01:48:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x0, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:48:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0xd7, 0x0, 0x1, "9c13dffb12e953ef970a9af4d5bfdbcec831c6f929543ef30924f6adbfd1f96df9ff1427565cb121220035951bbb2915e0b2a9ce484fe59de2ab9682d41e6b01dc3fb1465c7ad29fb3e48bb2b565e8812c1abc61ca1fd0ab54248859158bc840063541500a63f8a8c7efd53b75adac67ff6340fe5b438ba34cac608d6f898d2c48f3f39cbe230fd85430595d1af4691d71780efec8da5740bb60f343bf17028862848ef5aa74bacb945fb863686dc29c5621ec693c7e2d7258d4d2da4863abcddf7484e1b8887c50b55c9301ca4a680f7693ac20bebc90"}) 01:48:57 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) fsetxattr(r1, &(0x7f0000000540)=@random={'trusted.', 'cgroup.subtree_control\x00'}, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, 0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) stat(&(0x7f0000001440)='.\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000240)) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe00, 0xffffffffffffffff, &(0x7f0000000580)=0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0x0, r8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)=[{&(0x7f0000000140)={0x1a4, 0x31, 0x4, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x41, 0x0, 0x0, @u32=0x2}, @nested={0x101, 0x46, 0x0, 0x1, [@typed={0x14, 0x25, 0x0, 0x0, @ipv6=@empty}, @generic="b23b915ef04e7c24b2de0b241af09fca2a7fec29299e61d8c7e1d2d8fe031b64c529cee59bbdcd53fcb52a028c3760f58d32457e3a85852131dfd45a277831d96ecf9bbd30503795f381a594c87108a2a740b8cc4b017077c6a5cf0752eb5ebe88796a0c1bcbc980df36899d531e958a57c278b6cba8a8f7bdd68a0d16971df107959d0d1945afaba6f5140b349afc920413e4e00d66a5c6024c980f22e424d3a3cd034c21ecfd514f49edab630b0466d3399e7245b729950d44011fae580a61342bb1dc2e69fffdb0f8e1dc11c43d70fa494f2e2a160107a3da7e8752f3f7ae9412c736e5e274abc6"]}, @generic="817b87bd87e41bf685d70fc7cc113fdf3f3d114cdaabbe8a55da3ef0c88d092ed1059307", @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@local}, @nested={0x4a, 0x93, 0x0, 0x1, [@generic="0e26aa68cebdc980ea5ed77bde6999acb36ef33b41331ae20c90c0baf60342b0260e9aa9bebfa043e23d1d24b7a23d45381f", @typed={0x8, 0x94, 0x0, 0x0, @pid}, @typed={0x8, 0x3b, 0x0, 0x0, @pid}, @typed={0x4, 0x71}]}, @generic="56de"]}, 0x1a4}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="00bf8a5a660000001c000000000000000000000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x840}, 0x4008010) 01:48:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xffffffff00000000, 0x1000002) 01:48:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0xd7, 0x0, 0x0, "9c13dffb12e953ef970a9af4d5bfdbcec831c6f929543ef30924f6adbfd1f96df9ff1427565cb121220035951bbb2915e0b2a9ce484fe59de2ab9682d41e6b01dc3fb1465c7ad29fb3e48bb2b565e8812c1abc61ca1fd0ab54248859158bc840063541500a63f8a8c7efd53b75adac67ff6340fe5b438ba34cac608d6f898d2c48f3f39cbe230fd85430595d1af4691d71780efec8da5740bb60f343bf17028862848ef5aa74bacb945fb863686dc29c5621ec693c7e2d7258d4d2da4863abcddf7484e1b8887c50b55c9301ca4a680f7693ac20bebc90"}) 01:48:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x7fff, 0xcc2, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:48:57 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x243, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6476, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, @perf_config_ext, 0x2, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r0, &(0x7f0000000500), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000cc0)={&(0x7f0000000100)=""/41, 0x29, 0xd27, 0x8e}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_read_part_table(0xfffffffd, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) pread64(r2, &(0x7f0000000000)=""/105, 0x69, 0x2dd) open(&(0x7f0000000080)='./file0\x00', 0x206040, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') 01:48:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x500000000000000, 0x1000002) 01:48:57 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) fsetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="74727573746575702e737562747265655f6399eb5d6a531b4595b55b8ae5916f6e74726f6c0099e250da4d2a0c101c28e7f2551d900e34e99123f025260124592220b59facb617138edbf1cc61c4d4f6a0e69fcea8d22caa4a3deafa116d1cc112967526d9b081bd30f394406d7988effb1631f1c6a8f7ff874acd8787f0341e9fda8f6f6cbff1380dbf81c799ff200b8254d98bad1fc4d39d7dbee2b1cc92a402e640a74ffff06be2afc25b18b0706762e45cd98e2ac502b9d383a58112ef5ec3f623dbfb869ce91c0a2dc64d29db0671c0bb8d"], 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000180)) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) ioctl$DVD_READ_STRUCT(r2, 0x5390, &(0x7f00000004c0)=@bca={0x3, 0xbc, "68a92cbad2459cae554e98d7902809fc974346ad00ef7d9f199974eea6f07e4c7c95e125a2bf41c03999290e777ec1599a7f29d7435cca558b75cce3278d966fd1c82d184c2278037fcdee17e0f250f41cdddde27dd8f8b1f960f87a1b7f38c8e5c0158d89cc0488a4d7f321cbbba50436630e923588cbc309fadfff3d5582d0ae6c757b49b7b4e8b8423340becd80b98b42a60f49a6ae507d4278492bc126f9c5593cd62cf417a209ad1aceeb8065ed64900bf81e6d7f95190cf795"}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 01:48:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/uprobe', 0x202000, 0x100) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) socketpair(0x662c32ec2351962, 0x8000e, 0x8000, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0xf, 0x20010, r1, 0x2cd1b000) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:48:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x0, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 1652.294325] loop7: detected capacity change from 0 to 135266304 01:48:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)) 01:48:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xffffffffffffffff, 0x1000002) 01:49:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x7fff, 0xcc2, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:49:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)) 01:49:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000380)) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:49:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000540)=@random={'trusted.', 'cgroup.subtree_control\x00'}, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) lseek(r1, 0x7, 0x0) 01:49:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xa01000000000000, 0x1000002) 01:49:13 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x0, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000003) 01:49:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)) 01:49:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000540)=@random={'trusted.', 'cgroup.subtree_control\x00'}, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28a280, 0x80) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)={0x0, @aes128, 0x0, @desc2}) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xe8, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x480000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc3b6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8040}, 0x40c4) 01:49:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xd00000000000000, 0x1000002) 01:49:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0x7fff, 0xcc2, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:49:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000004) 01:49:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x1000000000000000, 0x1000002) 01:49:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0x7fff, 0xcc2, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:49:13 executing program 7: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x850) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="a5007573742fa42e6367726f18b60000000000e1000000b0ad6685a4726565"], 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x882c2, 0xf9) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20280, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x7fff, 0xcc2, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:49:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000006) 01:49:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0x7fff, 0xcc2, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:49:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x6c, 0x0, 0x0, "9c13dffb12e953ef970a9af4d5bfdbcec831c6f929543ef30924f6adbfd1f96df9ff1427565cb121220035951bbb2915e0b2a9ce484fe59de2ab9682d41e6b01dc3fb1465c7ad29fb3e48bb2b565e8812c1abc61ca1fd0ab54248859158bc840063541500a63f8a8c7efd53b"}) 01:49:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x1200000000000000, 0x1000002) 01:49:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000008) 01:49:28 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = fcntl$getown(r0, 0x9) process_vm_readv(r2, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/112, 0x70}], 0x2, &(0x7f0000002500)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000400)}, {&(0x7f00000024c0)=""/57, 0x39}], 0x8, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000180)='net/packet\x00') perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0xc8, 0x4, 0x80, 0x0, 0x81, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x60be, 0x3, @perf_config_ext={0x2, 0x2}, 0x44, 0x1ff, 0x9, 0x9, 0x80000001, 0x4, 0x40, 0x0, 0x8, 0x0, 0x100000001}, r1, 0xf, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) prlimit64(r1, 0x9, &(0x7f0000000080)={0x7, 0x6}, &(0x7f00000000c0)) r5 = openat$cgroup_ro(r3, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000002580)={0x0, 0x2, 0x7ff}) write$binfmt_aout(r4, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, 0x0) 01:49:28 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) 01:49:28 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f00000001c0)="4756017fd4256ed1d589cc8342d256c2bac14093f4b98870acee67a92cb1f446e488d81392cdab8179d9511cec5bd3a52d6f952ba1a949d5e2bb8678430ef4941a9bf43761f7725f583fc3f3badb6fea7c6418557e0148302b88cb133c86377ec6711cd9024353f8ea897bead81dbffd0efa57d24677f6803caf71c20a2d63cd32caf2a4fb78dddb156365b37bf35e71", 0x7, 0x0, 0x1, {0x2}}, 0x4) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x181100, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x280, 0x100}, 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0x3f, 0x7, 0x74, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x10000, 0x5, 0x6, 0x6, 0x5, 0x1, 0x6, 0x0, 0x1, 0x0, 0x7ff}, 0xffffffffffffffff, 0x8, r8, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:49:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 01:49:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:28 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x80182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000004c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x46, "d01a9f459ddddc"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000014c0)={0x0, r1, "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", "f73bb6806d4e13b9b976f2d4b14e0f92b6cd019d2794e835f955a7debb0fd0e6c4eec814b8ce2b9509375f12d0da108002ec08204b48902f57c32f35c47d983919b343216f6632818808f820833242e66e6e1448ecb3918ee24ae805eb43e970863d4b0898a3609d4c17e32eb7259f7f0952e6bbf8f2f6ad8fef9ac4e8c7a752604658dfd71c2454668e1ae7245ed6b9804a5bc04be54600082aee15d841831661f40d731d2211df8823aba03aff785ec6d6b094812b3024e6aa54d261a6ff3191c4e0a3132e15fc7b10f6cdf0e34648f2caea8cd84073ce04b1c2dce008259463130b6d6324dd2ff5aa3291ca4e5466eac2538c4e25c394bcc26cc7acd1444cd3ca8bcfe37e00c6ca23290d5c0fa90ec92e9f61b9238464aebd016a08f5e505822dd63227f9dc7e770f778490283adc54f7a869a5ee2ab7e8dd62092874e998bb920deb70bf65db9658be845e00b84f33eacee2660c440e335254ebef96b28d2ac7c11a97560e31e14f1e8e8c3c85dc34c74fabcf6d9466efb28149d38b99a5d60b261cd5bdc6f93633f74065857585d692874d63ab58bd817177447db554f206e6cfa47eb4340e0ad85de9972dc4b5dfa530bfc92335cbd6b59f2bce14d0aeaecba108b6b2cf65e27cff36e299fd90074dee78b8158f5b72f505afd74005a0d1fe1bec8a69b0e5357198abe3334d3adaf27d1e19bb54d7741072bc0b38b74e5325f08a30ddf8b7038b0464c7d94a422a37445e9a62eec86be42eb51970441275f9946ce5630eeab06afbba9c4183f1a52cf5bb156373a9955aea5f33bbd9bd3a7e337b78122e5dec44abd7716ae86f98e3738ea67c176f459cebbf16226baf8bea6b3b317ac5fe842627053afe28695a2c64e9af7f8b0886892dda9e5d2349cafddc0879fb029e9d4fc55223e40b9c92df2b716465ec1ebd6568bcbdfdbf8e3819b3f7b3962de1c67991fb76c09cc3601b2ebb5710431758f2dd482c819e4af22badc96229c182e2b9e456506e93d901958699faac5f5e557d41e7fe8aec5dd75f2cc694dd6af6ea8ddc2a0dadf986eb2dbe67d1d169b810248770ec6749af2ee7659a412b9bdcfb1fb1acbc83967d2403ba71b56002df61585d660ac70bdc060adb588db05e6ad962b21e995fb937dd5f856dac5832129b7247dcc3c1d6e605b19959dff2926953c7ecb5ae8821c4808d0b81a03ba7ea20590c58a9b5b7bb3a23b2560ca742e2936fa947cec03134de2a4b245eb6de74bb86902ffb1f03ab96315e8ce28bfd0317fd0dbe02d9397741736681f6a4b3eb7c0059edc70d7cc62e9fcb9c30ca4083767be9c7bc754df27907fc1a03f8a560331b658091294dc68a2236c6116641256677816a84b25dd21142d67d36f68fb0346402b7e1e9146ae427b25b57c1a596914cbda66c730fc2f05eac9071ed9aeb6761d259e0629f006dbad13d1c06df73916d0e1f9db01d29545fa62fbe77f671929a4a7fc08c324549c50b702384c5e45c608e400008571229f583936d1c0cd15fdf11895e9e008b35f84b10d65d3e6884331d2b0f11fbb0d983cfb31433ca0679c684f7ed65d675ea70183b5f99f3aa7524bdd331f4f8e1f37e814db9fb70aec7c225c3b812d2a62e729631886da08edfb6412d707e11a9d78cec73ef5635925d025d4079dc9673f674eede932401a03027d8ca57af7c14aaa22e7119483a8620613a00e92825d8dde4422e94c9f62a875a21a07fba92a8f2ef0be6459d6ec8ae94511fc8a7fb28cfed4a507839952d00f9b7259ced85a64a109917c144df62fbfa097aa32c0247dca45560269fce6165f95d491a7c25001b9b75294d5f1d38656fb53aa03bfb0f54022809597ff9d92a76f09aee546633dacf5f061d83e21a629d488dcaec652f7156bb1871d713f65f3b091f375824ecb9f4601ce140164e8c0ca30a9259c02a973e1e10deaf10c5252b73407b84e3fa79a4e1cd9b62785503d38bc79a3dd0ffecced60efe1865491179e1be237249af05b3df438aba803b00269204ee4665175a70e5cb6682bf895a4ab70bc89ba0170102f68e1a3a0e22f93c7f82800e6ab6385df83b185b2acef5c9a909c01b5d04022808a1e4733db2b017891cbf836529d9517cee7143a085c6bb5253f8021f3d9b366f40f42c24112e59e67e3218b4b44615acc9e101c756dee5c1c5f0f01f7b4ed9bf5959cc00027ccb7aee726743b022526287908f8584b0e6d93aedfd0e0d522b7f5fffe9302d3e2d2ed28402bf4a5b8c2bb6c8c31974671f43b500d9af568e1ee62d050cc37a573195e981d75891a68b317c22c1b4a7bc9b2b41bab08315893e6edd87d521a36070aa34ccadc92cc0851505526146d5b692148bd0f24ffaf46f62432b0ae9c4282203405d23fe7fa850c3b6a0c822056e1e52a216eaf63e9a2a24f9ff3088394fdf41a5719f108a87193e56280ee58447b710b17678ef5e35b9abb136890af2901a8c621b93c18b76995a910f84011d68f244fa9bd12d3cb5c5c46c45a7d6fe8823fccc2f8f7515b18a150364f6cc543806233e2eaf2d5e567487c6121c88e8b719e6abee16c9fc5f910754234ff6875d9d6bfaa8050f359f2e38a825fe5733190106a1e2e926ddfb9c7bf79895163027f653cabf09a80a5bf4a3ecfba826156e709ae7e102218cfae47e0dccd36d2974b47ab066a7d7742d1cb47fdc40fa191671d5cb7cb6bfd817b147c75c81ae4b19500b988932e1a4fb208c3288357ca872fe1fdf783522c150af87d31b3e00490032413a98820fb773096da5f6b617af111228e5fcd6148e7db83a02a910f6ae64c21fbc2a549a8a2f68e7dab8a163e958d27eabee4677dc2c0bc8a9ca9bd21b6b72d9b0d46542c73f56dce44b8fbf0243fbf6334000e887ac9a912bee04303148402fc467d0a77718a8192f3e7318c691b788a34c996666bc4eafa0213dea7db16122a7c64b1acc256833ebc76002a79fe7ba2b7e0d2fe9861c1caaebc5841dee6c55ffa30126c2146add7023bda6458a0e7586e373beef1f08be85eec2fe04fb2f368ad8007d7065b93dd7dacdd5eaf4efa3ed17a957fac690a4440e61c5aa00f0acc3c98bc31103961047b08dafec7948238f9b487d3d3127d754f5a2a9e3c8b6b31fb9288cb0df37dc8cdfdfb9587a961cc311f114b642a5859066aa5ed34a3c53e3957fec9dcceb95c2d8cab3561f0ff7ec6af3805a0f456e3a3cff76197b6d5e4e9e3d406b4b8e4ff3b3b360fa3e6eb236d3d2e4eb18030c7dad6e942e20959d0c1e373e82b1d194915c773e80108ae5a163785a2e9157fe413e24f8607da169fe1c3cf79b1f6700e5292c2f7b983ec33e3a88d791657ff9426fc87e6b99e4e155fcab49e5ae4b886151c2c40c41eb38858f1917d84c296e4267f012de4bae4ca33511d21463a6ced0a276aab61ee1da24a1a1fddd026d0e6127d055328860e94cf327dff728fe38c9436695deac07928eacef69beae7f8ea9dcc7bed6e2cc13e2994452d931d513d2fc1bb71754629d9522dbb487945e45a9604d082d0df546826ae96541d2f72462d160c475452007d0995457044f13b3f2438616cda72aa8801f4c987c7b9b77f66fb8a8e9189a4cd784c0ff911bd3616b31b3fc612d80a94bb8e38a58f485a80334c41da640487b9ae333c5bc3becd33ea25226a343304710f5fe028a977931b6e3a10d5132fc4c5745931823a7e710ca81fb489bee72ee98a37d4f16e7426345d22fcac16690182255e533f67f4077776681f30d4c71af9f5536912f806559acb580b6a396d451993c9c778e631246f00d8cf35c174089a170bb6d22463559d5c22977f519428b68592210661344a8248fc784844a0106368fd2b17d298befb267820c48e55852f656573372e2ef5a0295fb20b3468aed75959f4c1a41d2361f773637fd1db0e25e2bc2e32cd1773b33c3960bc565f1e3d15b5c665a9b605a6480f3738f15cab943c99d89c9a452f06d98189b709fccb905ff1170dfc8f860414aea0b77f74943bb3dcc9accfd7a160fad929768e2932b1019d0d091a8d0afac0955a945b33a1cb104765811cf05b36db559bb88be914bea9586ff64b2f6dbc37ee1f6870aa1a8c26a8869671af4c010b3665deb57049d36599468e4c714d2d3eea501049732121317b06423877ea797d0aee03345ffd26ed6333897f563f86f1d3d088c9bdb7ec329474cd3a13f78c99e409410d9fb988813a307bfb19ca6f9e653d4c56f82879650a7aafda797cd57a2796158f732fb8808286b9619b0c0fc7840b13e9521af8e17927d4e874f335defcc68bf5d07fcd5860bb90b2b0a407f995875b7ccf87f8fc0c41a15da2a0a362c3eca565c29ad52871b76bb9eb824ed89502ff0d33c61dbe0b398053e0da1c08e5218186c3eccada4a30e6dc321dce7707107dc89ea64c56570d520a45bc3f2322023516f5bba3cfe9cf3d4ad46fc22255d42d4220a68d0aa94171a3713620c777b432307b3ec61a6f4e15dedc3f7f4d5d10d9d34d29e81691e51a4d19b53742614494434de430711193afc9cb8348a39ddff122f91571702ee56df7f062e796b65d8f6fe8a732241795e341505844af86902fba1f21dee6e469a870028130d7bda6121361e22dccce1d72a63004383d7591df72c49cb37247fb7cea960a1cd896c9cc87f1ec21f4a84b5c384e124f58766c18202e96f56f89771cd50d32ecf471ddcc0b9d32e0f61724243a1c9dc71b83887afaeae2004aaba8e59aaf9babae8a904767ac0b2f77b2cced9d8742d19f6c55035c94f9df87088cfe0e4ff54a07e7c376dcd6cbbbf21cbcb7081febf43e6a6af391c299f83d9886697269db4953ac1cde2a0db0f67e11b74e0129755acf782f33b6c4b6f2a2e40c1ded804d2a4866c39ef315fe3b7523ab0f97580475ccacf5afc7f5190477e6a2b09014f26e9e4f566bda37a7cec9e015208d65acaad5b61ece297a74ddeabaae17828d51638b1565459ff3e297683d72b619cd2fc02b27ddff9544932398c31045ea80b981431b78d62f7ffb7a26a5d17ad32a2d0be0b92f938a4fde2ec6797575603fdaac2351b779b7d9a7282faff56236af7cd15231be34b4340697fb60c70e9db6e207feb19917ee2a937282c1551a7096af632fa99e899972a4fc989f87b56280cd11ce55f85ad3dc52523032a94faeb247eeef9f43303664dfc7c843ce1a59b8b35ec82b0fc0b62c97c269f5043044f4b8b3ee56ab1a01e01b7f01b7920b2eeb458e3ff109b5f7939f914cd3dad8400b4ec43168e49c3da95254828275b545438737a7ced21ca57398d8fe3713ed850fd724b4727c988c80c4b2781b51c8a1c386741299e85f4968409f3d38c07cf3b1fc9eb09bef4882c9ebf9395d47bfcfdef472217fbc214d797514453c62da1"}) 01:49:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:49:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:49:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 01:49:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x2103000000000000, 0x1000002) 01:49:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x100000d) 01:49:44 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f00000001c0)="4756017fd4256ed1d589cc8342d256c2bac14093f4b98870acee67a92cb1f446e488d81392cdab8179d9511cec5bd3a52d6f952ba1a949d5e2bb8678430ef4941a9bf43761f7725f583fc3f3badb6fea7c6418557e0148302b88cb133c86377ec6711cd9024353f8ea897bead81dbffd0efa57d24677f6803caf71c20a2d63cd32caf2a4fb78dddb156365b37bf35e71", 0x7, 0x0, 0x1, {0x2}}, 0x4) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x181100, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x280, 0x100}, 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0x3f, 0x7, 0x74, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x10000, 0x5, 0x6, 0x6, 0x5, 0x1, 0x6, 0x0, 0x1, 0x0, 0x7ff}, 0xffffffffffffffff, 0x8, r8, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:49:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(r0, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000240)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r3, 0x1ff, 0x0, 0x4}) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)={0x2b, 0x9, 0x8001, "a7d5b5e3e535b81d3e4f33012ce2211c22b50012af89e84603cfb8c01101a46cd19941fa02f1f70a78f5ec"}) 01:49:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x100000f) 01:49:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 01:49:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x8102000000000000, 0x1000002) 01:49:44 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f00000001c0)="4756017fd4256ed1d589cc8342d256c2bac14093f4b98870acee67a92cb1f446e488d81392cdab8179d9511cec5bd3a52d6f952ba1a949d5e2bb8678430ef4941a9bf43761f7725f583fc3f3badb6fea7c6418557e0148302b88cb133c86377ec6711cd9024353f8ea897bead81dbffd0efa57d24677f6803caf71c20a2d63cd32caf2a4fb78dddb156365b37bf35e71", 0x7, 0x0, 0x1, {0x2}}, 0x4) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x181100, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x280, 0x100}, 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0x3f, 0x7, 0x74, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x10000, 0x5, 0x6, 0x6, 0x5, 0x1, 0x6, 0x0, 0x1, 0x0, 0x7ff}, 0xffffffffffffffff, 0x8, r8, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:49:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:44 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x1, 0x3ff, 0x100000000}) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:49:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:49:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000010) 01:49:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xf4ffffff00000000, 0x1000002) 01:49:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:49:58 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r2, &(0x7f0000000080)=0xcf, 0x4, 0x0) 01:49:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x37, 0x0, 0x0, "9c13dffb12e953ef970a9af4d5bfdbcec831c6f929543ef30924f6adbfd1f96df9ff1427565cb121220035951bbb2915e0b2a9ce484fe5"}) 01:49:58 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f00000001c0)="4756017fd4256ed1d589cc8342d256c2bac14093f4b98870acee67a92cb1f446e488d81392cdab8179d9511cec5bd3a52d6f952ba1a949d5e2bb8678430ef4941a9bf43761f7725f583fc3f3badb6fea7c6418557e0148302b88cb133c86377ec6711cd9024353f8ea897bead81dbffd0efa57d24677f6803caf71c20a2d63cd32caf2a4fb78dddb156365b37bf35e71", 0x7, 0x0, 0x1, {0x2}}, 0x4) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x181100, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x280, 0x100}, 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0x3f, 0x7, 0x74, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x10000, 0x5, 0x6, 0x6, 0x5, 0x1, 0x6, 0x0, 0x1, 0x0, 0x7ff}, 0xffffffffffffffff, 0x8, r8, 0x0) 01:49:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x10000c8) 01:49:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:49:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xfbffffff00000000, 0x1000002) 01:49:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2, 0x0, 0x0, "9c13"}) 01:49:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:49:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000201) 01:49:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:49:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r1, 0x7f, 0x0, 0x0, 0x2}, 0x8) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040, 0x0, {0x0, r3}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, {0x0, r3}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xffff, 0x410001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000003, 0x810, r1, 0x0) io_uring_enter(r4, 0x7b7e, 0x98, 0x1, &(0x7f0000000180)={[0x2]}, 0x8) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:49:58 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f00000001c0)="4756017fd4256ed1d589cc8342d256c2bac14093f4b98870acee67a92cb1f446e488d81392cdab8179d9511cec5bd3a52d6f952ba1a949d5e2bb8678430ef4941a9bf43761f7725f583fc3f3badb6fea7c6418557e0148302b88cb133c86377ec6711cd9024353f8ea897bead81dbffd0efa57d24677f6803caf71c20a2d63cd32caf2a4fb78dddb156365b37bf35e71", 0x7, 0x0, 0x1, {0x2}}, 0x4) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x181100, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x280, 0x100}, 0x4) 01:49:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xfeffffff00000000, 0x1000002) 01:49:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000380)) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:50:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:50:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2, 0x0, 0x0, "9c13"}) 01:50:14 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f00000001c0)="4756017fd4256ed1d589cc8342d256c2bac14093f4b98870acee67a92cb1f446e488d81392cdab8179d9511cec5bd3a52d6f952ba1a949d5e2bb8678430ef4941a9bf43761f7725f583fc3f3badb6fea7c6418557e0148302b88cb133c86377ec6711cd9024353f8ea897bead81dbffd0efa57d24677f6803caf71c20a2d63cd32caf2a4fb78dddb156365b37bf35e71", 0x7, 0x0, 0x1, {0x2}}, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x181100, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x7}, 0x7) 01:50:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000380)) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:50:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xff01000000000000, 0x1000002) 01:50:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000300) 01:50:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:50:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x69, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:50:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:50:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0xa, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}, {0x800, 0xde4a, 0x7, '\x00', 0x2805}]}) 01:50:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xffffff7f00000000, 0x1000002) 01:50:15 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f00000001c0)="4756017fd4256ed1d589cc8342d256c2bac14093f4b98870acee67a92cb1f446e488d81392cdab8179d9511cec5bd3a52d6f952ba1a949d5e2bb8678430ef4941a9bf43761f7725f583fc3f3badb6fea7c6418557e0148302b88cb133c86377ec6711cd9024353f8ea897bead81dbffd0efa57d24677f6803caf71c20a2d63cd32caf2a4fb78dddb156365b37bf35e71", 0x7, 0x0, 0x1, {0x2}}, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x181100, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040}, 0xffffffff) 01:50:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000301) 01:50:15 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:50:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xffffffff00000000, 0x1000002) 01:50:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0x9, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}, {0x6, 0xd5c, 0x101, '\x00', 0x1008}]}) 01:50:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000500) 01:50:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000003) 01:50:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:50:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000380)) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:50:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000004) 01:50:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0x8, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}, {0x9, 0x4, 0x100000000}]}) 01:50:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000501) 01:50:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:50:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:50:30 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f00000001c0)="4756017fd4256ed1d589cc8342d256c2bac14093f4b98870acee67a92cb1f446e488d81392cdab8179d9511cec5bd3a52d6f952ba1a949d5e2bb8678430ef4941a9bf43761f7725f583fc3f3badb6fea7c6418557e0148302b88cb133c86377ec6711cd9024353f8ea897bead81dbffd0efa57d24677f6803caf71c20a2d63cd32caf2a4fb78dddb156365b37bf35e71", 0x7, 0x0, 0x1, {0x2}}, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x181100, 0x0) 01:50:30 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x89) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0xff) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x8, 0x80, 0x1f, 0x3d, 0x0, 0xc63, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x8840, 0x1, 0x4, 0x2, 0x10001, 0x6, 0x0, 0x0, 0x85c, 0x0, 0x3f}, r0, 0xd, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000180)='net/packet\x00') perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x3, 0xab, 0x5, 0x0, 0x56fecd9c, 0x4008, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x1, 0x3, 0x2, 0x6, 0x7, 0x5, 0x0, 0xffffff01, 0x0, 0x3e7}, r3, 0xe, 0xffffffffffffffff, 0x8) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) 01:50:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000380)) 01:50:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:50:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0x7, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}, {0x7, 0x1, 0x1ff, '\x00', 0x2006}]}) 01:50:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000006) 01:50:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000600) 01:50:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0x6, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}, {0x1000, 0x0, 0x4, '\x00', 0x2c0c}]}) 01:50:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000601) 01:50:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0x5, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}, {0xffffffffffffff01, 