5a0/0x5a0 [ 2887.886950] anon_inode_getfile+0xc8/0x1f0 [ 2887.887823] io_uring_setup+0x138b/0x2980 [ 2887.888704] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2887.889741] ? wait_for_completion_io+0x270/0x270 [ 2887.890773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2887.891842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.892920] do_syscall_64+0x33/0x40 [ 2887.893686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.894748] RIP: 0033:0x7f768f557b19 [ 2887.895521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.899332] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2887.900920] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2887.902402] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2887.903868] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2887.905347] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2887.906823] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:51:44 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:51:44 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:00 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:00 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 28) 10:52:00 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:00 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0xf23, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:00 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:00 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1100) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x5}, 0xcea7) 10:52:00 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:00 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000006c0)={{r4}, "1aab03161c7fabbfbf897e1267550a9de30565a0cf460c5266a93d436d3de308171b51490f5601365fd0024867c0b71c39c5f5e845871eff45bbe5a7000cb03f5bc16eab9b552c8b585b08a70f9d478341c1b52d2960762031e5ad43e60995970a379d70e0322dcad3ad4606713412a72ae2d696deacf2f2e90908fc23ce273eda7c4add3597df29fb3aae781cadf4d3793c23f80bfc8e5552c1cdae3e4f5895f8c0822be829cdcf9b28a276e6ae3a5d773fd54c7056a9e7cdf960584ad7a38d34c52ba4260d4bf503747b9387dc28b006f0eb9dcde35c43831d4ec77ebf7fc3816fb16e0cd6cb7dd5560939d4cf7bfd932c61194f20fb949cea39e51e24c5a27f667e8e5cf0b8df05c0bc05c98e1e602b64abc3b05b95ed7bb22cfdb3b349b17ed52717027d99abe845e7b2478f97d16e03bf91664f7c5d73574d737ecd5e5e80c532909390a1df2473c35e825a8fb6fe70af62b86ea86f32590ec3cb158a60ad6502622e0d1d6b74636f19f82b6a94266abf4d6a9127f41a69df17c62a62401b6ccf72f5e82ea7af30759a0255b28d9a6b37cbb5196037d0b59901c05258e79dd55c9f2322dd36a788781740d68cc7e66c73895b91f3ad7e8aedbbb1a167ce67bb482c0e216bf0ad17fd0cd96476af6941ea3083ce2edd9ecfe59043290a8ebe39816b6c475fc4107693702671b41ad380189b96e80bdd63e7ff82c1ecb3c1b03c01d135ce5ae07317207ec74f5c6655cbf039a7cc220acdcd9c0998c65443f1d827dae1e9b4a210ce1d01914e8f0ab3bc7b6c5f38deff263046d42d5d2abd34fc508e77c860e45e7a6ca842bd8e2ce82bfa5da6f36d3ee5bf50ff7a5c15a9620286cce1632e68f8b16c7519d5b36e661306d2a93a608314b2a7dc56db3482af78b3cea36cc887c51cb147d77e479c06115415f913e7736294d875a6b3940d4e0917d221e2a4b993d85ca89e08d699a9530386ff9a420f1c54cc5e20d56e96fe84dc54bc895bc65bc4905fefc44891b13e5227d9001354f9b61321da01a2512bb41f1fc762f72a174c48023e38fc83cae2318d68fa9db185de24d1bf7e06acdb56ac00c464b7a605065de631fc492a0186897128dfb628d9d36f6b566bdc902c816f1647f2c2257f496023e5c0775a33dc76f4be3d2d37c05f959cc11112107a642b88432bb5b3552f691aa4a85bbeea96159faf735dfdcf975f8bcd07600d9366ba574e5ed372ffa1c41a8d98bc410e0dc536277751aa1b25af1f29638731438d2a085042e648c9fc64ee6ceeaca2866f0a1a1d1fca3bde12902f1435dcc76138a2e8a59bf30ce725f35bd03669927dfe6bcf40c952d713a19c27be286983ffacb631931c05b7728b6ec58a8b6a9500bdd146e6e47e75303adc578a520564fe80b1480f07a7c2856f5115768c8e3dbc637fd538279ac7dfb04d0954961f9a59278155af4531443afdf664a84c45ed184edf0892b8123630f3c20f8799cbb1e64ab3979293cf633fd7e049cfcd1a46d116b1f2e475cf60f564d9a44df04e3693b448e23b1d023eae53cfbb0d752be6919200c1704e09199a55b22b07576a0cfaeb684b6e0a53d015ef1627db296db5d983a061237169a1409baa5de1e1dbae1a35e8a620db1962783827406eb86e3aeebffa8a402e410c780fd0924c96abe09ed6fe82e37e0429b64bbad2eda362c5f35c9648db13dad8cb37256eb7e5dfcb9404ca4d336f324b887f17b6fc7196cf96067e5f6bf39f1a691967c4a1be0e1a0eb48c75b3ae6b4392e181b3d5d2ee0b765396ab5cf67b0a575de5f7c80a9add46d435a1b7dde12da03b59eb112a2fc8ed5cae80f0f2554d99075c173a17e24471f4a39c92ed7f6dfbc153b1d4d02b7cf039718c97a6e7c91a52f8ba4a711e46fbf1367855dca0e7ac3d6617dc49741919c542b1ddd9cf871cd2258f3a1421063c3e93c52628f40f1ff83be42851826c92845d902a24322ca4855a6c92b8b999374999e754e596e8eaa0bf901e593c0f8a9029a7e34d13d9c10ed5e85280c9e89f19473db6f6e1973ce22a743ba7559677b476aef5407cd4c116d788da4eb1f52badb3e5a7af85d97a9052b3077426edd9593bf1c484194d71379e401a83a3da5dc10ecea2513c6816ce08d3b34d60948918ceaa957eea4a55221196e9b2994f44183b3b474f0262304bb8b52d329d18dbb1a3766b0ab4f4cf3d6217147aae2f74a48d419df5a9c7d907cce6a3a5ace302423b89811063afa7d718dd04d93529fda18180943f696d396b686e47d9aedba97ac66ea0efa38098f947bbaefbe3cd409a1bf2f70f1e09851237cddb7f013a551c46257d385e2502e208c27df30269b6461bf023fa88710384ce293aacff8bb0e83c7e5d24458c4dc4440c816c8fd0c4d37365c4e68bc12d91c9e35e7e675a7ba0dbb78cbf0f7cecef0e31cca5b35081dfffe4b8481091c3d73db2b147048a78cc0ed6561150c57525ed3395e3224023c1ff5bcddee6928699780df988be9199574c4ffce45eb478e660546a5f2eff6a889ab12999a7a09510f5ff3a4c778dacda61174e2228ce9a55b9709a0dfe311da5fed6e59d553d73e6f35f89aa494535f304f9353c1013e140cc6da5b1bfba988eb8ef38ec53f590298beeaff2e4ab7d934ddd771049c0ca1e633179e2b6f4afde1b7e4c811c44bbf1e558e6dec4d12aee1b0be44c5db711e22972e4bec3722ff9b9d913fca55ae65693dc93a870f2a227d2b3960bc3a2c4fc3f199a58f2fa7ce660915afe0bf2cab4db2155f686a9950684513f946da894522003f78085a3990f6501e080ce2f7527d336824f1146d4df6f2a09ea75b4161e44cf6a6ae13bd312b362bcedf93b6634b50b8dd1f2add14d69e3a8e1b8a8a05b82cb8dc2715dabe0950245de7b9b97a25b9bfbbff5a5b3e13690f1a56d68b66c98cf4deb41a33a5fc009c6d4fca35eec08c0e4c1fbd78b5897c35bffebc77512270de32d85a70744c1a64a71a526e1e9147fbb054549d366394d6d2236a918a2c074a0494228c4b9cf952d7a72790c83d4906316fb92a5525487880075eb811e09f9d3950d3976b730b8018e1336bfddc9cc1791a2c6b56b833ae976ab4d31fe3397b5c8d26d9424a867f30078fd0e2d6a87f249339b7443550180fe7ea4ec116f8a1d39c4c743b1f87b605d9ef3bacc20fc83f9badbbfdf34e2393ea5d1117dea502985b8c88cefcf9324925c7939e4487f7c69f6922310911186027a47ffab4037781da1b68145b22ec934a3e5396a3fe049f41decfd869821c1555a678aa5d32841af0f7685b3c5efd902363140f41f4a175276ba6f4936161a179a71c84c209da306021e998bb365a142927160ed1f2096a1bf1efe5494be8aa9261d0d423d7fdeea04b0d16e1862e714c3ccba0da1fac017d6ee0325d11eb756480dcec5f36e9e62481838a4293a24de3ee9d2757d93a41dda432c7ab066f511a2f5778b4b6f7ed74b3a546e5abb263d6c3c77bcece38a9a734f01e20220773cc0431b715ee469a93de27a90c1a1829d423996d26a5668e10beeb65fbcddc8be15afd6e43e04ba476ce9d479b947dfdf998b27a55a7df99a785bef5fa3669ee735207678fee3d76f64737884a1eb0f92f444fbdbcd962dffc637bc0596f1c237dc3838596e3660ce98b6fb638878a29084d08e5edb567753f5e456f5ddcfda4fb74c5084c38ab5f88d4acd22acf204135201a57e57ae6f96b3d36b026f5c475aea33cde2b8ade307ff6aff9456da9c0645bdc069de393ed38fb89108fe0a07557c7a3952dcefe602ba114ec32e98f2b3f9a7fad786d8309939d470d068843a0fa5b3fcf98361c029c4e287ed20fbd89a3884de8b0b0774c4201fa08ebbc7de5de684df37318c2ccdc23808d077309aeab6ccc6ef02c2fb643ce335cf174aa2f889c4589fcb3deb751b81a6e718be6cdcf4d48da0b156965c0d225458b3a2be8b2dca8a5a3d0f45cb080c8098c7966617e4434de100f02c0b0bd9b6ce8522e98d36e1566a65ead0f2c60ae8b581f74f602b97045855f1301ba958963046c1b74861954d78af05db301b81d42588016236c8f031990440f4ab8bb05a5e3433f47e5b51ade6b5d0cb114c34191e303890ea3f239d0cc202a200f4fdf197b5182ff76dd062939120e94e4a156b57f7d70c3d87bc6e599df3415cbd295b84da48af8d24c1f31a7529de32b8d36024360ac7cd8106a01c1a19037f48c3361bacaba5feb845c61c0ae9f17974f28db9f0a2dba12aa0928031f2a403bbc65dd9ee2f86e3f78592ba5ea024447d74885f0a3c29e0e15b3ad6326f5bc6b847fb574d0dd00ed16b5fd90f2f2ee2966290af13dae02ac7a486773ec7aab91a09ef83b83ed3275a00b4acc5699a6aee856a786f08bf2cc7ccb3c1c0cdccdbe07c69a59249b56410027b435d10399c047ed14f7825a150d4883ba7f5a89f538b0be1778c27e997563e692f7cdbaf581e0335fc4a43c5e9c2562d7a7ce3cf9248093aaf10f3706c23777d0c4323d03bb7ef60791058a8b3c7fc2e3ee90974de32a10a4827d126c48ad74132e352eccea78a4c0777de5c028fca404bc9e4bf920624d6cf807d64b1004ee859c9fd2102e948578df549b1eabc78aea55649bd803206fb8cc3f7f8581b63f36f7017f45e150a898c71e1e2808bf15c18928e3a5e18ed45f0e4444ccf93de54be37f2991fa840351c5325a80893b0f76be084f34e0137f04c76f138c6afa6dcb8036a946df123da66b3532989f421f0b76ec0ced74d235582c2110048f11f6c7effac42e75c86638264ff26a9389da22d9af36c46be59d684f236b0cf1a5ee378b73a73a7600ca3a80df33ecedba41f6a20a9e6ba31d5d1ba1e34d1fccb19c092654cd5969c31bebca75f539c0428d0d3fe733e7a934d20a73bc7a009491574de43c5398f6006c6924a8908efb5bc714572d7fe777f01e9803a6c5cb7533cb0f51c94f50cc71f4307081168a3d59e5aab5b6cfe1500dadf0da524411fbb1e0c40c53f9808969d5ef363d0357f158abc9163b274b288708f64d5216f07427f0cd14270c1f23278117bfaab12cdd534fa6ed83a72e1e2df5be1c7f824614e59cd0155d1fe68418ef0e0ef5293626741270eaaa76e50334efdc9953a37210e86db4e5793054b4cd5835fbeecf2e2a42bf59fee5a72fb2e58ddb18f340ef7159876b25cc8d503a94e08ea5ed2617874a1d5214061f38eb14f8f5ce7e01a99ce9051e5d3bb13d4409b4d41c3dd6098c97eda815f3128b61206d751065cc4639e7f6b2de3370f43f9649d98ccdd17749284bd6a86e318c59b417e53b933215f2e1eebee2122301d7bb5fe33c400561f0e81b72dd9ec263e1502cf53fa797e8b1b53aa9ece2ca7b5056154f0654ed8081be95df6493a1ecaa9a0e685c58a94c05757bca0e34f811b3cd47706423223fed282cbd5b60103c817084892f85f5d121bbe8dc46cf93d5b293a6d512b79e3e0d9fdff234b1252306f3d1bb4d8e7abafc65bb198269f06835bbddb6fab78bac2126b9f6ddd91f21e3991c667a40abb85c0f8e92d9287791b3b647430d6383da1a70c0356365017d73b999b7fdc9799111f5059d98cd5cee4b28cb643af106a0ebabe47bfa6a29261f8951d1053c32652b835fdd92da219843c76883b502c06fd0141ac06214f7ece9dd0e98fcf7dac32d276fc74a5fa8b79d13fea8b46f801fd034e890c9707dc61f24d6f1c6795fc2138cf131c7aaf82c370d4be76b34e1582b3ec26a9110da63a0325088fb70558211e8f"}) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2904.753200] FAULT_INJECTION: forcing a failure. [ 2904.753200] name failslab, interval 1, probability 0, space 0, times 0 [ 2904.755657] CPU: 0 PID: 14772 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2904.757099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2904.758804] Call Trace: [ 2904.759366] dump_stack+0x107/0x167 [ 2904.760119] should_fail.cold+0x5/0xa [ 2904.760936] ? create_object.isra.0+0x3a/0xa30 [ 2904.761896] should_failslab+0x5/0x20 [ 2904.762705] kmem_cache_alloc+0x5b/0x310 [ 2904.763557] create_object.isra.0+0x3a/0xa30 [ 2904.764486] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2904.765561] kmem_cache_alloc_trace+0x151/0x320 [ 2904.766553] io_uring_alloc_task_context+0x99/0x6a0 [ 2904.767591] ? io_import_iovec+0x1120/0x1120 [ 2904.768505] ? lock_downgrade+0x6d0/0x6d0 [ 2904.769371] ? do_raw_spin_lock+0x121/0x260 [ 2904.770277] ? rwlock_bug.part.0+0x90/0x90 [ 2904.771168] __io_uring_add_tctx_node+0x2c6/0x520 [ 2904.772199] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2904.773288] ? alloc_fd+0x2e7/0x670 [ 2904.774050] io_uring_setup+0x1fbb/0x2980 [ 2904.774906] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2904.775942] ? wait_for_completion_io+0x270/0x270 [ 2904.776977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2904.778041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2904.779121] do_syscall_64+0x33/0x40 [ 2904.779902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2904.780978] RIP: 0033:0x7f768f557b19 [ 2904.781757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2904.785497] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2904.787047] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2904.788467] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2904.789910] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2904.791411] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2904.792862] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:00 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:01 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000d1b000/0x3000)=nil, 0x3000, 0x200000b, 0x13, 0xffffffffffffffff, 0x10000000) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x2c00, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x588e268460a9b8af, 0x0, r6, &(0x7f00000000c0)={0x70000001}, r3}, 0xfffffff9) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:01 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:01 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:01 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:01 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:01 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) accept$unix(r3, 0x0, &(0x7f0000000080)) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:01 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 29) 10:52:01 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:01 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:01 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2905.074292] FAULT_INJECTION: forcing a failure. [ 2905.074292] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.076377] CPU: 0 PID: 14799 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2905.077624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.079102] Call Trace: [ 2905.079584] dump_stack+0x107/0x167 [ 2905.080238] should_fail.cold+0x5/0xa [ 2905.080937] ? create_object.isra.0+0x3a/0xa30 [ 2905.081736] should_failslab+0x5/0x20 [ 2905.082438] kmem_cache_alloc+0x5b/0x310 [ 2905.083181] create_object.isra.0+0x3a/0xa30 [ 2905.083976] kmemleak_alloc_percpu+0xa0/0x100 [ 2905.084794] pcpu_alloc+0x4e2/0x1240 [ 2905.085480] __percpu_counter_init+0x10d/0x2d0 [ 2905.086296] io_uring_alloc_task_context+0xcc/0x6a0 [ 2905.087182] ? io_import_iovec+0x1120/0x1120 [ 2905.087975] ? lock_downgrade+0x6d0/0x6d0 [ 2905.088716] ? do_raw_spin_lock+0x121/0x260 [ 2905.089504] ? rwlock_bug.part.0+0x90/0x90 [ 2905.090266] __io_uring_add_tctx_node+0x2c6/0x520 [ 2905.091132] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2905.092066] ? alloc_fd+0x2e7/0x670 [ 2905.092734] io_uring_setup+0x1fbb/0x2980 [ 2905.093480] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2905.094379] ? wait_for_completion_io+0x270/0x270 [ 2905.095234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.096167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.097072] do_syscall_64+0x33/0x40 [ 2905.097731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2905.098634] RIP: 0033:0x7f768f557b19 [ 2905.099301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2905.102554] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2905.103894] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2905.105149] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2905.106412] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2905.107672] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2905.108927] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:16 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 30) 10:52:16 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x6) syz_io_uring_setup(0x2c5, &(0x7f0000000080)={0x0, 0x34ad, 0x10, 0x0, 0x369, 0x0, r4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 10:52:16 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:16 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffe}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_setup(0x38a3, &(0x7f0000000080)={0x0, 0xf9f3, 0x20, 0xfffffff9, 0x88, 0x0, r3}, &(0x7f0000d1c000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r7, 0x0, &(0x7f0000000240)="00bedabc53594e4dd8f7a73cf247cd15aaee722ef1bf2349628d6f7ecf2ca3d9905ea3b64f8f7e09e6e9c249d8be397f57", 0x31, 0x4}, 0x2b) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r8 = syz_io_uring_setup(0x385c, &(0x7f0000000480)={0x0, 0xb576, 0x0, 0x0, 0x2b9, 0x0, r3}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r8, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)={0x800, 0x3, 0x13}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r12}}, 0x0) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r13, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r10, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, &(0x7f00000006c0)="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", 0x1000, 0x4000000, 0x1, {0x0, r14}}, 0x7f) 10:52:16 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:16 executing program 3: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x100) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r2, 0x0, 0x0, 0x0, 0x19}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x34040, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xc1) 10:52:16 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:16 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2920.491209] FAULT_INJECTION: forcing a failure. [ 2920.491209] name failslab, interval 1, probability 0, space 0, times 0 [ 2920.494206] CPU: 1 PID: 14816 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2920.495996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2920.498132] Call Trace: [ 2920.498803] dump_stack+0x107/0x167 [ 2920.499795] should_fail.cold+0x5/0xa [ 2920.500780] ? create_object.isra.0+0x3a/0xa30 [ 2920.501953] should_failslab+0x5/0x20 [ 2920.502911] kmem_cache_alloc+0x5b/0x310 [ 2920.503952] create_object.isra.0+0x3a/0xa30 [ 2920.505098] kmemleak_alloc_percpu+0xa0/0x100 [ 2920.506244] pcpu_alloc+0x4e2/0x1240 [ 2920.507227] __percpu_counter_init+0x10d/0x2d0 [ 2920.508410] io_uring_alloc_task_context+0xcc/0x6a0 [ 2920.509701] ? io_import_iovec+0x1120/0x1120 [ 2920.510817] ? lock_downgrade+0x6d0/0x6d0 [ 2920.511864] ? do_raw_spin_lock+0x121/0x260 [ 2920.512970] ? rwlock_bug.part.0+0x90/0x90 [ 2920.513994] __io_uring_add_tctx_node+0x2c6/0x520 [ 2920.515012] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2920.516114] ? alloc_fd+0x2e7/0x670 [ 2920.516895] io_uring_setup+0x1fbb/0x2980 [ 2920.517797] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2920.518863] ? wait_for_completion_io+0x270/0x270 [ 2920.519912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2920.521027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2920.522119] do_syscall_64+0x33/0x40 [ 2920.522904] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2920.523977] RIP: 0033:0x7f768f557b19 [ 2920.524769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2920.528660] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2920.530327] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2920.531821] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2920.533331] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2920.534827] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2920.536323] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:16 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:16 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:16 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:16 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) faccessat2(r5, &(0x7f00000005c0)='./file1\x00', 0x90, 0x1100) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) execveat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='^{\'\x00', &(0x7f0000000140)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='!\x00', &(0x7f00000002c0)='-&\x00', &(0x7f0000000300)='\x00'], &(0x7f0000000580)=[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='{}^\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)=',\x00'], 0x100) 10:52:16 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:16 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r7) 10:52:16 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:16 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITEV={0x2, 0x4, 0x2000, @fd_index=0x2, 0x7f, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4bdfb7c00f76ae9aae6fcc5a662c13fb249a9e692e76a0132b7dbcf5ba8b5ae0994189ee585674f4c743918746e511a08adff7e7b8bbb9bab2d887d1dd53c8f3aedb57b4f0e5b48649a62baf4ef5ae4d26511d28a825400bd58e41ca92b2cacf9fd2a1b4b0ffe135e3802a49b0833f781af53936238f0d37623589e2bc46949287176bd2013b96cafbdf07826980f5afef3f89db", 0x94}, {&(0x7f0000000240)="5b654e59c1d903d5009a7ac9aba0", 0xe}, {&(0x7f00000006c0)="9b5223bc869b78803a5cc958e717a1e5c2263a7f1928c561e9a2bcd1b4bee9d3a3e6f41607cee8ac2caa2b24c64ee08612f1c775d0c6656f77dc58dab123bc034cac1f68caeda753439c837648a52fde17fc9e815184968a50ad4d5cde78a38b72a5908d3f0afe9b10ddddaae5256c58e7347a0c1b67a1bc8a0167141cb91832b37d5962922b29251b90bbc9d29d9de925e35a507548f0ac5a27b8d731020a87ff37330facf84760a501d3455070a9e5efd124ba24494e002652c3e43933626f1c2e68d9d207cc3a77bf52c04b4706eb8a043718421ca7c88d322f3c0ed140c3655a71191781b1d51e72eef57914e3042d0cfe05914f020ad01ab6ef247815e0ec80a34ec59124e0d961abed4013cbe1357a4cd7fe1ce36ef25753ccf48a6df63c9edb1f9dc0a0b1ee240bf2f9349d45277ebcea06f412542a7ba2e08d34641293d89a72e2af3cc4fb1ecd98f24f78216a57b22e472ea51e751c19cebd01bc7839eb2fead0046b870752a60ea46cda51719d31c77e3945b67d00004d5c09067571cb34e27ed6664b7b6993b0f889a5e3d3dc32fd4422108962b7094164cda511b887d46348fc3bd8b16aa3addc12a1b0d67b0ced28818c933f5dc1e3bbff0a5755bc2b8ae73844739bc5bbf25ad9468dedd82422642de7667b00adaa16c03cce2e1c8c7efd53bd31a8841ae7f8c78bf29bed2b4e6de0755fb07526deda2e9b2cab58bb4dfa409c295ced435f146483ea6e2d4a36009061c4b37a155bec2249ae625fc4fd5a3d95fe632c8d775b02c1d02cc5819866315228c959f70d2d90ff99242e01256afca30294b357fbfc9c90ca60ed997476b8afd73ec5c96eb4a11e14748d1438c9c0aedf7a3f7401e55ee67f9e746b481395655429c4235bcd8e407e3866b3389667e67160a824c69c3d901867384104a8e446de28d44445d3b48df190f245fcebeb765325e62d52e694abbc0d570826e7de878c85ffc78226809e135666084cf8271c9d701d07a6092757f18ccfc846f189f4cf7402d9d7ab720bfa0a463ab64e8e5302f637c98048b4aa61b1886c01c6ee001858615c4be9034f8a29cffcd747b4401a6184bb774f84138bfecf13df964941c37b1fd17c9276d49f19d7071d3ecdcad884053a61a3f30dd3b39a7706190105223192689b489cc5262a9ddf98191707719ab74f702110942da5233393746d06731d4ba37b73117d7d4a043b5e059b998838e9b20a827f83538fc0651255ad2ea037ce0b698b5355231e7a940809b346547835b61d906ad367fdf450b92ca9bb10ed0289b2fb004f23f001ab23b4e5a842fcf56c37944cd5f74942218c2a9009eb703eb4ea54a30ce5a83d41d92b53658fde2b0d6cef00d210b0872e87853ddd9a9d706b64af0f9dc9bdc0b1471d57d5703908b3d2615056dfd63c447fd95e17b6b900782e4deec562e986ecb4fe02c6b182fc0e395e8ab4250636bd2559d44880772268767759db6947295afa17dbbcdc8837112b55d904c1783ef96b4b253346d831b05121dfc13cf03f187559d633aea74b796063d48e611455ec4c798f77b7e7c1952a9fbc3d3f8560702ed31197626061aab7e0f7fcebaa953b3bee66604c024e459f2dcb2ee5b353bdc050eaab91ccc445676b4d2381e89f13fa3a5cdc0fad6f42e4ad8f03f895fe1abbb5d0ac50c444fe854f8ccaaf10897522dc63bce607c66421d8b3614a855e7beb4cd970842be4409a493a22ab5a1386546e91a78f530287dafa2f7f0a7664c0c5ee6baf3d43c23707a23f270402fec45a2b6435fd447d4d8786ee42e7d21b392f6a4fb23d9ce7525fc2f9abd3b9f2add492868e4bb04a7e35bafc9e0a8c0f83b54c7571b89d7fc9719ecf4b673910704b830cab31df610fbc9e61d30f08b3f448f99e282a7da2b2f905cc4173c55c41de6359ee8b0f03976363b25fb831102d3401b9a9d83ca239e5aeb3473b0f9840077714d4138132dd3d2eb49616c2b1b27908b93fe4523dafe9923b9fe27f2b59d7c2560cdc2335608e0331734d1fc8382c1141cd77c6fde064f442bca81cc9918e29bc43ca9c67c07297cc0915b44ce87bbd75ecf5d0b9d0e6a15b06f00beb71d0987b7aa752364dcbed9e5d4026ee1b8f08b5e520c40a1f1744ce977cfec71eec6faa7b9d40cc743207f1631806ae22783fd3a632f2b0b4e2d35ce68c2af3a864c0743b227c51d2a702cfdf5310fbcbd827f8156d77beb66e358c0c4f92ba9608f329100f2908e478813c980928eb578da3587ce4399234700df441aa4b4c32cda61154e22af6d0ffe7cb2e2afab11140e0290b71871e3df5ed17d765efef368708493921faa419b03e8a1c8f64699258e333f15c4a935d331732760e54bc1dfd9e3cff1815038ed1c854778f2298a0b3aef504b3289d96c363929388a30b14b1bc89f9b5395c287f20328242098df765a0c01ea42b471fa06993b7b4aaef87d7e21dc2ef431658fdb1d041ba44c9abc1ba440c476b989eb918111f46df39e856ebe5c5939007eecda748c72d7b1882d4bc1bfb40e23e51c4bfd2a174a27bd0ffdcfcbaadf857d28d9534a76ceaa5dff53d30f86606bceb1be1247b3a66964f3a69ce88696fff98b19eb49683b352808574a36753d1601086b8a9409b08ec4582f2d955c0628719ba5f50dc13c5857b9c1c594ef1c97d5693f9929ee81da786a4c66f75bcbb0653f8f28b22637472a582fd7a01d7a0c415b87f8af2559fd5b516648e65d0be5950fb95eb427ec14904169cc7667cbbc8fc949d0ac83cec6476040d9d8113b7c000fa75c24bc499d140156a656135587241d632686d91db4a946e7a74d4a0d609844d55ffaa7a665c6990902101152df2ffeb3851b2c1e59ea06e17c721307ccc27a2ea8c5e3e0e1766fa98b95c8c90706be31064f1e3f60da7ac9000e697a7a2b0e890c8e755c08bf78e74c9f18a67c93d73e89c25b2575b757870b8d84a9d5487d9ba3f65a128822558ef4eee4d738f16dd803531944ad23fef30f040a71f469318771bc146492a658556980c48711669ec1745dc06076ee93b10577bca439c245863d9e6aee3e87fad9ddcdced7a72758984ffdbb41e0b7a99ac0d892be0853c97f417941a41f663596fe1729f62f2ca5df0d6958dcaf316ab27f1a990738cc8e45fcc34c3eefda4572d190e0932f5b5ee124d283ab4cf58485ea4875cda712280614ff7d2fb6da378a26cd11e33343c9c80cb0efe36835a08cc8f3a1718bbc4c840b0e0d45986514f631b7a4ace138f8a347d14024a23c92284916e95e9b8f08c1592a6fb70ee72476caea411dec6431a7c487c92454763d9ab37b934a1c0c6ef432a56697b031c30bc7dff44e33b0ea0eada8645da11d8113db5e17f54625cbe264762acadcda6fc0b2b3023e6710a52ea198f64c21a2942811045049f43a3ff21beb2c6ace663276c09be82862eb8057dde134c453222e97c25454cec1323133e1a828e079f91ef3c13605b8cf00bf54035b39c0786795532c4a1d4267cad29adcde95b134690330475e2730dc91fc177fdb4526a74a16bc7a3d5ca0f85eda77a35b19dac595155c3607c2820f02aa10b53a597a7b0840806083c9078832fd287c249d0473b99f6cf320cf5df154f62d209eccc39d08a5fece52f320ace0e054d8042add38a383488e5c7c6072b8f23f582248146055dedbc414e7b1b6314981a26c2e2efaed8f3fbad4ce627a0abff40f6eb3c071b7234f7dead7c100bddf92d4918955c400c70ca9a4272f0c0456d22172a59ba557937fcf1c3d7c5975a9a1bd26e4fefb9a89e0c739badcdddb78c9c46700a22225ed3df44535bd70e087245e27f3cce6a8b12386b72b9db03f0a3496fafcd61468ec1df7dba80a120088211027bfcc66d0cd0ed3f0d13eb9069c56f8ad3f0c9fc81a18b7f4025103121839b5dab973aea223e47a391503d850f71a655e9cfa927f2fe624c8c5cad5d871eb99f6ee68e0a09f3e978a79f8243e120a81d5014c45ee6c1e779c37f81a7faae2e07ccdbc9dd28b878faee6127bfbd205276baf67d2cd397d80f42a2382aabf173ed541fefe97dff598d5f82af58ff94642925f96649b7a48335c565a2ec68ecaf21cb44c2596ad64f72287c909f961277424b63b82562900239302b2be04d5affc9139b472d9ce6e5a103a19e09b1d7e39865b497529353d6c5a73c6d94ccfbb6f3b0ec0e3e521b51df883797e5aff24ccb27594da77cc9c81aeac71b38c116eaab1c5d9a074399ec10a0a0f1ac72f39ba1673e16f0af8de03343ad568f8f8a83215080d72c24edaa4902c654c8379f61aeaaf0ca5dd39e648def7d6360984d8c29e4f16e3a172e11c3a8184db853c8546c3b766d085f3cb88a4dcd1c306c8eed9278635a5491eb37caecd049a16972ace35936506b48ef5b4ec5fee71567375504136750ce8296f75538639262cbb7441984fccf74f18308961ed805df2a8757aef96d34003f86d78f2ba57bf24e3af59ced04144cb957bb7fa4324a9ea5e392b9ef1feef059ea76caff3756bb0443dd234a59a1a51a5927341d1e05b2a2cbfda57a546370468e0123accfdd18930df2a12fb80780724af9ff5c984274dedc3b6560849a5a1746630a8cda8860a5e42e1505d6b2143e3f8bafe866374c478ec60af056f7be8fbc017ce0118a0e1c2bd1f42c72a235000432fea5d9d55c3a7d81e1ea795b56700c09d646cb815404e1bc3cf64538fdfbf7accc434a38563b64cad06902e379d84d7bc59e395d85f5dc18c1834160dcf61d6b77f0fd026b2404cf577a932172aa9093ec9e0283f6870e8c3fd3bd8f42cde4e383b2e5c019818556b3ff1306d967dbfcaf36a01be600d3a4a7c2bdcc1bc127ff9a0fac4d76a17d42c178b7e23d043152a9e1ccf207bff8594db06c4bc18732fab86c386202ac773031433a431ea474e787b7cc76054706f4239fe19d1a14c9c4c7884fbb4505432ebde6f2117256c2bc227bec38d887551e87c918aafcea1a7f9336b7bbd6baa4ad42b14d034ffa24e18e518670e9232a262bbf88a98a126581a8b94da6570ad31e81e03ab1f45051e4ba353cbe844f8749a93b3820d71f3826f49e6103436bef8dd999914d7b97e8074d6d35f6ab49d605310e80f39307b881bf72f5c9ed0f79fe69415a6e84caa0676d3e44c53a0a86b37a4845f1f5100e1d836a02631c441338713142f7a671dea88c9cff9e14e1d5f292296d1b66151f664a7c52d18875ee651c0b1d125d06f9f1ec6b584eb7e84d609bf8c8222a2c608017a8c9e15a3f15fc6db4013bcd587f88321bfe9b2db9f191b52e12ae35a2ac0b0560bcaca08c9eb5ee90d4e1dda1ec59ef6d04410980fadf1bc2fb3fcbca12426155c58bddbc190f0ea7b70904e761e47fcb8c72bf1997c8f79b52f21ea82159feac563912b521d0a17f23f8f01914882e7796663964fc754e39e8ba243f4a50405278b19d608beda92dd593381e8343b3ce27c2a827990592b04ca58bba2297f0b3a4813e3910e1f688063f824f083561d1fd03e519e16d2adce3906e88fc9e0c4713a100b78c679ef3a49b61011ae5644eec5668fd014f2eb66940f39d1eaaebd6d456d978aca65b940ce6f3b491e50484dad7c6658eafe95e6bf9097b7271e1e96dc472bcb8a5da2f193acdbbbf4d1f1a2cbf6869cc54d02b434309b23c023a17dc181cb310a490c835ec15109f5c41a57ca3ac73304677ac5cf0a304a187699cba7ae286c3bb57d3a43844fc1cbc232e47cd4ad51667bf7bf2799137e11950b72d8f1f374ac90b32de", 0x1000}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f0000000280)="00401976923fbf6b274a3f2f9a17423eddc72e3b53f10eb03e1af0ca2e170bcc8449c288a0b168946985d95a89aeaf858c", 0x31}], 0x6, 0x19, 0x1, {0x3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r0, 0x8000000) r5 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x40000241, 0x0, {0x0, r8}}, 0x19dc0000) pread64(r9, &(0x7f0000000380)=""/12, 0xc, 0x4) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x4658, 0xffba, 0x3, &(0x7f0000000080)={[0xffffffffffff8001]}, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) io_uring_enter(r3, 0x1352, 0x7059, 0x2, &(0x7f0000000380)={[0x7]}, 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800, 0x2, &(0x7f0000000140)=[{&(0x7f0000000100)="9295daf08de781d1f7375da4ba2a8c9fa540", 0x12}, {&(0x7f0000000240)="c0720dc75248357ad486061c8e4ff41ec144c237105368674d2dd567a687ae8b49342a9d4f0ab1d5378d6fdc20cd057ab7f59a34637fdfbe33a0c759a88257542ab7b36c3b0610982d7cdd23bb0326b05ca8147db387528a1a1cbc4f9cbbda0350ba2bc122c3f3c578ed8bdc95d46ca5c47a90cf318fdc5adbc9046d18784bb323b95b295092cc794efbee859528f97eaea9e38918323a592ef4c74f550a", 0x9e, 0xfff}], 0x10090, &(0x7f0000000300)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0xc040}, 0x1, {0x0, r7}}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 31) 10:52:33 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x800, 0x2000) write(r4, &(0x7f00000000c0)="dfcbd3724972c775ccf14c9dba5a10214c9cf2abeef5f4b8a0750a76a0deb4643d6b03962f1757527b280c4105d6e5b4dcfefac5de5ac370fbc78ef3de78df26288aa0c8a879c706d8439c0ea30f734822bee3d0fa1d6ae169e705ab5d830de0ab410aa15a56b6cd7021ce7c", 0x6c) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x4, 0x10, r6, 0xaafbb000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r9, 0x80, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x6, 0x10, r3, 0x10000000) syz_io_uring_submit(r1, r10, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x5) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r11 = socket$unix(0x1, 0x1, 0x0) r12 = dup(r11) connect$unix(r12, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) io_uring_enter(r13, 0x4e12, 0x2091, 0x1, &(0x7f00000000c0)={[0x4]}, 0x8) 10:52:33 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2937.082773] FAULT_INJECTION: forcing a failure. [ 2937.082773] name failslab, interval 1, probability 0, space 0, times 0 [ 2937.085579] CPU: 0 PID: 14862 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2937.086978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.088614] Call Trace: [ 2937.089159] dump_stack+0x107/0x167 [ 2937.089903] should_fail.cold+0x5/0xa [ 2937.090675] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2937.091733] should_failslab+0x5/0x20 [ 2937.092500] kmem_cache_alloc_trace+0x55/0x320 [ 2937.093432] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2937.094437] ? io_import_iovec+0x1120/0x1120 [ 2937.095332] ? lock_downgrade+0x6d0/0x6d0 [ 2937.096169] ? do_raw_spin_lock+0x121/0x260 [ 2937.097027] ? rwlock_bug.part.0+0x90/0x90 [ 2937.097894] __io_uring_add_tctx_node+0x2c6/0x520 [ 2937.098863] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2937.099913] ? alloc_fd+0x2e7/0x670 [ 2937.100657] io_uring_setup+0x1fbb/0x2980 [ 2937.101500] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2937.102525] ? wait_for_completion_io+0x270/0x270 [ 2937.103530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2937.104588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2937.105641] do_syscall_64+0x33/0x40 [ 2937.106393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2937.107418] RIP: 0033:0x7f768f557b19 [ 2937.108164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.111832] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2937.113378] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2937.114799] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2937.116231] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2937.117669] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2937.119103] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:33 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0}, 0x0) r13 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r13, 0x9, 0x0, 0x0) r17 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1d000/0x3000)=nil, 0x3000, 0x3000009, 0x13, r9, 0x0) syz_io_uring_submit(r14, r15, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r17, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r16}}, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x60, 0x0, {0x1, r16}}, 0x5) 10:52:33 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '+^/\x16@'}, {0x20, '\x00'}, {}, {}], 0xa, "215737bea7cfcba79a1e1f62c83d720896ba3a179a7f059b14b0a9713cf710194e1b38"}, 0x38) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r7 = fcntl$dupfd(r1, 0x406, r0) r8 = syz_io_uring_setup(0x7d07, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x232, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r5, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@can={0x1d, r6}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="435be53e4643a4da9b7e550f1cb4f974d787485e8cc45172bb6310c785529f376ec084bf043cde662ed8d4e4f8663de3386eee8d22cd788d45491717e3df0b7f06b3973c0c6a09cc84a49320", 0x4c}], 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="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"/4703], 0x1248}, 0x0, 0x81, 0x0, {0x0, r11}}, 0xae0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 32) 10:52:33 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:33 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2937.393351] FAULT_INJECTION: forcing a failure. [ 2937.393351] name failslab, interval 1, probability 0, space 0, times 0 [ 2937.396048] CPU: 0 PID: 14888 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2937.397481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.399159] Call Trace: [ 2937.399701] dump_stack+0x107/0x167 [ 2937.400446] should_fail.cold+0x5/0xa [ 2937.401231] ? create_object.isra.0+0x3a/0xa30 [ 2937.402155] should_failslab+0x5/0x20 [ 2937.402924] kmem_cache_alloc+0x5b/0x310 [ 2937.403757] create_object.isra.0+0x3a/0xa30 [ 2937.404643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2937.405686] kmem_cache_alloc_trace+0x151/0x320 [ 2937.406649] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2937.407679] ? io_import_iovec+0x1120/0x1120 [ 2937.408577] ? lock_downgrade+0x6d0/0x6d0 [ 2937.409429] ? do_raw_spin_lock+0x121/0x260 [ 2937.410311] ? rwlock_bug.part.0+0x90/0x90 [ 2937.411177] __io_uring_add_tctx_node+0x2c6/0x520 [ 2937.412155] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2937.413242] ? alloc_fd+0x2e7/0x670 [ 2937.414001] io_uring_setup+0x1fbb/0x2980 [ 2937.414855] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2937.415881] ? wait_for_completion_io+0x270/0x270 [ 2937.416887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2937.417961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2937.419010] do_syscall_64+0x33/0x40 [ 2937.419765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2937.420802] RIP: 0033:0x7f768f557b19 [ 2937.421568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.425322] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2937.426869] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2937.428313] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2937.429775] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2937.431228] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2937.432674] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:51 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 33) 10:52:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r1, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:51 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r4, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x13, r4, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x48900, 0x100) syz_io_uring_submit(r8, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2007, @fd=r9, 0x9, 0x0, 0x0, 0x10, 0x1, {0x2}}, 0x2) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0}, 0x0) r13 = mmap$IORING_OFF_SQES(&(0x7f0000d1c000/0x1000)=nil, 0x1000, 0x2, 0x1010, r3, 0x10000000) syz_io_uring_submit(r1, r13, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r3, 0x0, &(0x7f00000006c0)="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", 0x1000, 0x24000000}, 0xfffffe00) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x8, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) 10:52:51 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2955.385347] FAULT_INJECTION: forcing a failure. [ 2955.385347] name failslab, interval 1, probability 0, space 0, times 0 [ 2955.387948] CPU: 1 PID: 14901 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2955.389531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2955.391409] Call Trace: [ 2955.392016] dump_stack+0x107/0x167 10:52:51 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2955.392853] should_fail.cold+0x5/0xa [ 2955.393828] ? io_wq_create+0xeb/0xc00 [ 2955.394730] should_failslab+0x5/0x20 [ 2955.395591] __kmalloc+0x72/0x390 10:52:51 executing program 2: r0 = syz_io_uring_setup(0x37b, &(0x7f0000000180)={0x0, 0x2, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:51 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2955.396400] io_wq_create+0xeb/0xc00 10:52:51 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2955.397378] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2955.398631] ? io_import_iovec+0x1120/0x1120 [ 2955.399676] ? io_apoll_task_func+0x2d0/0x2d0 [ 2955.400699] ? __io_req_find_next+0x300/0x300 [ 2955.401730] ? do_raw_spin_lock+0x121/0x260 [ 2955.402718] ? rwlock_bug.part.0+0x90/0x90 [ 2955.403695] __io_uring_add_tctx_node+0x2c6/0x520 [ 2955.404794] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2955.405993] ? alloc_fd+0x2e7/0x670 [ 2955.406837] io_uring_setup+0x1fbb/0x2980 [ 2955.407798] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2955.408947] ? wait_for_completion_io+0x270/0x270 [ 2955.410069] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2955.411271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2955.412444] do_syscall_64+0x33/0x40 [ 2955.413302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2955.414471] RIP: 0033:0x7f768f557b19 [ 2955.415317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2955.419518] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2955.421244] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2955.422864] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2955.424482] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2955.426124] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2955.427697] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:52:51 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:51 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:51 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:51 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x8fa4, 0x3, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:51 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:51 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:52:51 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:07 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:07 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, @in_args={0x6}}, './file0\x00'}) syz_io_uring_setup(0x6b61, &(0x7f0000000240)={0x0, 0xd96b, 0x0, 0x2, 0x3d5, 0x0, r4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00008fd000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000002c0)) mknodat$loop(r4, &(0x7f0000000100)='./file0\x00', 0x102, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000101000014000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000d1e000/0x1000)=nil, 0x1000, 0x5, 0x90010, r5, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:07 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:07 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = io_uring_setup(0x3665, &(0x7f0000000080)={0x0, 0x15c6, 0x10, 0x1, 0x28c, 0x0, r0}) io_uring_enter(r4, 0x4b12, 0x8a5d, 0x2, &(0x7f0000000100)={[0x5]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:07 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 34) 10:53:07 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:07 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:07 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='setgroups\x00') io_uring_enter(r8, 0x7a03, 0x4fb6, 0x3, &(0x7f0000000400)={[0x9]}, 0x8) r9 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r13, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd=r0, 0x4, &(0x7f0000000340)=[{&(0x7f0000000080)=""/194, 0xc2}, {&(0x7f0000000240)=""/203, 0xcb}], 0x2, 0x1, 0x1, {0x0, r12}}, 0x20) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r14, 0x0, 0x0, 0x0, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2971.841101] FAULT_INJECTION: forcing a failure. [ 2971.841101] name failslab, interval 1, probability 0, space 0, times 0 [ 2971.843991] CPU: 0 PID: 14954 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2971.845734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2971.847827] Call Trace: [ 2971.848497] dump_stack+0x107/0x167 [ 2971.849421] should_fail.cold+0x5/0xa [ 2971.850399] ? create_object.isra.0+0x3a/0xa30 [ 2971.851360] should_failslab+0x5/0x20 [ 2971.852173] kmem_cache_alloc+0x5b/0x310 [ 2971.853034] create_object.isra.0+0x3a/0xa30 [ 2971.853968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2971.855056] __kmalloc+0x16e/0x390 [ 2971.855818] io_wq_create+0xeb/0xc00 [ 2971.856611] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2971.857704] ? io_import_iovec+0x1120/0x1120 [ 2971.858633] ? io_apoll_task_func+0x2d0/0x2d0 [ 2971.859567] ? __io_req_find_next+0x300/0x300 [ 2971.860506] ? do_raw_spin_lock+0x121/0x260 [ 2971.861402] ? rwlock_bug.part.0+0x90/0x90 [ 2971.862309] __io_uring_add_tctx_node+0x2c6/0x520 [ 2971.863330] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2971.864430] ? alloc_fd+0x2e7/0x670 [ 2971.865221] io_uring_setup+0x1fbb/0x2980 [ 2971.866112] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2971.867191] ? wait_for_completion_io+0x270/0x270 [ 2971.868236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2971.869352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2971.870508] do_syscall_64+0x33/0x40 [ 2971.871309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2971.872390] RIP: 0033:0x7f768f557b19 [ 2971.873171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2971.877051] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2971.878673] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2971.880186] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2971.881709] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2971.883234] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2971.884733] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:53:27 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 35) 10:53:27 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x40) syz_io_uring_submit(r1, r5, &(0x7f0000000600)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r8, 0xc000, &(0x7f0000000540)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000400)=""/117, 0x75}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000500)}], 0xa, 0xe, 0x1}, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r10 = syz_open_pts(r9, 0x5d1203) fallocate(r10, 0x4, 0x80000000, 0xa99) r11 = socket$inet6(0xa, 0x1, 0x10000) fcntl$setlease(r11, 0x400, 0x1) 10:53:27 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x41e6e1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000080)) [ 2991.344363] FAULT_INJECTION: forcing a failure. [ 2991.344363] name failslab, interval 1, probability 0, space 0, times 0 [ 2991.346047] CPU: 0 PID: 14978 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2991.347057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2991.348277] Call Trace: [ 2991.348676] dump_stack+0x107/0x167 [ 2991.349211] should_fail.cold+0x5/0xa [ 2991.349792] ? io_wq_create+0x6ef/0xc00 [ 2991.350400] should_failslab+0x5/0x20 [ 2991.350978] kmem_cache_alloc_node_trace+0x59/0x340 [ 2991.351749] io_wq_create+0x6ef/0xc00 [ 2991.352322] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2991.353084] ? io_import_iovec+0x1120/0x1120 [ 2991.353743] ? io_apoll_task_func+0x2d0/0x2d0 [ 2991.354397] ? __io_req_find_next+0x300/0x300 [ 2991.355056] ? do_raw_spin_lock+0x121/0x260 [ 2991.355687] ? rwlock_bug.part.0+0x90/0x90 [ 2991.356310] __io_uring_add_tctx_node+0x2c6/0x520 [ 2991.357011] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2991.357776] ? alloc_fd+0x2e7/0x670 [ 2991.358315] io_uring_setup+0x1fbb/0x2980 [ 2991.358935] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2991.359678] ? wait_for_completion_io+0x270/0x270 [ 2991.360407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2991.361176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2991.361955] do_syscall_64+0x33/0x40 [ 2991.362500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2991.363239] RIP: 0033:0x7f768f557b19 [ 2991.363795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2991.366466] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2991.367563] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2991.368600] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2991.369625] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2991.370651] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2991.371667] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:53:27 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x10002) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {r0}}, './file0\x00'}) 10:53:27 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x900) 10:53:27 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 36) 10:53:27 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:27 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2991.676563] FAULT_INJECTION: forcing a failure. [ 2991.676563] name failslab, interval 1, probability 0, space 0, times 0 [ 2991.677989] CPU: 0 PID: 15013 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 2991.678830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2991.679806] Call Trace: [ 2991.680125] dump_stack+0x107/0x167 [ 2991.680571] should_fail.cold+0x5/0xa [ 2991.681024] ? create_object.isra.0+0x3a/0xa30 [ 2991.681569] should_failslab+0x5/0x20 [ 2991.682025] kmem_cache_alloc+0x5b/0x310 [ 2991.682505] ? io_wq_create+0x114/0xc00 [ 2991.682969] create_object.isra.0+0x3a/0xa30 [ 2991.683479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2991.684074] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2991.684676] io_wq_create+0x6ef/0xc00 [ 2991.685130] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2991.685735] ? io_import_iovec+0x1120/0x1120 [ 2991.686275] ? io_apoll_task_func+0x2d0/0x2d0 [ 2991.686810] ? __io_req_find_next+0x300/0x300 [ 2991.687349] ? do_raw_spin_lock+0x121/0x260 [ 2991.687867] ? rwlock_bug.part.0+0x90/0x90 [ 2991.688386] __io_uring_add_tctx_node+0x2c6/0x520 [ 2991.688963] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2991.689596] ? alloc_fd+0x2e7/0x670 [ 2991.690040] io_uring_setup+0x1fbb/0x2980 [ 2991.690542] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2991.691139] ? wait_for_completion_io+0x270/0x270 [ 2991.691733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2991.692365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2991.692984] do_syscall_64+0x33/0x40 [ 2991.693438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2991.694057] RIP: 0033:0x7f768f557b19 [ 2991.694495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2991.696683] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2991.697571] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 2991.698435] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 2991.699268] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 2991.700116] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 2991.700968] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:53:45 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 37) 10:53:45 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index=0x7, 0x8, &(0x7f00000000c0)="515d33646f7484051ee68dd62f98ff38eca46dd33542a4d994b3c3e349f66e82c90d63c99b2f6206338a9dac8c9ea70086f095237122b665d7383453c83bc6a2d76603027c5193586fc502b4fcd16e8a8aba6c1336859021a54913fdb4a6ead4873075e1d68014f412125f29ed7da08ca48e0e097870ca7394adfaedeb333205866b80188388034399cc58e766f8317c8ef9e607fcbfbad65dd79ffd0e19e2dbebb7beec579074e488d04bee2af045cee617", 0xb2, 0x6, 0x10781ec3defdd02f, {0x0, r11}}, 0x6) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r13, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x800) 10:53:45 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r2 = syz_io_uring_setup(0x293a, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x200000}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r2, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r8, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r12, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, r10, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000080)) 10:53:45 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3009.366103] FAULT_INJECTION: forcing a failure. [ 3009.366103] name failslab, interval 1, probability 0, space 0, times 0 [ 3009.368566] CPU: 1 PID: 15020 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3009.370076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3009.371842] Call Trace: [ 3009.372417] dump_stack+0x107/0x167 [ 3009.373205] should_fail.cold+0x5/0xa [ 3009.374050] ? __io_uring_add_tctx_node+0x15c/0x520 [ 3009.375122] should_failslab+0x5/0x20 [ 3009.375950] kmem_cache_alloc_trace+0x55/0x320 [ 3009.376943] __io_uring_add_tctx_node+0x15c/0x520 [ 3009.378005] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3009.379137] ? alloc_fd+0x2e7/0x670 [ 3009.379939] io_uring_setup+0x1fbb/0x2980 [ 3009.380838] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3009.381938] ? wait_for_completion_io+0x270/0x270 [ 3009.382994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3009.384124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3009.385222] do_syscall_64+0x33/0x40 [ 3009.386020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3009.387115] RIP: 0033:0x7f768f557b19 [ 3009.387902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3009.391833] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3009.393434] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3009.394973] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3009.396479] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3009.398003] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3009.399519] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:53:45 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:53:45 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 38) [ 3009.752784] FAULT_INJECTION: forcing a failure. [ 3009.752784] name failslab, interval 1, probability 0, space 0, times 0 [ 3009.755296] CPU: 0 PID: 15054 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3009.756778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3009.758534] Call Trace: [ 3009.759098] dump_stack+0x107/0x167 [ 3009.759869] should_fail.cold+0x5/0xa [ 3009.760676] ? create_object.isra.0+0x3a/0xa30 [ 3009.761634] should_failslab+0x5/0x20 [ 3009.762450] kmem_cache_alloc+0x5b/0x310 [ 3009.763317] create_object.isra.0+0x3a/0xa30 [ 3009.764246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3009.765324] kmem_cache_alloc_trace+0x151/0x320 [ 3009.766322] __io_uring_add_tctx_node+0x15c/0x520 [ 3009.767357] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3009.768471] ? alloc_fd+0x2e7/0x670 [ 3009.769254] io_uring_setup+0x1fbb/0x2980 [ 3009.770166] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3009.771239] ? wait_for_completion_io+0x270/0x270 [ 3009.772283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3009.773389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3009.774496] do_syscall_64+0x33/0x40 [ 3009.775290] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3009.776371] RIP: 0033:0x7f768f557b19 [ 3009.777158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3009.781325] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3009.782948] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3009.784590] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3009.786409] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3009.788087] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3009.789610] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:54:01 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 39) 10:54:01 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:01 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r3 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x6) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x7ff, 0x9}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x1, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@noextend}, {@cachetag={'cachetag', 0x3d, '\x00\x00\x02\x00'}}, {@version_L}, {@cache_mmap}, {@cache_fscache}, {@access_uid={'access', 0x3d, r6}}], [{@dont_measure}, {@hash}, {@fowner_gt={'fowner>', r7}}, {@dont_measure}, {@uid_gt={'uid>', r7}}]}}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_enter(r0, 0x73c6, 0x4891, 0x2, &(0x7f0000000100)={[0x10000]}, 0x8) 10:54:01 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:01 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x310a, &(0x7f0000000080)={0x0, 0xb4c4, 0x0, 0x3, 0x187, 0x0, r3}, &(0x7f0000d1c000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r3, &(0x7f0000000240), 