0x1, 0x1}]}) 01:50:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000700) 01:50:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000008) 01:50:30 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f00000001c0)="4756017fd4256ed1d589cc8342d256c2bac14093f4b98870acee67a92cb1f446e488d81392cdab8179d9511cec5bd3a52d6f952ba1a949d5e2bb8678430ef4941a9bf43761f7725f583fc3f3badb6fea7c6418557e0148302b88cb133c86377ec6711cd9024353f8ea897bead81dbffd0efa57d24677f6803caf71c20a2d63cd32caf2a4fb78dddb156365b37bf35e71", 0x7, 0x0, 0x1, {0x2}}, 0x4) 01:50:30 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48488}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000200)) syz_io_uring_setup(0x429, &(0x7f0000000000)={0x0, 0xa7f8, 0x4, 0x3, 0x7a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd_index=0x9, 0x6, &(0x7f0000000140)=""/97, 0x61, 0x2d, 0x0, {0x0, r2}}, 0x100000) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:50:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000701) 01:50:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x100000d) 01:50:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) 01:50:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000801) 01:50:46 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:50:46 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x0, 0x1, 0x85, 0x81, 0x0, 0x6, 0x20000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x3f}, 0x10400, 0x11d, 0x9, 0x0, 0x4, 0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x183c}, 0x0, 0x9, 0xffffffffffffffff, 0x9) 01:50:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0x4, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}, {0xfff, 0xab2, 0x408, '\x00', 0x4}]}) 01:50:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:50:46 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/packet\x00') r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r3, &(0x7f0000000640)=ANY=[], 0x120) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000180)='net/packet\x00') sched_setparam(r5, &(0x7f00000014c0)=0xb3) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0xc697044f24b0a125, 0xfffffffffffffffb, 0x68, 0x81, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/86, 0x56}, {&(0x7f0000000040)=""/7, 0x7}]}, &(0x7f0000000280)="f55dce220134d134c020bc9b0c7050d93bd4b21768e5c367de8e8597d3a823e433101dc811843a897c5bce1be24d50e05e604bd437af1907de6c05f634d726c2f82de8a1ff0911cc897f3df653890f9c05a776a10b0f70d30862e767492a144e65af70a67e9ff3c2", &(0x7f0000000300)=""/101, 0x9d41, 0x0, 0x1, &(0x7f0000000380)}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001540)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {r3}}, './file0\x00'}) ioctl$FITRIM(r7, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffffa, 0x5d14, 0x5}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="3e00000015bff1b742cd98f0b0c775d7540587f604526b4eb894241a7f5f7b664dc387e2c2b568605c80c3da3c4d3fc38068750f2f895eef77ddc4cbdabde223f07034d7c07ada2a88bb15870f3be9fe4a07b13a8a3cb77c51200af86a4fcc286890d21e05c7004ba0fd235f99af1c4c6e69159684"]) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000001500)={0xc, 0x6, 0x5, "bb470a75c2edd7be7dc803a5"}) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) read(r3, &(0x7f00000004c0)=""/4096, 0x1000) 01:50:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000900) 01:50:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0x3, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}, {0x0, 0x0, 0xfe, '\x00', 0x101}]}) 01:50:46 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) 01:50:46 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)) 01:51:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0x2, [{0x4, 0x9, 0x9, '\x00', 0xa04}, {0xed6c, 0x1f, 0x4, '\x00', 0x208b}]}) 01:51:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x100000f) 01:51:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:51:01 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r3, 0x8000000) 01:51:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:51:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) 01:51:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)) 01:51:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000901) 01:51:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2, 0x0, 0x0, 0x1, [{0x4, 0x9, 0x9, '\x00', 0xa04}]}) 01:51:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000a00) 01:51:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0xcc2}) 01:51:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000010) 01:51:01 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 01:51:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000a01) 01:51:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x10000c8) 01:51:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000201) 01:51:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:51:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)) 01:51:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) 01:51:16 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 01:51:16 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26d112c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x5, 0x0, 0x1}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:51:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:51:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000b00) 01:51:33 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) 01:51:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x6000, @fd=r2, 0x8, 0x401, 0x8a5, 0x10, 0x1, {0x2}}, 0x3f) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:51:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) 01:51:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000300) 01:51:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000b01) 01:51:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:51:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000540)=@random={'trusted.', 'cgroup.subtree_control\x00'}, 0x0, 0x0, 0x0) 01:51:33 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227b, 0x0) 01:51:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000c00) 01:51:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000c01) 01:51:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000301) 01:51:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000d00) 01:51:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:51:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000d01) 01:51:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) r2 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x7ffffffffffffe01, r6, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000280)) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x8, 0x3, 0x1, {0x0, 0x0, r6}}, 0x8) 01:51:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000e00) 01:51:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000540)=@random={'trusted.', 'cgroup.subtree_control\x00'}, 0x0, 0x0, 0x0) 01:51:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) 01:51:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000500) 01:51:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:51:47 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 01:51:47 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227a, 0x0) 01:51:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000e01) 01:51:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x4, 0xc0182) 01:51:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x2276, 0x0) 01:51:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000501) 01:51:48 executing program 5: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x80) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) 01:51:48 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:51:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:51:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f00) 01:51:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:51:48 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x2272, 0x0) 01:51:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000600) 01:51:48 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000070000001a830000824c4cbdcb43ad9642b40d98edc2db50357faad73f080ed0434eb9fbc9c5fa9b22f55b812e214a8a"]) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:51:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:51:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x871, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0x7fff, 0x80000001, 0xb1a, 0x7f, 0xbe, 0xfff}) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:52:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:52:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:52:03 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:52:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:52:03 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x2201, 0x0) 01:52:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) write$cgroup_int(r1, &(0x7f0000000000)=0x20, 0x12) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) connect(r1, &(0x7f0000000040)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80) 01:52:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f01) 01:52:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000601) 01:52:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001001) 01:52:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:52:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000700) 01:52:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:52:03 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000540)=@random={'trusted.', 'cgroup.subtree_control\x00'}, 0x0, 0x1000000, 0x0) 01:52:03 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:52:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) fsmount(r0, 0x1, 0x78) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:52:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001100) 01:52:18 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:52:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:52:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001101) 01:52:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xeffffffffffffe01, r0, &(0x7f0000000500), 0x10000000000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x96) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000180)='net/packet\x00') syz_open_procfs(r2, &(0x7f0000000040)='net/arp\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r3, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ftruncate(r4, 0x101) 01:52:18 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000540)=@random={'trusted.', 'cgroup.subtree_control\x00'}, 0x0, 0x1000000, 0x0) 01:52:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000701) 01:52:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:52:18 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:52:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:52:19 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:52:19 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:52:19 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x1274, 0x0) 01:52:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001200) 01:52:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000801) 01:52:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:52:34 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:52:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:52:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000900) 01:52:34 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001640), 0xc91ef49d720b617a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r2, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) sendfile(r2, r1, &(0x7f0000000000)=0x347, 0x8000) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) stat(&(0x7f0000001440)='.\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r4) stat(&(0x7f0000001440)='.\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r5) stat(&(0x7f0000001440)='.\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0x0, r7) sendmsg$unix(r3, &(0x7f0000001600)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)="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", 0xfe}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f00000000c0)="1016f2defc71a777da60c63958bf682db2b4bad81226e77d558dc219500ab632dc33", 0x22}], 0x3, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}], 0x90}, 0x4000) 01:52:34 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x1274, 0x0) 01:52:34 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:52:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:52:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001201) 01:52:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001300) 01:52:34 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2270, 0x0) 01:52:34 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:52:34 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:52:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) (fail_nth: 1) 01:52:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000901) 01:52:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$FITHAW(r1, 0xc0045878) [ 1869.473620] FAULT_INJECTION: forcing a failure. [ 1869.473620] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.475198] CPU: 0 PID: 10997 Comm: syz-executor.2 Not tainted 5.10.258 #1 [ 1869.476056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1869.477083] Call Trace: [ 1869.477414] dump_stack+0x107/0x167 [ 1869.477872] should_fail.cold+0x5/0xa [ 1869.478344] ? sg_scsi_ioctl+0x3fb/0x7b0 [ 1869.478858] should_failslab+0x5/0x20 [ 1869.479325] __kmalloc+0x72/0x390 [ 1869.479761] sg_scsi_ioctl+0x3fb/0x7b0 [ 1869.480259] sg_ioctl_common+0xdf7/0x2570 [ 1869.480775] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1869.481413] ? do_vfs_ioctl+0x283/0x10d0 [ 1869.481913] ? sg_write+0x120/0x120 [ 1869.482362] ? generic_block_fiemap+0x60/0x60 [ 1869.482922] ? file_has_perm+0x183/0x280 [ 1869.483427] ? inode_has_perm+0x1d0/0x1d0 [ 1869.483952] ? wait_for_completion_io+0x270/0x270 [ 1869.484560] ? selinux_file_ioctl+0xb6/0x270 [ 1869.485103] ? sg_compat_ioctl+0x120/0x120 [ 1869.485626] sg_ioctl+0x8f/0x120 [ 1869.486048] __x64_sys_ioctl+0x19a/0x210 [ 1869.486561] do_syscall_64+0x33/0x40 [ 1869.487027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1869.487655] RIP: 0033:0x7f21f83f0b19 [ 1869.488118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1869.490378] RSP: 002b:00007f21f5966188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1869.491334] RAX: ffffffffffffffda RBX: 00007f21f8503f60 RCX: 00007f21f83f0b19 [ 1869.492216] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000004 [ 1869.493098] RBP: 00007f21f59661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1869.493978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.494860] R13: 00007ffc4c3e627f R14: 00007f21f5966300 R15: 0000000000022000 01:52:34 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:52:34 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2270, 0x0) 01:52:50 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:52:50 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2270, 0x0) 01:52:50 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x5fdf, 0x7, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:52:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:52:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001301) 01:52:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:52:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000a00) 01:52:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) (fail_nth: 2) [ 1885.217635] FAULT_INJECTION: forcing a failure. [ 1885.217635] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.220182] CPU: 1 PID: 11057 Comm: syz-executor.2 Not tainted 5.10.258 #1 [ 1885.221656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1885.223404] Call Trace: [ 1885.223965] dump_stack+0x107/0x167 [ 1885.224736] should_fail.cold+0x5/0xa [ 1885.225543] ? create_object.isra.0+0x3a/0xa30 [ 1885.226509] should_failslab+0x5/0x20 [ 1885.227320] kmem_cache_alloc+0x5b/0x310 [ 1885.228181] ? __might_fault+0xd3/0x180 [ 1885.229028] create_object.isra.0+0x3a/0xa30 [ 1885.229951] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1885.231035] __kmalloc+0x16e/0x390 [ 1885.231780] sg_scsi_ioctl+0x3fb/0x7b0 [ 1885.232606] sg_ioctl_common+0xdf7/0x2570 [ 1885.233483] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1885.234558] ? do_vfs_ioctl+0x283/0x10d0 [ 1885.235423] ? sg_write+0x120/0x120 [ 1885.236182] ? generic_block_fiemap+0x60/0x60 [ 1885.237116] ? file_has_perm+0x183/0x280 [ 1885.237967] ? inode_has_perm+0x1d0/0x1d0 [ 1885.238847] ? wait_for_completion_io+0x270/0x270 [ 1885.239864] ? selinux_file_ioctl+0xb6/0x270 [ 1885.240782] ? sg_compat_ioctl+0x120/0x120 [ 1885.241655] sg_ioctl+0x8f/0x120 [ 1885.242374] __x64_sys_ioctl+0x19a/0x210 [ 1885.243291] do_syscall_64+0x33/0x40 [ 1885.244065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1885.245102] RIP: 0033:0x7f21f83f0b19 [ 1885.245881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1885.249713] RSP: 002b:00007f21f5966188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1885.251301] RAX: ffffffffffffffda RBX: 00007f21f8503f60 RCX: 00007f21f83f0b19 [ 1885.252786] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000004 [ 1885.254285] RBP: 00007f21f59661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1885.255771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.257249] R13: 00007ffc4c3e627f R14: 00007f21f5966300 R15: 0000000000022000 01:52:50 executing program 7: syz_io_uring_setup(0x16eb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:52:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001400) 01:52:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:52:50 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:52:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000a01) 01:52:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0xfffffffffffffffc, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000040)=0x1) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000800)) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) r4 = accept(r2, &(0x7f0000000080)=@tipc=@name, &(0x7f0000000180)=0x80) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x50, r4, 0x24fa0000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000000)) 01:52:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) (fail_nth: 3) [ 1885.529408] FAULT_INJECTION: forcing a failure. [ 1885.529408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.532054] CPU: 0 PID: 11182 Comm: syz-executor.2 Not tainted 5.10.258 #1 [ 1885.533507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1885.535253] Call Trace: [ 1885.535822] dump_stack+0x107/0x167 [ 1885.536596] should_fail.cold+0x5/0xa [ 1885.537417] _copy_from_user+0x2e/0x1b0 [ 1885.538261] sg_scsi_ioctl+0x24e/0x7b0 [ 1885.539129] sg_ioctl_common+0xdf7/0x2570 [ 1885.540008] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1885.541105] ? do_vfs_ioctl+0x283/0x10d0 [ 1885.541968] ? sg_write+0x120/0x120 [ 1885.542751] ? generic_block_fiemap+0x60/0x60 [ 1885.543690] ? file_has_perm+0x183/0x280 [ 1885.544556] ? inode_has_perm+0x1d0/0x1d0 [ 1885.545440] ? wait_for_completion_io+0x270/0x270 [ 1885.546489] ? selinux_file_ioctl+0xb6/0x270 [ 1885.547422] ? sg_compat_ioctl+0x120/0x120 [ 1885.548325] sg_ioctl+0x8f/0x120 [ 1885.549053] __x64_sys_ioctl+0x19a/0x210 [ 1885.549921] do_syscall_64+0x33/0x40 [ 1885.550719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1885.551793] RIP: 0033:0x7f21f83f0b19 [ 1885.552579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1885.556437] RSP: 002b:00007f21f5966188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1885.558051] RAX: ffffffffffffffda RBX: 00007f21f8503f60 RCX: 00007f21f83f0b19 [ 1885.559546] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000004 [ 1885.561038] RBP: 00007f21f59661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1885.562537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.564048] R13: 00007ffc4c3e627f R14: 00007f21f5966300 R15: 0000000000022000 [ 1901.205406] FAULT_INJECTION: forcing a failure. [ 1901.205406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.207962] CPU: 1 PID: 11194 Comm: syz-executor.2 Not tainted 5.10.258 #1 01:53:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) (fail_nth: 4) 01:53:06 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2, {0x5002}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000008c0)={0x18}) ioctl$SG_IO(r2, 0x2285, &(0x7f00000007c0)={0x53, 0xfffffffffffffffd, 0x53, 0xd7, @buffer={0x0, 0x1000, &(0x7f0000000900)=""/4096}, &(0x7f0000000680)="eb988581b652cd3a4c4308a16198212a12c11f22425745a4547d4924bc974ddb7edb0429f3e446a0c38f4a2375152af943ebbc7c7e6407ae02e729bc575be1e504812dddb1e707e433037be02256ce592e612c", &(0x7f0000000700)=""/65, 0x100, 0x0, 0x3, &(0x7f0000000780)}) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) 01:53:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001401) 01:53:06 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:53:06 executing program 7: syz_io_uring_setup(0x16eb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [ 1901.209617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1901.211425] Call Trace: [ 1901.211981] dump_stack+0x107/0x167 [ 1901.212751] should_fail.cold+0x5/0xa [ 1901.213558] _copy_from_user+0x2e/0x1b0 [ 1901.214400] sg_scsi_ioctl+0x2a2/0x7b0 [ 1901.215246] sg_ioctl_common+0xdf7/0x2570 [ 1901.216128] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1901.217216] ? do_vfs_ioctl+0x283/0x10d0 [ 1901.218045] ? sg_write+0x120/0x120 [ 1901.218820] ? generic_block_fiemap+0x60/0x60 01:53:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000b00) 01:53:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:53:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 1901.219758] ? file_has_perm+0x183/0x280 [ 1901.220778] ? inode_has_perm+0x1d0/0x1d0 [ 1901.221640] ? wait_for_completion_io+0x270/0x270 [ 1901.222634] ? selinux_file_ioctl+0xb6/0x270 [ 1901.223555] ? sg_compat_ioctl+0x120/0x120 [ 1901.224453] sg_ioctl+0x8f/0x120 [ 1901.225158] __x64_sys_ioctl+0x19a/0x210 [ 1901.226015] do_syscall_64+0x33/0x40 [ 1901.226839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1901.227955] RIP: 0033:0x7f21f83f0b19 [ 1901.228738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1901.232613] RSP: 002b:00007f21f5966188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.234207] RAX: ffffffffffffffda RBX: 00007f21f8503f60 RCX: 00007f21f83f0b19 [ 1901.235691] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000004 [ 1901.237190] RBP: 00007f21f59661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1901.238671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.240169] R13: 00007ffc4c3e627f R14: 00007f21f5966300 R15: 0000000000022000 01:53:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001500) 01:53:06 executing program 7: syz_io_uring_setup(0x16eb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:53:06 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:53:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000b01) 01:53:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001501) 01:53:06 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:53:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) (fail_nth: 5) 01:53:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:53:06 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r0, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x2, 0x81, 0x6, 0x3, 0x0, 0x10000, 0x28240, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x6, 0x1}, 0x400e0, 0xfffffffffffffffd, 0xcfc2, 0x5, 0x8, 0x7ff, 0x4, 0x0, 0x800, 0x0, 0xfffffffffffffff9}, 0x0, 0x7, r0, 0x3) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x5, 0x6, 0x6, 0x6, 0x0, 0x7fff, 0x36854, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x1448, 0x1912, 0x0, 0x4, 0x100000000, 0xffffffff, 0xfffe, 0x0, 0x1000}, r2, 0x1, 0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) [ 1901.500270] FAULT_INJECTION: forcing a failure. [ 1901.500270] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.502653] CPU: 1 PID: 11324 Comm: syz-executor.2 Not tainted 5.10.258 #1 [ 1901.504078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1901.505751] Call Trace: [ 1901.506296] dump_stack+0x107/0x167 [ 1901.507053] should_fail.cold+0x5/0xa [ 1901.507832] ? bio_alloc_bioset+0x3b7/0x600 [ 1901.508713] should_failslab+0x5/0x20 [ 1901.509486] __kmalloc+0x72/0x390 [ 1901.510196] bio_alloc_bioset+0x3b7/0x600 [ 1901.511056] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1901.512108] ? bvec_alloc+0x2f0/0x2f0 [ 1901.512877] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1901.513915] ? find_held_lock+0x2c/0x110 [ 1901.514764] blk_rq_map_kern+0x5be/0x9e0 [ 1901.515646] ? cap_capable+0x1cd/0x230 [ 1901.516443] ? blk_rq_append_bio+0x850/0x850 [ 1901.517356] ? capable+0xe1/0x100 [ 1901.518095] sg_scsi_ioctl+0x505/0x7b0 [ 1901.518919] sg_ioctl_common+0xdf7/0x2570 [ 1901.519796] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1901.520844] ? do_vfs_ioctl+0x283/0x10d0 [ 1901.521683] ? sg_write+0x120/0x120 [ 1901.522439] ? generic_block_fiemap+0x60/0x60 [ 1901.523399] ? file_has_perm+0x183/0x280 [ 1901.524242] ? inode_has_perm+0x1d0/0x1d0 [ 1901.525104] ? wait_for_completion_io+0x270/0x270 [ 1901.526119] ? selinux_file_ioctl+0xb6/0x270 [ 1901.527044] ? sg_compat_ioctl+0x120/0x120 [ 1901.527921] sg_ioctl+0x8f/0x120 [ 1901.528631] __x64_sys_ioctl+0x19a/0x210 [ 1901.529496] do_syscall_64+0x33/0x40 [ 1901.530298] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1901.531376] RIP: 0033:0x7f21f83f0b19 [ 1901.532170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1901.536109] RSP: 002b:00007f21f5966188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.537698] RAX: ffffffffffffffda RBX: 00007f21f8503f60 RCX: 00007f21f83f0b19 [ 1901.539181] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000004 [ 1901.540678] RBP: 00007f21f59661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1901.542147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.543634] R13: 00007ffc4c3e627f R14: 00007f21f5966300 R15: 0000000000022000 01:53:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001600) 01:53:24 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:53:24 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:53:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) (fail_nth: 6) 01:53:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:53:24 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:53:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:53:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000c00) [ 1919.573613] FAULT_INJECTION: forcing a failure. [ 1919.573613] name failslab, interval 1, probability 0, space 0, times 0 [ 1919.576087] CPU: 1 PID: 11348 Comm: syz-executor.2 Not tainted 5.10.258 #1 [ 1919.577552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1919.579316] Call Trace: [ 1919.579881] dump_stack+0x107/0x167 [ 1919.580662] should_fail.cold+0x5/0xa [ 1919.581472] ? create_object.isra.0+0x3a/0xa30 [ 1919.582445] should_failslab+0x5/0x20 [ 1919.583265] kmem_cache_alloc+0x5b/0x310 [ 1919.584132] create_object.isra.0+0x3a/0xa30 [ 1919.585060] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1919.586136] __kmalloc+0x16e/0x390 [ 1919.586900] bio_alloc_bioset+0x3b7/0x600 [ 1919.587785] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1919.588876] ? bvec_alloc+0x2f0/0x2f0 [ 1919.589680] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1919.590717] ? find_held_lock+0x2c/0x110 [ 1919.591600] blk_rq_map_kern+0x5be/0x9e0 [ 1919.592466] ? cap_capable+0x1cd/0x230 [ 1919.593298] ? blk_rq_append_bio+0x850/0x850 [ 1919.594236] ? capable+0xe1/0x100 [ 1919.594984] sg_scsi_ioctl+0x505/0x7b0 [ 1919.595798] sg_ioctl_common+0xdf7/0x2570 [ 1919.596683] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1919.597782] ? do_vfs_ioctl+0x283/0x10d0 [ 1919.598646] ? sg_write+0x120/0x120 [ 1919.599424] ? generic_block_fiemap+0x60/0x60 [ 1919.600374] ? file_has_perm+0x183/0x280 [ 1919.601236] ? inode_has_perm+0x1d0/0x1d0 [ 1919.602126] ? wait_for_completion_io+0x270/0x270 [ 1919.603224] ? selinux_file_ioctl+0xb6/0x270 [ 1919.604158] ? sg_compat_ioctl+0x120/0x120 [ 1919.605057] sg_ioctl+0x8f/0x120 [ 1919.605781] __x64_sys_ioctl+0x19a/0x210 [ 1919.606649] do_syscall_64+0x33/0x40 [ 1919.607453] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1919.608508] RIP: 0033:0x7f21f83f0b19 [ 1919.609295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1919.613193] RSP: 002b:00007f21f5966188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1919.614804] RAX: ffffffffffffffda RBX: 00007f21f8503f60 RCX: 00007f21f83f0b19 [ 1919.616321] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000004 [ 1919.617832] RBP: 00007f21f59661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1919.619348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.620858] R13: 00007ffc4c3e627f R14: 00007f21f5966300 R15: 0000000000022000 01:53:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:53:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001601) 01:53:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:53:24 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:53:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:53:40 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)=':.\x00') ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r2, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000280)) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000000)=0x1) 01:53:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001700) 01:53:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:53:40 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:53:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:53:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000c01) 01:53:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) (fail_nth: 7) 01:53:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:53:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 1935.305796] FAULT_INJECTION: forcing a failure. [ 1935.305796] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1935.308615] CPU: 1 PID: 11480 Comm: syz-executor.2 Not tainted 5.10.258 #1 [ 1935.310072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.311856] Call Trace: [ 1935.312416] dump_stack+0x107/0x167 [ 1935.313188] should_fail.cold+0x5/0xa [ 1935.313994] __alloc_pages_nodemask+0x182/0x600 [ 1935.314977] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1935.316263] ? bio_init+0x76/0x130 [ 1935.317026] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1935.318118] ? bvec_alloc+0x2f0/0x2f0 [ 1935.318925] alloc_pages_current+0x187/0x280 [ 1935.319867] blk_rq_map_kern+0x734/0x9e0 [ 1935.320735] ? blk_rq_append_bio+0x850/0x850 [ 1935.321669] ? capable+0xe1/0x100 [ 1935.322410] sg_scsi_ioctl+0x505/0x7b0 [ 1935.323253] sg_ioctl_common+0xdf7/0x2570 [ 1935.324129] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1935.325213] ? do_vfs_ioctl+0x283/0x10d0 [ 1935.326062] ? sg_write+0x120/0x120 [ 1935.326830] ? generic_block_fiemap+0x60/0x60 [ 1935.327782] ? file_has_perm+0x183/0x280 [ 1935.328657] ? inode_has_perm+0x1d0/0x1d0 [ 1935.329538] ? wait_for_completion_io+0x270/0x270 [ 1935.330562] ? selinux_file_ioctl+0xb6/0x270 [ 1935.331490] ? sg_compat_ioctl+0x120/0x120 [ 1935.332388] sg_ioctl+0x8f/0x120 [ 1935.333103] __x64_sys_ioctl+0x19a/0x210 [ 1935.333965] do_syscall_64+0x33/0x40 [ 1935.334751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1935.335828] RIP: 0033:0x7f21f83f0b19 [ 1935.336628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.340520] RSP: 002b:00007f21f5966188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1935.342132] RAX: ffffffffffffffda RBX: 00007f21f8503f60 RCX: 00007f21f83f0b19 [ 1935.343637] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000004 [ 1935.345150] RBP: 00007f21f59661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.346664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1935.348183] R13: 00007ffc4c3e627f R14: 00007f21f5966300 R15: 0000000000022000 01:53:40 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:53:40 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x0, 0x153}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 01:53:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001701) 01:53:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000d00) 01:53:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:53:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa098a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2000000000, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r1 = socket(0x6, 0x2, 0x8) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:53:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) (fail_nth: 8) 01:53:40 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:53:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001800) [ 1935.616843] FAULT_INJECTION: forcing a failure. [ 1935.616843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1935.619304] CPU: 1 PID: 11606 Comm: syz-executor.2 Not tainted 5.10.258 #1 [ 1935.620736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.622440] Call Trace: [ 1935.622988] dump_stack+0x107/0x167 [ 1935.623754] should_fail.cold+0x5/0xa [ 1935.624544] _copy_to_user+0x2e/0x180 [ 1935.625324] sg_scsi_ioctl+0x434/0x7b0 [ 1935.626140] sg_ioctl_common+0xdf7/0x2570 [ 1935.627000] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1935.628098] ? do_vfs_ioctl+0x283/0x10d0 [ 1935.628944] ? sg_write+0x120/0x120 [ 1935.629697] ? generic_block_fiemap+0x60/0x60 [ 1935.630621] ? file_has_perm+0x183/0x280 [ 1935.631461] ? inode_has_perm+0x1d0/0x1d0 [ 1935.632303] ? wait_for_completion_io+0x270/0x270 [ 1935.633296] ? selinux_file_ioctl+0xb6/0x270 [ 1935.634197] ? sg_compat_ioctl+0x120/0x120 [ 1935.635070] sg_ioctl+0x8f/0x120 [ 1935.635788] __x64_sys_ioctl+0x19a/0x210 [ 1935.636630] do_syscall_64+0x33/0x40 [ 1935.637399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1935.638463] RIP: 0033:0x7f21f83f0b19 [ 1935.639248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.642996] RSP: 002b:00007f21f5966188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1935.644566] RAX: ffffffffffffffda RBX: 00007f21f8503f60 RCX: 00007f21f83f0b19 [ 1935.646024] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000004 [ 1935.647480] RBP: 00007f21f59661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.648942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1935.650378] R13: 00007ffc4c3e627f R14: 00007f21f5966300 R15: 0000000000022000 01:54:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:54:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000d01) 01:54:03 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000280)) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="000000002e2c66696c6530002de7927a2b650de6dc633186ff9fb417cc778e2958dd9523d65855"]) 01:54:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:54:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:54:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001801) 01:54:03 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) (fail_nth: 9) 01:54:03 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [ 1958.088981] FAULT_INJECTION: forcing a failure. [ 1958.088981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1958.091613] CPU: 1 PID: 11632 Comm: syz-executor.2 Not tainted 5.10.258 #1 [ 1958.093105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.094882] Call Trace: [ 1958.095461] dump_stack+0x107/0x167 [ 1958.096247] should_fail.cold+0x5/0xa [ 1958.097080] _copy_to_user+0x2e/0x180 [ 1958.097907] simple_read_from_buffer+0xcc/0x160 [ 1958.098917] proc_fail_nth_read+0x198/0x230 [ 1958.099858] ? proc_sessionid_read+0x230/0x230 [ 1958.100841] ? security_file_permission+0xb1/0xe0 [ 1958.101891] ? proc_sessionid_read+0x230/0x230 [ 1958.102875] vfs_read+0x228/0x620 [ 1958.103633] ksys_read+0x12d/0x260 [ 1958.104393] ? vfs_write+0xb10/0xb10 [ 1958.105203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1958.106333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1958.107455] do_syscall_64+0x33/0x40 [ 1958.108260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1958.109365] RIP: 0033:0x7f21f83a369c [ 1958.110169] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1958.114158] RSP: 002b:00007f21f5966170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1958.115815] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21f83a369c [ 1958.117352] RDX: 000000000000000f RSI: 00007f21f59661e0 RDI: 0000000000000005 [ 1958.118884] RBP: 00007f21f59661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.120430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1958.121971] R13: 00007ffc4c3e627f R14: 00007f21f5966300 R15: 0000000000022000 01:54:03 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000180)) 01:54:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:54:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001900) 01:54:03 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:54:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000180)='net/packet\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x9, 0xff, 0x6, 0x0, 0x401, 0x10440, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x860, 0x1, 0x6, 0x9, 0x4, 0x1ff, 0x2400, 0x0, 0x7dc, 0x0, 0x101}, r1, 0x9, r2, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x1000, 0x7, @scatter={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/152, 0x98}]}, &(0x7f00000004c0)="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", &(0x7f0000000300)=""/4, 0x10001, 0x10, 0x3, &(0x7f0000000340)}) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:54:03 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000180)) 01:54:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:54:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000e00) 01:54:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001901) 01:54:16 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r3, &(0x7f0000001640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b1e6c87906959d80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000e0ffffffffffffff0000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c59b91ed29828a3438e6dc57cae25cafa9c2e267dc49b6024538ae8199d14f6f672900318b2a9c14d1b8f25e8e9925ecadaa0bfa703a313983ceed1a941bc33637c824194c239e484ec23e8b15f92a6075064137ce6eeb6daa8c1d403a43083a5d3993d057b1b4532"], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3, 0x5, 0x3, 0x5, 0x0, 0x7, 0x12000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7fff, 0xfffffffffffffffa}, 0x48000, 0x8001, 0x6, 0x0, 0x1, 0x401, 0xf7e9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, r0, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000240)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000800)={0x0, 0x1f, 0x8ac0, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000c00)={0x2, 0xe02c, @start={r6, 0x1, "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", "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"}, [0x400, 0xffffffffffffffb0, 0xff, 0x3, 0x5, 0x9, 0xffffffffffffff7f, 0x100, 0x6, 0xd3, 0x3f, 0x81, 0xfffffffffffffffb, 0x0, 0x2, 0x7fff, 0x7, 0x8000, 0x2, 0x9aa, 0x7, 0x7, 0x1ff, 0x2, 0x0, 0x5509, 0x6d, 0x8, 0x7, 0x401, 0x7, 0x101, 0x7, 0x5, 0x656, 0x3, 0x2, 0x22a, 0x10000, 0x7, 0x8, 0x6, 0x1ff, 0x81, 0x2, 0xffffffff, 0xffffffff, 0x8, 0xffffffffffff0000, 0x1, 0x6, 0x1ff, 0x7fff, 0x8001, 0x1, 0xfffffffffffffff7, 0x7fff, 0x8, 0x8, 0x81, 0x8, 0xbf5c, 0x2, 0x5]}) openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 01:54:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, 0x0, 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:54:16 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000000180)) 01:54:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, 0x0, 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:54:16 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:54:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:54:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000e01) 01:54:16 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), 0x0) 01:54:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f00) 01:54:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, 0x0, 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:54:16 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:54:16 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), 0x0) 01:54:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001a00) 01:54:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f01) 01:54:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001a01) 01:54:16 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), 0x0) 01:54:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, 0x0, 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:54:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001b00) 01:54:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001001) 01:54:32 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 1) 01:54:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:54:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001100) 01:54:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001b01) 01:54:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x3, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) [ 1987.252039] FAULT_INJECTION: forcing a failure. [ 1987.252039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1987.254987] CPU: 1 PID: 12034 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 1987.256678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1987.258684] Call Trace: [ 1987.259332] dump_stack+0x107/0x167 [ 1987.260213] should_fail.cold+0x5/0xa [ 1987.261130] _copy_from_user+0x2e/0x1b0 [ 1987.262109] io_uring_setup+0x9b/0x2980 [ 1987.263091] ? __mutex_unlock_slowpath+0xe1/0x600 01:54:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, 0x0, 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:54:32 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@empty, r0}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', r0, 0x8, 0x40, 0x9, 0x9, {{0x7, 0x4, 0x0, 0x10, 0x1c, 0x66, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101, {[@end, @generic={0x94, 0x4, "de17"}]}}}}}) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0x1a4, 0x4) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[], 0x120) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x3c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbd}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac0c, 0xfac0d]}, @NL80211_ATTR_SAE_PASSWORD={0x56, 0x115, "0c67021ae4a893ca1134520ea7fc788058d74bac3c28bcb2e7686365ab42f7533e6df707b429c47c9db778720814a8f86adf4ac300801d069f5cd1ff8658d4e4da54ae8cbe55ffa5db2e5f316cb76cc36d48"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7e07}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) r5 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x3f8, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x3f8}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x148, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x148}}, 0x4008000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x148, r7, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x400000000000000}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x4}, {0xc}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0x20}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) [ 1987.264389] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1987.265731] ? wait_for_completion_io+0x270/0x270 [ 1987.266903] ? rcu_read_lock_any_held+0x75/0xa0 [ 1987.268053] ? vfs_write+0x354/0xb10 01:54:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, 0x0, 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 1987.268965] ? fput_many+0x2f/0x1a0 [ 1987.269978] ? ksys_write+0x1a9/0x260 [ 1987.270930] ? __ia32_sys_read+0xb0/0xb0 [ 1987.271361] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1987.272035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1987.272061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1987.272090] do_syscall_64+0x33/0x40 [ 1987.276602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1987.277913] RIP: 0033:0x7f928d897b19 [ 1987.278860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1987.283608] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1987.283633] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 1987.283648] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 1987.283660] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 1987.283673] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 1987.283685] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 [ 1987.334767] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.5'. 01:54:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x9, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:54:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:54:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1267, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:54:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:54:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001c00) 01:54:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001101) 01:54:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="8807000000000000c910b03f3b3a7f08ea3a963fdd08fc010000000000000000000000000001010800000000000000000106000000000000010900000000dec0550a5de600000000800100010004010301060000"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[], 0x120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) 01:54:32 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 2) [ 1987.507619] FAULT_INJECTION: forcing a failure. [ 1987.507619] name failslab, interval 1, probability 0, space 0, times 0 [ 1987.509026] CPU: 0 PID: 12147 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 1987.509830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1987.510786] Call Trace: [ 1987.511099] dump_stack+0x107/0x167 [ 1987.511519] should_fail.cold+0x5/0xa [ 1987.511972] ? io_uring_setup+0x258/0x2980 [ 1987.512467] should_failslab+0x5/0x20 [ 1987.512913] kmem_cache_alloc_trace+0x55/0x320 [ 1987.513446] io_uring_setup+0x258/0x2980 [ 1987.513920] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1987.514479] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1987.515066] ? wait_for_completion_io+0x270/0x270 [ 1987.515643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1987.516263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1987.516859] do_syscall_64+0x33/0x40 [ 1987.517286] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1987.517883] RIP: 0033:0x7f928d897b19 [ 1987.518317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1987.520446] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1987.521348] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 1987.522179] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 1987.523006] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 1987.523832] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 1987.524654] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:54:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:54:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001c01) 01:54:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1274, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:54:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:54:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c"], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) 01:54:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001d00) [ 2006.725679] FAULT_INJECTION: forcing a failure. [ 2006.725679] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.728220] CPU: 1 PID: 12202 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2006.729684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2006.731439] Call Trace: [ 2006.732013] dump_stack+0x107/0x167 [ 2006.732801] should_fail.cold+0x5/0xa [ 2006.733616] ? create_object.isra.0+0x3a/0xa30 [ 2006.734587] should_failslab+0x5/0x20 [ 2006.735395] kmem_cache_alloc+0x5b/0x310 [ 2006.736279] create_object.isra.0+0x3a/0xa30 [ 2006.737215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2006.738297] kmem_cache_alloc_trace+0x151/0x320 [ 2006.739291] io_uring_setup+0x258/0x2980 [ 2006.740166] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2006.741195] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2006.742270] ? wait_for_completion_io+0x270/0x270 [ 2006.743324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2006.744439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2006.745531] do_syscall_64+0x33/0x40 [ 2006.746325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2006.747411] RIP: 0033:0x7f928d897b19 [ 2006.748204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:54:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001200) 01:54:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:54:51 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 3) 01:54:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1275, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:54:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001840), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r2, 0x19, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x48004) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r3, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) 01:54:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:54:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001d01) 01:54:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2006.752112] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 01:54:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001e00) [ 2006.754036] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2006.755608] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2006.757128] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2006.758645] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2006.760153] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:54:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:54:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:54:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2270, 0x0) 01:54:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001e01) 01:55:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:55:07 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2270, 0x0) 01:55:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001201) 01:55:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f00) 01:55:08 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x6, 0x7f, 0x5, 0x0, 0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000380)}, 0x10400, 0x2, 0x8, 0x0, 0xfffffffffffffffb, 0x4, 0x800, 0x0, 0x4, 0x0, 0x3ff}, 0xffffffffffffffff, 0xd, r0, 0xa) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) syz_io_uring_setup(0x2500, &(0x7f0000000000)={0x0, 0xd2f0, 0x1, 0x1, 0x2a}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x1, 0x4000, 0x1}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000240)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)={0x93, 0x1, 0x10001, "3740890dbb503cc3018fc7f94f691bfb99667d44e9cea27a972ce94084454fc8d481fa02c5563c67c1751ccefb7a02022c191bff24bf974e5aba396fe898711759fe464db0699a1a49e6e98086e9f1d3ebd66e6920a2ac828a51af3ef370a7fee2d360e3e01c808b47643968e4a4305af335853e00dae1a6c3b8fdb65d83798dc02857fadc2693777e203404112b4e9bd11ea2"}) 01:55:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, 0x0) 01:55:08 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 4) 01:55:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2201, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) [ 2022.943098] FAULT_INJECTION: forcing a failure. [ 2022.943098] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.945604] CPU: 1 PID: 12346 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2022.947079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.948854] Call Trace: [ 2022.949421] dump_stack+0x107/0x167 [ 2022.950198] should_fail.cold+0x5/0xa [ 2022.951014] ? io_uring_setup+0x33c/0x2980 [ 2022.951917] should_failslab+0x5/0x20 [ 2022.952744] __kmalloc+0x72/0x390 [ 2022.953481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.954580] io_uring_setup+0x33c/0x2980 [ 2022.955448] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.956483] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2022.957558] ? wait_for_completion_io+0x270/0x270 [ 2022.958608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.959725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.960829] do_syscall_64+0x33/0x40 [ 2022.961623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.962713] RIP: 0033:0x7f928d897b19 [ 2022.963503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.967416] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2022.969044] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2022.970558] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2022.972079] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2022.973617] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2022.975138] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:55:25 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2270, 0x0) 01:55:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f01) 01:55:25 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x20) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0xfa, 0x8a, 0x1, 0x0, 0x1, 0x25448, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x4, @perf_config_ext={0x2}, 0x5000, 0x80, 0xdf1, 0x5, 0xbb, 0x1ff, 0x8, 0x0, 0x0, 0x0, 0x1}, r1, 0x7, r2, 0x2) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:55:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2202, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001300) 01:55:25 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 5) 01:55:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:55:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, 0x0) 01:55:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002000) [ 2040.644382] FAULT_INJECTION: forcing a failure. [ 2040.644382] name failslab, interval 1, probability 0, space 0, times 0 [ 2040.646346] CPU: 1 PID: 12475 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2040.647474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2040.648873] Call Trace: [ 2040.649308] dump_stack+0x107/0x167 [ 2040.649928] should_fail.cold+0x5/0xa [ 2040.650554] ? create_object.isra.0+0x3a/0xa30 [ 2040.651325] should_failslab+0x5/0x20 [ 2040.651946] kmem_cache_alloc+0x5b/0x310 [ 2040.652664] create_object.isra.0+0x3a/0xa30 [ 2040.653387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2040.654256] __kmalloc+0x16e/0x390 [ 2040.654851] io_uring_setup+0x33c/0x2980 [ 2040.655527] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2040.656333] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2040.657178] ? wait_for_completion_io+0x270/0x270 [ 2040.658020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2040.658901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2040.659749] do_syscall_64+0x33/0x40 [ 2040.660415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2040.661281] RIP: 0033:0x7f928d897b19 [ 2040.661916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2040.665010] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2040.666291] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2040.667510] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2040.668719] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2040.669888] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2040.671081] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:55:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, 0x0) 01:55:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001301) 01:55:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2203, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:25 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2, @perf_bp={0x0, 0x7}, 0x80c0, 0x54c4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x6, 0x0, 0x2, 0x20, 0x0, 0x3, 0x40000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x12001, 0x6, 0x6, 0x2, 0x10001, 0x21c, 0x0, 0x0, 0x9b8, 0x0, 0x4}) fallocate(r1, 0x0, 0x0, 0x1000002) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x12, r1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10000, 0xd831, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknodat(r4, &(0x7f0000000180)='./file1\x00', 0x40, 0x5af594a0) copy_file_range(r3, &(0x7f0000000000)=0x10000, r0, 0x0, 0x6, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) 01:55:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:55:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2205, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002001) 01:55:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:55:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2270, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:55:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2271, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001400) 01:55:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c"], 0x120) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x8000) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000040)) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) 01:55:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002100) 01:55:41 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 6) 01:55:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2056.519480] FAULT_INJECTION: forcing a failure. [ 2056.519480] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.522079] CPU: 0 PID: 12735 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2056.523649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2056.525533] Call Trace: [ 2056.526137] dump_stack+0x107/0x167 [ 2056.526968] should_fail.cold+0x5/0xa [ 2056.527851] ? io_uring_setup+0x40b/0x2980 [ 2056.528835] should_failslab+0x5/0x20 [ 2056.529732] kmem_cache_alloc_trace+0x55/0x320 [ 2056.530783] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2056.531983] io_uring_setup+0x40b/0x2980 [ 2056.532970] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2056.534124] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2056.535329] ? wait_for_completion_io+0x270/0x270 [ 2056.536537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2056.537772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2056.539019] do_syscall_64+0x33/0x40 [ 2056.539923] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2056.541168] RIP: 0033:0x7f928d897b19 [ 2056.542066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2056.546408] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2056.548210] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2056.549907] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2056.551613] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2056.553327] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2056.555041] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:55:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffb, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:55:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2272, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002101) 01:55:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001401) 01:55:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, 0x0, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:55:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2275, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:58 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 7) 01:55:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002200) 01:55:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001500) 01:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x69, 0x7, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:55:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:55:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002201) [ 2073.588749] FAULT_INJECTION: forcing a failure. [ 2073.588749] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.591441] CPU: 1 PID: 12865 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2073.593035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2073.594925] Call Trace: [ 2073.595522] dump_stack+0x107/0x167 [ 2073.596346] should_fail.cold+0x5/0xa [ 2073.597231] ? create_object.isra.0+0x3a/0xa30 [ 2073.598261] should_failslab+0x5/0x20 [ 2073.599118] kmem_cache_alloc+0x5b/0x310 [ 2073.600041] create_object.isra.0+0x3a/0xa30 [ 2073.601046] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2073.602202] kmem_cache_alloc_trace+0x151/0x320 [ 2073.603266] io_uring_setup+0x40b/0x2980 [ 2073.604194] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2073.605298] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2073.606436] ? wait_for_completion_io+0x270/0x270 [ 2073.607561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2073.608772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2073.609945] do_syscall_64+0x33/0x40 [ 2073.610783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2073.611935] RIP: 0033:0x7f928d897b19 01:55:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002300) [ 2073.612788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2073.617101] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2073.618827] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2073.620442] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2073.622064] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2073.623682] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2073.625311] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:55:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001501) 01:55:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002301) 01:55:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x69, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:55:58 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r3, &(0x7f0000001640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b1e6c87906959d80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000e0ffffffffffffff0000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c59b91ed29828a3438e6dc57cae25cafa9c2e267dc49b6024538ae8199d14f6f672900318b2a9c14d1b8f25e8e9925ecadaa0bfa703a313983ceed1a941bc33637c824194c239e484ec23e8b15f92a6075064137ce6eeb6daa8c1d403a43083a5d3993d057b1b4532"], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3, 0x5, 0x3, 0x5, 0x0, 0x7, 0x12000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7fff, 0xfffffffffffffffa}, 0x48000, 0x8001, 0x6, 0x0, 0x1, 0x401, 0xf7e9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, r0, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000240)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000800)={0x0, 0x1f, 0x8ac0, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000c00)={0x2, 0xe02c, @start={r6, 0x1, "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", "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"}, [0x400, 0xffffffffffffffb0, 0xff, 0x3, 0x5, 0x9, 0xffffffffffffff7f, 0x100, 0x6, 0xd3, 0x3f, 0x81, 0xfffffffffffffffb, 0x0, 0x2, 0x7fff, 0x7, 0x8000, 0x2, 0x9aa, 0x7, 0x7, 0x1ff, 0x2, 0x0, 0x5509, 0x6d, 0x8, 0x7, 0x401, 0x7, 0x101, 0x7, 0x5, 0x656, 0x3, 0x2, 0x22a, 0x10000, 0x7, 0x8, 0x6, 0x1ff, 0x81, 0x2, 0xffffffff, 0xffffffff, 0x8, 0xffffffffffff0000, 0x1, 0x6, 0x1ff, 0x7fff, 0x8001, 0x1, 0xfffffffffffffff7, 0x7fff, 0x8, 0x8, 0x81, 0x8, 0xbf5c, 0x2, 0x5]}) openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 01:55:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:55:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002400) 01:55:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2279, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001600) 01:56:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x69, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:56:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002401) [ 2090.925283] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2090.926288] FAULT_INJECTION: forcing a failure. [ 2090.926288] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.926591] sd 0:0:0:0: [sg0] tag#0 CDB: Read(10) [ 2090.929359] CPU: 1 PID: 13019 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2090.929972] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 28 78 79 31 d9 8d b9 d5 73 9b 87 15 a9 ed fb 94 [ 2090.931679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2090.931687] Call Trace: [ 2090.931716] dump_stack+0x107/0x167 [ 2090.932835] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 9a e4 01 18 c8 71 12 01 a8 da d7 85 fe 58 e0 38 [ 2090.934952] should_fail.cold+0x5/0xa [ 2090.934979] ? create_object.isra.0+0x3a/0xa30 [ 2090.935314] sd 0:0:0:0: [sg0] tag#0 CDB[20]: 4d cb c5 ba 3f 25 b0 e9 cc 67 96 a4 97 7d f0 7b [ 2090.936235] should_failslab+0x5/0x20 [ 2090.936260] kmem_cache_alloc+0x5b/0x310 [ 2090.937358] sd 0:0:0:0: [sg0] tag#0 CDB[30]: de d8 ae e0 90 51 ac 45 53 62 f9 e7 08 10 ea f9 [ 2090.938313] create_object.isra.0+0x3a/0xa30 [ 2090.938343] kmemleak_alloc_percpu+0xa0/0x100 [ 2090.938935] sd 0:0:0:0: [sg0] tag#0 CDB[40]: b1 29 83 69 70 24 c8 b8 dd f2 e9 10 9d 1c 35 fb [ 2090.941058] pcpu_alloc+0x4e2/0x1240 [ 2090.941100] ? io_tctx_exit_cb+0xf0/0xf0 [ 2090.941577] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 34 c6 fc 53 02 85 13 b7 a3 52 38 a5 32 88 1b 06 [ 2090.942610] percpu_ref_init+0x31/0x3d0 [ 2090.942641] io_uring_setup+0x47a/0x2980 [ 2090.943723] sd 0:0:0:0: [sg0] tag#0 CDB[60]: e2 1e cf 62 e3 e8 3e a1 8f [ 2090.944814] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2090.944855] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2090.957723] ? wait_for_completion_io+0x270/0x270 [ 2090.958967] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2090.960285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2090.961644] do_syscall_64+0x33/0x40 [ 2090.962607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2090.963921] RIP: 0033:0x7f928d897b19 [ 2090.964882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2090.969487] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2090.971066] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2090.972557] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2090.974053] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2090.975551] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 01:56:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227a, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:16 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 8) 01:56:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2090.977049] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:56:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) (fail_nth: 1) 01:56:16 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x69, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2090.999183] FAULT_INJECTION: forcing a failure. [ 2090.999183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2091.001731] CPU: 1 PID: 13023 Comm: syz-executor.5 Not tainted 5.10.258 #1 [ 2091.003192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2091.004931] Call Trace: [ 2091.005486] dump_stack+0x107/0x167 [ 2091.006269] should_fail.cold+0x5/0xa [ 2091.007081] _copy_to_user+0x2e/0x180 [ 2091.007892] simple_read_from_buffer+0xcc/0x160 [ 2091.008881] proc_fail_nth_read+0x198/0x230 [ 2091.009800] ? proc_sessionid_read+0x230/0x230 [ 2091.010764] ? security_file_permission+0xb1/0xe0 [ 2091.011796] ? proc_sessionid_read+0x230/0x230 [ 2091.012755] vfs_read+0x228/0x620 [ 2091.013504] ksys_read+0x12d/0x260 [ 2091.014264] ? vfs_write+0xb10/0xb10 [ 2091.015053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2091.016166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2091.017267] do_syscall_64+0x33/0x40 [ 2091.018059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2091.019147] RIP: 0033:0x7f56e56dd69c [ 2091.019929] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2091.023762] RSP: 002b:00007f56e2ca0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2091.025375] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f56e56dd69c [ 2091.026852] RDX: 000000000000000f RSI: 00007f56e2ca01e0 RDI: 0000000000000005 01:56:16 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) [ 2091.028353] RBP: 00007f56e2ca01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2091.029970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2091.031517] R13: 00007ffe55a77f4f R14: 00007f56e2ca0300 R15: 0000000000022000 01:56:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002500) 01:56:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001601) 01:56:16 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227b, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 01:56:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:56:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227c, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002501) 01:56:33 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 9) 01:56:33 executing program 3: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x69, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee09051ac455362f9e70810eaf9b12983697024c8b8ddf2e9109d1c35fb34c6fc53028513b7a35238a532881b06e21ecf62e3e83ea18f", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:56:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001700) [ 2107.957144] FAULT_INJECTION: forcing a failure. [ 2107.957144] name failslab, interval 1, probability 0, space 0, times 0 [ 2107.959541] CPU: 1 PID: 13167 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2107.961000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2107.962232] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2107.962774] Call Trace: [ 2107.962801] dump_stack+0x107/0x167 [ 2107.962824] should_fail.cold+0x5/0xa [ 2107.962852] ? create_object.isra.0+0x3a/0xa30 [ 2107.964871] sd 0:0:0:0: [sg0] tag#0 CDB: Read(10) [ 2107.965393] should_failslab+0x5/0x20 [ 2107.966217] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 28 78 79 31 d9 8d b9 d5 73 9b 87 15 a9 ed fb 94 [ 2107.966942] kmem_cache_alloc+0x5b/0x310 [ 2107.966970] create_object.isra.0+0x3a/0xa30 [ 2107.967942] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 9a e4 01 18 c8 71 12 01 a8 da d7 85 fe 58 e0 38 [ 2107.968930] kmemleak_alloc_percpu+0xa0/0x100 [ 2107.968956] pcpu_alloc+0x4e2/0x1240 [ 2107.969748] sd 0:0:0:0: [sg0] tag#0 CDB[20]: 4d cb c5 ba 3f 25 b0 e9 cc 67 96 a4 97 7d f0 7b [ 2107.971534] ? io_tctx_exit_cb+0xf0/0xf0 [ 2107.971557] percpu_ref_init+0x31/0x3d0 [ 2107.972435] sd 0:0:0:0: [sg0] tag#0 CDB[30]: de d8 ae e0 90 51 ac 45 53 62 f9 e7 08 10 ea f9 [ 2107.973339] io_uring_setup+0x47a/0x2980 [ 2107.973361] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2107.975161] sd 0:0:0:0: [sg0] tag#0 CDB[40]: b1 29 83 69 70 24 c8 b8 dd f2 e9 10 9d 1c 35 fb [ 2107.976074] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2107.976095] ? wait_for_completion_io+0x270/0x270 [ 2107.976892] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 34 c6 fc 53 02 85 13 b7 a3 52 38 a5 32 88 1b 06 [ 2107.978674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2107.978695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2107.978719] do_syscall_64+0x33/0x40 [ 2107.978740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2107.978767] RIP: 0033:0x7f928d897b19 [ 2107.979881] sd 0:0:0:0: [sg0] tag#0 CDB[60]: e2 1e cf 62 e3 e8 3e a1 8f [ 2107.980667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2107.999953] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2108.001562] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2108.003060] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2108.004562] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2108.006070] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2108.007568] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:56:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, 0x0, &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:56:33 executing program 3: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002600) 01:56:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227d, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:51 executing program 3: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1276, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, 0x0, &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:56:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:56:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002601) 01:56:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001701) 01:56:51 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2, 0x0) 01:56:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227e, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:51 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 10) [ 2126.591957] FAULT_INJECTION: forcing a failure. [ 2126.591957] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.594625] CPU: 1 PID: 13297 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2126.596177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.598056] Call Trace: [ 2126.598652] dump_stack+0x107/0x167 [ 2126.599477] should_fail.cold+0x5/0xa [ 2126.600334] ? percpu_ref_init+0xd8/0x3d0 [ 2126.601298] should_failslab+0x5/0x20 [ 2126.602168] kmem_cache_alloc_trace+0x55/0x320 [ 2126.603209] ? io_tctx_exit_cb+0xf0/0xf0 [ 2126.604130] percpu_ref_init+0xd8/0x3d0 [ 2126.605011] io_uring_setup+0x47a/0x2980 [ 2126.605939] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2126.607032] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2126.608179] ? wait_for_completion_io+0x270/0x270 [ 2126.609329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.610503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.611651] do_syscall_64+0x33/0x40 [ 2126.612501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2126.613681] RIP: 0033:0x7f928d897b19 [ 2126.614515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.618677] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2126.620379] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2126.622003] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2126.623598] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2126.625205] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2126.626828] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:56:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, 0x0, &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:56:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 01:56:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002700) 01:56:51 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1267, 0x0) 01:56:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001800) 01:56:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227f, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:56:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140), &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:56:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) (fail_nth: 1) 01:56:51 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 11) 01:56:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002701) 01:56:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0xffffffffffffffff, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:56:52 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1274, 0x0) [ 2126.933347] FAULT_INJECTION: forcing a failure. [ 2126.933347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2126.936019] CPU: 1 PID: 13425 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 2126.937605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.939450] Call Trace: [ 2126.940047] dump_stack+0x107/0x167 [ 2126.940866] should_fail.cold+0x5/0xa [ 2126.941756] _copy_to_user+0x2e/0x180 [ 2126.942617] simple_read_from_buffer+0xcc/0x160 [ 2126.943671] proc_fail_nth_read+0x198/0x230 [ 2126.944645] ? proc_sessionid_read+0x230/0x230 [ 2126.945706] ? security_file_permission+0xb1/0xe0 [ 2126.946801] ? proc_sessionid_read+0x230/0x230 [ 2126.947822] vfs_read+0x228/0x620 [ 2126.948607] ksys_read+0x12d/0x260 [ 2126.949438] ? vfs_write+0xb10/0xb10 [ 2126.950282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.951456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.952625] do_syscall_64+0x33/0x40 [ 2126.953488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2126.954641] RIP: 0033:0x7fdbc825e69c [ 2126.955473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2126.957515] FAULT_INJECTION: forcing a failure. [ 2126.957515] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.959607] RSP: 002b:00007fdbc5821170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2126.959631] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fdbc825e69c [ 2126.959655] RDX: 000000000000000f RSI: 00007fdbc58211e0 RDI: 0000000000000004 [ 2126.966867] RBP: 00007fdbc58211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2126.968462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.970066] R13: 00007fff778fb3bf R14: 00007fdbc5821300 R15: 0000000000022000 [ 2126.971694] CPU: 0 PID: 13429 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2126.973181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.974926] Call Trace: [ 2126.975488] dump_stack+0x107/0x167 [ 2126.976260] should_fail.cold+0x5/0xa [ 2126.977064] ? create_object.isra.0+0x3a/0xa30 [ 2126.978034] should_failslab+0x5/0x20 [ 2126.978837] kmem_cache_alloc+0x5b/0x310 [ 2126.979712] create_object.isra.0+0x3a/0xa30 [ 2126.980635] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2126.981724] kmem_cache_alloc_trace+0x151/0x320 [ 2126.982707] ? io_tctx_exit_cb+0xf0/0xf0 [ 2126.983557] percpu_ref_init+0xd8/0x3d0 [ 2126.984389] io_uring_setup+0x47a/0x2980 [ 2126.985256] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2126.986276] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2126.987337] ? wait_for_completion_io+0x270/0x270 [ 2126.988369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.989477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.990557] do_syscall_64+0x33/0x40 [ 2126.991350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2126.992424] RIP: 0033:0x7f928d897b19 [ 2126.993202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.997078] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2126.998680] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2127.000175] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2127.001682] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2127.003155] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2127.004651] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:57:07 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 12) 01:57:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001801) 01:57:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 01:57:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002800) 01:57:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140), &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:57:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2282, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:57:07 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1275, 0x0) 01:57:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0xffffffffffffffff, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2142.745137] FAULT_INJECTION: forcing a failure. [ 2142.745137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2142.746810] CPU: 1 PID: 13451 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2142.747733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2142.748850] Call Trace: [ 2142.749212] dump_stack+0x107/0x167 [ 2142.749727] should_fail.cold+0x5/0xa [ 2142.750245] __alloc_pages_nodemask+0x182/0x600 [ 2142.750870] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2142.751696] ? cap_capable+0x1cd/0x230 [ 2142.752234] alloc_pages_current+0x187/0x280 [ 2142.752823] __get_free_pages+0xc/0xa0 [ 2142.753351] io_uring_setup+0xe27/0x2980 [ 2142.753942] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2142.754629] ? wait_for_completion_io+0x270/0x270 [ 2142.755306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2142.756010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2142.756707] do_syscall_64+0x33/0x40 [ 2142.757206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2142.757918] RIP: 0033:0x7f928d897b19 [ 2142.758413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2142.760872] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2142.761910] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2142.762873] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2142.763821] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2142.764777] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2142.765764] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:57:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2, 0x0) 01:57:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002801) 01:57:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2283, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:57:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001900) 01:57:07 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x1276, 0x0) 01:57:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140), &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:57:07 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 13) 01:57:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002900) 01:57:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001901) [ 2142.942585] FAULT_INJECTION: forcing a failure. [ 2142.942585] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2142.944053] CPU: 1 PID: 13580 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2142.944864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2142.945858] Call Trace: [ 2142.946172] dump_stack+0x107/0x167 [ 2142.946605] should_fail.cold+0x5/0xa [ 2142.947057] __alloc_pages_nodemask+0x182/0x600 [ 2142.947605] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2142.948326] ? cap_capable+0x1cd/0x230 [ 2142.948787] alloc_pages_current+0x187/0x280 [ 2142.949303] __get_free_pages+0xc/0xa0 [ 2142.949788] io_uring_setup+0xf9a/0x2980 [ 2142.950272] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2142.950868] ? wait_for_completion_io+0x270/0x270 [ 2142.951456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2142.952074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2142.952685] do_syscall_64+0x33/0x40 [ 2142.953129] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2142.953752] RIP: 0033:0x7f928d897b19 [ 2142.954199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2142.956500] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2142.957387] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2142.958240] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2142.959076] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2142.959911] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2142.960755] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:57:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1267, 0x0) 01:57:24 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 14) 01:57:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001a00) 01:57:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002901) 01:57:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:57:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0xffffffffffffffff, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:57:24 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2201, 0x0) [ 2159.509965] FAULT_INJECTION: forcing a failure. [ 2159.509965] name failslab, interval 1, probability 0, space 0, times 0 [ 2159.511849] CPU: 1 PID: 13601 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2159.512918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2159.514214] Call Trace: [ 2159.514631] dump_stack+0x107/0x167 [ 2159.515201] should_fail.cold+0x5/0xa [ 2159.515795] ? io_uring_setup+0x17ed/0x2980 [ 2159.516463] should_failslab+0x5/0x20 [ 2159.517053] kmem_cache_alloc_trace+0x55/0x320 [ 2159.517772] ? alloc_pages_current+0x18f/0x280 [ 2159.518489] io_uring_setup+0x17ed/0x2980 [ 2159.519140] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2159.519927] ? wait_for_completion_io+0x270/0x270 [ 2159.520704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2159.521507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2159.522322] do_syscall_64+0x33/0x40 [ 2159.522901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2159.523693] RIP: 0033:0x7f928d897b19 [ 2159.524280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2159.527125] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2159.528297] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2159.529397] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2159.530490] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2159.531592] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2159.532707] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:57:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x35, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad785fe58e0384dcbc5ba3f25b0e9cc6796a4977df07bded8aee090", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:57:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2285, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:57:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002a00) 01:57:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001a01) 01:57:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1274, 0x0) 01:57:24 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2202, 0x0) 01:57:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001b00) 01:57:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:57:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1275, 0x0) 01:57:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2203, 0x0) 01:57:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2286, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:57:41 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 15) 01:57:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:57:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002a01) [ 2176.045282] FAULT_INJECTION: forcing a failure. [ 2176.045282] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.048183] CPU: 1 PID: 13746 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2176.049917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2176.052002] Call Trace: [ 2176.052672] dump_stack+0x107/0x167 [ 2176.053598] should_fail.cold+0x5/0xa [ 2176.054563] ? create_object.isra.0+0x3a/0xa30 [ 2176.055697] should_failslab+0x5/0x20 [ 2176.056645] kmem_cache_alloc+0x5b/0x310 [ 2176.057668] create_object.isra.0+0x3a/0xa30 [ 2176.058740] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2176.059776] kmem_cache_alloc_trace+0x151/0x320 [ 2176.060768] ? alloc_pages_current+0x18f/0x280 [ 2176.061714] io_uring_setup+0x17ed/0x2980 [ 2176.062617] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2176.063650] ? wait_for_completion_io+0x270/0x270 [ 