0x0, 0x0, 0x80800, 0x1}, 0x44) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:01 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:01 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:01 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3025.714527] FAULT_INJECTION: forcing a failure. [ 3025.714527] name failslab, interval 1, probability 0, space 0, times 0 [ 3025.716963] CPU: 1 PID: 15072 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3025.718226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3025.719699] Call Trace: [ 3025.720178] dump_stack+0x107/0x167 [ 3025.720836] should_fail.cold+0x5/0xa [ 3025.721518] ? xas_alloc+0x336/0x440 [ 3025.722195] should_failslab+0x5/0x20 [ 3025.722885] kmem_cache_alloc+0x5b/0x310 [ 3025.723623] ? stack_trace_consume_entry+0x160/0x160 [ 3025.724533] xas_alloc+0x336/0x440 [ 3025.725173] xas_create+0x34a/0x10d0 [ 3025.725858] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3025.726822] xas_store+0x8c/0x1c40 [ 3025.727476] __xa_store+0x164/0x2d0 [ 3025.728126] ? xa_delete_node+0x280/0x280 [ 3025.728872] ? trace_hardirqs_on+0x5b/0x180 [ 3025.729661] xa_store+0x31/0x50 [ 3025.730269] __io_uring_add_tctx_node+0x1cf/0x520 [ 3025.731133] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3025.732083] ? alloc_fd+0x2e7/0x670 [ 3025.732748] io_uring_setup+0x1fbb/0x2980 [ 3025.733494] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3025.734413] ? wait_for_completion_io+0x270/0x270 [ 3025.735303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3025.736242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3025.737171] do_syscall_64+0x33/0x40 [ 3025.737834] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3025.738754] RIP: 0033:0x7f768f557b19 [ 3025.739414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3025.742672] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3025.744017] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3025.745266] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3025.746536] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3025.747804] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3025.749068] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:54:01 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:01 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:01 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:01 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:01 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:02 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) fcntl$getflags(r4, 0x60da487464be8aac) r5 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000c, 0x12, r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x6) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x1}, 0x800) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:02 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:02 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 40) 10:54:16 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x6) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3040.309393] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 10:54:16 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000d1e000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, r3, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r8, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r12, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, r10, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x8}}, 0x6) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r3, 0x1bb6, 0x1dd0, 0x2, &(0x7f00000000c0)={[0x6]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x0, {0x0, r13}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3040.340859] FAULT_INJECTION: forcing a failure. [ 3040.340859] name failslab, interval 1, probability 0, space 0, times 0 [ 3040.342738] CPU: 1 PID: 15113 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3040.343791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3040.345046] Call Trace: [ 3040.345452] dump_stack+0x107/0x167 [ 3040.346014] should_fail.cold+0x5/0xa [ 3040.346608] ? create_object.isra.0+0x3a/0xa30 [ 3040.347300] should_failslab+0x5/0x20 [ 3040.347887] kmem_cache_alloc+0x5b/0x310 [ 3040.348510] create_object.isra.0+0x3a/0xa30 [ 3040.349176] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3040.349948] kmem_cache_alloc+0x159/0x310 [ 3040.350603] xas_alloc+0x336/0x440 [ 3040.351145] xas_create+0x34a/0x10d0 [ 3040.351721] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3040.352517] xas_store+0x8c/0x1c40 [ 3040.353075] __xa_store+0x164/0x2d0 [ 3040.353630] ? xa_delete_node+0x280/0x280 [ 3040.354275] ? trace_hardirqs_on+0x5b/0x180 [ 3040.354934] xa_store+0x31/0x50 [ 3040.355440] __io_uring_add_tctx_node+0x1cf/0x520 [ 3040.356171] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3040.356960] ? alloc_fd+0x2e7/0x670 [ 3040.357521] io_uring_setup+0x1fbb/0x2980 [ 3040.358165] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3040.358945] ? wait_for_completion_io+0x270/0x270 [ 3040.359692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3040.360486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3040.361272] do_syscall_64+0x33/0x40 [ 3040.361837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3040.362624] RIP: 0033:0x7f768f557b19 [ 3040.363181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3040.365935] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3040.367084] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3040.368154] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3040.369219] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3040.370301] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3040.371364] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:54:16 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0) r5 = inotify_init1(0x80000) sendfile(r4, r5, &(0x7f00000000c0)=0x4, 0x3) 10:54:16 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:16 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 41) 10:54:32 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x6) recvmsg$unix(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x40000000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000280)=r6, 0x1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) r11 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r11, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r11, 0x0) io_uring_enter(r11, 0x58ab, 0x0, 0x0, 0x0, 0x6) poll(&(0x7f0000000080)=[{r7, 0x8}, {r3, 0x2}, {r10, 0x10}, {r11, 0x4001}], 0x4, 0x80) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3056.001107] FAULT_INJECTION: forcing a failure. [ 3056.001107] name failslab, interval 1, probability 0, space 0, times 0 [ 3056.002928] CPU: 0 PID: 15157 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3056.004027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3056.005307] Call Trace: [ 3056.005707] dump_stack+0x107/0x167 [ 3056.006275] should_fail.cold+0x5/0xa [ 3056.006884] ? xas_alloc+0x336/0x440 [ 3056.007454] should_failslab+0x5/0x20 [ 3056.008049] kmem_cache_alloc+0x5b/0x310 [ 3056.008697] xas_alloc+0x336/0x440 [ 3056.009247] xas_create+0x34a/0x10d0 [ 3056.009849] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3056.010696] xas_store+0x8c/0x1c40 [ 3056.011261] __xa_store+0x164/0x2d0 [ 3056.011807] ? xa_delete_node+0x280/0x280 [ 3056.012458] ? trace_hardirqs_on+0x5b/0x180 [ 3056.013119] xa_store+0x31/0x50 [ 3056.013643] __io_uring_add_tctx_node+0x1cf/0x520 [ 3056.014400] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3056.015172] ? alloc_fd+0x2e7/0x670 [ 3056.015732] io_uring_setup+0x1fbb/0x2980 [ 3056.016397] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3056.017174] ? wait_for_completion_io+0x270/0x270 [ 3056.017924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3056.018720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3056.019516] do_syscall_64+0x33/0x40 [ 3056.020076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3056.020874] RIP: 0033:0x7f768f557b19 [ 3056.021445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3056.024212] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3056.025367] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3056.026445] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3056.027521] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3056.028607] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3056.029678] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:54:32 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:32 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 42) [ 3056.199835] FAULT_INJECTION: forcing a failure. [ 3056.199835] name failslab, interval 1, probability 0, space 0, times 0 [ 3056.201545] CPU: 0 PID: 15174 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3056.202489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3056.203612] Call Trace: [ 3056.204135] dump_stack+0x107/0x167 [ 3056.204715] should_fail.cold+0x5/0xa [ 3056.205239] ? create_object.isra.0+0x3a/0xa30 [ 3056.205866] should_failslab+0x5/0x20 [ 3056.206396] kmem_cache_alloc+0x5b/0x310 [ 3056.206948] ? mark_held_locks+0x9e/0xe0 [ 3056.207505] create_object.isra.0+0x3a/0xa30 [ 3056.208103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3056.208794] kmem_cache_alloc+0x159/0x310 [ 3056.209370] xas_alloc+0x336/0x440 [ 3056.209854] xas_create+0x34a/0x10d0 [ 3056.210387] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3056.211098] xas_store+0x8c/0x1c40 [ 3056.211595] __xa_store+0x164/0x2d0 [ 3056.212093] ? xa_delete_node+0x280/0x280 [ 3056.212664] ? trace_hardirqs_on+0x5b/0x180 [ 3056.213259] xa_store+0x31/0x50 [ 3056.213724] __io_uring_add_tctx_node+0x1cf/0x520 [ 3056.214390] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3056.215101] ? alloc_fd+0x2e7/0x670 [ 3056.215613] io_uring_setup+0x1fbb/0x2980 [ 3056.216193] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3056.216888] ? wait_for_completion_io+0x270/0x270 [ 3056.217559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3056.218263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3056.218969] do_syscall_64+0x33/0x40 [ 3056.219479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3056.220178] RIP: 0033:0x7f768f557b19 [ 3056.220688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3056.223192] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3056.224215] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3056.225186] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3056.226155] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3056.227128] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3056.228092] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3069.937950] FAULT_INJECTION: forcing a failure. [ 3069.937950] name failslab, interval 1, probability 0, space 0, times 0 [ 3069.940858] CPU: 1 PID: 15182 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3069.942600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3069.944429] Call Trace: [ 3069.945003] dump_stack+0x107/0x167 [ 3069.945832] should_fail.cold+0x5/0xa [ 3069.946664] ? xas_alloc+0x336/0x440 [ 3069.947467] should_failslab+0x5/0x20 [ 3069.948280] kmem_cache_alloc+0x5b/0x310 [ 3069.949170] xas_alloc+0x336/0x440 [ 3069.949926] xas_create+0x34a/0x10d0 [ 3069.950756] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3069.951875] xas_store+0x8c/0x1c40 [ 3069.952664] __xa_store+0x164/0x2d0 [ 3069.953447] ? xa_delete_node+0x280/0x280 [ 3069.954353] ? trace_hardirqs_on+0x5b/0x180 [ 3069.955302] xa_store+0x31/0x50 [ 3069.956016] __io_uring_add_tctx_node+0x1cf/0x520 [ 3069.957059] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3069.958175] ? alloc_fd+0x2e7/0x670 [ 3069.959002] io_uring_setup+0x1fbb/0x2980 [ 3069.959911] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3069.961027] ? wait_for_completion_io+0x270/0x270 [ 3069.962141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3069.963290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3069.964402] do_syscall_64+0x33/0x40 [ 3069.965223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3069.966322] RIP: 0033:0x7f768f557b19 [ 3069.967133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:54:46 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 43) 10:54:46 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) r13 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r13, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) io_uring_enter(r13, 0x58ab, 0x0, 0x0, 0x0, 0x6) syz_io_uring_submit(r14, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0xffff, 0x1, 0x1, {0x0, r11}}, 0x7) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_complete(r4) 10:54:46 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 1: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3069.971217] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 10:54:46 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3069.973146] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3069.974792] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3069.976342] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3069.977872] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3069.979431] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:54:46 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 1: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:54:46 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 44) 10:54:46 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) fsetxattr$security_evm(r6, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x2, "d9dc6f10f249cb30195701"}, 0xc, 0x1) [ 3070.187026] FAULT_INJECTION: forcing a failure. [ 3070.187026] name failslab, interval 1, probability 0, space 0, times 0 [ 3070.188611] CPU: 0 PID: 15212 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3070.189543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3070.190662] Call Trace: [ 3070.191027] dump_stack+0x107/0x167 [ 3070.191517] should_fail.cold+0x5/0xa [ 3070.192034] ? create_object.isra.0+0x3a/0xa30 [ 3070.192644] should_failslab+0x5/0x20 [ 3070.193150] kmem_cache_alloc+0x5b/0x310 [ 3070.193697] ? mark_held_locks+0x9e/0xe0 [ 3070.194239] create_object.isra.0+0x3a/0xa30 [ 3070.194832] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3070.195515] kmem_cache_alloc+0x159/0x310 [ 3070.196076] xas_alloc+0x336/0x440 [ 3070.196550] xas_create+0x34a/0x10d0 [ 3070.197055] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3070.197757] xas_store+0x8c/0x1c40 [ 3070.198245] __xa_store+0x164/0x2d0 [ 3070.198790] ? xa_delete_node+0x280/0x280 [ 3070.199351] ? trace_hardirqs_on+0x5b/0x180 [ 3070.199928] xa_store+0x31/0x50 [ 3070.200374] __io_uring_add_tctx_node+0x1cf/0x520 [ 3070.201016] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3070.201708] ? alloc_fd+0x2e7/0x670 [ 3070.202198] io_uring_setup+0x1fbb/0x2980 [ 3070.202765] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3070.203431] ? wait_for_completion_io+0x270/0x270 [ 3070.204083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3070.204778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3070.205469] do_syscall_64+0x33/0x40 [ 3070.205960] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3070.206647] RIP: 0033:0x7f768f557b19 [ 3070.207135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3070.209551] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3070.210558] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3070.211501] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3070.212440] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3070.213379] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3070.214315] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:02 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 45) 10:55:02 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:02 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:02 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:02 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:02 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:02 executing program 1: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:02 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000065ae000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043fa11927d3b529e231608dacb72b4950b8bf07b666dbe166ac09f9b47ea0d1c51ded84f56b02f3eb448aa6f23b0023f6e2b"], 0x27) io_uring_enter(r0, 0xc0e, 0x268f, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd, 0x9, &(0x7f00000000c0)=[{&(0x7f00000003c0)="caf365bf33938867532fa693adee03851a3f488e606c5797eb795485142084cf3c130110bf430a88be48a9c30c2dc424e7e062c8339f4bd97126438131dc3fd9e0962c171a4403cddbd623c33c504ed64e84c9fdab752107d467aff294f31b42070e8530fe4504ade836dd1c2616348359720ca4d2f2da2a8ea20f0f04d2542573b2ea4beda1298be20017c7fe3740b3b51ef8f6502c9aada35c3b014d9d49536fbe3596dc1a3fa9d4cf50dc2ad36f30039bfac67265b26be61fd0e5673fce326e52998aa46d73a0f33d6146587cbc092355521a7c4242bc", 0xd8}], 0x1, 0x1a, 0x0, {0x3}}, 0x5) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000d1d000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000d1b000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4007, @fd=r0, 0x8001, 0xfffffffffffffe01, 0x4, 0x8, 0x1}, 0x80000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r9, 0x80047213, &(0x7f0000000240)) [ 3086.782515] FAULT_INJECTION: forcing a failure. [ 3086.782515] name failslab, interval 1, probability 0, space 0, times 0 [ 3086.784961] CPU: 0 PID: 15224 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3086.786444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3086.788247] Call Trace: [ 3086.788821] dump_stack+0x107/0x167 [ 3086.789614] should_fail.cold+0x5/0xa [ 3086.790442] ? xas_alloc+0x336/0x440 [ 3086.791261] should_failslab+0x5/0x20 10:55:02 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3086.792084] kmem_cache_alloc+0x5b/0x310 [ 3086.793063] xas_alloc+0x336/0x440 [ 3086.793826] xas_create+0x34a/0x10d0 [ 3086.794639] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3086.795773] xas_store+0x8c/0x1c40 [ 3086.796558] __xa_store+0x164/0x2d0 [ 3086.797346] ? xa_delete_node+0x280/0x280 [ 3086.798242] ? trace_hardirqs_on+0x5b/0x180 [ 3086.799182] xa_store+0x31/0x50 [ 3086.799900] __io_uring_add_tctx_node+0x1cf/0x520 [ 3086.800932] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3086.802051] ? alloc_fd+0x2e7/0x670 [ 3086.802860] io_uring_setup+0x1fbb/0x2980 [ 3086.803754] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3086.804837] ? wait_for_completion_io+0x270/0x270 [ 3086.805895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3086.807025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3086.808147] do_syscall_64+0x33/0x40 [ 3086.808943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3086.810037] RIP: 0033:0x7f768f557b19 [ 3086.810846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3086.814768] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3086.816393] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3086.817914] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3086.819449] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3086.820972] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3086.822494] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:02 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:03 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:03 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:03 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:03 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:03 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:03 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 46) 10:55:18 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 2: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8100) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000140)=0x80) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x6, 0x0, &(0x7f0000000240)=[r0, 0xffffffffffffffff, r1, r2]}, 0x4) r3 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r3, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3101.989058] FAULT_INJECTION: forcing a failure. [ 3101.989058] name failslab, interval 1, probability 0, space 0, times 0 [ 3101.991526] CPU: 1 PID: 15275 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3101.992987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3101.994718] Call Trace: [ 3101.995290] dump_stack+0x107/0x167 [ 3101.996061] should_fail.cold+0x5/0xa [ 3101.996866] ? create_object.isra.0+0x3a/0xa30 [ 3101.997826] should_failslab+0x5/0x20 [ 3101.998629] kmem_cache_alloc+0x5b/0x310 [ 3101.999486] ? mark_held_locks+0x9e/0xe0 [ 3102.000348] create_object.isra.0+0x3a/0xa30 [ 3102.001272] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3102.002342] kmem_cache_alloc+0x159/0x310 [ 3102.003239] xas_alloc+0x336/0x440 [ 3102.003991] xas_create+0x34a/0x10d0 [ 3102.004795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3102.005916] xas_store+0x8c/0x1c40 [ 3102.006681] __xa_store+0x164/0x2d0 [ 3102.007467] ? xa_delete_node+0x280/0x280 [ 3102.008347] ? trace_hardirqs_on+0x5b/0x180 [ 3102.009257] xa_store+0x31/0x50 [ 3102.009959] __io_uring_add_tctx_node+0x1cf/0x520 [ 3102.010969] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3102.012067] ? alloc_fd+0x2e7/0x670 [ 3102.012861] io_uring_setup+0x1fbb/0x2980 [ 3102.013758] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3102.014824] ? wait_for_completion_io+0x270/0x270 [ 3102.015884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3102.016989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3102.018086] do_syscall_64+0x33/0x40 [ 3102.018895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3102.019995] RIP: 0033:0x7f768f557b19 [ 3102.020786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3102.024731] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3102.026344] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3102.027863] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3102.029370] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3102.030882] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3102.032389] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:18 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 47) 10:55:18 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3102.162095] FAULT_INJECTION: forcing a failure. [ 3102.162095] name failslab, interval 1, probability 0, space 0, times 0 [ 3102.163772] CPU: 0 PID: 15295 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3102.164707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3102.165823] Call Trace: [ 3102.166183] dump_stack+0x107/0x167 [ 3102.166680] should_fail.cold+0x5/0xa [ 3102.167217] ? xas_alloc+0x336/0x440 [ 3102.167720] should_failslab+0x5/0x20 [ 3102.168237] kmem_cache_alloc+0x5b/0x310 [ 3102.168794] xas_alloc+0x336/0x440 [ 3102.169278] xas_create+0x34a/0x10d0 [ 3102.169784] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3102.170499] xas_store+0x8c/0x1c40 [ 3102.170996] __xa_store+0x164/0x2d0 [ 3102.171488] ? xa_delete_node+0x280/0x280 [ 3102.172046] ? trace_hardirqs_on+0x5b/0x180 [ 3102.172636] xa_store+0x31/0x50 [ 3102.173076] __io_uring_add_tctx_node+0x1cf/0x520 [ 3102.173739] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3102.174441] ? alloc_fd+0x2e7/0x670 [ 3102.174949] io_uring_setup+0x1fbb/0x2980 [ 3102.175508] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3102.176185] ? wait_for_completion_io+0x270/0x270 [ 3102.176847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3102.177550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3102.178252] do_syscall_64+0x33/0x40 [ 3102.178757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3102.179459] RIP: 0033:0x7f768f557b19 [ 3102.179957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3102.182427] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3102.183471] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3102.184418] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3102.185375] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3102.186340] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3102.187310] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:18 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:18 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x2, &(0x7f0000000100)=[{&(0x7f0000000240)="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", 0xff, 0x20}, {&(0x7f0000000340)="fd57b1f3a71163a76cf5f78c24f3d2c73d89abada6b2dc57724a947492037503b41ba1fe0f4b55b0088b5ae1d9fbd6a9952b4d3feb6f5c7d6da543d27f69312680a9f241066e87d90d5bcdf7f140a0c3b493e9bb87c0e9d4e7868d5748e94d2e4c967f3b2c5f97ab9e23570603b12cb1702072e57b8dd6529c24b3c08b6a63226133d9bfb8", 0x85, 0xfffffffffffffff8}], 0x8002, &(0x7f0000000400)={[{@uni_xlateno}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, '/\'--*]'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role}, {@appraise}]}) 10:55:32 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:33 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:33 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x80, 0x1, 0x0, 0xfc}, &(0x7f0000d1f000/0x1000)=nil, &(0x7f0000d1d000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x57ee, &(0x7f0000000080)={0x0, 0xf899, 0x20, 0x1, 0x328}, &(0x7f0000d1e000/0x3000)=nil, &(0x7f0000d20000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0x10000c0e, 0x9815, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:33 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:33 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 48) 10:55:33 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:33 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3116.860593] FAULT_INJECTION: forcing a failure. [ 3116.860593] name failslab, interval 1, probability 0, space 0, times 0 [ 3116.863168] CPU: 1 PID: 15314 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3116.864675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3116.866519] Call Trace: [ 3116.867123] dump_stack+0x107/0x167 [ 3116.867948] should_fail.cold+0x5/0xa [ 3116.868814] ? create_object.isra.0+0x3a/0xa30 [ 3116.869841] should_failslab+0x5/0x20 [ 3116.870698] kmem_cache_alloc+0x5b/0x310 [ 3116.871622] ? mark_held_locks+0x9e/0xe0 [ 3116.872546] create_object.isra.0+0x3a/0xa30 10:55:33 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3116.873531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3116.874795] kmem_cache_alloc+0x159/0x310 [ 3116.875739] xas_alloc+0x336/0x440 [ 3116.876538] xas_create+0x34a/0x10d0 [ 3116.877395] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3116.878577] xas_store+0x8c/0x1c40 [ 3116.879410] __xa_store+0x164/0x2d0 [ 3116.880233] ? xa_delete_node+0x280/0x280 [ 3116.881173] ? trace_hardirqs_on+0x5b/0x180 [ 3116.882155] xa_store+0x31/0x50 [ 3116.882901] __io_uring_add_tctx_node+0x1cf/0x520 [ 3116.884005] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3116.885174] ? alloc_fd+0x2e7/0x670 [ 