2176.064668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2176.065743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2176.066808] do_syscall_64+0x33/0x40 [ 2176.067563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2176.068602] RIP: 0033:0x7f928d897b19 [ 2176.069360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2176.073093] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2176.074687] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2176.076134] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2176.077580] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2176.079032] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2176.080477] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:57:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002b00) 01:57:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2201, 0x0) 01:57:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001b01) 01:57:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2287, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:57:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2205, 0x0) 01:57:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:57:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002b01) 01:57:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2202, 0x0) 01:57:41 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 16) [ 2176.339228] FAULT_INJECTION: forcing a failure. [ 2176.339228] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.342133] CPU: 1 PID: 13870 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2176.343890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2176.345913] Call Trace: [ 2176.346590] dump_stack+0x107/0x167 [ 2176.347513] should_fail.cold+0x5/0xa [ 2176.348454] ? copy_process+0x3305/0x78b0 [ 2176.349508] should_failslab+0x5/0x20 [ 2176.350433] kmem_cache_alloc_node+0x55/0x330 [ 2176.351522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2176.352810] copy_process+0x3305/0x78b0 [ 2176.353779] ? SOFTIRQ_verbose+0x10/0x10 [ 2176.354808] ? stack_trace_save+0x8c/0xc0 [ 2176.355869] ? __lock_acquire+0xbb1/0x5b00 [ 2176.356879] ? __cleanup_sighand+0xb0/0xb0 [ 2176.357917] ? perf_trace_lock+0xac/0x490 [ 2176.358963] ? perf_trace_lock+0xac/0x490 [ 2176.359968] ? __lockdep_reset_lock+0x180/0x180 [ 2176.361121] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2176.362353] create_io_thread+0xb6/0xf0 [ 2176.363370] ? pidfd_prepare+0x80/0x80 [ 2176.364352] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2176.365568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2176.366863] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2176.368126] ? trace_hardirqs_on+0x5b/0x180 [ 2176.369227] io_uring_setup+0x1d79/0x2980 [ 2176.370295] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2176.371564] ? wait_for_completion_io+0x270/0x270 [ 2176.372799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2176.374117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2176.375378] do_syscall_64+0x33/0x40 [ 2176.376268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2176.377573] RIP: 0033:0x7f928d897b19 [ 2176.378485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2176.382973] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2176.384855] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2176.386597] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2176.388371] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2176.390152] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2176.391881] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:57:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2288, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:57:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:57:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:57:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2203, 0x0) 01:57:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001c00) 01:57:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2193.969186] FAULT_INJECTION: forcing a failure. [ 2193.969186] name failslab, interval 1, probability 0, space 0, times 0 [ 2193.971637] CPU: 0 PID: 13992 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2193.973060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2193.974854] Call Trace: [ 2193.975413] dump_stack+0x107/0x167 [ 2193.976203] should_fail.cold+0x5/0xa [ 2193.977029] ? create_object.isra.0+0x3a/0xa30 [ 2193.978031] should_failslab+0x5/0x20 [ 2193.978854] kmem_cache_alloc+0x5b/0x310 [ 2193.979737] create_object.isra.0+0x3a/0xa30 [ 2193.980683] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2193.981786] kmem_cache_alloc_node+0x169/0x330 [ 2193.982791] copy_process+0x3305/0x78b0 [ 2193.983651] ? SOFTIRQ_verbose+0x10/0x10 [ 2193.984534] ? stack_trace_save+0x8c/0xc0 [ 2193.985436] ? __lock_acquire+0xbb1/0x5b00 [ 2193.986372] ? __cleanup_sighand+0xb0/0xb0 [ 2193.987301] ? perf_trace_lock+0xac/0x490 [ 2193.988205] ? perf_trace_lock+0xac/0x490 [ 2193.989106] ? __lockdep_reset_lock+0x180/0x180 [ 2193.990131] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2193.991185] create_io_thread+0xb6/0xf0 [ 2193.992041] ? pidfd_prepare+0x80/0x80 [ 2193.992887] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2193.993969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2193.995103] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2193.996189] ? trace_hardirqs_on+0x5b/0x180 01:57:59 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 17) 01:57:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002c00) 01:57:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2289, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:57:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1b, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9edfb949ae40118c8711201a8dad7", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:57:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2271, 0x0) [ 2193.997121] io_uring_setup+0x1d79/0x2980 [ 2193.998195] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2193.999231] ? wait_for_completion_io+0x270/0x270 [ 2194.000253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2194.001342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2194.002418] do_syscall_64+0x33/0x40 [ 2194.003176] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2194.004217] RIP: 0033:0x7f928d897b19 [ 2194.004976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2194.008731] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2194.010290] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2194.011733] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2194.013187] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2194.014660] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2194.016130] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:57:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2272, 0x0) 01:57:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x4b47, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:58:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002c01) 01:58:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:58:14 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 18) 01:58:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001c01) 01:58:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2275, 0x0) 01:58:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x4b49, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:58:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2205, 0x0) 01:58:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2209.225734] FAULT_INJECTION: forcing a failure. [ 2209.225734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2209.228366] CPU: 0 PID: 14126 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2209.229862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2209.231655] Call Trace: [ 2209.232232] dump_stack+0x107/0x167 [ 2209.233023] should_fail.cold+0x5/0xa [ 2209.233856] __alloc_pages_nodemask+0x182/0x600 [ 2209.234877] ? lock_downgrade+0x6d0/0x6d0 [ 2209.235787] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2209.237096] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2209.238246] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2209.239286] copy_process+0x62b/0x78b0 [ 2209.240131] ? SOFTIRQ_verbose+0x10/0x10 [ 2209.241023] ? stack_trace_save+0x8c/0xc0 [ 2209.241946] ? __lock_acquire+0xbb1/0x5b00 [ 2209.242885] ? __cleanup_sighand+0xb0/0xb0 [ 2209.243806] ? perf_trace_lock+0xac/0x490 [ 2209.244707] ? perf_trace_lock+0xac/0x490 [ 2209.245614] ? __lockdep_reset_lock+0x180/0x180 [ 2209.246642] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2209.247701] create_io_thread+0xb6/0xf0 [ 2209.248564] ? pidfd_prepare+0x80/0x80 [ 2209.249416] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2209.250494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2209.251630] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2209.252727] ? trace_hardirqs_on+0x5b/0x180 [ 2209.253664] io_uring_setup+0x1d79/0x2980 [ 2209.254578] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2209.255672] ? wait_for_completion_io+0x270/0x270 [ 2209.256740] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2209.257882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2209.259009] do_syscall_64+0x33/0x40 [ 2209.259816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2209.260926] RIP: 0033:0x7f928d897b19 [ 2209.261728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2209.265728] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2209.267379] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2209.268930] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2209.270500] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2209.272044] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2209.273591] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:58:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002d00) 01:58:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:58:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2270, 0x0) 01:58:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5382, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:58:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002d01) 01:58:14 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 19) 01:58:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2276, 0x0) 01:58:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2271, 0x0) 01:58:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2209.545728] FAULT_INJECTION: forcing a failure. [ 2209.545728] name failslab, interval 1, probability 0, space 0, times 0 [ 2209.548173] CPU: 0 PID: 14222 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2209.549661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2209.551466] Call Trace: [ 2209.552037] dump_stack+0x107/0x167 [ 2209.552823] should_fail.cold+0x5/0xa [ 2209.553649] ? __delayacct_tsk_init+0x1b/0x80 [ 2209.554622] should_failslab+0x5/0x20 [ 2209.555441] kmem_cache_alloc+0x5b/0x310 [ 2209.556325] __delayacct_tsk_init+0x1b/0x80 [ 2209.557255] copy_process+0x3399/0x78b0 [ 2209.558114] ? SOFTIRQ_verbose+0x10/0x10 [ 2209.559007] ? stack_trace_save+0x8c/0xc0 [ 2209.559908] ? __lock_acquire+0xbb1/0x5b00 [ 2209.560834] ? __cleanup_sighand+0xb0/0xb0 [ 2209.561753] ? perf_trace_lock+0xac/0x490 [ 2209.562657] ? perf_trace_lock+0xac/0x490 [ 2209.563561] ? __lockdep_reset_lock+0x180/0x180 [ 2209.564579] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2209.565639] create_io_thread+0xb6/0xf0 [ 2209.566506] ? pidfd_prepare+0x80/0x80 [ 2209.567354] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2209.568419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2209.569554] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2209.570651] ? trace_hardirqs_on+0x5b/0x180 [ 2209.571585] io_uring_setup+0x1d79/0x2980 [ 2209.572490] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2209.573580] ? wait_for_completion_io+0x270/0x270 [ 2209.574651] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2209.575783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2209.576901] do_syscall_64+0x33/0x40 [ 2209.577707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2209.578823] RIP: 0033:0x7f928d897b19 [ 2209.579624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2209.583605] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2209.585244] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2209.586790] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2209.588318] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2209.589832] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2209.591356] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:58:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002e00) 01:58:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:58:32 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 20) 01:58:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001d00) 01:58:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5385, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:58:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2272, 0x0) [ 2227.710919] FAULT_INJECTION: forcing a failure. [ 2227.710919] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.713249] CPU: 1 PID: 14271 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2227.714668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2227.716341] Call Trace: [ 2227.716876] dump_stack+0x107/0x167 [ 2227.717611] should_fail.cold+0x5/0xa [ 2227.718397] ? create_object.isra.0+0x3a/0xa30 [ 2227.719317] should_failslab+0x5/0x20 [ 2227.720087] kmem_cache_alloc+0x5b/0x310 [ 2227.720908] create_object.isra.0+0x3a/0xa30 [ 2227.721802] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2227.723035] kmem_cache_alloc+0x159/0x310 [ 2227.724126] __delayacct_tsk_init+0x1b/0x80 [ 2227.725241] copy_process+0x3399/0x78b0 [ 2227.726262] ? SOFTIRQ_verbose+0x10/0x10 [ 2227.727318] ? stack_trace_save+0x8c/0xc0 [ 2227.728389] ? __lock_acquire+0xbb1/0x5b00 [ 2227.729493] ? __cleanup_sighand+0xb0/0xb0 [ 2227.730489] ? perf_trace_lock+0xac/0x490 [ 2227.731348] ? perf_trace_lock+0xac/0x490 [ 2227.732311] ? __lockdep_reset_lock+0x180/0x180 [ 2227.733275] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2227.734343] create_io_thread+0xb6/0xf0 [ 2227.735153] ? pidfd_prepare+0x80/0x80 [ 2227.735939] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2227.736929] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2227.737964] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2227.738978] ? trace_hardirqs_on+0x5b/0x180 [ 2227.739838] io_uring_setup+0x1d79/0x2980 [ 2227.740665] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2227.741675] ? wait_for_completion_io+0x270/0x270 [ 2227.742658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2227.743698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2227.744719] do_syscall_64+0x33/0x40 [ 2227.745451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2227.746468] RIP: 0033:0x7f928d897b19 [ 2227.747201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2227.750893] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2227.752380] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2227.753781] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2227.755192] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2227.756587] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2227.757994] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:58:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:58:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2279, 0x0) 01:58:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2275, 0x0) 01:58:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:58:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002e01) 01:58:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2276, 0x0) 01:58:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5386, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:58:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227a, 0x0) 01:58:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:58:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001d01) 01:58:33 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 21) 01:58:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:58:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002f00) [ 2228.085136] FAULT_INJECTION: forcing a failure. [ 2228.085136] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.087613] CPU: 0 PID: 14405 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2228.089085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2228.090869] Call Trace: [ 2228.091433] dump_stack+0x107/0x167 [ 2228.092208] should_fail.cold+0x5/0xa [ 2228.093016] ? alloc_pid+0xd7/0xd30 [ 2228.093786] should_failslab+0x5/0x20 [ 2228.094608] kmem_cache_alloc+0x5b/0x310 [ 2228.095482] alloc_pid+0xd7/0xd30 [ 2228.096238] ? copy_namespaces+0x1ca/0x4f0 [ 2228.097146] copy_process+0x3b8b/0x78b0 [ 2228.097988] ? SOFTIRQ_verbose+0x10/0x10 [ 2228.098869] ? stack_trace_save+0x8c/0xc0 [ 2228.099781] ? __cleanup_sighand+0xb0/0xb0 [ 2228.100684] ? perf_trace_lock+0xac/0x490 [ 2228.101567] ? perf_trace_lock+0xac/0x490 [ 2228.102466] ? __lockdep_reset_lock+0x180/0x180 [ 2228.103467] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2228.104516] create_io_thread+0xb6/0xf0 [ 2228.105363] ? pidfd_prepare+0x80/0x80 [ 2228.106198] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2228.107261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2228.108379] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2228.109464] ? trace_hardirqs_on+0x5b/0x180 [ 2228.110396] io_uring_setup+0x1d79/0x2980 [ 2228.111298] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2228.112379] ? wait_for_completion_io+0x270/0x270 [ 2228.113437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2228.114564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2228.115666] do_syscall_64+0x33/0x40 [ 2228.116460] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2228.117551] RIP: 0033:0x7f928d897b19 [ 2228.118354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.122279] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2228.123909] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2228.125423] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2228.126953] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2228.128475] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2228.130004] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:58:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2279, 0x0) 01:58:48 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 22) 01:58:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227b, 0x0) 01:58:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:58:48 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x541b, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:58:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002f01) 01:58:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001e00) 01:58:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2243.919542] FAULT_INJECTION: forcing a failure. [ 2243.919542] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.921157] CPU: 0 PID: 14526 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2243.922124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2243.923290] Call Trace: [ 2243.923659] dump_stack+0x107/0x167 [ 2243.924171] should_fail.cold+0x5/0xa [ 2243.924700] ? create_object.isra.0+0x3a/0xa30 [ 2243.925336] should_failslab+0x5/0x20 [ 2243.925866] kmem_cache_alloc+0x5b/0x310 [ 2243.926440] create_object.isra.0+0x3a/0xa30 [ 2243.927056] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2243.927768] kmem_cache_alloc+0x159/0x310 [ 2243.928349] alloc_pid+0xd7/0xd30 [ 2243.928831] ? copy_namespaces+0x1ca/0x4f0 [ 2243.929423] copy_process+0x3b8b/0x78b0 [ 2243.929959] ? SOFTIRQ_verbose+0x10/0x10 [ 2243.930543] ? stack_trace_save+0x8c/0xc0 [ 2243.931135] ? __cleanup_sighand+0xb0/0xb0 [ 2243.931721] ? perf_trace_lock+0xac/0x490 [ 2243.932295] ? perf_trace_lock+0xac/0x490 [ 2243.932872] ? __lockdep_reset_lock+0x180/0x180 [ 2243.933523] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2243.934200] create_io_thread+0xb6/0xf0 [ 2243.934754] ? pidfd_prepare+0x80/0x80 [ 2243.935297] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 2243.935981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2243.936738] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2243.937433] ? trace_hardirqs_on+0x5b/0x180 [ 2243.938033] io_uring_setup+0x1d79/0x2980 [ 2243.938619] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2243.939313] ? wait_for_completion_io+0x270/0x270 [ 2243.939988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2243.940707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2243.941420] do_syscall_64+0x33/0x40 [ 2243.941936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2243.942637] RIP: 0033:0x7f928d897b19 [ 2243.943154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.945691] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2243.946746] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2243.947727] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2243.948713] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2243.949697] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2243.950690] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:58:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001e01) 01:58:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5421, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:58:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003000) 01:58:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:58:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227a, 0x0) 01:58:49 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 23) 01:58:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 01:58:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5450, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) [ 2244.101411] FAULT_INJECTION: forcing a failure. [ 2244.101411] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.102941] CPU: 0 PID: 14579 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2244.103839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2244.104882] Call Trace: [ 2244.105228] dump_stack+0x107/0x167 [ 2244.105699] should_fail.cold+0x5/0xa [ 2244.106193] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2244.106865] should_failslab+0x5/0x20 [ 2244.107355] kmem_cache_alloc_trace+0x55/0x320 [ 2244.107947] io_uring_alloc_task_context+0x99/0x6a0 [ 2244.108589] ? io_import_iovec+0x1120/0x1120 [ 2244.109161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2244.109837] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2244.110495] io_uring_setup+0x1dd1/0x2980 [ 2244.111042] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2244.111694] ? wait_for_completion_io+0x270/0x270 [ 2244.112333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2244.113010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2244.113676] do_syscall_64+0x33/0x40 [ 2244.114157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2244.114826] RIP: 0033:0x7f928d897b19 [ 2244.115304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2244.117669] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2244.118655] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2244.119576] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2244.120495] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2244.121412] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2244.122329] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:59:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:59:05 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 24) 01:59:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f00) 01:59:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227b, 0x0) 01:59:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5451, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:59:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003001) 01:59:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227d, 0x0) 01:59:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x2, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(x', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2260.200148] FAULT_INJECTION: forcing a failure. [ 2260.200148] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.202573] CPU: 0 PID: 14680 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2260.204053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2260.205799] Call Trace: [ 2260.206362] dump_stack+0x107/0x167 [ 2260.207154] should_fail.cold+0x5/0xa [ 2260.207949] ? create_object.isra.0+0x3a/0xa30 [ 2260.208911] should_failslab+0x5/0x20 [ 2260.209708] kmem_cache_alloc+0x5b/0x310 [ 2260.210581] create_object.isra.0+0x3a/0xa30 [ 2260.211537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2260.212602] kmem_cache_alloc_trace+0x151/0x320 [ 2260.213584] io_uring_alloc_task_context+0x99/0x6a0 [ 2260.214636] ? io_import_iovec+0x1120/0x1120 [ 2260.215602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2260.216703] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2260.217769] io_uring_setup+0x1dd1/0x2980 [ 2260.218646] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2260.219738] ? wait_for_completion_io+0x270/0x270 [ 2260.220776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2260.221878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2260.222988] do_syscall_64+0x33/0x40 [ 2260.223767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2260.224839] RIP: 0033:0x7f928d897b19 [ 2260.225614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2260.229579] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2260.231245] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2260.232776] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2260.234306] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2260.235865] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2260.237393] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:59:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003100) 01:59:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227c, 0x0) 01:59:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x2, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(x', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:59:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227e, 0x0) 01:59:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5452, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:59:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f01) 01:59:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227d, 0x0) 01:59:21 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 25) 01:59:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003101) 01:59:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002000) 01:59:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:59:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227f, 0x0) 01:59:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5460, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:59:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227e, 0x0) 01:59:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x2, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)='(x', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2276.859680] FAULT_INJECTION: forcing a failure. [ 2276.859680] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.862122] CPU: 1 PID: 14824 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2276.863583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2276.865311] Call Trace: [ 2276.865874] dump_stack+0x107/0x167 [ 2276.866638] should_fail.cold+0x5/0xa [ 2276.867450] ? create_object.isra.0+0x3a/0xa30 [ 2276.868408] should_failslab+0x5/0x20 [ 2276.869215] kmem_cache_alloc+0x5b/0x310 [ 2276.870071] create_object.isra.0+0x3a/0xa30 [ 2276.871008] kmemleak_alloc_percpu+0xa0/0x100 [ 2276.871954] pcpu_alloc+0x4e2/0x1240 [ 2276.872756] __percpu_counter_init+0x10d/0x2d0 [ 2276.873718] io_uring_alloc_task_context+0xcc/0x6a0 [ 2276.874763] ? io_import_iovec+0x1120/0x1120 [ 2276.875707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2276.876801] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2276.877865] io_uring_setup+0x1dd1/0x2980 [ 2276.878745] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2276.879811] ? wait_for_completion_io+0x270/0x270 [ 2276.880848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2276.881947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2276.883044] do_syscall_64+0x33/0x40 [ 2276.883825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2276.884904] RIP: 0033:0x7f928d897b19 [ 2276.885685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.889536] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2276.891137] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2276.892626] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2276.894115] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2276.895615] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2276.897109] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:59:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227f, 0x0) 01:59:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003200) 01:59:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x80000, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:59:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:59:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2282, 0x0) 01:59:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:59:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003201) 01:59:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2283, 0x0) 01:59:37 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 26) 01:59:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:59:37 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2282, 0x0) 01:59:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1fffe00, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:59:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002001) [ 2292.055880] FAULT_INJECTION: forcing a failure. [ 2292.055880] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.058406] CPU: 1 PID: 14960 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2292.059867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2292.061619] Call Trace: [ 2292.062186] dump_stack+0x107/0x167 [ 2292.062959] should_fail.cold+0x5/0xa [ 2292.063783] ? create_object.isra.0+0x3a/0xa30 [ 2292.064753] should_failslab+0x5/0x20 [ 2292.065553] kmem_cache_alloc+0x5b/0x310 [ 2292.066413] create_object.isra.0+0x3a/0xa30 [ 2292.067355] kmemleak_alloc_percpu+0xa0/0x100 01:59:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003300) [ 2292.068302] pcpu_alloc+0x4e2/0x1240 [ 2292.069229] __percpu_counter_init+0x10d/0x2d0 [ 2292.070194] io_uring_alloc_task_context+0xcc/0x6a0 [ 2292.071261] ? io_import_iovec+0x1120/0x1120 [ 2292.072201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2292.073309] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2292.074384] io_uring_setup+0x1dd1/0x2980 01:59:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002100) [ 2292.075288] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2292.076451] ? wait_for_completion_io+0x270/0x270 [ 2292.077494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2292.078596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2292.079696] do_syscall_64+0x33/0x40 [ 2292.080477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2292.081555] RIP: 0033:0x7f928d897b19 [ 2292.082345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.086235] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2292.087846] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2292.089348] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2292.090842] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2292.092353] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2292.093855] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:59:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:59:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2000014f, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:59:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, 0x0) 01:59:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003301) 01:59:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002101) 01:59:37 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2283, 0x0) 01:59:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x40049409, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:59:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2285, 0x0) 01:59:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x7, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:59:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 01:59:50 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 27) 01:59:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003400) 01:59:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002200) 01:59:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2284, 0x0) 01:59:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003401) [ 2305.283521] FAULT_INJECTION: forcing a failure. [ 2305.283521] name failslab, interval 1, probability 0, space 0, times 0 [ 2305.286409] CPU: 0 PID: 15113 Comm: syz-executor.7 Not tainted 5.10.258 #1 01:59:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x40086602, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) [ 2305.287939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2305.289812] Call Trace: [ 2305.290374] dump_stack+0x107/0x167 [ 2305.291196] should_fail.cold+0x5/0xa [ 2305.292032] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2305.293167] should_failslab+0x5/0x20 [ 2305.293996] kmem_cache_alloc_trace+0x55/0x320 [ 2305.295003] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2305.296114] ? io_import_iovec+0x1120/0x1120 [ 2305.297286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2305.298732] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2305.300141] io_uring_setup+0x1dd1/0x2980 [ 2305.301291] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2305.302670] ? wait_for_completion_io+0x270/0x270 [ 2305.304052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2305.305485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2305.306899] do_syscall_64+0x33/0x40 [ 2305.307929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2305.309321] RIP: 0033:0x7f928d897b19 [ 2305.310326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2305.315286] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2305.317330] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2305.319268] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2305.321202] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 01:59:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98d", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 01:59:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003500) [ 2305.323136] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2305.324764] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 01:59:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002201) 01:59:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2285, 0x0) 01:59:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x40087602, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 01:59:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2286, 0x0) 01:59:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003501) 02:00:05 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 28) 02:00:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002300) 02:00:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003600) 02:00:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:00:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2286, 0x0) 02:00:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:00:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x4020940d, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 02:00:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2287, 0x0) [ 2320.594051] FAULT_INJECTION: forcing a failure. [ 2320.594051] name failslab, interval 1, probability 0, space 0, times 0 [ 2320.595414] CPU: 0 PID: 15254 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2320.596218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2320.597127] Call Trace: [ 2320.597433] dump_stack+0x107/0x167 [ 2320.597849] should_fail.cold+0x5/0xa [ 2320.598270] ? create_object.isra.0+0x3a/0xa30 [ 2320.598767] should_failslab+0x5/0x20 [ 2320.599193] kmem_cache_alloc+0x5b/0x310 [ 2320.599674] create_object.isra.0+0x3a/0xa30 [ 2320.600177] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2320.600759] kmem_cache_alloc_trace+0x151/0x320 [ 2320.601272] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2320.601824] ? io_import_iovec+0x1120/0x1120 [ 2320.602314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2320.602890] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2320.603453] io_uring_setup+0x1dd1/0x2980 [ 2320.603906] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2320.604465] ? wait_for_completion_io+0x270/0x270 [ 2320.605021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2320.605609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2320.606190] do_syscall_64+0x33/0x40 [ 2320.606612] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2320.607183] RIP: 0033:0x7f928d897b19 [ 2320.607641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2320.609786] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2320.610684] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2320.611550] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2320.612386] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2320.613189] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2320.614026] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:00:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2288, 0x0) 02:00:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:00:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2289, 0x0) 02:00:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x0, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:00:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003601) 02:00:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x80086601, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 02:00:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2287, 0x0) 02:00:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002301) 02:00:05 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 29) 02:00:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:00:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2288, 0x0) 02:00:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x4b47, 0x0) 02:00:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003700) 02:00:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x80087601, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) [ 2320.769016] FAULT_INJECTION: forcing a failure. [ 2320.769016] name failslab, interval 1, probability 0, space 0, times 0 [ 2320.770518] CPU: 0 PID: 15285 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2320.771357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2320.772353] Call Trace: [ 2320.772672] dump_stack+0x107/0x167 [ 2320.773113] should_fail.cold+0x5/0xa [ 2320.773575] ? io_wq_create+0xeb/0xc00 [ 2320.774036] should_failslab+0x5/0x20 [ 2320.774489] __kmalloc+0x72/0x390 [ 2320.774905] io_wq_create+0xeb/0xc00 [ 2320.775334] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2320.775945] ? io_import_iovec+0x1120/0x1120 [ 2320.776478] ? io_apoll_task_func+0x2d0/0x2d0 [ 2320.777022] ? __io_req_find_next+0x300/0x300 [ 2320.777573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2320.778160] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2320.778728] io_uring_setup+0x1dd1/0x2980 [ 2320.779209] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2320.779778] ? wait_for_completion_io+0x270/0x270 [ 2320.780330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2320.780916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2320.781526] do_syscall_64+0x33/0x40 [ 2320.781952] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2320.782560] RIP: 0033:0x7f928d897b19 [ 2320.783003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2320.785051] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2320.785958] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2320.786799] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2320.787614] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2320.788456] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2320.789260] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:00:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002400) 02:00:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98d", 0x0, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:00:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x4b49, 0x0) 02:00:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2289, 0x0) 02:00:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003701) 02:00:19 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 30) 02:00:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5382, 0x0) 02:00:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0045878, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 02:00:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x0, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2334.353472] FAULT_INJECTION: forcing a failure. [ 2334.353472] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.356617] CPU: 1 PID: 15422 Comm: syz-executor.7 Not tainted 5.10.258 #1 02:00:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003800) 02:00:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98d", 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)}) 02:00:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002401) [ 2334.358394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.360609] Call Trace: [ 2334.361294] dump_stack+0x107/0x167 [ 2334.362236] should_fail.cold+0x5/0xa [ 2334.363219] ? create_object.isra.0+0x3a/0xa30 [ 2334.364401] should_failslab+0x5/0x20 02:00:19 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x4b47, 0x0) [ 2334.365378] kmem_cache_alloc+0x5b/0x310 [ 2334.366525] create_object.isra.0+0x3a/0xa30 [ 2334.367658] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2334.368970] __kmalloc+0x16e/0x390 [ 2334.369894] io_wq_create+0xeb/0xc00 [ 2334.370866] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2334.372185] ? io_import_iovec+0x1120/0x1120 [ 2334.373323] ? io_apoll_task_func+0x2d0/0x2d0 [ 2334.374473] ? __io_req_find_next+0x300/0x300 [ 2334.375642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.376988] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2334.378301] io_uring_setup+0x1dd1/0x2980 [ 2334.379375] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2334.380682] ? wait_for_completion_io+0x270/0x270 [ 2334.381953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.383302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.384640] do_syscall_64+0x33/0x40 [ 2334.385603] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.386932] RIP: 0033:0x7f928d897b19 [ 2334.387896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.392644] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2334.394605] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2334.396455] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2334.398287] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2334.400123] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2334.401953] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:00:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0045878, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 02:00:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x0, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:00:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002500) 02:00:19 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x4b49, 0x0) 02:00:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98d", 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 02:00:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003801) 02:00:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5385, 0x0) 02:00:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0189436, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 02:00:33 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 31) 02:00:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:00:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003900) 02:00:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x5382, 0x0) 02:00:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc020660b, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 02:00:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98d", 0x0, 0x0, 0x0, 0x0, 0x0}) 02:00:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002501) 02:00:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5386, 0x0) [ 2348.054290] FAULT_INJECTION: forcing a failure. [ 2348.054290] name failslab, interval 1, probability 0, space 0, times 0 [ 2348.056761] CPU: 1 PID: 15569 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2348.058224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2348.059990] Call Trace: [ 2348.060550] dump_stack+0x107/0x167 [ 2348.061318] should_fail.cold+0x5/0xa [ 2348.062126] ? io_wq_create+0x6ef/0xc00 [ 2348.062960] should_failslab+0x5/0x20 [ 2348.063775] kmem_cache_alloc_node_trace+0x59/0x340 [ 2348.064845] io_wq_create+0x6ef/0xc00 [ 2348.065660] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2348.066730] ? io_import_iovec+0x1120/0x1120 [ 2348.067658] ? io_apoll_task_func+0x2d0/0x2d0 [ 2348.068602] ? __io_req_find_next+0x300/0x300 [ 2348.069547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2348.070645] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2348.071728] io_uring_setup+0x1dd1/0x2980 [ 2348.072618] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2348.073682] ? wait_for_completion_io+0x270/0x270 [ 2348.074730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2348.075842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2348.076936] do_syscall_64+0x33/0x40 [ 2348.077723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2348.078811] RIP: 0033:0x7f928d897b19 [ 2348.079595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2348.083490] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2348.085105] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2348.086624] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2348.088131] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2348.089629] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2348.091140] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:00:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003901) 02:00:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x541b, 0x0) 02:00:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x5385, 0x0) 02:00:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:00:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0481273, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 02:00:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:00:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2, 0x0, 0x0, "9c"}) 02:00:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5421, 0x0) 02:00:47 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 32) [ 2362.413506] FAULT_INJECTION: forcing a failure. [ 2362.413506] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.415078] CPU: 1 PID: 15708 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2362.416023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.417105] Call Trace: [ 2362.417453] dump_stack+0x107/0x167 [ 2362.417937] should_fail.cold+0x5/0xa [ 2362.418434] ? create_object.isra.0+0x3a/0xa30 [ 2362.419028] should_failslab+0x5/0x20 [ 2362.419536] kmem_cache_alloc+0x5b/0x310 [ 2362.420088] ? io_wq_create+0x114/0xc00 [ 2362.420631] create_object.isra.0+0x3a/0xa30 [ 2362.421225] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2362.421904] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2362.422603] io_wq_create+0x6ef/0xc00 [ 2362.423132] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2362.423833] ? io_import_iovec+0x1120/0x1120 [ 2362.424436] ? io_apoll_task_func+0x2d0/0x2d0 [ 2362.425043] ? __io_req_find_next+0x300/0x300 [ 2362.425643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.426327] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2362.427020] io_uring_setup+0x1dd1/0x2980 [ 2362.427592] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2362.428264] ? wait_for_completion_io+0x270/0x270 [ 2362.428907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.429591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2362.430262] do_syscall_64+0x33/0x40 [ 2362.430747] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.431417] RIP: 0033:0x7f928d897b19 [ 2362.431915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.434389] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2362.435425] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2362.436360] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2362.437285] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2362.438213] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2362.439135] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:00:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:00:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x5386, 0x0) 02:00:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002600) 02:00:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003a00) 02:00:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:00:47 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 33) 02:00:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x541b, 0x0) 02:00:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x3, 0x0, 0x0, "9c"}) 02:00:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2362.560756] FAULT_INJECTION: forcing a failure. [ 2362.560756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2362.563500] CPU: 0 PID: 15766 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2362.564992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.567003] Call Trace: [ 2362.567630] dump_stack+0x107/0x167 [ 2362.568457] should_fail.cold+0x5/0xa [ 2362.569278] __alloc_pages_nodemask+0x182/0x600 [ 2362.570288] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2362.571616] ? kmem_cache_alloc+0x301/0x310 [ 2362.572573] alloc_pages_current+0x187/0x280 [ 2362.573515] allocate_slab+0x26f/0x380 [ 2362.574518] ___slab_alloc+0x470/0x700 [ 2362.575379] ? create_object.isra.0+0x3a/0xa30 [ 2362.576373] ? fs_reclaim_acquire+0xa5/0x100 [ 2362.577346] ? create_object.isra.0+0x3a/0xa30 [ 2362.578349] ? kmem_cache_alloc+0x301/0x310 [ 2362.579331] kmem_cache_alloc+0x301/0x310 [ 2362.580238] create_object.isra.0+0x3a/0xa30 [ 2362.581175] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2362.582266] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2362.583359] io_wq_create+0x6ef/0xc00 [ 2362.584177] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2362.585255] ? io_import_iovec+0x1120/0x1120 [ 2362.586395] ? io_apoll_task_func+0x2d0/0x2d0 [ 2362.587500] ? __io_req_find_next+0x300/0x300 [ 2362.588540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.589698] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2362.590821] io_uring_setup+0x1dd1/0x2980 [ 2362.591749] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2362.592870] ? wait_for_completion_io+0x270/0x270 [ 2362.593946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.595276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2362.596501] do_syscall_64+0x33/0x40 [ 2362.597331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.598449] RIP: 0033:0x7f928d897b19 [ 2362.599245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.603242] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2362.604997] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2362.606777] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2362.608324] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2362.610106] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2362.611564] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:01:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5450, 0x0) 02:01:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:01:00 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 34) 02:01:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x9, 0x0, 0x0, "9c"}) 02:01:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003a01) [ 2375.852172] FAULT_INJECTION: forcing a failure. [ 2375.852172] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.853676] CPU: 0 PID: 15847 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2375.854559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2375.855572] Call Trace: [ 2375.855908] dump_stack+0x107/0x167 [ 2375.856391] should_fail.cold+0x5/0xa [ 2375.856857] ? create_object.isra.0+0x3a/0xa30 [ 2375.857408] should_failslab+0x5/0x20 [ 2375.857870] kmem_cache_alloc+0x5b/0x310 [ 2375.858373] ? io_wq_create+0x114/0xc00 [ 2375.858859] create_object.isra.0+0x3a/0xa30 [ 2375.859403] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2375.860036] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2375.860657] io_wq_create+0x6ef/0xc00 [ 2375.861126] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2375.861746] ? io_import_iovec+0x1120/0x1120 [ 2375.862284] ? io_apoll_task_func+0x2d0/0x2d0 [ 2375.862821] ? __io_req_find_next+0x300/0x300 [ 2375.863372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.864038] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2375.864665] io_uring_setup+0x1dd1/0x2980 [ 2375.865200] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2375.865816] ? wait_for_completion_io+0x270/0x270 [ 2375.866405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2375.867036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2375.867703] do_syscall_64+0x33/0x40 [ 2375.868173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2375.868828] RIP: 0033:0x7f928d897b19 [ 2375.869279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2375.871535] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2375.872498] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 02:01:00 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x5421, 0x0) 02:01:00 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:01:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002601) [ 2375.873364] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2375.874356] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2375.875282] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2375.876204] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:01:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003b00) 02:01:15 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:01:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002700) 02:01:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1267, 0x0, 0x0, "9c"}) 02:01:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:01:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x5450, 0x0) 02:01:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003b01) 02:01:15 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 35) 02:01:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5451, 0x0) [ 2390.806349] FAULT_INJECTION: forcing a failure. [ 2390.806349] name failslab, interval 1, probability 0, space 0, times 0 [ 2390.808930] CPU: 1 PID: 15886 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2390.810431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2390.812234] Call Trace: [ 2390.812817] dump_stack+0x107/0x167 [ 2390.813608] should_fail.cold+0x5/0xa [ 2390.814433] ? create_object.isra.0+0x3a/0xa30 [ 2390.815419] should_failslab+0x5/0x20 [ 2390.816249] kmem_cache_alloc+0x5b/0x310 [ 2390.817130] create_object.isra.0+0x3a/0xa30 [ 2390.818085] kmemleak_alloc_percpu+0xa0/0x100 [ 2390.819057] pcpu_alloc+0x4e2/0x1240 [ 2390.819880] ? io_async_queue_proc+0x80/0x80 [ 2390.820838] percpu_ref_init+0x31/0x3d0 [ 2390.821705] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2390.822879] io_uring_setup+0x14f6/0x2980 [ 2390.823784] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2390.824885] ? wait_for_completion_io+0x270/0x270 [ 2390.825954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2390.827092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2390.828219] do_syscall_64+0x33/0x40 [ 2390.829025] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2390.830131] RIP: 0033:0x7f928d897b19 [ 2390.830932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2390.834903] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2390.836556] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2390.838094] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2390.839630] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2390.841180] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 02:01:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5452, 0x0) [ 2390.842723] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:01:15 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:01:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003c00) 02:01:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x5451, 0x0) 02:01:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002701) 02:01:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1274, 0x0, 0x0, "9c"}) 02:01:16 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:01:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x5452, 0x0) 02:01:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5460, 0x0) 02:01:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002800) 02:01:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003c01) 02:01:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002801) 02:01:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1275, 0x0, 0x0, "9c"}) 02:01:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003d00) 02:01:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x5460, 0x0) 02:01:31 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 36) 02:01:31 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:01:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2406.874239] FAULT_INJECTION: forcing a failure. 