3116.886010] io_uring_setup+0x1fbb/0x2980 [ 3116.886955] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3116.888102] ? wait_for_completion_io+0x270/0x270 [ 3116.889216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3116.890390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3116.891597] do_syscall_64+0x33/0x40 [ 3116.892427] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3116.893577] RIP: 0033:0x7f768f557b19 [ 3116.894410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3116.898526] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3116.900247] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3116.901842] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3116.903456] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3116.905054] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3116.906651] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:48 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 49) 10:55:48 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x5, 0x18003) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@newae={0x40, 0x1e, 0x100, 0x70bd2a, 0x25dfdbfb, {{@in6=@loopback, 0x4d4, 0xa, 0x32}, @in6=@local, 0xfffffff7}}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x5, 0x2004, @fd_index=0x1, 0x40, &(0x7f0000000140)=[{&(0x7f0000000100)="c8d744fbc1a693b6d81f3fa715d0550bc5d8e5faed9d7ecb82374058d0288142799ec18fef0a40d1196a29ce050bd88fb4facd30ec98492d8380f85da05b", 0x3e}], 0x1, 0x1, 0xc4dabe124c13e12d, {0x2}}, 0xfffffe01) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'hsr0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3132.226734] FAULT_INJECTION: forcing a failure. [ 3132.226734] name failslab, interval 1, probability 0, space 0, times 0 [ 3132.228128] CPU: 0 PID: 15345 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3132.228948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3132.229931] Call Trace: [ 3132.230248] dump_stack+0x107/0x167 [ 3132.230685] should_fail.cold+0x5/0xa [ 3132.231132] ? xas_alloc+0x336/0x440 [ 3132.231581] should_failslab+0x5/0x20 [ 3132.232036] kmem_cache_alloc+0x5b/0x310 [ 3132.232519] xas_alloc+0x336/0x440 [ 3132.232948] xas_create+0x34a/0x10d0 [ 3132.233404] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3132.234019] xas_store+0x8c/0x1c40 [ 3132.234449] __xa_store+0x164/0x2d0 [ 3132.234880] ? xa_delete_node+0x280/0x280 [ 3132.235385] ? trace_hardirqs_on+0x5b/0x180 [ 3132.235897] xa_store+0x31/0x50 [ 3132.236288] __io_uring_add_tctx_node+0x1cf/0x520 [ 3132.236858] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3132.237481] ? alloc_fd+0x2e7/0x670 [ 3132.237905] io_uring_setup+0x1fbb/0x2980 [ 3132.238398] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3132.238984] ? wait_for_completion_io+0x270/0x270 [ 3132.239574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3132.240190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3132.240790] do_syscall_64+0x33/0x40 [ 3132.241228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3132.241834] RIP: 0033:0x7f768f557b19 [ 3132.242269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3132.244388] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3132.245251] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3132.246058] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3132.246865] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3132.247707] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3132.248520] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:55:48 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:55:48 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x341240, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000d1d000/0x2000)=nil, 0x2000, 0x3000005, 0x50, r3, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x4) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10:56:07 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 50) 10:56:07 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 4: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3151.210082] FAULT_INJECTION: forcing a failure. [ 3151.210082] name failslab, interval 1, probability 0, space 0, times 0 [ 3151.212600] CPU: 1 PID: 15392 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3151.214033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3151.215727] Call Trace: [ 3151.216310] dump_stack+0x107/0x167 [ 3151.217239] should_fail.cold+0x5/0xa [ 3151.218215] ? create_object.isra.0+0x3a/0xa30 [ 3151.219379] should_failslab+0x5/0x20 [ 3151.220368] kmem_cache_alloc+0x5b/0x310 [ 3151.221417] ? mark_held_locks+0x9e/0xe0 [ 3151.222461] create_object.isra.0+0x3a/0xa30 [ 3151.223403] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3151.224706] kmem_cache_alloc+0x159/0x310 [ 3151.225669] xas_alloc+0x336/0x440 [ 3151.226588] xas_create+0x34a/0x10d0 [ 3151.227416] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3151.228538] xas_store+0x8c/0x1c40 [ 3151.229317] __xa_store+0x164/0x2d0 [ 3151.230099] ? xa_delete_node+0x280/0x280 [ 3151.230999] ? trace_hardirqs_on+0x5b/0x180 [ 3151.231939] xa_store+0x31/0x50 [ 3151.232645] __io_uring_add_tctx_node+0x1cf/0x520 [ 3151.233671] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3151.234775] ? alloc_fd+0x2e7/0x670 [ 3151.235575] io_uring_setup+0x1fbb/0x2980 [ 3151.236468] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3151.237533] ? wait_for_completion_io+0x270/0x270 [ 3151.238582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3151.239703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3151.240794] do_syscall_64+0x33/0x40 [ 3151.241592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3151.242674] RIP: 0033:0x7f768f557b19 [ 3151.243467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3151.247319] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3151.248941] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3151.250447] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3151.251957] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3151.253472] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3151.254970] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:56:07 executing program 4: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 2: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) r1 = syz_io_uring_setup(0x37c, &(0x7f00000000c0)={0x0, 0xf04f, 0x1, 0x0, 0x26e, 0x0, r0}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) r5 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r5, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) io_uring_enter(r9, 0x586e, 0x75ee, 0x0, &(0x7f0000000280)={[0x2]}, 0x8) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r10, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = fspick(r4, &(0x7f0000000140)='./file0\x00', 0x1) syz_io_uring_submit(r2, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x9, 0x0, {0x0, 0x0, r11}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 3: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 4: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:07 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:25 executing program 0: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:25 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:25 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:25 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:25 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 51) 10:56:25 executing program 3: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:25 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3169.723814] FAULT_INJECTION: forcing a failure. [ 3169.723814] name failslab, interval 1, probability 0, space 0, times 0 [ 3169.726452] CPU: 1 PID: 15431 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3169.727922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3169.729663] Call Trace: [ 3169.730221] dump_stack+0x107/0x167 [ 3169.730986] should_fail.cold+0x5/0xa [ 3169.731809] ? xas_alloc+0x336/0x440 [ 3169.732589] should_failslab+0x5/0x20 [ 3169.733408] kmem_cache_alloc+0x5b/0x310 [ 3169.734265] xas_alloc+0x336/0x440 [ 3169.735036] xas_create+0x34a/0x10d0 [ 3169.735858] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3169.736980] xas_store+0x8c/0x1c40 [ 3169.737761] __xa_store+0x164/0x2d0 [ 3169.738545] ? xa_delete_node+0x280/0x280 [ 3169.739445] ? trace_hardirqs_on+0x5b/0x180 [ 3169.740375] xa_store+0x31/0x50 [ 3169.741079] __io_uring_add_tctx_node+0x1cf/0x520 [ 3169.742092] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3169.743191] ? alloc_fd+0x2e7/0x670 [ 3169.743976] io_uring_setup+0x1fbb/0x2980 [ 3169.744855] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3169.745917] ? wait_for_completion_io+0x270/0x270 [ 3169.746954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3169.748060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3169.749141] do_syscall_64+0x33/0x40 [ 3169.749922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3169.750997] RIP: 0033:0x7f768f557b19 [ 3169.751782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3169.755629] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3169.757215] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3169.758703] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3169.760201] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3169.761692] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3169.763183] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:56:25 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:25 executing program 3: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:26 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:26 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:26 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:26 executing program 2: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8100) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000140)=0x80) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x6, 0x0, &(0x7f0000000240)=[r0, 0xffffffffffffffff, r1, r2]}, 0x4) r3 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r3, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:26 executing program 0: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:26 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:26 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 52) 10:56:26 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:26 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3170.025118] FAULT_INJECTION: forcing a failure. [ 3170.025118] name failslab, interval 1, probability 0, space 0, times 0 [ 3170.027526] CPU: 0 PID: 15458 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3170.029016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3170.030759] Call Trace: [ 3170.031325] dump_stack+0x107/0x167 [ 3170.032112] should_fail.cold+0x5/0xa [ 3170.032919] ? create_object.isra.0+0x3a/0xa30 [ 3170.033882] should_failslab+0x5/0x20 [ 3170.034686] kmem_cache_alloc+0x5b/0x310 [ 3170.035550] ? mark_held_locks+0x9e/0xe0 [ 3170.036425] create_object.isra.0+0x3a/0xa30 [ 3170.037356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3170.038430] kmem_cache_alloc+0x159/0x310 [ 3170.039317] xas_alloc+0x336/0x440 [ 3170.040080] xas_create+0x34a/0x10d0 [ 3170.040876] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3170.041992] xas_store+0x8c/0x1c40 [ 3170.042768] __xa_store+0x164/0x2d0 [ 3170.043544] ? xa_delete_node+0x280/0x280 [ 3170.044443] ? trace_hardirqs_on+0x5b/0x180 [ 3170.045359] xa_store+0x31/0x50 [ 3170.046060] __io_uring_add_tctx_node+0x1cf/0x520 [ 3170.047074] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3170.048192] ? alloc_fd+0x2e7/0x670 [ 3170.048982] io_uring_setup+0x1fbb/0x2980 [ 3170.049864] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3170.050929] ? wait_for_completion_io+0x270/0x270 [ 3170.051997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3170.053101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3170.054197] do_syscall_64+0x33/0x40 [ 3170.054984] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3170.056101] RIP: 0033:0x7f768f557b19 [ 3170.056883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3170.060739] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3170.062332] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3170.063837] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3170.065345] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3170.066854] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3170.068365] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:56:51 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 53) 10:56:51 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:51 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:56:51 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:51 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:51 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3195.748485] FAULT_INJECTION: forcing a failure. [ 3195.748485] name failslab, interval 1, probability 0, space 0, times 0 [ 3195.751839] CPU: 0 PID: 15467 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3195.753300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3195.755008] Call Trace: [ 3195.755558] dump_stack+0x107/0x167 [ 3195.756332] should_fail.cold+0x5/0xa [ 3195.757120] ? xas_alloc+0x336/0x440 10:56:51 executing program 0: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:51 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3195.757898] should_failslab+0x5/0x20 [ 3195.758781] kmem_cache_alloc+0x5b/0x310 [ 3195.759631] xas_alloc+0x336/0x440 [ 3195.760393] xas_create+0x34a/0x10d0 [ 3195.761184] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3195.762269] xas_store+0x8c/0x1c40 [ 3195.763037] __xa_store+0x164/0x2d0 [ 3195.763786] ? xa_delete_node+0x280/0x280 [ 3195.764662] ? trace_hardirqs_on+0x5b/0x180 [ 3195.765572] xa_store+0x31/0x50 [ 3195.766255] __io_uring_add_tctx_node+0x1cf/0x520 [ 3195.767254] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3195.768334] ? alloc_fd+0x2e7/0x670 [ 3195.769103] io_uring_setup+0x1fbb/0x2980 [ 3195.769964] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3195.771000] ? wait_for_completion_io+0x270/0x270 [ 3195.772030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3195.773103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3195.774163] do_syscall_64+0x33/0x40 [ 3195.774999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3195.776228] RIP: 0033:0x7f768f557b19 [ 3195.777112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3195.781479] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3195.783283] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3195.784985] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3195.786677] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3195.788385] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3195.790076] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:56:51 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:51 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:52 executing program 1: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:52 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:52 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:56:52 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3213.511003] FAULT_INJECTION: forcing a failure. [ 3213.511003] name failslab, interval 1, probability 0, space 0, times 0 [ 3213.512368] CPU: 1 PID: 15511 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3213.513142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3213.514083] Call Trace: [ 3213.514394] dump_stack+0x107/0x167 [ 3213.514805] should_fail.cold+0x5/0xa [ 3213.515240] ? create_object.isra.0+0x3a/0xa30 [ 3213.515756] should_failslab+0x5/0x20 [ 3213.516190] kmem_cache_alloc+0x5b/0x310 [ 3213.516656] ? mark_held_locks+0x9e/0xe0 [ 3213.517121] create_object.isra.0+0x3a/0xa30 [ 3213.517617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3213.518193] kmem_cache_alloc+0x159/0x310 [ 3213.518670] xas_alloc+0x336/0x440 [ 3213.519078] xas_create+0x34a/0x10d0 [ 3213.519508] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3213.520108] xas_store+0x8c/0x1c40 [ 3213.520522] __xa_store+0x164/0x2d0 [ 3213.520933] ? xa_delete_node+0x280/0x280 [ 3213.521410] ? trace_hardirqs_on+0x5b/0x180 [ 3213.521901] xa_store+0x31/0x50 [ 3213.522280] __io_uring_add_tctx_node+0x1cf/0x520 [ 3213.522821] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3213.523414] ? alloc_fd+0x2e7/0x670 [ 3213.523832] io_uring_setup+0x1fbb/0x2980 [ 3213.524325] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3213.524903] ? wait_for_completion_io+0x270/0x270 [ 3213.525465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3213.526057] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3213.526645] do_syscall_64+0x33/0x40 [ 3213.527068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3213.527649] RIP: 0033:0x7f768f557b19 [ 3213.528082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3213.530152] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3213.531013] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3213.531815] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3213.532629] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3213.533437] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3213.534244] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:09 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 1: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:57:09 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 54) 10:57:09 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:57:09 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 55) 10:57:09 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) [ 3213.626422] FAULT_INJECTION: forcing a failure. [ 3213.626422] name failslab, interval 1, probability 0, space 0, times 0 [ 3213.627791] CPU: 1 PID: 15519 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3213.628591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3213.629524] Call Trace: [ 3213.629834] dump_stack+0x107/0x167 [ 3213.630254] should_fail.cold+0x5/0xa [ 3213.630690] ? xas_alloc+0x336/0x440 [ 3213.631113] should_failslab+0x5/0x20 [ 3213.631545] kmem_cache_alloc+0x5b/0x310 [ 3213.632006] xas_alloc+0x336/0x440 [ 3213.632424] xas_create+0x34a/0x10d0 [ 3213.632858] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3213.633457] xas_store+0x8c/0x1c40 [ 3213.633871] __xa_store+0x164/0x2d0 [ 3213.634290] ? xa_delete_node+0x280/0x280 [ 3213.634769] ? trace_hardirqs_on+0x5b/0x180 [ 3213.635263] xa_store+0x31/0x50 [ 3213.635639] __io_uring_add_tctx_node+0x1cf/0x520 [ 3213.636191] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3213.636787] ? alloc_fd+0x2e7/0x670 [ 3213.637206] io_uring_setup+0x1fbb/0x2980 [ 3213.637680] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3213.638258] ? wait_for_completion_io+0x270/0x270 [ 3213.638816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3213.639413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3213.639996] do_syscall_64+0x33/0x40 [ 3213.640429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3213.641010] RIP: 0033:0x7f768f557b19 [ 3213.641430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3213.643502] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3213.644378] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3213.645183] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3213.645989] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3213.646797] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3213.647610] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:09 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 1: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:09 executing program 2: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:26 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:57:26 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:57:26 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 56) 10:57:26 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:26 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:26 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:26 executing program 2: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:26 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3230.562498] FAULT_INJECTION: forcing a failure. [ 3230.562498] name failslab, interval 1, probability 0, space 0, times 0 [ 3230.565502] CPU: 1 PID: 15558 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3230.567286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3230.569417] Call Trace: [ 3230.570102] dump_stack+0x107/0x167 [ 3230.571044] should_fail.cold+0x5/0xa [ 3230.572025] ? create_object.isra.0+0x3a/0xa30 [ 3230.573213] should_failslab+0x5/0x20 [ 3230.574199] kmem_cache_alloc+0x5b/0x310 [ 3230.575248] ? mark_held_locks+0x9e/0xe0 [ 3230.576312] create_object.isra.0+0x3a/0xa30 [ 3230.577438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3230.578753] kmem_cache_alloc+0x159/0x310 [ 3230.579828] xas_alloc+0x336/0x440 [ 3230.580762] xas_create+0x34a/0x10d0 [ 3230.581639] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3230.582768] xas_store+0x8c/0x1c40 [ 3230.583552] __xa_store+0x164/0x2d0 [ 3230.584346] ? xa_delete_node+0x280/0x280 [ 3230.585244] ? trace_hardirqs_on+0x5b/0x180 [ 3230.586175] xa_store+0x31/0x50 [ 3230.586890] __io_uring_add_tctx_node+0x1cf/0x520 [ 3230.587926] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3230.589054] ? alloc_fd+0x2e7/0x670 [ 3230.589841] io_uring_setup+0x1fbb/0x2980 [ 3230.590733] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3230.591810] ? wait_for_completion_io+0x270/0x270 [ 3230.592863] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3230.593977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3230.595076] do_syscall_64+0x33/0x40 [ 3230.595866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3230.596959] RIP: 0033:0x7f768f557b19 [ 3230.597744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3230.601641] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3230.603253] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3230.604769] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3230.606281] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3230.607795] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3230.609303] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:26 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:26 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:26 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:57:26 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 5: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 57) 10:57:42 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:57:42 executing program 2: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:57:42 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3246.341197] FAULT_INJECTION: forcing a failure. [ 3246.341197] name failslab, interval 1, probability 0, space 0, times 0 [ 3246.343872] CPU: 1 PID: 15589 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3246.345504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3246.347446] Call Trace: [ 3246.348069] dump_stack+0x107/0x167 [ 3246.348941] should_fail.cold+0x5/0xa [ 3246.349837] ? xas_alloc+0x336/0x440 [ 3246.350709] should_failslab+0x5/0x20 [ 3246.351601] kmem_cache_alloc+0x5b/0x310 [ 3246.352570] xas_alloc+0x336/0x440 [ 3246.353416] xas_create+0x34a/0x10d0 [ 3246.354316] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3246.355556] xas_store+0x8c/0x1c40 [ 3246.356422] __xa_store+0x164/0x2d0 [ 3246.357285] ? xa_delete_node+0x280/0x280 [ 3246.358274] ? trace_hardirqs_on+0x5b/0x180 [ 3246.359298] xa_store+0x31/0x50 [ 3246.360066] __io_uring_add_tctx_node+0x1cf/0x520 [ 3246.361191] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3246.362399] ? alloc_fd+0x2e7/0x670 [ 3246.363268] io_uring_setup+0x1fbb/0x2980 [ 3246.364239] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3246.365420] ? wait_for_completion_io+0x270/0x270 [ 3246.366564] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3246.367777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3246.368982] do_syscall_64+0x33/0x40 [ 3246.369847] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3246.371032] RIP: 0033:0x7f768f557b19 [ 3246.371896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3246.376154] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3246.377923] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3246.379571] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3246.381222] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3246.382855] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3246.384498] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:42 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:57:42 executing program 5: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:57:42 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:42 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:57:59 executing program 7: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 5: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 58) 10:57:59 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3263.136211] FAULT_INJECTION: forcing a failure. [ 3263.136211] name failslab, interval 1, probability 0, space 0, times 0 [ 3263.138272] CPU: 1 PID: 15616 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3263.139503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3263.140976] Call Trace: [ 3263.141451] dump_stack+0x107/0x167 [ 3263.142101] should_fail.cold+0x5/0xa [ 3263.142772] ? create_object.isra.0+0x3a/0xa30 [ 3263.143583] should_failslab+0x5/0x20 [ 3263.144268] kmem_cache_alloc+0x5b/0x310 [ 3263.145026] ? mark_held_locks+0x9e/0xe0 [ 3263.145752] create_object.isra.0+0x3a/0xa30 [ 3263.146537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3263.147447] kmem_cache_alloc+0x159/0x310 [ 3263.148194] xas_alloc+0x336/0x440 [ 3263.148917] xas_create+0x34a/0x10d0 [ 3263.149619] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3263.150532] xas_store+0x8c/0x1c40 [ 3263.151173] __xa_store+0x164/0x2d0 [ 3263.151821] ? xa_delete_node+0x280/0x280 [ 3263.152561] ? trace_hardirqs_on+0x5b/0x180 [ 3263.153324] xa_store+0x31/0x50 [ 3263.153902] __io_uring_add_tctx_node+0x1cf/0x520 [ 3263.154747] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3263.155656] ? alloc_fd+0x2e7/0x670 [ 3263.156301] io_uring_setup+0x1fbb/0x2980 [ 3263.157046] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3263.157933] ? wait_for_completion_io+0x270/0x270 [ 3263.158802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3263.159715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3263.160626] do_syscall_64+0x33/0x40 [ 3263.161272] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3263.162168] RIP: 0033:0x7f768f557b19 [ 