02:01:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x40049409, 0x0) [ 2406.874239] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.876936] CPU: 1 PID: 16029 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2406.878440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2406.880244] Call Trace: [ 2406.880835] dump_stack+0x107/0x167 [ 2406.881628] should_fail.cold+0x5/0xa [ 2406.882457] ? create_object.isra.0+0x3a/0xa30 [ 2406.883448] should_failslab+0x5/0x20 [ 2406.884276] kmem_cache_alloc+0x5b/0x310 [ 2406.885181] create_object.isra.0+0x3a/0xa30 [ 2406.886141] kmemleak_alloc_percpu+0xa0/0x100 [ 2406.887120] pcpu_alloc+0x4e2/0x1240 [ 2406.887944] ? io_async_queue_proc+0x80/0x80 [ 2406.888909] percpu_ref_init+0x31/0x3d0 [ 2406.889778] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2406.890942] io_uring_setup+0x14f6/0x2980 [ 2406.891857] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2406.892966] ? wait_for_completion_io+0x270/0x270 [ 2406.894036] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2406.895172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2406.896301] do_syscall_64+0x33/0x40 [ 2406.897111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2406.898219] RIP: 0033:0x7f928d897b19 [ 2406.899034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2406.903012] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2406.904637] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2406.906162] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2406.907687] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2406.909221] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2406.910751] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:01:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x40049409, 0x0) 02:01:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x40086602, 0x0) 02:01:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003d01) 02:01:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1276, 0x0, 0x0, "9c"}) 02:01:32 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:01:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x40086602, 0x0) 02:01:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002900) 02:01:32 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 37) [ 2407.111023] FAULT_INJECTION: forcing a failure. [ 2407.111023] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.113077] CPU: 0 PID: 16135 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2407.114231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.115571] Call Trace: [ 2407.116005] dump_stack+0x107/0x167 [ 2407.116639] should_fail.cold+0x5/0xa [ 2407.117273] ? percpu_ref_init+0xd8/0x3d0 [ 2407.117951] should_failslab+0x5/0x20 [ 2407.118572] kmem_cache_alloc_trace+0x55/0x320 [ 2407.119312] ? io_async_queue_proc+0x80/0x80 [ 2407.120025] percpu_ref_init+0xd8/0x3d0 [ 2407.120687] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2407.121586] io_uring_setup+0x14f6/0x2980 [ 2407.122254] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2407.123080] ? wait_for_completion_io+0x270/0x270 [ 2407.123894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2407.124768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2407.125632] do_syscall_64+0x33/0x40 [ 2407.126249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2407.127079] RIP: 0033:0x7f928d897b19 [ 2407.127696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2407.130673] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2407.131924] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2407.133087] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2407.134245] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2407.135394] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2407.136571] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:01:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002901) 02:01:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003e00) 02:01:50 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 38) [ 2425.626277] FAULT_INJECTION: forcing a failure. [ 2425.626277] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.629345] CPU: 1 PID: 16175 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2425.631223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.633465] Call Trace: [ 2425.634199] dump_stack+0x107/0x167 [ 2425.635193] should_fail.cold+0x5/0xa [ 2425.636240] ? create_object.isra.0+0x3a/0xa30 [ 2425.637494] should_failslab+0x5/0x20 [ 2425.638526] kmem_cache_alloc+0x5b/0x310 [ 2425.639629] create_object.isra.0+0x3a/0xa30 [ 2425.640817] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2425.642187] kmem_cache_alloc_trace+0x151/0x320 [ 2425.643430] ? io_async_queue_proc+0x80/0x80 [ 2425.644630] percpu_ref_init+0xd8/0x3d0 [ 2425.645936] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2425.647466] io_uring_setup+0x14f6/0x2980 [ 2425.648845] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2425.650220] ? wait_for_completion_io+0x270/0x270 [ 2425.651537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2425.652948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.654330] do_syscall_64+0x33/0x40 02:01:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x40087602, 0x0) 02:01:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:01:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2201, 0x0, 0x0, "9c"}) 02:01:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:01:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x40087602, 0x0) [ 2425.655343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2425.657135] RIP: 0033:0x7f928d897b19 [ 2425.658356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.664446] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2425.667095] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2425.669565] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2425.672035] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2425.674518] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2425.676999] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:01:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x4020940d, 0x0) 02:01:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2202, 0x0, 0x0, "9c"}) 02:01:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003e01) 02:01:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002a00) 02:01:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x4020940d, 0x0) 02:01:50 executing program 0: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:01:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x80086601, 0x0) 02:02:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003f00) 02:02:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0x0, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:02:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x80086601, 0x0) 02:02:05 executing program 0: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:02:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2203, 0x0, 0x0, "9c"}) 02:02:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x80087601, 0x0) 02:02:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002a01) 02:02:05 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 39) [ 2440.151495] FAULT_INJECTION: forcing a failure. [ 2440.151495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2440.154185] CPU: 1 PID: 16329 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2440.155732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.157581] Call Trace: [ 2440.158172] dump_stack+0x107/0x167 [ 2440.158993] should_fail.cold+0x5/0xa [ 2440.159850] _copy_to_user+0x2e/0x180 [ 2440.160709] io_uring_setup+0x11b5/0x2980 [ 2440.161649] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2440.162785] ? wait_for_completion_io+0x270/0x270 [ 2440.163901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2440.165085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.166241] do_syscall_64+0x33/0x40 [ 2440.167076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2440.168222] RIP: 0033:0x7f928d897b19 [ 2440.169069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.173226] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2440.174937] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2440.176540] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2440.178138] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2440.179726] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2440.181330] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:02:05 executing program 0: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:02:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003f01) 02:02:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0045878, 0x0) 02:02:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x80087601, 0x0) 02:02:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2205, 0x0, 0x0, "9c"}) 02:02:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002b00) 02:02:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 02:02:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004000) 02:02:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 02:02:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004001) 02:02:23 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0xc0045878, 0x0) 02:02:23 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2270, 0x0, 0x0, "9c"}) 02:02:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0045878, 0x0) 02:02:23 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 40) 02:02:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0x0, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:02:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002b01) [ 2458.714254] FAULT_INJECTION: forcing a failure. [ 2458.714254] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.716565] CPU: 0 PID: 16472 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2458.717981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.719666] Call Trace: [ 2458.720207] dump_stack+0x107/0x167 [ 2458.720953] should_fail.cold+0x5/0xa [ 2458.721727] ? __d_alloc+0x2a/0x990 [ 2458.722470] should_failslab+0x5/0x20 [ 2458.723231] kmem_cache_alloc+0x5b/0x310 [ 2458.724047] __d_alloc+0x2a/0x990 [ 2458.724744] ? find_held_lock+0x2c/0x110 [ 2458.725584] d_alloc_pseudo+0x19/0x70 [ 2458.726352] alloc_file_pseudo+0xce/0x250 [ 2458.727183] ? trace_hardirqs_on+0x5b/0x180 [ 2458.728048] ? alloc_file+0x5a0/0x5a0 [ 2458.728831] anon_inode_getfile+0xc8/0x1f0 [ 2458.729693] io_uring_setup+0x138b/0x2980 [ 2458.730532] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2458.731541] ? wait_for_completion_io+0x270/0x270 [ 2458.732531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2458.733597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2458.734631] do_syscall_64+0x33/0x40 [ 2458.735378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.736402] RIP: 0033:0x7f928d897b19 [ 2458.737169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.740847] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2458.742378] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2458.743811] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2458.745249] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2458.746681] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2458.748101] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:02:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0189436, 0x0) 02:02:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 02:02:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004100) 02:02:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002c00) 02:02:23 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0xc0045878, 0x0) 02:02:23 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2271, 0x0, 0x0, "9c"}) 02:02:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0x0, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:02:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:02:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004101) 02:02:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc020660b, 0x0) 02:02:24 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0xc0189436, 0x0) 02:02:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:02:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004200) 02:02:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002c01) 02:02:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:02:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0xc020660b, 0x0) 02:02:41 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 41) 02:02:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0481273, 0x0) 02:02:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:02:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2272, 0x0, 0x0, "9c"}) [ 2476.485413] FAULT_INJECTION: forcing a failure. [ 2476.485413] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.488261] CPU: 1 PID: 16727 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2476.489937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2476.491950] Call Trace: [ 2476.492597] dump_stack+0x107/0x167 [ 2476.493491] should_fail.cold+0x5/0xa [ 2476.494405] ? create_object.isra.0+0x3a/0xa30 [ 2476.495497] should_failslab+0x5/0x20 [ 2476.496410] kmem_cache_alloc+0x5b/0x310 [ 2476.497409] create_object.isra.0+0x3a/0xa30 [ 2476.498459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2476.499672] kmem_cache_alloc+0x159/0x310 [ 2476.500671] __d_alloc+0x2a/0x990 [ 2476.501508] ? find_held_lock+0x2c/0x110 [ 2476.502488] d_alloc_pseudo+0x19/0x70 [ 2476.503382] alloc_file_pseudo+0xce/0x250 [ 2476.504365] ? trace_hardirqs_on+0x5b/0x180 [ 2476.505385] ? alloc_file+0x5a0/0x5a0 [ 2476.506310] anon_inode_getfile+0xc8/0x1f0 [ 2476.507315] io_uring_setup+0x138b/0x2980 [ 2476.508306] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2476.509510] ? wait_for_completion_io+0x270/0x270 [ 2476.510687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2476.511943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2476.513170] do_syscall_64+0x33/0x40 [ 2476.514049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2476.515265] RIP: 0033:0x7f928d897b19 02:02:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2476.516166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2476.520677] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2476.522466] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2476.524148] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2476.525827] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2476.527486] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2476.529156] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:02:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004201) 02:02:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0xc0481273, 0x0) 02:02:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002d00) 02:02:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2275, 0x0, 0x0, "9c"}) 02:02:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002d01) 02:02:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:02:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004300) 02:02:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:02:58 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 42) 02:02:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:02:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0xfff, 0xc2043) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1893c0, 0x20) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000500)={0x7e, 0x5, 0x0, "fc03e150d2832858e027ec9cf6c3d29b61998afe61518fdd3713498358e89f875678812d613cca32f106cfa826618f66ae0063cd4e576c911807b765714d2adadb0d38f4834ca2f5174812e6cc606f30ac01ba8ebac17c266801e640f4f607433a3210bb3a8b6f7251c1a4da7abc724a2d0df7372f5c2a5cd5ca1e63dd68"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000940)={0x0, 0xfffffffffffffffe, 0x58, 0x5, @buffer={0x0, 0x62, &(0x7f00000005c0)=""/98}, &(0x7f0000000640)="b824bfbaae5a6a09edd823e8f03d8876c7680b97f2d1a651e25ff07eaca07d229fddb37ca4e370cbc37f171b6a8e493f659cd3abffec2960c17f75d05606290252ba471529bf14b5cdac7a1ebb0ff7ad0a7e3ce2e0739e2b", &(0x7f00000006c0)=""/163, 0x0, 0x30, 0x0, &(0x7f0000000780)}) fallocate(r2, 0x0, 0x0, 0x1000002) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xdf}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x18b000, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x3f8, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x3f8}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={0x148, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1c4, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10044}, 0x4000) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) [ 2493.906073] FAULT_INJECTION: forcing a failure. [ 2493.906073] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.908860] CPU: 1 PID: 16866 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2493.910365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2493.912173] Call Trace: [ 2493.912763] dump_stack+0x107/0x167 [ 2493.913698] should_fail.cold+0x5/0xa [ 2493.914526] ? __alloc_file+0x21/0x320 [ 2493.915518] should_failslab+0x5/0x20 [ 2493.916403] kmem_cache_alloc+0x5b/0x310 [ 2493.917319] __alloc_file+0x21/0x320 [ 2493.918276] alloc_empty_file+0x6d/0x170 [ 2493.919152] alloc_file+0x5e/0x5a0 [ 2493.920061] alloc_file_pseudo+0x16a/0x250 [ 2493.921055] ? alloc_file+0x5a0/0x5a0 [ 2493.922032] anon_inode_getfile+0xc8/0x1f0 [ 2493.923112] io_uring_setup+0x138b/0x2980 [ 2493.924023] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2493.925318] ? wait_for_completion_io+0x270/0x270 [ 2493.926390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2493.927707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2493.928811] do_syscall_64+0x33/0x40 [ 2493.929632] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2493.930711] RIP: 0033:0x7f928d897b19 [ 2493.931654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2493.935533] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2493.937178] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2493.938712] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2493.940224] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2493.941880] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2493.943396] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 [ 2493.981711] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.3'. 02:02:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2276, 0x0, 0x0, "9c"}) 02:02:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:02:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004301) 02:02:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x8, 0x0, 0x0, 0x0, 0x0, 0x11804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd50, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:02:59 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 43) 02:02:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002e00) 02:02:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2494.192105] FAULT_INJECTION: forcing a failure. [ 2494.192105] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.194473] CPU: 1 PID: 16987 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2494.195811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.197409] Call Trace: [ 2494.197928] dump_stack+0x107/0x167 [ 2494.198634] should_fail.cold+0x5/0xa [ 2494.199372] ? create_object.isra.0+0x3a/0xa30 [ 2494.200324] should_failslab+0x5/0x20 [ 2494.201087] kmem_cache_alloc+0x5b/0x310 [ 2494.202068] create_object.isra.0+0x3a/0xa30 [ 2494.202913] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2494.203934] kmem_cache_alloc+0x159/0x310 [ 2494.204824] __alloc_file+0x21/0x320 [ 2494.205594] alloc_empty_file+0x6d/0x170 [ 2494.206351] alloc_file+0x5e/0x5a0 [ 2494.207051] alloc_file_pseudo+0x16a/0x250 [ 2494.207844] ? alloc_file+0x5a0/0x5a0 [ 2494.208640] anon_inode_getfile+0xc8/0x1f0 [ 2494.209483] io_uring_setup+0x138b/0x2980 [ 2494.210455] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2494.211422] ? wait_for_completion_io+0x270/0x270 [ 2494.212353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2494.213397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2494.214501] do_syscall_64+0x33/0x40 [ 2494.215191] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2494.216160] RIP: 0033:0x7f928d897b19 [ 2494.216859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2494.220485] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2494.222262] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2494.223648] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2494.224987] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2494.226330] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2494.227660] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:02:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:02:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2279, 0x0, 0x0, "9c"}) 02:02:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004400) 02:03:15 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x100040) ptrace(0x4207, r1) fcntl$setown(0xffffffffffffffff, 0x8, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r2, &(0x7f0000000500), 0x0, 0x0) 02:03:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002e01) 02:03:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140), &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:03:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x227a, 0x0, 0x0, "9c"}) 02:03:15 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 44) 02:03:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004401) 02:03:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000140)={{0x108, 0x1, 0x0, 0xb, 0x2eb, 0x0, 0x349, 0x5}, "d21699dfa22877ead05f64ea367799612f94ebe23ddfbcf519ed9331d0cdf116fb7c95ebc40174ad4d239c78a6a4592084351d873e8d697bf533034449dd8e6fdf9bda994c49dcb9b6a3d46cfcc6b354b190de5bc212711645b000dc9d6c0bb4d2e71d5436646f0acf381b422b6a75333823a1638130ee20e1049d3ba9f16fc3538a5c5e1b8514164abe007a646b04c7dcfdd317d67c8b1585e2a2b0ff88998e198f12039bfa96ba755c14e0ab8982f935ed36b67c617fdf8bc1c15f555aa4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xadf) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000240)={{r3, 0x10000, 0x3, 0xe, 0x80, 0x0, 0x0, 0x0, 0x1000, 0x800, 0x5, 0x0, 0x6, 0xa9, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000240)={{r4, 0x10000, 0x3, 0xe, 0x80, 0x8000, 0x4, 0x80000001, 0x1000, 0x800, 0x5, 0x2, 0x6, 0xa9, 0x8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000240)={{r5, 0x10000, 0x3, 0xe, 0x80, 0x8000, 0x4, 0x80000001, 0x1000, 0x800, 0x5, 0x2, 0x6, 0xa9, 0x8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000050580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000240)={{r7, 0x10000, 0x3, 0xe, 0x80, 0x8000, 0x4, 0x80000001, 0x1000, 0x800, 0x5, 0x2, 0x6, 0xa9, 0x8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000050780)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "e4a48976544e04"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000051780)={0x401, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {r5}, {0x0, r6}, {r7, r8}], 0x30, "357ac8aee682d7"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:03:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)=0x1) [ 2510.092007] FAULT_INJECTION: forcing a failure. [ 2510.092007] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.094462] CPU: 1 PID: 17122 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2510.095929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2510.097691] Call Trace: [ 2510.098257] dump_stack+0x107/0x167 [ 2510.099034] should_fail.cold+0x5/0xa [ 2510.099846] ? security_file_alloc+0x34/0x170 [ 2510.100799] should_failslab+0x5/0x20 [ 2510.101620] kmem_cache_alloc+0x5b/0x310 [ 2510.102490] security_file_alloc+0x34/0x170 [ 2510.103408] __alloc_file+0xb7/0x320 [ 2510.104201] alloc_empty_file+0x6d/0x170 [ 2510.105064] alloc_file+0x5e/0x5a0 [ 2510.105830] alloc_file_pseudo+0x16a/0x250 [ 2510.106734] ? alloc_file+0x5a0/0x5a0 [ 2510.107563] anon_inode_getfile+0xc8/0x1f0 [ 2510.108466] io_uring_setup+0x138b/0x2980 [ 2510.109354] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2510.110437] ? wait_for_completion_io+0x270/0x270 [ 2510.111488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2510.112602] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2510.113707] do_syscall_64+0x33/0x40 [ 2510.114500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2510.115583] RIP: 0033:0x7f928d897b19 [ 2510.116372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2510.120284] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2510.121904] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2510.123416] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2510.124925] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2510.126442] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2510.127949] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:03:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004500) 02:03:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140), &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:03:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000080)) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:03:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002f00) 02:03:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x227b, 0x0, 0x0, "9c"}) 02:03:15 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 45) 02:03:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) [ 2510.384458] FAULT_INJECTION: forcing a failure. [ 2510.384458] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.387297] CPU: 0 PID: 17240 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2510.388947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2510.390925] Call Trace: [ 2510.391559] dump_stack+0x107/0x167 [ 2510.392435] should_fail.cold+0x5/0xa [ 2510.393353] ? create_object.isra.0+0x3a/0xa30 [ 2510.394481] should_failslab+0x5/0x20 [ 2510.395401] kmem_cache_alloc+0x5b/0x310 [ 2510.396387] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2510.397745] create_object.isra.0+0x3a/0xa30 [ 2510.398809] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2510.400045] kmem_cache_alloc+0x159/0x310 [ 2510.401066] security_file_alloc+0x34/0x170 [ 2510.402133] __alloc_file+0xb7/0x320 [ 2510.403035] alloc_empty_file+0x6d/0x170 [ 2510.404025] alloc_file+0x5e/0x5a0 [ 2510.404898] alloc_file_pseudo+0x16a/0x250 [ 2510.405915] ? alloc_file+0x5a0/0x5a0 [ 2510.406741] anon_inode_getfile+0xc8/0x1f0 [ 2510.407650] io_uring_setup+0x138b/0x2980 [ 2510.408541] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2510.409626] ? wait_for_completion_io+0x270/0x270 [ 2510.410677] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2510.411788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2510.412887] do_syscall_64+0x33/0x40 [ 2510.413692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2510.414793] RIP: 0033:0x7f928d897b19 [ 2510.415580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2510.419491] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2510.421102] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2510.422616] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2510.424124] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2510.425639] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2510.427151] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:03:30 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 46) 02:03:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004501) 02:03:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140), &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:03:30 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x100040) ptrace(0x4207, r1) fcntl$setown(0xffffffffffffffff, 0x8, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r2, &(0x7f0000000500), 0x0, 0x0) 02:03:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x227c, 0x0, 0x0, "9c"}) 02:03:30 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffc00, 0x3c4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x10010, r0, 0x101fb000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000240)) dup3(r0, r1, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000006, 0x4010, r2, 0x11878000) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) fallocate(r2, 0x6, 0x400, 0x0) 02:03:30 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRESOCT=r2, @ANYRES16, @ANYRES64, @ANYBLOB="2117d04b01347fe227791661631f64d6016c3382953a529d0e26d5df8d7e15fe71bf127a551f3467c09cfd1101e45bec3b7202d369add50c019b0d"]) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"226c0d85232effe41877145995298ab1", 0x0, r0, {0x3, 0x6}, {0x400, 0x7}, 0x2, [0x7, 0x8, 