3263.162813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3263.166028] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3263.167357] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3263.168611] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3263.169847] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3263.171089] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3263.172328] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:59 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 7: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 59) [ 3263.369613] FAULT_INJECTION: forcing a failure. [ 3263.369613] name failslab, interval 1, probability 0, space 0, times 0 [ 3263.371671] CPU: 0 PID: 15641 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3263.372834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3263.374252] Call Trace: [ 3263.374699] dump_stack+0x107/0x167 [ 3263.375373] should_fail.cold+0x5/0xa [ 3263.376102] ? xas_alloc+0x336/0x440 [ 3263.376825] should_failslab+0x5/0x20 [ 3263.377557] kmem_cache_alloc+0x5b/0x310 [ 3263.378360] xas_alloc+0x336/0x440 [ 3263.379068] xas_create+0x34a/0x10d0 [ 3263.379817] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3263.380864] xas_store+0x8c/0x1c40 [ 3263.381570] __xa_store+0x164/0x2d0 [ 3263.382298] ? xa_delete_node+0x280/0x280 [ 3263.383120] ? trace_hardirqs_on+0x5b/0x180 [ 3263.383983] xa_store+0x31/0x50 [ 3263.384643] __io_uring_add_tctx_node+0x1cf/0x520 [ 3263.385591] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3263.386622] ? alloc_fd+0x2e7/0x670 [ 3263.387346] io_uring_setup+0x1fbb/0x2980 [ 3263.388176] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3263.389150] ? wait_for_completion_io+0x270/0x270 [ 3263.389994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3263.390888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3263.391769] do_syscall_64+0x33/0x40 [ 3263.392408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3263.393293] RIP: 0033:0x7f768f557b19 [ 3263.393940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3263.397050] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3263.398336] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3263.399541] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3263.400761] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3263.401959] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3263.403163] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:57:59 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 60) 10:57:59 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:57:59 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3263.478759] FAULT_INJECTION: forcing a failure. [ 3263.478759] name failslab, interval 1, probability 0, space 0, times 0 [ 3263.480638] CPU: 0 PID: 15649 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3263.481764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3263.483110] Call Trace: [ 3263.483544] dump_stack+0x107/0x167 [ 3263.484130] should_fail.cold+0x5/0xa [ 3263.484739] ? create_object.isra.0+0x3a/0xa30 [ 3263.485434] should_failslab+0x5/0x20 [ 3263.486015] kmem_cache_alloc+0x5b/0x310 [ 3263.486645] ? mark_held_locks+0x9e/0xe0 [ 3263.487284] create_object.isra.0+0x3a/0xa30 [ 3263.488000] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3263.488786] kmem_cache_alloc+0x159/0x310 [ 3263.489435] xas_alloc+0x336/0x440 [ 3263.489979] xas_create+0x34a/0x10d0 [ 3263.490565] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3263.491365] xas_store+0x8c/0x1c40 [ 3263.491925] __xa_store+0x164/0x2d0 [ 3263.492495] ? xa_delete_node+0x280/0x280 [ 3263.493189] ? trace_hardirqs_on+0x5b/0x180 [ 3263.493862] xa_store+0x31/0x50 [ 3263.494375] __io_uring_add_tctx_node+0x1cf/0x520 [ 3263.495116] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3263.495914] ? alloc_fd+0x2e7/0x670 [ 3263.496485] io_uring_setup+0x1fbb/0x2980 [ 3263.497163] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3263.497936] ? wait_for_completion_io+0x270/0x270 [ 3263.498704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3263.499504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3263.500284] do_syscall_64+0x33/0x40 [ 3263.500860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3263.501633] RIP: 0033:0x7f768f557b19 [ 3263.502198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3263.505006] RSP: 002b:00007f768cacd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3263.506164] RAX: ffffffffffffffda RBX: 00007f768f66af60 RCX: 00007f768f557b19 [ 3263.507239] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000003862 [ 3263.508310] RBP: 00000000200002c0 R08: 0000000020000180 R09: 0000000020000180 [ 3263.509390] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000180 [ 3263.510477] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:58:13 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 61) 10:58:13 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:13 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3277.725417] FAULT_INJECTION: forcing a failure. [ 3277.725417] name failslab, interval 1, probability 0, space 0, times 0 [ 3277.728217] CPU: 0 PID: 15657 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3277.729691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3277.731449] Call Trace: [ 3277.732012] dump_stack+0x107/0x167 [ 3277.732802] should_fail.cold+0x5/0xa [ 3277.733610] ? vm_area_dup+0x78/0x290 [ 3277.734437] should_failslab+0x5/0x20 [ 3277.735244] kmem_cache_alloc+0x5b/0x310 [ 3277.736102] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3277.737221] vm_area_dup+0x78/0x290 [ 3277.737986] ? perf_trace_lock+0xac/0x490 [ 3277.738876] ? mark_lock+0xf5/0x2df0 [ 3277.739676] ? lock_chain_count+0x20/0x20 [ 3277.740560] ? mark_lock+0xf5/0x2df0 [ 3277.741368] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3277.742479] ? lock_chain_count+0x20/0x20 [ 3277.743357] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3277.744297] ? trace_hardirqs_on+0x5b/0x180 [ 3277.745221] ? mark_lock+0xf5/0x2df0 [ 3277.746010] ? vm_area_alloc+0x110/0x110 [ 3277.746881] ? __lock_acquire+0x1657/0x5b00 [ 3277.747818] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3277.748940] ? SOFTIRQ_verbose+0x10/0x10 [ 3277.749801] ? vmacache_find+0x55/0x2a0 [ 3277.750644] __split_vma+0xa8/0x4e0 [ 3277.751421] __do_munmap+0x365/0x1260 [ 3277.752240] ? arch_get_unmapped_area+0x450/0x450 [ 3277.753282] mmap_region+0x7cc/0x1500 [ 3277.754107] do_mmap+0x868/0x1370 [ 3277.754855] vm_mmap_pgoff+0x198/0x1f0 [ 3277.755687] ? randomize_page+0xb0/0xb0 [ 3277.756553] ksys_mmap_pgoff+0x41c/0x560 [ 3277.757432] ? find_mergeable_anon_vma+0x250/0x250 [ 3277.758475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3277.759586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3277.760679] do_syscall_64+0x33/0x40 [ 3277.761485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3277.762569] RIP: 0033:0x7f768f557b62 [ 3277.763355] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3277.767239] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3277.768859] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3277.770362] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3277.771866] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3277.773373] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3277.774874] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:58:13 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:13 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:13 executing program 7: syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:13 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:13 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 62) 10:58:29 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 1) 10:58:29 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3293.448710] FAULT_INJECTION: forcing a failure. [ 3293.448710] name failslab, interval 1, probability 0, space 0, times 0 [ 3293.451313] CPU: 0 PID: 15685 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3293.452799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3293.454578] Call Trace: [ 3293.455146] dump_stack+0x107/0x167 [ 3293.455930] should_fail.cold+0x5/0xa [ 3293.456748] ? getname_flags.part.0+0x50/0x4f0 [ 3293.457731] should_failslab+0x5/0x20 [ 3293.458546] kmem_cache_alloc+0x5b/0x310 [ 3293.459428] getname_flags.part.0+0x50/0x4f0 [ 3293.460374] getname_flags+0x9a/0xe0 [ 3293.461183] __x64_sys_execveat+0xd6/0x140 [ 3293.462099] do_syscall_64+0x33/0x40 [ 3293.462816] FAULT_INJECTION: forcing a failure. [ 3293.462816] name failslab, interval 1, probability 0, space 0, times 0 [ 3293.465216] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3293.465231] RIP: 0033:0x7f9b07560b19 [ 3293.465250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3293.465271] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3293.472852] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3293.474391] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3293.475925] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3293.477469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3293.479003] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 [ 3293.480576] CPU: 1 PID: 15690 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3293.482211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3293.484137] Call Trace: [ 3293.484766] dump_stack+0x107/0x167 [ 3293.485627] should_fail.cold+0x5/0xa [ 3293.486520] ? create_object.isra.0+0x3a/0xa30 [ 3293.487585] should_failslab+0x5/0x20 [ 3293.488472] kmem_cache_alloc+0x5b/0x310 [ 3293.489435] create_object.isra.0+0x3a/0xa30 [ 3293.490454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3293.491644] kmem_cache_alloc+0x159/0x310 [ 3293.492618] vm_area_dup+0x78/0x290 [ 3293.493475] ? perf_trace_lock+0xac/0x490 [ 3293.494450] ? mark_lock+0xf5/0x2df0 [ 3293.495326] ? lock_chain_count+0x20/0x20 [ 3293.496293] ? mark_lock+0xf5/0x2df0 [ 3293.497173] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3293.498404] ? lock_chain_count+0x20/0x20 [ 3293.499377] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3293.500419] ? trace_hardirqs_on+0x5b/0x180 [ 3293.501441] ? mark_lock+0xf5/0x2df0 [ 3293.502307] ? vm_area_alloc+0x110/0x110 [ 3293.503254] ? __lock_acquire+0x1657/0x5b00 [ 3293.504285] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3293.505508] ? SOFTIRQ_verbose+0x10/0x10 [ 3293.506452] ? vmacache_find+0x55/0x2a0 [ 3293.507382] __split_vma+0xa8/0x4e0 [ 3293.508234] __do_munmap+0x365/0x1260 [ 3293.509128] ? arch_get_unmapped_area+0x450/0x450 [ 3293.510256] mmap_region+0x7cc/0x1500 [ 3293.511160] do_mmap+0x868/0x1370 [ 3293.511984] vm_mmap_pgoff+0x198/0x1f0 [ 3293.512910] ? randomize_page+0xb0/0xb0 [ 3293.513856] ksys_mmap_pgoff+0x41c/0x560 [ 3293.514801] ? find_mergeable_anon_vma+0x250/0x250 [ 3293.515948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3293.517179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3293.518384] do_syscall_64+0x33/0x40 [ 3293.519251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3293.520446] RIP: 0033:0x7f768f557b62 [ 3293.521321] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3293.525596] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3293.527364] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3293.529029] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3293.530682] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3293.532339] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3293.534006] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:58:29 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 2) 10:58:29 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:58:29 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:29 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3293.677410] FAULT_INJECTION: forcing a failure. [ 3293.677410] name failslab, interval 1, probability 0, space 0, times 0 [ 3293.680120] CPU: 1 PID: 15696 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3293.681737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3293.683657] Call Trace: [ 3293.684274] dump_stack+0x107/0x167 [ 3293.685133] should_fail.cold+0x5/0xa [ 3293.686023] ? create_object.isra.0+0x3a/0xa30 [ 3293.687087] should_failslab+0x5/0x20 [ 3293.687978] kmem_cache_alloc+0x5b/0x310 [ 3293.688943] create_object.isra.0+0x3a/0xa30 [ 3293.689965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3293.691156] kmem_cache_alloc+0x159/0x310 [ 3293.692135] getname_flags.part.0+0x50/0x4f0 [ 3293.693182] getname_flags+0x9a/0xe0 [ 3293.694059] __x64_sys_execveat+0xd6/0x140 [ 3293.695053] do_syscall_64+0x33/0x40 [ 3293.695925] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3293.697128] RIP: 0033:0x7f9b07560b19 [ 3293.697996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3293.702288] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3293.704062] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3293.705731] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3293.707394] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3293.709063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3293.710735] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 10:58:48 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 63) 10:58:48 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 3) 10:58:48 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:58:48 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:48 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:48 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:48 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3312.081803] FAULT_INJECTION: forcing a failure. [ 3312.081803] name failslab, interval 1, probability 0, space 0, times 0 [ 3312.084653] CPU: 0 PID: 15714 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3312.086316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3312.088295] Call Trace: [ 3312.088941] dump_stack+0x107/0x167 [ 3312.089835] should_fail.cold+0x5/0xa [ 3312.090753] ? anon_vma_clone+0xdc/0x590 [ 3312.091599] should_failslab+0x5/0x20 [ 3312.092381] kmem_cache_alloc+0x5b/0x310 [ 3312.093261] anon_vma_clone+0xdc/0x590 [ 3312.094071] __split_vma+0x17c/0x4e0 [ 3312.094870] __do_munmap+0x365/0x1260 [ 3312.095686] ? arch_get_unmapped_area+0x450/0x450 [ 3312.096721] mmap_region+0x7cc/0x1500 [ 3312.097563] do_mmap+0x868/0x1370 [ 3312.098316] vm_mmap_pgoff+0x198/0x1f0 [ 3312.099151] ? randomize_page+0xb0/0xb0 [ 3312.100015] ksys_mmap_pgoff+0x41c/0x560 [ 3312.100879] ? find_mergeable_anon_vma+0x250/0x250 [ 3312.101941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3312.103050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3312.104151] do_syscall_64+0x33/0x40 [ 3312.104943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3312.106044] RIP: 0033:0x7f768f557b62 [ 3312.106835] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3312.110736] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3312.112363] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3312.113890] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3312.115412] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3312.116927] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3312.118458] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:58:48 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) [ 3312.144884] FAULT_INJECTION: forcing a failure. [ 3312.144884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3312.147424] CPU: 1 PID: 15725 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3312.148845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3312.150546] Call Trace: [ 3312.151097] dump_stack+0x107/0x167 [ 3312.151863] should_fail.cold+0x5/0xa [ 3312.152652] strncpy_from_user+0x34/0x470 [ 3312.153527] getname_flags.part.0+0x95/0x4f0 [ 3312.154435] getname_flags+0x9a/0xe0 [ 3312.155207] __x64_sys_execveat+0xd6/0x140 [ 3312.156083] do_syscall_64+0x33/0x40 [ 3312.156849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3312.157903] RIP: 0033:0x7f9b07560b19 [ 3312.158661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3312.162537] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3312.164084] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3312.165562] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3312.167031] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3312.168497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3312.169967] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 10:58:48 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:48 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:58:48 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:48 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:58:48 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 4) 10:59:05 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:59:05 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:59:05 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 64) [ 3329.181556] FAULT_INJECTION: forcing a failure. [ 3329.181556] name failslab, interval 1, probability 0, space 0, times 0 [ 3329.184007] CPU: 1 PID: 15756 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3329.185437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3329.187175] Call Trace: [ 3329.187737] dump_stack+0x107/0x167 [ 3329.188495] should_fail.cold+0x5/0xa [ 3329.188845] FAULT_INJECTION: forcing a failure. [ 3329.188845] name failslab, interval 1, probability 0, space 0, times 0 [ 3329.189282] ? create_object.isra.0+0x3a/0xa30 [ 3329.189304] should_failslab+0x5/0x20 [ 3329.189323] kmem_cache_alloc+0x5b/0x310 [ 3329.189358] create_object.isra.0+0x3a/0xa30 [ 3329.195811] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3329.196866] kmem_cache_alloc+0x159/0x310 [ 3329.197741] vm_area_dup+0x78/0x290 [ 3329.198498] ? lock_release+0x680/0x680 [ 3329.199326] ? mark_lock+0xf5/0x2df0 [ 3329.200102] ? lock_chain_count+0x20/0x20 [ 3329.200951] ? mark_lock+0xf5/0x2df0 [ 3329.201745] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3329.202841] ? lock_chain_count+0x20/0x20 [ 3329.203703] ? mark_lock+0xf5/0x2df0 [ 3329.204462] ? vm_area_alloc+0x110/0x110 [ 3329.205308] ? __lock_acquire+0x1657/0x5b00 [ 3329.206224] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3329.207291] ? SOFTIRQ_verbose+0x10/0x10 [ 3329.208128] ? vmacache_find+0x55/0x2a0 [ 3329.208947] __split_vma+0xa8/0x4e0 [ 3329.209747] __do_munmap+0x365/0x1260 [ 3329.210525] ? arch_get_unmapped_area+0x450/0x450 [ 3329.211516] mmap_region+0x7cc/0x1500 [ 3329.212316] do_mmap+0x868/0x1370 [ 3329.213041] vm_mmap_pgoff+0x198/0x1f0 [ 3329.213850] ? randomize_page+0xb0/0xb0 [ 3329.214684] ksys_mmap_pgoff+0x41c/0x560 [ 3329.215516] ? find_mergeable_anon_vma+0x250/0x250 [ 3329.216521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3329.217604] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3329.218660] do_syscall_64+0x33/0x40 [ 3329.219424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3329.220472] RIP: 0033:0x7f768f557b62 [ 3329.221241] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3329.224942] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3329.226471] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3329.227902] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3329.229344] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3329.230805] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3329.232241] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3329.233734] CPU: 0 PID: 15750 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3329.235664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3329.237963] Call Trace: [ 3329.238592] dump_stack+0x107/0x167 [ 3329.239455] should_fail.cold+0x5/0xa [ 3329.240358] ? alloc_bprm+0x51/0x8f0 [ 3329.241227] should_failslab+0x5/0x20 [ 3329.242112] kmem_cache_alloc_trace+0x55/0x320 [ 3329.243221] ? lock_downgrade+0x6d0/0x6d0 [ 3329.244248] alloc_bprm+0x51/0x8f0 [ 3329.245097] ? __virt_addr_valid+0x170/0x5d0 [ 3329.246192] do_execveat_common+0x275/0x8d0 [ 3329.247227] ? strncpy_from_user+0x9e/0x470 [ 3329.248282] ? bprm_execve+0x1960/0x1960 [ 3329.249287] __x64_sys_execveat+0xed/0x140 [ 3329.250315] do_syscall_64+0x33/0x40 [ 3329.251206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3329.252435] RIP: 0033:0x7f9b07560b19 [ 3329.253337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3329.257758] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3329.259581] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3329.261288] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3329.262997] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3329.264703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3329.266425] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 10:59:05 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:59:05 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) 10:59:05 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:59:05 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:59:05 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 65) 10:59:05 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 5) 10:59:05 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:05 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3329.584287] FAULT_INJECTION: forcing a failure. [ 3329.584287] name failslab, interval 1, probability 0, space 0, times 0 [ 3329.586725] CPU: 0 PID: 15783 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3329.588180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3329.589924] Call Trace: [ 3329.590491] dump_stack+0x107/0x167 [ 3329.591260] should_fail.cold+0x5/0xa [ 3329.592066] ? vm_area_dup+0x78/0x290 [ 3329.592863] should_failslab+0x5/0x20 [ 3329.593676] kmem_cache_alloc+0x5b/0x310 [ 3329.594542] ? __lockdep_reset_lock+0x180/0x180 [ 3329.595520] vm_area_dup+0x78/0x290 [ 3329.596281] ? find_held_lock+0x2c/0x110 [ 3329.597135] ? __vma_adjust+0x66e/0x2510 [ 3329.597999] ? lock_downgrade+0x6d0/0x6d0 [ 3329.598884] ? up_write+0x191/0x550 [ 3329.599648] ? downgrade_write+0x3a0/0x3a0 [ 3329.600531] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 3329.601683] ? vm_area_alloc+0x110/0x110 [ 3329.602539] ? __vma_adjust+0xbb8/0x2510 [ 3329.603412] ? vmacache_find+0x55/0x2a0 [ 3329.604248] __split_vma+0xa8/0x4e0 [ 3329.605013] __do_munmap+0xf40/0x1260 [ 3329.605822] ? arch_get_unmapped_area+0x450/0x450 [ 3329.606837] mmap_region+0x7cc/0x1500 [ 3329.607655] do_mmap+0x868/0x1370 [ 3329.608393] vm_mmap_pgoff+0x198/0x1f0 [ 3329.609224] ? randomize_page+0xb0/0xb0 [ 3329.610085] ksys_mmap_pgoff+0x41c/0x560 [ 3329.610940] ? find_mergeable_anon_vma+0x250/0x250 [ 3329.611982] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3329.613079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3329.614181] do_syscall_64+0x33/0x40 [ 3329.614961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3329.616042] RIP: 0033:0x7f768f557b62 [ 3329.616826] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3329.620679] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3329.622293] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3329.623805] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3329.625306] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3329.626858] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3329.628370] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3329.685862] FAULT_INJECTION: forcing a failure. [ 3329.685862] name failslab, interval 1, probability 0, space 0, times 0 [ 3329.688416] CPU: 1 PID: 15790 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3329.689905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3329.691666] Call Trace: [ 3329.692239] dump_stack+0x107/0x167 [ 3329.693017] should_fail.cold+0x5/0xa [ 3329.693833] ? create_object.isra.0+0x3a/0xa30 [ 3329.694812] should_failslab+0x5/0x20 [ 3329.695626] kmem_cache_alloc+0x5b/0x310 [ 3329.696497] create_object.isra.0+0x3a/0xa30 [ 3329.697427] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3329.698528] kmem_cache_alloc_trace+0x151/0x320 [ 3329.699517] ? lock_downgrade+0x6d0/0x6d0 [ 3329.700411] alloc_bprm+0x51/0x8f0 [ 3329.701166] ? __virt_addr_valid+0x170/0x5d0 [ 3329.702120] do_execveat_common+0x275/0x8d0 [ 3329.703037] ? strncpy_from_user+0x9e/0x470 [ 3329.703945] ? bprm_execve+0x1960/0x1960 [ 3329.704830] __x64_sys_execveat+0xed/0x140 [ 3329.705743] do_syscall_64+0x33/0x40 [ 3329.706542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3329.707630] RIP: 0033:0x7f9b07560b19 [ 3329.708412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3329.712323] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3329.713923] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3329.715421] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3329.716921] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3329.718432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3329.719941] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 10:59:21 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 6) [ 3345.218139] FAULT_INJECTION: forcing a failure. [ 3345.218139] name failslab, interval 1, probability 0, space 0, times 0 [ 3345.220382] CPU: 0 PID: 15795 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3345.221590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3345.223020] Call Trace: [ 3345.223495] dump_stack+0x107/0x167 [ 3345.224126] should_fail.cold+0x5/0xa [ 3345.224786] ? create_object.isra.0+0x3a/0xa30 [ 3345.225576] should_failslab+0x5/0x20 [ 3345.226241] kmem_cache_alloc+0x5b/0x310 [ 3345.226952] create_object.isra.0+0x3a/0xa30 [ 3345.227699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3345.228764] kmem_cache_alloc+0x159/0x310 [ 3345.229496] vm_area_dup+0x78/0x290 [ 3345.230145] ? find_held_lock+0x2c/0x110 [ 3345.230851] ? __vma_adjust+0x66e/0x2510 [ 3345.231547] ? lock_downgrade+0x6d0/0x6d0 [ 3345.232279] ? up_write+0x191/0x550 [ 3345.232912] ? downgrade_write+0x3a0/0x3a0 [ 3345.233636] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 3345.234583] ? vm_area_alloc+0x110/0x110 [ 3345.235283] ? __vma_adjust+0xbb8/0x2510 [ 3345.236009] ? vmacache_find+0x55/0x2a0 [ 3345.236832] __split_vma+0xa8/0x4e0 [ 3345.237473] __do_munmap+0xf40/0x1260 [ 3345.238290] ? arch_get_unmapped_area+0x450/0x450 [ 3345.239133] mmap_region+0x7cc/0x1500 [ 3345.239957] do_mmap+0x868/0x1370 10:59:21 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:21 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:21 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:21 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:59:21 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:21 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 66) [ 3345.240806] vm_mmap_pgoff+0x198/0x1f0 [ 3345.241568] ? randomize_page+0xb0/0xb0 [ 3345.242298] ksys_mmap_pgoff+0x41c/0x560 [ 3345.242989] ? find_mergeable_anon_vma+0x250/0x250 [ 3345.243835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3345.244798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3345.245685] do_syscall_64+0x33/0x40 [ 3345.246339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3345.247202] RIP: 0033:0x7f768f557b62 [ 3345.247833] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3345.250908] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3345.252196] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3345.253399] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3345.254605] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3345.255798] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3345.257012] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:59:21 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 1) [ 3345.287163] FAULT_INJECTION: forcing a failure. [ 3345.287163] name failslab, interval 1, probability 0, space 0, times 0 [ 3345.289761] CPU: 1 PID: 15807 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3345.291262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3345.293040] Call Trace: [ 3345.293639] dump_stack+0x107/0x167 [ 3345.294451] should_fail.cold+0x5/0xa [ 3345.295280] should_failslab+0x5/0x20 [ 3345.296082] __kmalloc_track_caller+0x79/0x370 [ 3345.297071] ? kasprintf+0xbb/0xf0 [ 3345.297862] ? __lockdep_reset_lock+0x180/0x180 [ 3345.298865] kvasprintf+0xb5/0x150 [ 3345.299632] ? bust_spinlocks+0xe0/0xe0 [ 3345.300499] ? kmem_cache_alloc_trace+0x151/0x320 [ 3345.301555] kasprintf+0xbb/0xf0 [ 3345.302300] ? kvasprintf_const+0x1a0/0x1a0 [ 3345.303247] ? trace_hardirqs_on+0x5b/0x180 [ 3345.304196] alloc_bprm+0x65c/0x8f0 [ 3345.304986] ? __virt_addr_valid+0x170/0x5d0 [ 3345.305961] do_execveat_common+0x275/0x8d0 [ 3345.306903] ? strncpy_from_user+0x9e/0x470 [ 3345.307920] ? bprm_execve+0x1960/0x1960 [ 3345.309063] __x64_sys_execveat+0xed/0x140 [ 3345.310243] do_syscall_64+0x33/0x40 [ 3345.311193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3345.312312] RIP: 0033:0x7f9b07560b19 [ 3345.313135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3345.317100] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3345.318758] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3345.320309] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3345.321952] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3345.323508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3345.325034] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 10:59:21 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3345.336743] FAULT_INJECTION: forcing a failure. [ 3345.336743] name failslab, interval 1, probability 0, space 0, times 0 [ 3345.339369] CPU: 1 PID: 15809 Comm: syz-executor.5 Not tainted 5.10.257 #1 [ 3345.340859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3345.342710] Call Trace: [ 3345.343305] dump_stack+0x107/0x167 [ 3345.344115] should_fail.cold+0x5/0xa [ 3345.344976] ? getname_flags.part.0+0x50/0x4f0 [ 3345.346005] should_failslab+0x5/0x20 [ 3345.346856] kmem_cache_alloc+0x5b/0x310 [ 3345.347766] getname_flags.part.0+0x50/0x4f0 [ 3345.348764] getname_flags+0x9a/0xe0 [ 3345.349602] __x64_sys_execveat+0xd6/0x140 [ 3345.350563] do_syscall_64+0x33/0x40 [ 3345.351393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3345.352524] RIP: 0033:0x7fbf4b56bb19 [ 3345.353358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3345.357438] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3345.359129] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3345.360712] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3345.362319] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3345.363886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3345.365468] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 10:59:21 executing program 2: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:21 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 67) 10:59:21 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 10:59:21 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3345.423118] FAULT_INJECTION: forcing a failure. [ 3345.423118] name failslab, interval 1, probability 0, space 0, times 0 [ 3345.424923] CPU: 0 PID: 15812 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3345.426007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3345.427298] Call Trace: [ 3345.427721] dump_stack+0x107/0x167 [ 3345.428291] should_fail.cold+0x5/0xa [ 3345.428885] ? anon_vma_clone+0xdc/0x590 [ 3345.429517] should_failslab+0x5/0x20 [ 3345.430117] kmem_cache_alloc+0x5b/0x310 [ 3345.430763] anon_vma_clone+0xdc/0x590 [ 3345.431377] __split_vma+0x17c/0x4e0 [ 3345.431969] __do_munmap+0xf40/0x1260 [ 3345.432567] ? arch_get_unmapped_area+0x450/0x450 [ 3345.433322] mmap_region+0x7cc/0x1500 [ 3345.433946] do_mmap+0x868/0x1370 [ 3345.434496] vm_mmap_pgoff+0x198/0x1f0 [ 3345.435104] ? randomize_page+0xb0/0xb0 [ 3345.435737] ksys_mmap_pgoff+0x41c/0x560 [ 3345.436371] ? find_mergeable_anon_vma+0x250/0x250 [ 3345.437136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3345.437953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3345.438751] do_syscall_64+0x33/0x40 [ 3345.439304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3345.440093] RIP: 0033:0x7f768f557b62 [ 3345.440666] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3345.443503] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3345.444675] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3345.445794] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3345.446891] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3345.447984] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3345.449077] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:59:21 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:21 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:21 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:38 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 7) 10:59:38 executing program 2: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:38 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:38 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:38 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:38 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 2) 10:59:38 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 68) 10:59:38 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 1) [ 3361.886883] FAULT_INJECTION: forcing a failure. [ 3361.886883] name failslab, interval 1, probability 0, space 0, times 0 [ 3361.889615] CPU: 0 PID: 15833 Comm: syz-executor.5 Not tainted 5.10.257 #1 [ 3361.891182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3361.893055] Call Trace: [ 3361.893662] dump_stack+0x107/0x167 [ 3361.894496] should_fail.cold+0x5/0xa [ 3361.895357] ? create_object.isra.0+0x3a/0xa30 [ 3361.896388] should_failslab+0x5/0x20 [ 3361.897248] kmem_cache_alloc+0x5b/0x310 [ 3361.898190] create_object.isra.0+0x3a/0xa30 [ 3361.899192] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3361.900345] kmem_cache_alloc+0x159/0x310 [ 3361.901296] getname_flags.part.0+0x50/0x4f0 [ 3361.902307] getname_flags+0x9a/0xe0 [ 3361.903158] __x64_sys_execveat+0xd6/0x140 [ 3361.904121] do_syscall_64+0x33/0x40 [ 3361.904974] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3361.906144] RIP: 0033:0x7fbf4b56bb19 [ 3361.906290] FAULT_INJECTION: forcing a failure. [ 3361.906290] name failslab, interval 1, probability 0, space 0, times 0 [ 3361.906989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3361.907003] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3361.914447] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3361.916048] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3361.917644] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3361.919259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3361.920861] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 [ 3361.922504] CPU: 1 PID: 15841 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3361.923519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3361.924737] Call Trace: [ 3361.925140] dump_stack+0x107/0x167 [ 3361.925695] should_fail.cold+0x5/0xa [ 3361.926288] ? getname_flags.part.0+0x50/0x4f0 [ 3361.926983] should_failslab+0x5/0x20 [ 3361.927555] kmem_cache_alloc+0x5b/0x310 [ 3361.928169] getname_flags.part.0+0x50/0x4f0 [ 3361.928829] getname_flags+0x9a/0xe0 [ 3361.929387] __x64_sys_execveat+0xd6/0x140 [ 3361.930032] do_syscall_64+0x33/0x40 [ 3361.930594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3361.931364] RIP: 0033:0x7f51574bbb19 [ 3361.931920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3361.934698] RSP: 002b:00007f5154a31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3361.935837] RAX: ffffffffffffffda RBX: 00007f51575cef60 RCX: 00007f51574bbb19 [ 3361.936897] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3361.937971] RBP: 00007f5154a311d0 R08: 0000000000001100 R09: 0000000000000000 [ 3361.939053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3361.940134] R13: 00007ffedaa8a4ff R14: 00007f5154a31300 R15: 0000000000022000 [ 3361.944797] FAULT_INJECTION: forcing a failure. [ 3361.944797] name failslab, interval 1, probability 0, space 0, times 0 [ 3361.947921] CPU: 0 PID: 15843 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3361.949606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3361.951458] Call Trace: [ 3361.952050] dump_stack+0x107/0x167 [ 3361.952861] should_fail.cold+0x5/0xa [ 3361.953707] ? create_object.isra.0+0x3a/0xa30 [ 3361.954731] should_failslab+0x5/0x20 [ 3361.955575] kmem_cache_alloc+0x5b/0x310 [ 3361.956485] create_object.isra.0+0x3a/0xa30 [ 3361.957487] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3361.958705] kmem_cache_alloc+0x159/0x310 [ 3361.959711] anon_vma_clone+0xdc/0x590 [ 3361.960603] __split_vma+0x17c/0x4e0 [ 3361.961439] __do_munmap+0xf40/0x1260 [ 3361.962300] ? arch_get_unmapped_area+0x450/0x450 [ 3361.963386] mmap_region+0x7cc/0x1500 10:59:38 executing program 2: r0 = syz_io_uring_setup(0x37c, 0x0, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3361.964251] do_mmap+0x868/0x1370 [ 3361.965171] vm_mmap_pgoff+0x198/0x1f0 [ 3361.966056] ? randomize_page+0xb0/0xb0 [ 3361.966962] ksys_mmap_pgoff+0x41c/0x560 [ 3361.967864] ? find_mergeable_anon_vma+0x250/0x250 [ 3361.968959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3361.970128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3361.971284] do_syscall_64+0x33/0x40 [ 3361.972109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3361.973247] RIP: 0033:0x7f768f557b62 [ 3361.974093] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3361.978331] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3361.980109] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3361.981762] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3361.983386] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3361.984973] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3361.986560] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3361.997180] FAULT_INJECTION: forcing a failure. [ 3361.997180] name failslab, interval 1, probability 0, space 0, times 0 [ 3361.998932] CPU: 1 PID: 15846 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3362.000008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3362.001260] Call Trace: [ 3362.001663] dump_stack+0x107/0x167 [ 3362.002234] should_fail.cold+0x5/0xa [ 3362.002819] ? create_object.isra.0+0x3a/0xa30 [ 3362.003511] should_failslab+0x5/0x20 [ 3362.004091] kmem_cache_alloc+0x5b/0x310 [ 3362.004709] ? vsnprintf+0x4ba/0x1600 [ 3362.005289] create_object.isra.0+0x3a/0xa30 [ 3362.005965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3362.006739] __kmalloc_track_caller+0x177/0x370 [ 3362.007430] ? kasprintf+0xbb/0xf0 [ 3362.007961] kvasprintf+0xb5/0x150 [ 3362.008490] ? bust_spinlocks+0xe0/0xe0 [ 3362.009097] ? kmem_cache_alloc_trace+0x151/0x320 [ 3362.009811] kasprintf+0xbb/0xf0 [ 3362.010312] ? kvasprintf_const+0x1a0/0x1a0 [ 3362.010952] ? trace_hardirqs_on+0x5b/0x180 [ 3362.011607] alloc_bprm+0x65c/0x8f0 [ 3362.012146] ? __virt_addr_valid+0x170/0x5d0 [ 3362.012796] do_execveat_common+0x275/0x8d0 [ 3362.013431] ? strncpy_from_user+0x9e/0x470 [ 3362.014078] ? bprm_execve+0x1960/0x1960 [ 3362.014692] __x64_sys_execveat+0xed/0x140 [ 3362.015329] do_syscall_64+0x33/0x40 [ 3362.015885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3362.016647] RIP: 0033:0x7f9b07560b19 [ 3362.017197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3362.019910] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3362.021038] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3362.022100] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3362.023168] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3362.024221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3362.025271] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 10:59:38 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:38 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:38 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:38 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 2) 10:59:38 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:38 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 69) 10:59:38 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 3) [ 3362.163353] FAULT_INJECTION: forcing a failure. [ 3362.163353] name failslab, interval 1, probability 0, space 0, times 0 [ 3362.164961] CPU: 1 PID: 15860 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3362.165905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3362.167070] Call Trace: [ 3362.167438] dump_stack+0x107/0x167 [ 3362.167940] should_fail.cold+0x5/0xa [ 3362.168462] ? vm_area_alloc+0x1c/0x110 [ 3362.169008] should_failslab+0x5/0x20 [ 3362.169533] kmem_cache_alloc+0x5b/0x310 [ 3362.170114] vm_area_alloc+0x1c/0x110 [ 3362.170637] mmap_region+0x982/0x1500 [ 3362.171163] do_mmap+0x868/0x1370 [ 3362.171650] vm_mmap_pgoff+0x198/0x1f0 [ 3362.172181] ? randomize_page+0xb0/0xb0 [ 3362.172733] ksys_mmap_pgoff+0x41c/0x560 [ 3362.173292] ? find_mergeable_anon_vma+0x250/0x250 [ 3362.173967] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3362.174688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3362.175387] do_syscall_64+0x33/0x40 [ 3362.175894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3362.176585] RIP: 0033:0x7f768f557b62 [ 3362.177103] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3362.179599] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3362.180632] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3362.181604] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3362.182583] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3362.183590] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3362.184557] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3362.187567] FAULT_INJECTION: forcing a failure. [ 3362.187567] name failslab, interval 1, probability 0, space 0, times 0 [ 3362.190101] CPU: 0 PID: 15859 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3362.191555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3362.193298] Call Trace: [ 3362.193866] dump_stack+0x107/0x167 [ 3362.194645] should_fail.cold+0x5/0xa [ 3362.195461] ? create_object.isra.0+0x3a/0xa30 [ 3362.196434] should_failslab+0x5/0x20 [ 3362.197235] kmem_cache_alloc+0x5b/0x310 [ 3362.198114] create_object.isra.0+0x3a/0xa30 [ 3362.199036] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 10:59:38 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 8) [ 3362.200114] kmem_cache_alloc+0x159/0x310 [ 3362.201141] getname_flags.part.0+0x50/0x4f0 [ 3362.202095] getname_flags+0x9a/0xe0 [ 3362.203040] __x64_sys_execveat+0xd6/0x140 [ 3362.204013] do_syscall_64+0x33/0x40 [ 3362.204956] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3362.206033] RIP: 0033:0x7f51574bbb19 [ 3362.206832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3362.210682] RSP: 002b:00007f5154a31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3362.212298] RAX: ffffffffffffffda RBX: 00007f51575cef60 RCX: 00007f51574bbb19 [ 3362.213785] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3362.215278] RBP: 00007f5154a311d0 R08: 0000000000001100 R09: 0000000000000000 [ 3362.216768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3362.218275] R13: 00007ffedaa8a4ff R14: 00007f5154a31300 R15: 0000000000022000 10:59:38 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3362.242080] FAULT_INJECTION: forcing a failure. [ 3362.242080] name failslab, interval 1, probability 0, space 0, times 0 [ 3362.243677] CPU: 1 PID: 15867 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3362.244581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3362.245661] Call Trace: [ 3362.246016] dump_stack+0x107/0x167 [ 3362.246507] should_fail.cold+0x5/0xa [ 3362.247012] ? mm_alloc+0x19/0xd0 [ 3362.247474] should_failslab+0x5/0x20 [ 3362.247983] kmem_cache_alloc+0x5b/0x310 [ 3362.248533] mm_alloc+0x19/0xd0 [ 3362.248970] alloc_bprm+0x1cb/0x8f0 [ 3362.249445] ? __virt_addr_valid+0x170/0x5d0 [ 3362.250027] do_execveat_common+0x275/0x8d0 [ 3362.250596] ? strncpy_from_user+0x9e/0x470 [ 3362.251159] ? bprm_execve+0x1960/0x1960 [ 3362.251705] __x64_sys_execveat+0xed/0x140 [ 3362.252266] do_syscall_64+0x33/0x40 [ 3362.252755] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3362.253435] RIP: 0033:0x7f9b07560b19 [ 3362.253922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3362.256328] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3362.257325] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3362.257644] FAULT_INJECTION: forcing a failure. [ 3362.257644] name failslab, interval 1, probability 0, space 0, times 0 [ 3362.258256] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3362.258265] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3362.258273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3362.258281] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 [ 3362.266875] CPU: 0 PID: 15868 Comm: syz-executor.5 Not tainted 5.10.257 #1 10:59:38 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3362.268334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3362.270459] Call Trace: [ 3362.271149] dump_stack+0x107/0x167 [ 3362.272100] should_fail.cold+0x5/0xa [ 3362.273090] ? create_object.isra.0+0x3a/0xa30 [ 3362.274265] should_failslab+0x5/0x20 [ 3362.275238] kmem_cache_alloc+0x5b/0x310 [ 3362.276294] create_object.isra.0+0x3a/0xa30 [ 3362.277412] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3362.278725] kmem_cache_alloc+0x159/0x310 [ 3362.279797] getname_flags.part.0+0x50/0x4f0 [ 3362.280922] getname_flags+0x9a/0xe0 [ 3362.281717] __x64_sys_execveat+0xd6/0x140 [ 3362.282808] do_syscall_64+0x33/0x40 [ 3362.283762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3362.285074] RIP: 0033:0x7fbf4b56bb19 [ 3362.286016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3362.290745] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3362.292667] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3362.294472] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3362.296277] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3362.298175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3362.299936] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 10:59:38 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 70) 10:59:38 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3362.353905] FAULT_INJECTION: forcing a failure. [ 3362.353905] name failslab, interval 1, probability 0, space 0, times 0 [ 3362.356084] CPU: 1 PID: 15876 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3362.356905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3362.357890] Call Trace: [ 3362.358218] dump_stack+0x107/0x167 [ 3362.358652] should_fail.cold+0x5/0xa [ 3362.359107] ? create_object.isra.0+0x3a/0xa30 [ 3362.359653] should_failslab+0x5/0x20 [ 3362.360105] kmem_cache_alloc+0x5b/0x310 [ 3362.360592] create_object.isra.0+0x3a/0xa30 [ 3362.361110] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3362.361713] kmem_cache_alloc+0x159/0x310 [ 3362.362218] vm_area_alloc+0x1c/0x110 [ 3362.362669] mmap_region+0x982/0x1500 [ 3362.363129] do_mmap+0x868/0x1370 [ 3362.363554] vm_mmap_pgoff+0x198/0x1f0 [ 3362.364025] ? randomize_page+0xb0/0xb0 [ 3362.364504] ksys_mmap_pgoff+0x41c/0x560 [ 3362.364985] ? find_mergeable_anon_vma+0x250/0x250 [ 3362.365571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3362.366193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3362.366800] do_syscall_64+0x33/0x40 [ 3362.367237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3362.367837] RIP: 0033:0x7f768f557b62 [ 3362.368275] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3362.370425] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3362.371316] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3362.372149] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 00000000200a0000 [ 3362.372986] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 3362.373819] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3362.374661] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 10:59:53 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 3) 10:59:53 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 4) 10:59:53 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:53 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 9) 10:59:53 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:53 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:53 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:59:53 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 71) [ 3377.657364] FAULT_INJECTION: forcing a failure. [ 3377.657364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3377.658920] CPU: 0 PID: 15890 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3377.659790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3377.660820] Call Trace: [ 3377.661161] dump_stack+0x107/0x167 [ 3377.661620] should_fail.cold+0x5/0xa [ 3377.661985] FAULT_INJECTION: forcing a failure. [ 3377.661985] name failslab, interval 1, probability 0, space 0, times 0 [ 3377.662106] strncpy_from_user+0x34/0x470 [ 3377.665539] getname_flags.part.0+0x95/0x4f0 [ 3377.666091] getname_flags+0x9a/0xe0 [ 3377.666579] __x64_sys_execveat+0xd6/0x140 [ 3377.667113] do_syscall_64+0x33/0x40 [ 3377.667580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3377.668220] RIP: 0033:0x7f51574bbb19 [ 3377.668701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3377.671004] RSP: 002b:00007f5154a31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3377.671952] RAX: ffffffffffffffda RBX: 00007f51575cef60 RCX: 00007f51574bbb19 [ 3377.672859] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3377.673747] RBP: 00007f5154a311d0 R08: 0000000000001100 R09: 0000000000000000 [ 3377.674713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3377.675595] R13: 00007ffedaa8a4ff R14: 00007f5154a31300 R15: 0000000000022000 10:59:53 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3377.676520] CPU: 1 PID: 15887 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3377.678461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3377.680610] Call Trace: [ 3377.681281] dump_stack+0x107/0x167 [ 3377.682232] should_fail.cold+0x5/0xa [ 3377.683233] ? create_object.isra.0+0x3a/0xa30 [ 3377.684240] should_failslab+0x5/0x20 [ 3377.685056] kmem_cache_alloc+0x5b/0x310 [ 3377.685934] create_object.isra.0+0x3a/0xa30 [ 3377.686879] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3377.687973] kmem_cache_alloc+0x159/0x310 [ 3377.688866] mm_alloc+0x19/0xd0 [ 3377.689584] alloc_bprm+0x1cb/0x8f0 [ 3377.690381] ? __virt_addr_valid+0x170/0x5d0 [ 3377.691347] do_execveat_common+0x275/0x8d0 [ 3377.692265] ? strncpy_from_user+0x9e/0x470 [ 3377.693180] ? bprm_execve+0x1960/0x1960 [ 3377.694072] __x64_sys_execveat+0xed/0x140 [ 3377.694996] do_syscall_64+0x33/0x40 [ 3377.695775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3377.696869] RIP: 0033:0x7f9b07560b19 [ 3377.697661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3377.701570] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3377.703191] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3377.704701] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3377.706219] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3377.707743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3377.709266] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 [ 3377.719710] FAULT_INJECTION: forcing a failure. [ 3377.719710] name failslab, interval 1, probability 0, space 0, times 0 [ 3377.722070] CPU: 1 PID: 15896 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3377.723543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3377.725259] Call Trace: [ 3377.725814] dump_stack+0x107/0x167 [ 3377.726589] should_fail.cold+0x5/0xa [ 3377.727372] ? vm_area_dup+0x78/0x290 [ 3377.728151] should_failslab+0x5/0x20 [ 3377.728949] kmem_cache_alloc+0x5b/0x310 [ 3377.729796] ? __lockdep_reset_lock+0x180/0x180 [ 3377.730771] vm_area_dup+0x78/0x290 [ 3377.731544] ? lock_acquire+0x197/0x470 [ 3377.732372] ? mark_lock+0xf5/0x2df0 [ 3377.733160] ? lock_chain_count+0x20/0x20 [ 3377.734017] ? __lock_acquire+0x1657/0x5b00 [ 3377.734928] ? mark_lock+0xf5/0x2df0 [ 3377.735696] ? find_held_lock+0x2c/0x110 [ 3377.736529] ? vm_area_alloc+0x110/0x110 [ 3377.737360] ? __lock_acquire+0x1657/0x5b00 [ 3377.738277] ? lock_acquire+0x197/0x470 [ 3377.739113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3377.740197] ? SOFTIRQ_verbose+0x10/0x10 [ 3377.741046] ? vmacache_find+0x55/0x2a0 [ 3377.741873] __split_vma+0xa8/0x4e0 [ 3377.742634] __do_munmap+0x365/0x1260 [ 3377.743416] ? arch_get_unmapped_area+0x450/0x450 [ 3377.744423] ? lock_release+0x680/0x680 [ 3377.745257] mmap_region+0x7cc/0x1500 [ 3377.746067] do_mmap+0x868/0x1370 [ 3377.746808] vm_mmap_pgoff+0x198/0x1f0 [ 3377.747618] ? randomize_page+0xb0/0xb0 [ 3377.748447] ksys_mmap_pgoff+0x41c/0x560 [ 3377.749283] ? find_mergeable_anon_vma+0x250/0x250 [ 3377.750288] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3377.751411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3377.752501] do_syscall_64+0x33/0x40 [ 3377.753266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3377.754346] RIP: 0033:0x7f768f557b62 [ 3377.755108] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3377.758884] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3377.760469] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3377.761937] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 3377.763404] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 3377.764922] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3377.766395] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3377.791320] FAULT_INJECTION: forcing a failure. [ 3377.791320] name failslab, interval 1, probability 0, space 0, times 0 [ 3377.792796] CPU: 0 PID: 15899 Comm: syz-executor.5 Not tainted 5.10.257 #1 [ 3377.793630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3377.794632] Call Trace: [ 3377.794953] dump_stack+0x107/0x167 [ 3377.795393] should_fail.cold+0x5/0xa [ 3377.795852] ? alloc_bprm+0x51/0x8f0 [ 3377.796304] should_failslab+0x5/0x20 [ 3377.796766] kmem_cache_alloc_trace+0x55/0x320 [ 3377.797324] ? lock_downgrade+0x6d0/0x6d0 [ 3377.797834] alloc_bprm+0x51/0x8f0 [ 3377.798264] ? __virt_addr_valid+0x170/0x5d0 [ 3377.798806] do_execveat_common+0x275/0x8d0 [ 3377.799328] ? strncpy_from_user+0x9e/0x470 [ 3377.799848] ? bprm_execve+0x1960/0x1960 [ 3377.800344] __x64_sys_execveat+0xed/0x140 [ 3377.800858] do_syscall_64+0x33/0x40 [ 3377.801305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3377.801922] RIP: 0033:0x7fbf4b56bb19 [ 3377.802382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3377.804582] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3377.805488] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3377.806340] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3377.807198] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3377.808050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3377.808895] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 [ 3396.310458] FAULT_INJECTION: forcing a failure. [ 3396.310458] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.312382] CPU: 1 PID: 15907 Comm: syz-executor.5 Not tainted 5.10.257 #1 11:00:12 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 5) 11:00:12 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:12 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffb]}, 0x8, 0x800) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:12 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 10) 11:00:12 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 4) 11:00:12 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:12 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 72) 11:00:12 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3396.313566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3396.315143] Call Trace: [ 3396.315583] dump_stack+0x107/0x167 [ 3396.316180] should_fail.cold+0x5/0xa [ 3396.316808] ? alloc_bprm+0x51/0x8f0 [ 3396.317422] should_failslab+0x5/0x20 [ 3396.318056] kmem_cache_alloc_trace+0x55/0x320 [ 3396.318808] ? lock_downgrade+0x6d0/0x6d0 [ 3396.319492] alloc_bprm+0x51/0x8f0 [ 3396.320086] ? __virt_addr_valid+0x170/0x5d0 [ 3396.320831] do_execveat_common+0x275/0x8d0 [ 3396.321574] ? strncpy_from_user+0x9e/0x470 [ 3396.322307] ? bprm_execve+0x1960/0x1960 [ 3396.323035] __x64_sys_execveat+0xed/0x140 [ 3396.323755] do_syscall_64+0x33/0x40 [ 3396.324394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3396.325255] RIP: 0033:0x7fbf4b56bb19 [ 3396.325870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3396.328911] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3396.330153] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3396.331334] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3396.332490] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3396.333657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3396.334836] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 [ 3396.351906] FAULT_INJECTION: forcing a failure. [ 3396.351906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3396.354705] CPU: 1 PID: 15908 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3396.355822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3396.357157] Call Trace: [ 3396.357586] dump_stack+0x107/0x167 [ 3396.358175] should_fail.cold+0x5/0xa [ 3396.358797] __alloc_pages_nodemask+0x182/0x600 [ 3396.359533] FAULT_INJECTION: forcing a failure. [ 3396.359533] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.361329] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3396.362306] alloc_pages_current+0x187/0x280 [ 3396.363036] __get_free_pages+0xc/0xa0 [ 3396.363667] pgd_alloc+0x84/0x4e0 [ 3396.364230] ? pgd_page_get_mm+0x40/0x40 [ 3396.364887] ? lockdep_init_map_type+0x2c7/0x780 [ 3396.365662] ? lockdep_init_map_type+0x2c7/0x780 [ 3396.366442] mm_init+0x670/0xab0 [ 3396.367007] mm_alloc+0xa2/0xd0 [ 3396.367567] alloc_bprm+0x1cb/0x8f0 [ 3396.368170] ? __virt_addr_valid+0x170/0x5d0 [ 3396.368926] do_execveat_common+0x275/0x8d0 [ 3396.369637] ? strncpy_from_user+0x9e/0x470 [ 3396.370366] ? bprm_execve+0x1960/0x1960 [ 3396.371078] __x64_sys_execveat+0xed/0x140 [ 3396.371803] do_syscall_64+0x33/0x40 [ 3396.372417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3396.373242] RIP: 0033:0x7f9b07560b19 [ 3396.373841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3396.376820] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3396.378057] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3396.379222] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3396.380376] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3396.381517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3396.382669] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 [ 3396.383849] CPU: 0 PID: 15918 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3396.385353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3396.387120] Call Trace: [ 3396.387689] dump_stack+0x107/0x167 [ 3396.388456] should_fail.cold+0x5/0xa [ 3396.389252] ? create_object.isra.0+0x3a/0xa30 [ 3396.390216] should_failslab+0x5/0x20 [ 3396.391022] kmem_cache_alloc+0x5b/0x310 [ 3396.391885] create_object.isra.0+0x3a/0xa30 [ 3396.392802] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3396.393878] kmem_cache_alloc+0x159/0x310 [ 3396.394774] ? __lockdep_reset_lock+0x180/0x180 [ 3396.395762] vm_area_dup+0x78/0x290 [ 3396.396538] ? lock_acquire+0x197/0x470 [ 3396.397380] ? mark_lock+0xf5/0x2df0 [ 3396.398171] ? lock_chain_count+0x20/0x20 [ 3396.399069] ? __lock_acquire+0x1657/0x5b00 [ 3396.399994] ? mark_lock+0xf5/0x2df0 [ 3396.400775] ? find_held_lock+0x2c/0x110 [ 3396.401624] ? vm_area_alloc+0x110/0x110 [ 3396.402476] ? __lock_acquire+0x1657/0x5b00 [ 3396.403400] ? lock_acquire+0x197/0x470 [ 3396.404235] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3396.405327] ? SOFTIRQ_verbose+0x10/0x10 [ 3396.406157] ? vmacache_find+0x55/0x2a0 [ 3396.407008] __split_vma+0xa8/0x4e0 [ 3396.407784] __do_munmap+0x365/0x1260 [ 3396.408582] ? arch_get_unmapped_area+0x450/0x450 [ 3396.409599] ? lock_release+0x680/0x680 [ 3396.410437] mmap_region+0x7cc/0x1500 [ 3396.411264] do_mmap+0x868/0x1370 [ 3396.412012] vm_mmap_pgoff+0x198/0x1f0 [ 3396.412842] ? randomize_page+0xb0/0xb0 [ 3396.413707] ksys_mmap_pgoff+0x41c/0x560 [ 3396.414571] ? find_mergeable_anon_vma+0x250/0x250 [ 3396.415604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3396.416700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3396.417757] do_syscall_64+0x33/0x40 [ 3396.418531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3396.419607] RIP: 0033:0x7f768f557b62 [ 3396.420392] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3396.424189] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3396.425775] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3396.427265] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 3396.428746] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 3396.430224] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3396.431729] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3396.436497] FAULT_INJECTION: forcing a failure. [ 3396.436497] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.438248] CPU: 1 PID: 15919 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3396.439321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3396.440604] Call Trace: [ 3396.441007] dump_stack+0x107/0x167 [ 3396.441567] should_fail.cold+0x5/0xa [ 3396.442171] ? alloc_bprm+0x51/0x8f0 [ 3396.442749] should_failslab+0x5/0x20 [ 3396.443359] kmem_cache_alloc_trace+0x55/0x320 [ 3396.444072] ? lock_downgrade+0x6d0/0x6d0 [ 3396.444728] alloc_bprm+0x51/0x8f0 [ 3396.445280] ? __virt_addr_valid+0x170/0x5d0 [ 3396.445984] do_execveat_common+0x275/0x8d0 [ 3396.446667] ? strncpy_from_user+0x9e/0x470 [ 3396.447327] ? bprm_execve+0x1960/0x1960 [ 3396.447978] __x64_sys_execveat+0xed/0x140 [ 3396.448655] do_syscall_64+0x33/0x40 [ 3396.449228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3396.450042] RIP: 0033:0x7f51574bbb19 [ 3396.450618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3396.453466] RSP: 002b:00007f5154a10188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3396.454674] RAX: ffffffffffffffda RBX: 00007f51575cf020 RCX: 00007f51574bbb19 [ 3396.455809] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3396.456941] RBP: 00007f5154a101d0 R08: 0000000000001100 R09: 0000000000000000 [ 3396.458071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3396.459190] R13: 00007ffedaa8a4ff R14: 00007f5154a10300 R15: 0000000000022000 11:00:12 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:12 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 6) [ 3396.514113] FAULT_INJECTION: forcing a failure. [ 3396.514113] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.515911] CPU: 1 PID: 15925 Comm: syz-executor.5 Not tainted 5.10.257 #1 [ 3396.516960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3396.518195] Call Trace: [ 3396.518596] dump_stack+0x107/0x167 [ 3396.519163] should_fail.cold+0x5/0xa [ 3396.519733] should_failslab+0x5/0x20 [ 3396.520300] __kmalloc_track_caller+0x79/0x370 [ 3396.520979] ? kasprintf+0xbb/0xf0 [ 3396.521509] ? __lockdep_reset_lock+0x180/0x180 [ 3396.522200] kvasprintf+0xb5/0x150 [ 3396.522747] ? bust_spinlocks+0xe0/0xe0 [ 3396.523357] ? kmem_cache_alloc_trace+0x151/0x320 [ 3396.524095] kasprintf+0xbb/0xf0 [ 3396.524597] ? kvasprintf_const+0x1a0/0x1a0 [ 3396.525258] ? trace_hardirqs_on+0x5b/0x180 [ 3396.525906] alloc_bprm+0x65c/0x8f0 [ 3396.526443] ? __virt_addr_valid+0x170/0x5d0 [ 3396.527112] do_execveat_common+0x275/0x8d0 [ 3396.527760] ? strncpy_from_user+0x9e/0x470 [ 3396.528409] ? bprm_execve+0x1960/0x1960 [ 3396.529028] __x64_sys_execveat+0xed/0x140 [ 3396.529671] do_syscall_64+0x33/0x40 [ 3396.530235] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3396.530998] RIP: 0033:0x7fbf4b56bb19 [ 3396.531548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3396.534248] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3396.535399] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3396.536456] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3396.537508] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3396.538558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3396.539605] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 11:00:12 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:12 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:12 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:12 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 11) 11:00:12 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3396.596132] FAULT_INJECTION: forcing a failure. [ 3396.596132] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.597748] CPU: 1 PID: 15932 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3396.598726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3396.599900] Call Trace: [ 3396.600277] dump_stack+0x107/0x167 [ 3396.600802] should_fail.cold+0x5/0xa [ 3396.601339] ? vm_area_alloc+0x1c/0x110 [ 3396.601895] should_failslab+0x5/0x20 [ 3396.602432] kmem_cache_alloc+0x5b/0x310 [ 3396.603013] vm_area_alloc+0x1c/0x110 [ 3396.603550] alloc_bprm+0x337/0x8f0 [ 3396.604058] ? __virt_addr_valid+0x170/0x5d0 [ 3396.604685] do_execveat_common+0x275/0x8d0 [ 3396.605290] ? strncpy_from_user+0x9e/0x470 [ 3396.605895] ? bprm_execve+0x1960/0x1960 [ 3396.606477] __x64_sys_execveat+0xed/0x140 [ 3396.607084] do_syscall_64+0x33/0x40 [ 3396.607610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3396.608334] RIP: 0033:0x7f9b07560b19 [ 3396.608855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3396.611421] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3396.612475] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3396.613463] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3396.614457] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3396.615446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3396.616429] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 11:00:12 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 5) 11:00:12 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:12 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:12 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 7) [ 3396.709934] FAULT_INJECTION: forcing a failure. [ 3396.709934] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.712450] CPU: 0 PID: 15941 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3396.713908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3396.715675] Call Trace: [ 3396.716243] dump_stack+0x107/0x167 [ 3396.717027] should_fail.cold+0x5/0xa [ 3396.717840] ? create_object.isra.0+0x3a/0xa30 [ 3396.718815] should_failslab+0x5/0x20 [ 3396.719622] kmem_cache_alloc+0x5b/0x310 [ 3396.720492] create_object.isra.0+0x3a/0xa30 [ 3396.721422] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3396.722505] kmem_cache_alloc_trace+0x151/0x320 [ 3396.723503] ? lock_downgrade+0x6d0/0x6d0 [ 3396.724390] alloc_bprm+0x51/0x8f0 [ 3396.725142] ? __virt_addr_valid+0x170/0x5d0 [ 3396.726087] do_execveat_common+0x275/0x8d0 [ 3396.727012] ? strncpy_from_user+0x9e/0x470 [ 3396.727922] ? bprm_execve+0x1960/0x1960 [ 3396.728803] __x64_sys_execveat+0xed/0x140 [ 3396.729706] do_syscall_64+0x33/0x40 [ 3396.730499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3396.731599] RIP: 0033:0x7f51574bbb19 [ 3396.732386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3396.736286] RSP: 002b:00007f5154a31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3396.736871] FAULT_INJECTION: forcing a failure. [ 3396.736871] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.737891] RAX: ffffffffffffffda RBX: 00007f51575cef60 RCX: 00007f51574bbb19 [ 3396.737905] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3396.737917] RBP: 00007f5154a311d0 R08: 0000000000001100 R09: 0000000000000000 [ 3396.737933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3396.745365] R13: 00007ffedaa8a4ff R14: 00007f5154a31300 R15: 0000000000022000 [ 3396.746909] CPU: 1 PID: 15945 Comm: syz-executor.5 Not tainted 5.10.257 #1 [ 3396.747825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3396.748899] Call Trace: [ 3396.749243] dump_stack+0x107/0x167 [ 3396.749722] should_fail.cold+0x5/0xa [ 3396.750218] ? create_object.isra.0+0x3a/0xa30 [ 3396.750814] should_failslab+0x5/0x20 [ 3396.751309] kmem_cache_alloc+0x5b/0x310 [ 3396.751837] ? vsnprintf+0x4ba/0x1600 [ 3396.752331] create_object.isra.0+0x3a/0xa30 [ 3396.752893] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3396.753548] __kmalloc_track_caller+0x177/0x370 [ 3396.754139] ? kasprintf+0xbb/0xf0 [ 3396.754604] kvasprintf+0xb5/0x150 [ 3396.755069] ? bust_spinlocks+0xe0/0xe0 [ 3396.755596] ? kmem_cache_alloc_trace+0x151/0x320 [ 3396.756214] kasprintf+0xbb/0xf0 [ 3396.756654] ? kvasprintf_const+0x1a0/0x1a0 [ 3396.757208] ? trace_hardirqs_on+0x5b/0x180 [ 3396.757777] alloc_bprm+0x65c/0x8f0 [ 3396.758259] ? __virt_addr_valid+0x170/0x5d0 [ 3396.758841] do_execveat_common+0x275/0x8d0 [ 3396.759394] ? strncpy_from_user+0x9e/0x470 [ 3396.759961] ? bprm_execve+0x1960/0x1960 [ 3396.760495] __x64_sys_execveat+0xed/0x140 [ 3396.761045] do_syscall_64+0x33/0x40 [ 3396.761527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3396.762189] RIP: 0033:0x7fbf4b56bb19 [ 3396.762678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3396.765017] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3396.766009] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3396.766961] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3396.767905] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3396.768839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3396.769785] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 11:00:28 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 6) 11:00:28 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 8) 11:00:28 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:28 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:28 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3412.235852] FAULT_INJECTION: forcing a failure. [ 3412.235852] name failslab, interval 1, probability 0, space 0, times 0 11:00:28 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:28 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 12) 11:00:28 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 73) [ 3412.237538] CPU: 0 PID: 15958 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3412.239749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.242287] Call Trace: [ 3412.243111] dump_stack+0x107/0x167 [ 3412.244093] FAULT_INJECTION: forcing a failure. [ 3412.244093] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.244239] should_fail.cold+0x5/0xa [ 3412.248403] ? vm_area_alloc+0x1c/0x110 [ 3412.249628] should_failslab+0x5/0x20 [ 3412.250789] kmem_cache_alloc+0x5b/0x310 [ 3412.252065] vm_area_alloc+0x1c/0x110 [ 3412.253219] mmap_region+0x982/0x1500 [ 3412.254440] do_mmap+0x868/0x1370 [ 3412.255553] vm_mmap_pgoff+0x198/0x1f0 [ 3412.256769] ? randomize_page+0xb0/0xb0 [ 3412.258032] ksys_mmap_pgoff+0x41c/0x560 [ 3412.259315] ? find_mergeable_anon_vma+0x250/0x250 [ 3412.260836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3412.262455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3412.264063] do_syscall_64+0x33/0x40 [ 3412.265231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.266813] RIP: 0033:0x7f768f557b62 [ 3412.267988] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3412.273134] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3412.274994] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3412.276717] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 3412.278445] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 3412.280217] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3412.281945] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3412.283740] CPU: 1 PID: 15951 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3412.285452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.287509] Call Trace: [ 3412.288157] dump_stack+0x107/0x167 [ 3412.289044] should_fail.cold+0x5/0xa [ 3412.289971] should_failslab+0x5/0x20 [ 3412.290886] __kmalloc_track_caller+0x79/0x370 [ 3412.291987] ? kasprintf+0xbb/0xf0 [ 3412.292846] ? __lockdep_reset_lock+0x180/0x180 [ 3412.293974] kvasprintf+0xb5/0x150 [ 3412.294824] ? bust_spinlocks+0xe0/0xe0 [ 3412.295791] ? kmem_cache_alloc_trace+0x151/0x320 [ 3412.296952] kasprintf+0xbb/0xf0 [ 3412.297766] ? kvasprintf_const+0x1a0/0x1a0 [ 3412.298809] ? trace_hardirqs_on+0x5b/0x180 [ 3412.299873] alloc_bprm+0x65c/0x8f0 [ 3412.300743] ? __virt_addr_valid+0x170/0x5d0 [ 3412.301815] do_execveat_common+0x275/0x8d0 [ 3412.302848] ? strncpy_from_user+0x9e/0x470 [ 3412.303896] ? bprm_execve+0x1960/0x1960 [ 3412.304899] __x64_sys_execveat+0xed/0x140 [ 3412.305917] do_syscall_64+0x33/0x40 [ 3412.306815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.308053] RIP: 0033:0x7f51574bbb19 [ 3412.308942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.313320] RSP: 002b:00007f5154a31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3412.315131] RAX: ffffffffffffffda RBX: 00007f51575cef60 RCX: 00007f51574bbb19 [ 3412.316843] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3412.318550] RBP: 00007f5154a311d0 R08: 0000000000001100 R09: 0000000000000000 [ 3412.320261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3412.321965] R13: 00007ffedaa8a4ff R14: 00007f5154a31300 R15: 0000000000022000 11:00:28 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3412.350742] FAULT_INJECTION: forcing a failure. [ 3412.350742] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.353379] CPU: 1 PID: 15962 Comm: syz-executor.5 Not tainted 5.10.257 #1 [ 3412.354952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.356830] Call Trace: [ 3412.357432] dump_stack+0x107/0x167 [ 3412.358258] should_fail.cold+0x5/0xa [ 3412.359149] ? mm_alloc+0x19/0xd0 [ 3412.359946] should_failslab+0x5/0x20 [ 3412.360815] kmem_cache_alloc+0x5b/0x310 [ 3412.361737] mm_alloc+0x19/0xd0 [ 3412.362485] alloc_bprm+0x1cb/0x8f0 [ 3412.363313] ? __virt_addr_valid+0x170/0x5d0 [ 3412.364315] do_execveat_common+0x275/0x8d0 [ 3412.365282] ? strncpy_from_user+0x9e/0x470 [ 3412.366249] ? bprm_execve+0x1960/0x1960 [ 3412.367179] __x64_sys_execveat+0xed/0x140 [ 3412.368145] do_syscall_64+0x33/0x40 [ 3412.368992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.370144] RIP: 0033:0x7fbf4b56bb19 [ 3412.370984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.375133] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3412.376811] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3412.378429] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3412.380005] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3412.381602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3412.383186] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 [ 3412.398421] FAULT_INJECTION: forcing a failure. [ 3412.398421] name failslab, interval 1, probability 0, space 0, times 0 11:00:28 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3412.401044] CPU: 0 PID: 15966 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3412.402730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.404589] Call Trace: [ 3412.405180] dump_stack+0x107/0x167 [ 3412.406009] should_fail.cold+0x5/0xa [ 3412.406864] ? create_object.isra.0+0x3a/0xa30 [ 3412.407913] should_failslab+0x5/0x20 [ 3412.408816] kmem_cache_alloc+0x5b/0x310 [ 3412.409728] create_object.isra.0+0x3a/0xa30 [ 3412.410699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3412.411868] kmem_cache_alloc+0x159/0x310 [ 3412.412803] vm_area_alloc+0x1c/0x110 [ 3412.413650] alloc_bprm+0x337/0x8f0 [ 3412.414463] ? __virt_addr_valid+0x170/0x5d0 [ 3412.415463] do_execveat_common+0x275/0x8d0 [ 3412.416405] ? strncpy_from_user+0x9e/0x470 [ 3412.417318] ? bprm_execve+0x1960/0x1960 [ 3412.418198] __x64_sys_execveat+0xed/0x140 [ 3412.419109] do_syscall_64+0x33/0x40 [ 3412.419900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.421002] RIP: 0033:0x7f9b07560b19 [ 3412.421787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.425739] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3412.427348] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3412.428858] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3412.430380] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3412.431923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3412.433420] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 11:00:28 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:28 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3427.982930] FAULT_INJECTION: forcing a failure. [ 3427.982930] name failslab, interval 1, probability 0, space 0, times 0 11:00:44 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 13) 11:00:44 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:44 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 7) 11:00:44 executing program 0: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:44 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 74) 11:00:44 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:44 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:44 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 9) [ 3427.985936] CPU: 1 PID: 15982 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3427.988040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3427.990146] Call Trace: [ 3427.990822] dump_stack+0x107/0x167 [ 3427.991795] should_fail.cold+0x5/0xa [ 3427.992776] ? create_object.isra.0+0x3a/0xa30 [ 3427.993944] should_failslab+0x5/0x20 [ 3427.994925] kmem_cache_alloc+0x5b/0x310 [ 3427.996003] create_object.isra.0+0x3a/0xa30 [ 3427.997127] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3427.998440] kmem_cache_alloc+0x159/0x310 [ 3427.999546] vm_area_alloc+0x1c/0x110 [ 3428.000515] mmap_region+0x982/0x1500 [ 3428.001511] do_mmap+0x868/0x1370 [ 3428.002389] vm_mmap_pgoff+0x198/0x1f0 [ 3428.003400] ? randomize_page+0xb0/0xb0 [ 3428.004419] ksys_mmap_pgoff+0x41c/0x560 [ 3428.005445] ? find_mergeable_anon_vma+0x250/0x250 [ 3428.006667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3428.008007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3428.009303] do_syscall_64+0x33/0x40 [ 3428.010202] FAULT_INJECTION: forcing a failure. [ 3428.010202] name failslab, interval 1, probability 0, space 0, times 0 [ 3428.012943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3428.012960] RIP: 0033:0x7f768f557b62 [ 3428.014457] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3428.019035] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3428.020934] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3428.022682] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 3428.024439] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 3428.026047] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3428.027659] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3428.029283] CPU: 0 PID: 15990 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3428.030050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3428.030973] Call Trace: [ 3428.031278] dump_stack+0x107/0x167 [ 3428.031689] should_fail.cold+0x5/0xa [ 3428.032112] ? create_object.isra.0+0x3a/0xa30 [ 3428.032620] should_failslab+0x5/0x20 [ 3428.033044] kmem_cache_alloc+0x5b/0x310 [ 3428.033502] ? vsnprintf+0x4ba/0x1600 [ 3428.033933] create_object.isra.0+0x3a/0xa30 [ 3428.034421] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3428.034984] __kmalloc_track_caller+0x177/0x370 [ 3428.035511] ? kasprintf+0xbb/0xf0 [ 3428.035914] kvasprintf+0xb5/0x150 [ 3428.036314] ? bust_spinlocks+0xe0/0xe0 [ 3428.036763] ? kmem_cache_alloc_trace+0x151/0x320 [ 3428.037313] kasprintf+0xbb/0xf0 [ 3428.037700] ? kvasprintf_const+0x1a0/0x1a0 [ 3428.038186] ? trace_hardirqs_on+0x5b/0x180 [ 3428.038668] alloc_bprm+0x65c/0x8f0 [ 3428.039072] ? __virt_addr_valid+0x170/0x5d0 [ 3428.039579] do_execveat_common+0x275/0x8d0 [ 3428.040059] ? strncpy_from_user+0x9e/0x470 [ 3428.040545] ? bprm_execve+0x1960/0x1960 [ 3428.041012] __x64_sys_execveat+0xed/0x140 [ 3428.041484] do_syscall_64+0x33/0x40 [ 3428.041901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3428.042466] RIP: 0033:0x7f51574bbb19 [ 3428.042873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3428.044914] RSP: 002b:00007f5154a31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3428.045764] RAX: ffffffffffffffda RBX: 00007f51575cef60 RCX: 00007f51574bbb19 [ 3428.046542] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3428.047330] RBP: 00007f5154a311d0 R08: 0000000000001100 R09: 0000000000000000 [ 3428.048125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3428.048917] R13: 00007ffedaa8a4ff R14: 00007f5154a31300 R15: 0000000000022000 11:00:44 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r0, 0x8000, 0x0, 0x0, 0x1}, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:44 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3428.066125] FAULT_INJECTION: forcing a failure. [ 3428.066125] name failslab, interval 1, probability 0, space 0, times 0 [ 3428.068742] CPU: 1 PID: 15992 Comm: syz-executor.5 Not tainted 5.10.257 #1 [ 3428.070311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3428.070647] FAULT_INJECTION: forcing a failure. [ 3428.070647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3428.072192] Call Trace: [ 3428.072219] dump_stack+0x107/0x167 [ 3428.072245] should_fail.cold+0x5/0xa [ 3428.075741] ? create_object.isra.0+0x3a/0xa30 [ 3428.076769] should_failslab+0x5/0x20 [ 3428.077634] kmem_cache_alloc+0x5b/0x310 [ 3428.078571] create_object.isra.0+0x3a/0xa30 [ 3428.079592] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3428.080726] kmem_cache_alloc+0x159/0x310 [ 3428.081655] mm_alloc+0x19/0xd0 [ 3428.082413] alloc_bprm+0x1cb/0x8f0 [ 3428.083250] ? __virt_addr_valid+0x170/0x5d0 [ 3428.084261] do_execveat_common+0x275/0x8d0 [ 3428.085232] ? strncpy_from_user+0x9e/0x470 [ 3428.086191] ? bprm_execve+0x1960/0x1960 [ 3428.087141] __x64_sys_execveat+0xed/0x140 [ 3428.088125] do_syscall_64+0x33/0x40 [ 3428.088958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3428.090207] RIP: 0033:0x7fbf4b56bb19 [ 3428.091150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3428.095346] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3428.097147] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3428.098844] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3428.100563] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3428.102299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3428.104047] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 [ 3428.105752] CPU: 0 PID: 15994 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3428.106534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3428.107468] Call Trace: [ 3428.107743] dump_stack+0x107/0x167 [ 3428.108154] should_fail.cold+0x5/0xa [ 3428.108589] __alloc_pages_nodemask+0x182/0x600 [ 3428.109117] ? __lockdep_reset_lock+0x180/0x180 [ 3428.109637] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3428.110303] ? add_mm_counter_fast+0x220/0x220 [ 3428.110803] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3428.111386] alloc_pages_current+0x187/0x280 [ 3428.111872] get_zeroed_page+0x14/0xb0 [ 3428.112306] __pud_alloc+0x33/0x270 [ 3428.112710] handle_mm_fault+0x1a73/0x3500 [ 3428.113184] ? perf_trace_lock+0xac/0x490 [ 3428.113658] ? SOFTIRQ_verbose+0x10/0x10 [ 3428.114106] ? __pmd_alloc+0x630/0x630 [ 3428.114565] __get_user_pages+0x6ec/0x1620 [ 3428.115037] ? follow_page_mask+0x1900/0x1900 [ 3428.115540] ? __lockdep_reset_lock+0x180/0x180 [ 3428.116052] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3428.116582] __get_user_pages_remote+0x1d5/0x870 [ 3428.117092] ? lock_downgrade+0x6d0/0x6d0 [ 3428.117569] get_user_pages_remote+0x63/0x90 [ 3428.118054] get_arg_page+0xba/0x200 [ 3428.118459] ? acct_arg_size+0xe0/0xe0 [ 3428.118885] ? downgrade_write+0x3a0/0x3a0 [ 3428.119363] ? count.constprop.0+0x1b3/0x290 [ 3428.119844] copy_string_kernel+0x1b4/0x450 [ 3428.120332] do_execveat_common+0x525/0x8d0 [ 3428.120820] ? bprm_execve+0x1960/0x1960 [ 3428.121272] __x64_sys_execveat+0xed/0x140 [ 3428.121736] do_syscall_64+0x33/0x40 [ 3428.122145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3428.122703] RIP: 0033:0x7f9b07560b19 [ 3428.123115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3428.125116] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3428.125946] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3428.126728] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3428.127510] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3428.128305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3428.129093] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 11:00:44 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 8) 11:00:44 executing program 0: syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3428.161182] FAULT_INJECTION: forcing a failure. [ 3428.161182] name failslab, interval 1, probability 0, space 0, times 0 [ 3428.163902] CPU: 1 PID: 16001 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3428.165567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3428.167663] Call Trace: [ 3428.168354] dump_stack+0x107/0x167 [ 3428.169269] should_fail.cold+0x5/0xa [ 3428.170182] ? mm_alloc+0x19/0xd0 [ 3428.171048] should_failslab+0x5/0x20 [ 3428.172042] kmem_cache_alloc+0x5b/0x310 [ 3428.173075] mm_alloc+0x19/0xd0 [ 3428.173840] alloc_bprm+0x1cb/0x8f0 [ 3428.174766] ? __virt_addr_valid+0x170/0x5d0 [ 3428.175784] do_execveat_common+0x275/0x8d0 11:00:44 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3428.176736] ? strncpy_from_user+0x9e/0x470 [ 3428.177938] ? bprm_execve+0x1960/0x1960 [ 3428.178967] __x64_sys_execveat+0xed/0x140 [ 3428.179990] do_syscall_64+0x33/0x40 [ 3428.180872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3428.182127] RIP: 0033:0x7f51574bbb19 [ 3428.183011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3428.187338] RSP: 002b:00007f5154a31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3428.189192] RAX: ffffffffffffffda RBX: 00007f51575cef60 RCX: 00007f51574bbb19 [ 3428.191015] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3428.192717] RBP: 00007f5154a311d0 R08: 0000000000001100 R09: 0000000000000000 [ 3428.194642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3428.196535] R13: 00007ffedaa8a4ff R14: 00007f5154a31300 R15: 0000000000022000 11:00:44 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:44 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:44 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 75) [ 3428.262741] FAULT_INJECTION: forcing a failure. [ 3428.262741] name failslab, interval 1, probability 0, space 0, times 0 [ 3428.264103] CPU: 0 PID: 16012 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3428.264880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3428.265800] Call Trace: [ 3428.266105] dump_stack+0x107/0x167 [ 3428.266522] should_fail.cold+0x5/0xa [ 3428.266947] ? create_object.isra.0+0x3a/0xa30 [ 3428.267466] should_failslab+0x5/0x20 [ 3428.267886] kmem_cache_alloc+0x5b/0x310 [ 3428.268343] create_object.isra.0+0x3a/0xa30 [ 3428.268827] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3428.269388] kmem_cache_alloc+0x159/0x310 [ 3428.269859] vm_area_alloc+0x1c/0x110 [ 3428.270276] mmap_region+0x982/0x1500 [ 3428.270708] do_mmap+0x868/0x1370 [ 3428.271099] vm_mmap_pgoff+0x198/0x1f0 [ 3428.271538] ? randomize_page+0xb0/0xb0 [ 3428.271991] ksys_mmap_pgoff+0x41c/0x560 [ 3428.272446] ? find_mergeable_anon_vma+0x250/0x250 [ 3428.273000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3428.273593] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3428.274157] do_syscall_64+0x33/0x40 [ 3428.274563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3428.275126] RIP: 0033:0x7f768f557b62 [ 3428.275541] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3428.277566] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3428.278400] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3428.279187] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 3428.279971] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 3428.280763] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3428.281545] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 11:00:58 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 14) 11:00:58 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:58 executing program 7: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 9) [ 3441.888852] FAULT_INJECTION: forcing a failure. [ 3441.888852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3441.890437] CPU: 1 PID: 16020 Comm: syz-executor.4 Not tainted 5.10.257 #1 [ 3441.891380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3441.892520] Call Trace: [ 3441.892899] dump_stack+0x107/0x167 [ 3441.893423] should_fail.cold+0x5/0xa [ 3441.893965] __alloc_pages_nodemask+0x182/0x600 [ 3441.894606] ? lock_acquire+0x197/0x470 [ 3441.895158] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3441.895987] ? lock_downgrade+0x6d0/0x6d0 [ 3441.896557] ? do_raw_spin_lock+0x121/0x260 [ 3441.897154] alloc_pages_current+0x187/0x280 [ 3441.897757] __pmd_alloc+0x37/0x630 [ 3441.898267] handle_mm_fault+0x1ac4/0x3500 [ 3441.898858] ? perf_trace_lock+0xac/0x490 [ 3441.899428] ? SOFTIRQ_verbose+0x10/0x10 [ 3441.900013] ? __pmd_alloc+0x630/0x630 [ 3441.900579] __get_user_pages+0x6ec/0x1620 [ 3441.901179] ? follow_page_mask+0x1900/0x1900 [ 3441.901802] ? __lockdep_reset_lock+0x180/0x180 [ 3441.902450] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3441.903110] __get_user_pages_remote+0x1d5/0x870 [ 3441.904098] ? lock_downgrade+0x6d0/0x6d0 11:00:58 executing program 0: syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:58 executing program 3: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x75c0a76a) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:58 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:58 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 76) [ 3441.905161] get_user_pages_remote+0x63/0x90 [ 3441.906431] get_arg_page+0xba/0x200 [ 3441.907277] ? acct_arg_size+0xe0/0xe0 [ 3441.908210] ? downgrade_write+0x3a0/0x3a0 [ 3441.909160] ? count.constprop.0+0x1b3/0x290 [ 3441.910156] copy_string_kernel+0x1b4/0x450 [ 3441.911143] do_execveat_common+0x525/0x8d0 [ 3441.912141] ? bprm_execve+0x1960/0x1960 11:00:58 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 10) [ 3441.913079] __x64_sys_execveat+0xed/0x140 [ 3441.914095] do_syscall_64+0x33/0x40 [ 3441.914910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3441.916076] RIP: 0033:0x7f9b07560b19 [ 3441.916892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3441.920944] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3441.922609] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3441.924198] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3441.925752] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3441.927325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3441.928919] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 11:00:58 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 11:00:58 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3441.942147] FAULT_INJECTION: forcing a failure. [ 3441.942147] name failslab, interval 1, probability 0, space 0, times 0 [ 3441.943496] CPU: 0 PID: 16030 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3441.944295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3441.945233] Call Trace: [ 3441.945545] dump_stack+0x107/0x167 [ 3441.945973] should_fail.cold+0x5/0xa [ 3441.946425] ? create_object.isra.0+0x3a/0xa30 [ 3441.946956] should_failslab+0x5/0x20 [ 3441.947409] kmem_cache_alloc+0x5b/0x310 [ 3441.947902] create_object.isra.0+0x3a/0xa30 [ 3441.948415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3441.948997] kmem_cache_alloc+0x159/0x310 [ 3441.949467] mm_alloc+0x19/0xd0 [ 3441.949847] alloc_bprm+0x1cb/0x8f0 [ 3441.950277] ? __virt_addr_valid+0x170/0x5d0 [ 3441.950816] do_execveat_common+0x275/0x8d0 [ 3441.951316] ? strncpy_from_user+0x9e/0x470 [ 3441.951820] ? bprm_execve+0x1960/0x1960 [ 3441.952299] __x64_sys_execveat+0xed/0x140 [ 3441.952794] do_syscall_64+0x33/0x40 [ 3441.953223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3441.953814] RIP: 0033:0x7f51574bbb19 [ 3441.954241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3441.956341] RSP: 002b:00007f5154a10188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3441.957215] RAX: ffffffffffffffda RBX: 00007f51575cf020 RCX: 00007f51574bbb19 [ 3441.958042] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3441.958864] RBP: 00007f5154a101d0 R08: 0000000000001100 R09: 0000000000000000 [ 3441.959702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3441.960525] R13: 00007ffedaa8a4ff R14: 00007f5154a10300 R15: 0000000000022000 [ 3441.966783] FAULT_INJECTION: forcing a failure. [ 3441.966783] name failslab, interval 1, probability 0, space 0, times 0 [ 3441.968086] CPU: 0 PID: 16031 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3441.968873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3441.969814] Call Trace: [ 3441.970118] dump_stack+0x107/0x167 [ 3441.970539] should_fail.cold+0x5/0xa [ 3441.970974] ? ptlock_alloc+0x1d/0x70 [ 3441.971410] should_failslab+0x5/0x20 [ 3441.971852] kmem_cache_alloc+0x5b/0x310 [ 3441.972321] ptlock_alloc+0x1d/0x70 [ 3441.972738] pte_alloc_one+0x68/0x1a0 [ 3441.973178] __pte_alloc+0x1d/0x330 [ 3441.973595] remap_pfn_range_internal+0x9a3/0xf60 [ 3441.974153] ? lookup_memtype+0x5b/0x200 [ 3441.974628] ? apply_to_existing_page_range+0x40/0x40 [ 3441.975228] remap_pfn_range+0xcd/0x160 [ 3441.975692] ? remap_pfn_range_notrack+0x70/0x70 [ 3441.976235] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3441.976827] io_uring_mmap+0x398/0x530 [ 3441.977278] mmap_file+0x5e/0xe0 [ 3441.977664] mmap_region+0xc4d/0x1500 [ 3441.978110] do_mmap+0x868/0x1370 [ 3441.978518] vm_mmap_pgoff+0x198/0x1f0 [ 3441.978970] ? randomize_page+0xb0/0xb0 [ 3441.979433] ksys_mmap_pgoff+0x41c/0x560 [ 3441.979937] ? find_mergeable_anon_vma+0x250/0x250 [ 3441.980502] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3441.981100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3441.981696] do_syscall_64+0x33/0x40 [ 3441.982122] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3441.982703] RIP: 0033:0x7f768f557b62 [ 3441.983128] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3441.985218] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3441.986089] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3441.986897] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 3441.987721] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 3441.988533] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3441.989347] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3441.995922] ------------[ cut here ]------------ [ 3441.997542] WARNING: CPU: 1 PID: 16031 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 3441.999638] Modules linked in: [ 3442.000412] CPU: 1 PID: 16031 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3442.001986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.003911] RIP: 0010:get_pat_info+0x216/0x270 [ 3442.004960] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 61 8a 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 4a 8a 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 25 ae 5a 00 e9 [ 3442.009109] RSP: 0018:ffff88804aa87890 EFLAGS: 00010216 [ 3442.010330] RAX: 0000000000013ee5 RBX: ffff888053465700 RCX: ffffc90011f54000 [ 3442.011989] RDX: 0000000000040000 RSI: ffffffff81125456 RDI: 0000000000000007 [ 3442.013617] RBP: ffff88804aa87948 R08: 0000000000000000 R09: ffff88804aa87818 [ 3442.015242] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 3442.018965] R13: 1ffff11009550f12 R14: 0000000000000000 R15: ffff888053465750 [ 3442.025139] FS: 00007f768cacd700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 3442.027116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 11:00:58 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3442.028549] CR2: 00007f97446ea018 CR3: 0000000037306000 CR4: 0000000000350ee0 [ 3442.030387] Call Trace: [ 3442.031011] ? pgprot_writethrough+0xc0/0xc0 [ 3442.032105] ? finish_task_switch+0x1a4/0x5d0 [ 3442.033253] untrack_pfn+0xdc/0x240 [ 3442.034101] ? track_pfn_insert+0x150/0x150 [ 3442.035136] ? lock_downgrade+0x6d0/0x6d0 [ 3442.036500] ? uprobe_munmap+0x95/0x560 11:00:58 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3442.037628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3442.039103] unmap_single_vma+0x1bc/0x300 [ 3442.040166] zap_page_range_single+0x2ce/0x450 [ 3442.041300] ? unmap_single_vma+0x300/0x300 [ 3442.042354] ? remap_pfn_range_internal+0xc56/0xf60 [ 3442.043570] ? lookup_memtype+0x5b/0x200 [ 3442.044584] ? apply_to_existing_page_range+0x40/0x40 [ 3442.045853] remap_pfn_range+0x139/0x160 [ 3442.046861] ? remap_pfn_range_notrack+0x70/0x70 [ 3442.048017] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3442.049256] io_uring_mmap+0x398/0x530 [ 3442.050142] mmap_file+0x5e/0xe0 [ 3442.050945] mmap_region+0xc4d/0x1500 [ 3442.051861] do_mmap+0x868/0x1370 [ 3442.052710] vm_mmap_pgoff+0x198/0x1f0 [ 3442.053627] ? randomize_page+0xb0/0xb0 [ 3442.054338] FAULT_INJECTION: forcing a failure. [ 3442.054338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3442.054576] ksys_mmap_pgoff+0x41c/0x560 [ 3442.055879] CPU: 0 PID: 16027 Comm: syz-executor.5 Not tainted 5.10.257 #1 [ 3442.056813] ? find_mergeable_anon_vma+0x250/0x250 [ 3442.057555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.057559] Call Trace: [ 3442.057574] dump_stack+0x107/0x167 [ 3442.057592] should_fail.cold+0x5/0xa [ 3442.058726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3442.059643] __alloc_pages_nodemask+0x182/0x600 [ 3442.059658] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3442.059685] alloc_pages_current+0x187/0x280 [ 3442.060289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3442.060667] __get_free_pages+0xc/0xa0 [ 3442.061559] do_syscall_64+0x33/0x40 [ 3442.062114] pgd_alloc+0x84/0x4e0 [ 3442.063184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.063833] ? pgd_page_get_mm+0x40/0x40 [ 3442.063846] ? lockdep_init_map_type+0x2c7/0x780 [ 3442.063865] ? lockdep_init_map_type+0x2c7/0x780 [ 3442.064868] RIP: 0033:0x7f768f557b62 [ 3442.065434] mm_init+0x670/0xab0 [ 3442.065446] mm_alloc+0xa2/0xd0 [ 3442.065464] alloc_bprm+0x1cb/0x8f0 [ 3442.066362] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3442.066742] ? __virt_addr_valid+0x170/0x5d0 [ 3442.066760] do_execveat_common+0x275/0x8d0 [ 3442.067563] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 [ 3442.068124] ? strncpy_from_user+0x9e/0x470 [ 3442.069052] ORIG_RAX: 0000000000000009 [ 3442.069558] ? bprm_execve+0x1960/0x1960 [ 3442.069581] __x64_sys_execveat+0xed/0x140 [ 3442.069599] do_syscall_64+0x33/0x40 [ 3442.070682] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3442.071082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.071866] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 3442.072206] RIP: 0033:0x7fbf4b56bb19 [ 3442.072218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3442.072225] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3442.073062] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 3442.075148] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3442.075156] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3442.075163] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3442.075170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3442.075178] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 [ 3442.105489] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3442.107201] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 11:00:58 executing program 2: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3442.108945] irq event stamp: 1725 [ 3442.109909] hardirqs last enabled at (1735): [] console_unlock+0x92d/0xb40 [ 3442.111934] hardirqs last disabled at (1744): [] console_unlock+0x839/0xb40 [ 3442.113977] softirqs last enabled at (1230): [] asm_call_irq_on_stack+0x12/0x20 11:00:58 executing program 1: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180), &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3442.116106] softirqs last disabled at (1187): [] asm_call_irq_on_stack+0x12/0x20 [ 3442.118302] ---[ end trace 70fe8f3788a831e5 ]--- 11:00:58 executing program 4: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 15) 11:00:58 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xd68d672b79e3c9f2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180)) (fail_nth: 77) 11:00:58 executing program 5: r0 = syz_io_uring_setup(0x37c, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000d1b000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0xffff0001) io_uring_enter(r0, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 11) [ 3442.218103] FAULT_INJECTION: forcing a failure. [ 3442.218103] name failslab, interval 1, probability 0, space 0, times 0 [ 3442.220805] CPU: 1 PID: 16051 Comm: syz-executor.4 Tainted: G W 5.10.257 #1 11:00:58 executing program 0: syz_io_uring_setup(0xd13, &(0x7f0000000080)={0x0, 0x39e, 0x0, 0x3, 0xd}, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x4002c2, 0xd, 0x10}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0xffffffffffffffed, 0x19}, 0x0) io_uring_enter(0xffffffffffffffff, 0xc0e, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 3442.222726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.224817] Call Trace: [ 3442.225440] dump_stack+0x107/0x167 [ 3442.226289] should_fail.cold+0x5/0xa [ 3442.227168] ? __pmd_alloc+0x94/0x630 [ 3442.228057] should_failslab+0x5/0x20 [ 3442.228944] kmem_cache_alloc+0x5b/0x310 [ 3442.229886] __pmd_alloc+0x94/0x630 [ 3442.230741] handle_mm_fault+0x1ac4/0x3500 [ 3442.231735] ? perf_trace_lock+0xac/0x490 [ 3442.232693] ? SOFTIRQ_verbose+0x10/0x10 [ 3442.233629] ? __pmd_alloc+0x630/0x630 [ 3442.234136] FAULT_INJECTION: forcing a failure. [ 3442.234136] name failslab, interval 1, probability 0, space 0, times 0 [ 3442.234570] __get_user_pages+0x6ec/0x1620 [ 3442.236836] ? follow_page_mask+0x1900/0x1900 [ 3442.237860] ? __lockdep_reset_lock+0x180/0x180 [ 3442.238915] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3442.240012] __get_user_pages_remote+0x1d5/0x870 [ 3442.241114] ? lock_downgrade+0x6d0/0x6d0 [ 3442.242090] get_user_pages_remote+0x63/0x90 [ 3442.243094] get_arg_page+0xba/0x200 [ 3442.243941] ? acct_arg_size+0xe0/0xe0 [ 3442.244818] ? downgrade_write+0x3a0/0x3a0 [ 3442.245765] ? count.constprop.0+0x1b3/0x290 [ 3442.246766] copy_string_kernel+0x1b4/0x450 [ 3442.247754] do_execveat_common+0x525/0x8d0 [ 3442.248732] ? bprm_execve+0x1960/0x1960 [ 3442.249667] __x64_sys_execveat+0xed/0x140 [ 3442.250635] do_syscall_64+0x33/0x40 [ 3442.251480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.252645] RIP: 0033:0x7f9b07560b19 [ 3442.253485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3442.257614] RSP: 002b:00007f9b04ad6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3442.259342] RAX: ffffffffffffffda RBX: 00007f9b07673f60 RCX: 00007f9b07560b19 [ 3442.260951] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3442.262551] RBP: 00007f9b04ad61d0 R08: 0000000000001100 R09: 0000000000000000 [ 3442.264159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3442.265766] R13: 00007fff135a997f R14: 00007f9b04ad6300 R15: 0000000000022000 [ 3442.267392] CPU: 0 PID: 16054 Comm: syz-executor.6 Tainted: G W 5.10.257 #1 [ 3442.268350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.269307] Call Trace: [ 3442.269622] dump_stack+0x107/0x167 [ 3442.270040] should_fail.cold+0x5/0xa [ 3442.270485] ? create_object.isra.0+0x3a/0xa30 [ 3442.271002] should_failslab+0x5/0x20 [ 3442.271450] kmem_cache_alloc+0x5b/0x310 [ 3442.271914] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3442.272607] create_object.isra.0+0x3a/0xa30 [ 3442.273104] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3442.273686] kmem_cache_alloc+0x159/0x310 [ 3442.274165] ptlock_alloc+0x1d/0x70 [ 3442.274583] pte_alloc_one+0x68/0x1a0 [ 3442.275018] __pte_alloc+0x1d/0x330 [ 3442.275424] remap_pfn_range_internal+0x9a3/0xf60 [ 3442.275950] ? lookup_memtype+0x5b/0x200 [ 3442.276396] ? apply_to_existing_page_range+0x40/0x40 [ 3442.276960] remap_pfn_range+0xcd/0x160 [ 3442.277389] ? remap_pfn_range_notrack+0x70/0x70 [ 3442.277898] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3442.278458] io_uring_mmap+0x398/0x530 [ 3442.278879] mmap_file+0x5e/0xe0 [ 3442.279243] mmap_region+0xc4d/0x1500 [ 3442.279670] do_mmap+0x868/0x1370 [ 3442.280049] vm_mmap_pgoff+0x198/0x1f0 [ 3442.280487] ? randomize_page+0xb0/0xb0 [ 3442.280942] ksys_mmap_pgoff+0x41c/0x560 [ 3442.281408] ? find_mergeable_anon_vma+0x250/0x250 [ 3442.281950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3442.282513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3442.283066] do_syscall_64+0x33/0x40 [ 3442.283471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.284017] RIP: 0033:0x7f768f557b62 [ 3442.284422] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3442.286376] RSP: 002b:00007f768cacd0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3442.287188] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f768f557b62 [ 3442.287957] RDX: 0000000000000003 RSI: 0000000000100000 RDI: 0000000020ffc000 [ 3442.288717] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 3442.289481] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 3442.290242] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 3442.292509] FAULT_INJECTION: forcing a failure. [ 3442.292509] name failslab, interval 1, probability 0, space 0, times 0 [ 3442.295178] CPU: 1 PID: 16056 Comm: syz-executor.5 Tainted: G W 5.10.257 #1 [ 3442.297084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.299001] Call Trace: [ 3442.299634] dump_stack+0x107/0x167 [ 3442.300485] should_fail.cold+0x5/0xa [ 3442.301372] ? vm_area_alloc+0x1c/0x110 [ 3442.302313] should_failslab+0x5/0x20 [ 3442.303203] kmem_cache_alloc+0x5b/0x310 [ 3442.304157] vm_area_alloc+0x1c/0x110 [ 3442.305037] alloc_bprm+0x337/0x8f0 [ 3442.305877] ? __virt_addr_valid+0x170/0x5d0 [ 3442.306916] do_execveat_common+0x275/0x8d0 [ 3442.307945] ? strncpy_from_user+0x9e/0x470 [ 3442.308971] ? bprm_execve+0x1960/0x1960 [ 3442.309951] __x64_sys_execveat+0xed/0x140 [ 3442.310960] do_syscall_64+0x33/0x40 [ 3442.311876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.313079] RIP: 0033:0x7fbf4b56bb19 [ 3442.313954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3442.318311] RSP: 002b:00007fbf48ae1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 3442.320108] RAX: ffffffffffffffda RBX: 00007fbf4b67ef60 RCX: 00007fbf4b56bb19 [ 3442.321852] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffffff [ 3442.323574] RBP: 00007fbf48ae11d0 R08: 0000000000001100 R09: 0000000000000000 [ 3442.325276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3442.326956] R13: 00007ffe82b9057f R14: 00007fbf48ae1300 R15: 0000000000022000 VM DIAGNOSIS: 11:00:58 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888053d03dac RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000004 RSP=ffff88803795f498 R8 =dffffc0000000000 R9 =ffffffff868736a7 R10=fffffbfff0d0e6d4 R11=0000000000000001 R12=ffff888053d03480 R13=0000000000000000 R14=ffff888053d03dc8 R15=dffffc0000000000 RIP=ffffffff8126fd45 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2f326000 CR3=000000003e8ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e8ec1 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff88804aa872a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000038 R13=0000000000000038 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e8f18 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f768cacd700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f97446ea018 CR3=0000000037306000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000