0x800, 0x7, 0x1c72, 0x1, 0xf04e, 0x4, 0x4, 0x0, 0x10000, 0xfffffffffffffffc, 0x3, 0x80, 0x8, 0x2]}) r6 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1276, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, 0xfffffffffffffffc) 02:03:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1002f01) [ 2525.678054] FAULT_INJECTION: forcing a failure. [ 2525.678054] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.679573] CPU: 0 PID: 17264 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2525.680485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2525.681585] Call Trace: [ 2525.681951] dump_stack+0x107/0x167 [ 2525.682431] should_fail.cold+0x5/0xa [ 2525.682931] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2525.683608] should_failslab+0x5/0x20 [ 2525.684108] kmem_cache_alloc_trace+0x55/0x320 [ 2525.684714] io_uring_alloc_task_context+0x99/0x6a0 [ 2525.685369] ? io_import_iovec+0x1120/0x1120 [ 2525.685956] ? lock_downgrade+0x6d0/0x6d0 [ 2525.686498] ? do_raw_spin_lock+0x121/0x260 [ 2525.687066] ? rwlock_bug.part.0+0x90/0x90 [ 2525.687631] __io_uring_add_tctx_node+0x2c6/0x520 [ 2525.688263] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2525.688947] ? alloc_fd+0x2e7/0x670 [ 2525.689429] io_uring_setup+0x1fbb/0x2980 [ 2525.689993] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2525.690657] ? wait_for_completion_io+0x270/0x270 [ 2525.691306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2525.691991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2525.692672] do_syscall_64+0x33/0x40 [ 2525.693169] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2525.693853] RIP: 0033:0x7f928d897b19 [ 2525.694343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2525.696757] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2525.697762] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2525.698699] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2525.699633] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2525.700565] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2525.701506] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:03:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004600) 02:03:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003000) 02:03:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004601) 02:03:30 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 47) [ 2525.812311] FAULT_INJECTION: forcing a failure. [ 2525.812311] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.813887] CPU: 0 PID: 17287 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2525.814771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2525.815835] Call Trace: [ 2525.816179] dump_stack+0x107/0x167 [ 2525.816645] should_fail.cold+0x5/0xa [ 2525.817138] ? create_object.isra.0+0x3a/0xa30 [ 2525.817728] should_failslab+0x5/0x20 [ 2525.818217] kmem_cache_alloc+0x5b/0x310 [ 2525.818742] create_object.isra.0+0x3a/0xa30 [ 2525.819299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2525.819940] kmem_cache_alloc_trace+0x151/0x320 [ 2525.820536] io_uring_alloc_task_context+0x99/0x6a0 [ 2525.821163] ? io_import_iovec+0x1120/0x1120 [ 2525.821731] ? lock_downgrade+0x6d0/0x6d0 [ 2525.822250] ? do_raw_spin_lock+0x121/0x260 [ 2525.822788] ? rwlock_bug.part.0+0x90/0x90 [ 2525.823320] __io_uring_add_tctx_node+0x2c6/0x520 [ 2525.823924] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2525.824582] ? alloc_fd+0x2e7/0x670 [ 2525.825051] io_uring_setup+0x1fbb/0x2980 [ 2525.825579] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2525.826225] ? wait_for_completion_io+0x270/0x270 [ 2525.826849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2525.827504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2525.828161] do_syscall_64+0x33/0x40 [ 2525.828632] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2525.829275] RIP: 0033:0x7f928d897b19 [ 2525.829753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2525.832071] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2525.833036] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2525.833950] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2525.834850] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2525.835747] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2525.836641] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:03:30 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x100040) ptrace(0x4207, r1) fcntl$setown(0xffffffffffffffff, 0x8, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r2, &(0x7f0000000500), 0x0, 0x0) 02:03:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x10000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000)) 02:03:45 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:03:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004700) 02:03:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:03:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003001) 02:03:45 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 48) 02:03:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x227d, 0x0, 0x0, "9c"}) 02:03:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)='(xy1', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2540.683386] FAULT_INJECTION: forcing a failure. [ 2540.683386] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.684978] CPU: 1 PID: 17417 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2540.685894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2540.686995] Call Trace: [ 2540.687350] dump_stack+0x107/0x167 [ 2540.687841] should_fail.cold+0x5/0xa [ 2540.688353] ? create_object.isra.0+0x3a/0xa30 [ 2540.688969] should_failslab+0x5/0x20 [ 2540.689474] kmem_cache_alloc+0x5b/0x310 [ 2540.690031] create_object.isra.0+0x3a/0xa30 [ 2540.690620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2540.691299] kmem_cache_alloc_trace+0x151/0x320 [ 2540.691926] io_uring_alloc_task_context+0x99/0x6a0 [ 2540.692589] ? io_import_iovec+0x1120/0x1120 [ 2540.693170] ? lock_downgrade+0x6d0/0x6d0 [ 2540.693728] ? do_raw_spin_lock+0x121/0x260 [ 2540.694313] ? rwlock_bug.part.0+0x90/0x90 [ 2540.694886] __io_uring_add_tctx_node+0x2c6/0x520 [ 2540.695526] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2540.696219] ? alloc_fd+0x2e7/0x670 [ 2540.696710] io_uring_setup+0x1fbb/0x2980 [ 2540.697274] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2540.697949] ? wait_for_completion_io+0x270/0x270 [ 2540.698607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2540.699301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2540.699991] do_syscall_64+0x33/0x40 [ 2540.700482] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2540.701172] RIP: 0033:0x7f928d897b19 [ 2540.701661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2540.704110] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2540.705136] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2540.706093] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2540.707042] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2540.707994] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2540.708946] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:03:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003100) 02:03:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) 02:03:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004701) 02:03:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)='(xy1', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:03:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x227e, 0x0, 0x0, "9c"}) 02:03:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003101) 02:03:45 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x34, 0x9, @buffer={0x0, 0x85, &(0x7f0000000000)=""/133}, &(0x7f00000000c0)="b7297038a0f9fe3a5e503394460dd667ea2f4f36ce083dda66dd39fae42dcb89a7247d7e4f4ea47ecae52aa44ade1a7d73c9ae36", &(0x7f0000000140)=""/25, 0x9, 0x10000, 0xffffffffffffffff, &(0x7f0000000180)}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000280)={r1, r2+60000000}, 0x1, 0x1, 0x0, {0x0, r3}}, 0xdf3c) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:03:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x40, 0x600842) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:03:45 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 49) 02:03:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:03:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x227f, 0x0, 0x0, "9c"}) [ 2540.952117] FAULT_INJECTION: forcing a failure. [ 2540.952117] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.954593] CPU: 0 PID: 17550 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2540.956074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2540.957845] Call Trace: [ 2540.958413] dump_stack+0x107/0x167 [ 2540.959195] should_fail.cold+0x5/0xa [ 2540.960017] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2540.961121] should_failslab+0x5/0x20 [ 2540.961943] kmem_cache_alloc_trace+0x55/0x320 [ 2540.962928] io_uring_alloc_task_context+0x99/0x6a0 [ 2540.963990] ? io_import_iovec+0x1120/0x1120 [ 2540.964918] ? lock_downgrade+0x6d0/0x6d0 [ 2540.965794] ? do_raw_spin_lock+0x121/0x260 [ 2540.966725] ? rwlock_bug.part.0+0x90/0x90 [ 2540.967870] __io_uring_add_tctx_node+0x2c6/0x520 [ 2540.969154] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2540.970562] ? alloc_fd+0x2e7/0x670 [ 2540.971567] io_uring_setup+0x1fbb/0x2980 [ 2540.972704] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2540.973880] ? wait_for_completion_io+0x270/0x270 [ 2540.975035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2540.976187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2540.977296] do_syscall_64+0x33/0x40 [ 2540.978142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2540.979329] RIP: 0033:0x7f928d897b19 [ 2540.980127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2540.984109] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2540.985811] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2540.987334] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2540.988847] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2540.990381] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2540.991892] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:04:00 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 50) 02:04:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003200) 02:04:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:04:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x3, 0x67a501) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0x9}}, './file0\x00'}) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)=0x1) 02:04:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)='(xy1', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:04:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004800) 02:04:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2282, 0x0, 0x0, "9c"}) 02:04:00 executing program 5: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) [ 2555.931237] FAULT_INJECTION: forcing a failure. [ 2555.931237] name failslab, interval 1, probability 0, space 0, times 0 [ 2555.932798] CPU: 0 PID: 17669 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2555.933728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2555.934854] Call Trace: [ 2555.935232] dump_stack+0x107/0x167 [ 2555.935752] should_fail.cold+0x5/0xa [ 2555.936293] ? io_wq_create+0xeb/0xc00 [ 2555.936840] should_failslab+0x5/0x20 [ 2555.937382] __kmalloc+0x72/0x390 [ 2555.937883] io_wq_create+0xeb/0xc00 [ 2555.938428] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2555.939163] ? io_import_iovec+0x1120/0x1120 [ 2555.939792] ? io_apoll_task_func+0x2d0/0x2d0 [ 2555.940415] ? __io_req_find_next+0x300/0x300 [ 2555.941025] ? do_raw_spin_lock+0x121/0x260 [ 2555.941629] ? rwlock_bug.part.0+0x90/0x90 [ 2555.942242] __io_uring_add_tctx_node+0x2c6/0x520 [ 2555.942924] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2555.943661] ? alloc_fd+0x2e7/0x670 [ 2555.944196] io_uring_setup+0x1fbb/0x2980 [ 2555.944798] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2555.945511] ? wait_for_completion_io+0x270/0x270 [ 2555.946212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2555.946959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2555.947672] do_syscall_64+0x33/0x40 [ 2555.948192] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2555.948920] RIP: 0033:0x7f928d897b19 [ 2555.949434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2555.951997] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2555.953065] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2555.954062] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2555.955057] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2555.956048] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2555.957032] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:04:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98d", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:04:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004801) 02:04:01 executing program 3: lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8, 0x4, &(0x7f0000000800)=[{&(0x7f0000000180)="8374f1a3dd16e39c01440610dc007e2d104c3add8d198903b53484328015e85ca12ea90c3340f79d91aecd24731a7a5d77a3ae6c01e32c5d413ca917569e288c7172822064da9f8e1ad0574daa907b2584f517bcf3fcf6fa792cb2c090877f50693a43ae8847e387ad8089455eb57247d1d8acf160f1e71e2d7158", 0x7b, 0x28}, {&(0x7f0000000200)="bd6c09f735046ecd71829d02bd89b0279084a4cff1d0a6f7a6bfcd5efcc252882d81fb47ccde5ec7815423fe7bc2b491dfdf7cda22", 0x35, 0x2}, {&(0x7f0000000280)="15869e05159f13c22d5371c84fd0fff74ff12d04b254c0166e6ca2a2a280ca53fb1602171f830d4f72e2c2760e423d5dd0e11232af22113d66140ce51d66046697ae12d6ce7beba6aaf06efb1be2a384e6f2ff8b4babb3e8b047051817561bed339406b84a29ffd18f1b015fbf7b10ab819ff51d69731b6be0addf5ab4431890ed349a2e59a770163de9a80afaa0ffef8ba2fb3a883b7beae0acdfe55d8a79a4a4666b3daa5c9e4ef73991b7dc4bb10d035ea22cbd89db372920ddbf451c0df54881c43dc5c8d65cb00463b0e8d98ca65d5f97d5d9ae70507603227c18", 0xdd, 0xffff}, {&(0x7f0000000380)="fc5ee44a5e3b67", 0x7, 0xed}], 0x2184b2, &(0x7f00000004c0)={[{'%)/$'}, {'/dev/sg#\x00'}, {'}\x88+,!'}, {'/dev/sg#\x00'}], [{@uid_gt={'uid>', r0}}, {@obj_type={'obj_type', 0x3d, '\xda.k\xb1]\xa6\xc9i;\x1es3!\xe6\xbepk\x8a\xac\x86/,A|\xf7\xa8\xacH\xb8\x17o`6\xe6\x9dF\xdeW\x1c\xe2\x1b\x83d|F\xd8Ql\xd7|.\xe7\xbd\xbc\xe6\xdb\xb7\x8a\xf1\xdeD\xf9W3_S\x83{l\x12\xcd\xc5\xa8R<\xadj\xd5m\xb4\'l\xe6\xf7DQ\xda\xc0y\x84\x98\xf7\xed\xc6 \xf2%\x17\x99Y\x1c\xbaO\x10f\xfe\x19\xe0\x7f\xfb\xb0x<\x8b9\xceQ\xcc\r\x94\x00f~A#\xeb\x95\xe3\x02'}}]}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xc0000) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1276, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x7, 0xc0182) write$binfmt_aout(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000240)) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) read(r1, &(0x7f00000003c0)=""/87, 0x57) write$binfmt_aout(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000080)) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000180)='net/packet\x00') syz_open_procfs(r5, &(0x7f0000000480)='fd\x00') ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000040)) 02:04:01 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="9623fd", 0x3}}, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x1f, 0x1, 0x80, 0x0, 0x7, 0xdd7f3a801f1cdd94, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x54000, 0x1, 0xb18, 0x2, 0xffffffff7fff097a, 0xfe, 0x6, 0x0, 0xc27, 0x0, 0x3}, r2, 0x8, r1, 0xa) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r4, &(0x7f0000000500), 0x20, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000280)) rmdir(&(0x7f0000000540)='./file0\x00') fcntl$dupfd(r1, 0x406, r3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xaf, 0x40, 0x8, 0x7f, 0x0, 0x1, 0x12000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x6, @perf_bp={&(0x7f0000000240), 0x4}, 0x212, 0x4, 0x6438, 0x8, 0xf4f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0xffff}, 0x0, 0x9, r4, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r5, 0x2270, 0x0) 02:04:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004900) 02:04:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)='(xy1', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:04:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2283, 0x0, 0x0, "9c"}) [ 2556.085739] loop3: detected capacity change from 0 to 130560 [ 2556.094521] ieee802154 phy0 wpan0: encryption failed: -22 02:04:01 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 51) [ 2556.122429] ieee802154 phy0 wpan0: encryption failed: -22 [ 2556.143857] FAULT_INJECTION: forcing a failure. [ 2556.143857] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.145423] CPU: 0 PID: 17742 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2556.146322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.147334] Call Trace: [ 2556.147681] dump_stack+0x107/0x167 [ 2556.148150] should_fail.cold+0x5/0xa [ 2556.148648] ? create_object.isra.0+0x3a/0xa30 [ 2556.149228] should_failslab+0x5/0x20 [ 2556.149729] kmem_cache_alloc+0x5b/0x310 [ 2556.150242] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 2556.150918] create_object.isra.0+0x3a/0xa30 [ 2556.151471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2556.152093] __kmalloc+0x16e/0x390 [ 2556.152551] io_wq_create+0xeb/0xc00 [ 2556.153030] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2556.153688] ? io_import_iovec+0x1120/0x1120 [ 2556.154259] ? io_apoll_task_func+0x2d0/0x2d0 [ 2556.154798] ? __io_req_find_next+0x300/0x300 [ 2556.155364] ? do_raw_spin_lock+0x121/0x260 [ 2556.155915] ? rwlock_bug.part.0+0x90/0x90 [ 2556.156460] __io_uring_add_tctx_node+0x2c6/0x520 [ 2556.157072] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2556.157734] ? alloc_fd+0x2e7/0x670 [ 2556.158219] io_uring_setup+0x1fbb/0x2980 [ 2556.158764] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2556.159405] ? wait_for_completion_io+0x270/0x270 [ 2556.160045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2556.160722] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2556.161381] do_syscall_64+0x33/0x40 [ 2556.161855] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2556.162514] RIP: 0033:0x7f928d897b19 [ 2556.162975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.165308] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2556.166229] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2556.167076] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2556.167927] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2556.168776] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2556.169624] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:04:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003201) 02:04:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0xab, 0x5, @buffer={0x0, 0x7e, &(0x7f0000000040)=""/126}, &(0x7f0000000140)="962ba74f82fec61abbe0b06c31cec3da9c15c7a5709e0ff549b24ef99d51fcc83f6d27eb3d26779d206ffa2616418bfc59065b7531c625032ac16c5d399ea861aceb90147b33cc805661b3fe0950b44fc53c01452e2e35cdda500e4baf59f87d799b8be3a8826cbe17584183bb0b79d8fdc120482aa8174823f0b54994acbdcbf89ee6cddad1834ce3628483d83767a55fae0a5bde997cfae8b70e635a735e41cfabfd2b4fa101bc341fa3", &(0x7f0000000200)=""/124, 0x8cdd, 0x10, 0x1, &(0x7f00000000c0)}) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:04:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:04:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)='(xy1', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:04:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2284, 0x0, 0x0, "9c"}) 02:04:01 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 52) 02:04:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004901) 02:04:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003300) 02:04:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) [ 2556.349951] FAULT_INJECTION: forcing a failure. [ 2556.349951] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.352635] CPU: 1 PID: 17817 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2556.354283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.356282] Call Trace: [ 2556.356924] dump_stack+0x107/0x167 [ 2556.357786] should_fail.cold+0x5/0xa [ 2556.358707] ? io_wq_create+0x6ef/0xc00 [ 2556.359655] should_failslab+0x5/0x20 [ 2556.360578] kmem_cache_alloc_node_trace+0x59/0x340 [ 2556.361779] io_wq_create+0x6ef/0xc00 [ 2556.362711] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2556.363936] ? io_import_iovec+0x1120/0x1120 [ 2556.364996] ? io_apoll_task_func+0x2d0/0x2d0 [ 2556.366075] ? __io_req_find_next+0x300/0x300 [ 2556.367151] ? do_raw_spin_lock+0x121/0x260 [ 2556.368154] ? rwlock_bug.part.0+0x90/0x90 [ 2556.369172] __io_uring_add_tctx_node+0x2c6/0x520 [ 2556.370326] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2556.371577] ? alloc_fd+0x2e7/0x670 [ 2556.372468] io_uring_setup+0x1fbb/0x2980 [ 2556.373459] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2556.374671] ? wait_for_completion_io+0x270/0x270 [ 2556.375830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2556.377007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2556.378248] do_syscall_64+0x33/0x40 [ 2556.379148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2556.380367] RIP: 0033:0x7f928d897b19 [ 2556.381262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.385701] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2556.387541] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2556.389235] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2556.390936] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2556.392657] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2556.394379] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:04:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004a00) [ 2556.910874] loop3: detected capacity change from 0 to 130560 [ 2556.916564] print_req_error: 328 callbacks suppressed [ 2556.916600] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 02:04:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004a01) 02:04:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2285, 0x0, 0x0, "9c"}) 02:04:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:04:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 02:04:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000700)={0x53, 0xfffffffffffffffe, 0xab, 0x1, @scatter={0x7, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000040)=""/153, 0x99}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000001c0)=""/236, 0xec}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000440)=""/66, 0x42}]}, &(0x7f0000000540)="562168f4b589b9fc38da3b5c668a51d9cc685f0239f75e0cf05974c9ab1d34c3ab21f6e796e97bc4071fb7c0c9af3a30a624d00bdcd435356fe987e9924a1f6ce5790e6ed9f934362287d5d4a20385c7cb97147a55d977ee827e4a06b79dd05afca9dfbe19fe297eec8106d5647e86e24c05ab8b2819ebe3d920ef39ad090778fbb15e845d66fe6c9c556676bbb5849b124a83f8a253b12da367b4884d5ea318de5ca5c3f957307bdcf170", &(0x7f0000000600)=""/142, 0x10001, 0x0, 0x1, &(0x7f00000006c0)}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:04:21 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 53) 02:04:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003301) 02:04:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)='(xy1', &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2576.673353] FAULT_INJECTION: forcing a failure. [ 2576.673353] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.676099] CPU: 0 PID: 17853 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2576.677742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.679669] Call Trace: [ 2576.680276] dump_stack+0x107/0x167 [ 2576.681115] should_fail.cold+0x5/0xa [ 2576.681982] ? create_object.isra.0+0x3a/0xa30 [ 2576.683031] should_failslab+0x5/0x20 [ 2576.683892] kmem_cache_alloc+0x5b/0x310 [ 2576.684813] ? io_wq_create+0x114/0xc00 [ 2576.685719] create_object.isra.0+0x3a/0xa30 [ 2576.686733] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2576.687898] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2576.689056] io_wq_create+0x6ef/0xc00 [ 2576.689929] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2576.691089] ? io_import_iovec+0x1120/0x1120 [ 2576.692086] ? io_apoll_task_func+0x2d0/0x2d0 [ 2576.693099] ? __io_req_find_next+0x300/0x300 [ 2576.694108] ? do_raw_spin_lock+0x121/0x260 [ 2576.695088] ? rwlock_bug.part.0+0x90/0x90 [ 2576.696054] __io_uring_add_tctx_node+0x2c6/0x520 [ 2576.697148] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2576.698336] ? alloc_fd+0x2e7/0x670 [ 2576.699173] io_uring_setup+0x1fbb/0x2980 [ 2576.700120] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2576.701264] ? wait_for_completion_io+0x270/0x270 [ 2576.702389] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2576.703573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.704741] do_syscall_64+0x33/0x40 [ 2576.705583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.706808] RIP: 0033:0x7f928d897b19 [ 2576.707655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.711841] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2576.713571] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2576.715190] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2576.716798] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2576.718412] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2576.720028] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 [ 2577.540203] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2577.542696] sd 0:0:0:0: [sg0] tag#0 CDB: Reserve(10) [ 2577.544038] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 56 21 68 f4 b5 89 b9 fc 38 da 3b 5c 66 8a 51 d9 [ 2577.546262] sd 0:0:0:0: [sg0] tag#0 CDB[10]: cc 68 5f 02 39 f7 5e 0c f0 59 74 c9 ab 1d 34 c3 [ 2577.548430] sd 0:0:0:0: [sg0] tag#0 CDB[20]: ab 21 f6 e7 96 e9 7b c4 07 1f b7 c0 c9 af 3a 30 [ 2577.550617] sd 0:0:0:0: [sg0] tag#0 CDB[30]: a6 24 d0 0b dc d4 35 35 6f e9 87 e9 92 4a 1f 6c [ 2577.552809] sd 0:0:0:0: [sg0] tag#0 CDB[40]: e5 79 0e 6e d9 f9 34 36 22 87 d5 d4 a2 03 85 c7 [ 2577.554979] sd 0:0:0:0: [sg0] tag#0 CDB[50]: cb 97 14 7a 55 d9 77 ee 82 7e 4a 06 b7 9d d0 5a [ 2577.557160] sd 0:0:0:0: [sg0] tag#0 CDB[60]: fc a9 df be 19 fe 29 7e ec 81 06 d5 64 7e 86 e2 [ 2577.559341] sd 0:0:0:0: [sg0] tag#0 CDB[70]: 4c 05 ab 8b 28 19 eb e3 d9 20 ef 39 ad 09 07 78 [ 2577.561562] sd 0:0:0:0: [sg0] tag#0 CDB[80]: fb b1 5e 84 5d 66 fe 6c 9c 55 66 76 bb b5 84 9b [ 2577.563768] sd 0:0:0:0: [sg0] tag#0 CDB[90]: 12 4a 83 f8 a2 53 b1 2d a3 67 b4 88 4d 5e a3 18 [ 2577.565990] sd 0:0:0:0: [sg0] tag#0 CDB[a0]: de 5c a5 c3 f9 57 30 7b dc f1 70 02:04:41 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 54) 02:04:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004b00) [ 2596.074117] FAULT_INJECTION: forcing a failure. [ 2596.074117] name failslab, interval 1, probability 0, space 0, times 0 [ 2596.076588] CPU: 1 PID: 17972 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2596.078078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2596.079873] Call Trace: [ 2596.080442] dump_stack+0x107/0x167 [ 2596.081232] should_fail.cold+0x5/0xa [ 2596.082046] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2596.083101] should_failslab+0x5/0x20 [ 2596.083922] kmem_cache_alloc_trace+0x55/0x320 [ 2596.084909] __io_uring_add_tctx_node+0x15c/0x520 [ 2596.085942] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2596.087075] ? alloc_fd+0x2e7/0x670 [ 2596.087879] io_uring_setup+0x1fbb/0x2980 [ 2596.088769] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2596.089846] ? wait_for_completion_io+0x270/0x270 [ 2596.090919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2596.092039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2596.093147] do_syscall_64+0x33/0x40 [ 2596.093941] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2596.095028] RIP: 0033:0x7f928d897b19 [ 2596.095810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2596.099700] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2596.101327] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2596.102843] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2596.104359] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2596.105869] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2596.107388] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:04:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:04:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003400) 02:04:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2286, 0x0, 0x0, "9c"}) 02:04:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0xa5, 0x8, 0x4, "10ab05f7f2bd1b0c08379ec439068c217e6fc6ba62ace1d6551fbfe36c512e3f582a2de3590abfd18f8937a719c4b0665e66b614c4ecfc35617666f13a5c61078a9b07912737b40dd74ee9a7a00b98e76492122e6cff0204d8360bb82cdad950e9453e3cc3b045ad146ece19d0568657017bc5fc313b73c4b91daf923872e3126178b199a892fe19e5fdf02aa214d5a0bcc7b1274680f63e1e30a5e1ae4bdded19cbe88396"}) 02:04:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:04:41 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@un=@abs, &(0x7f0000000200)=0x80) stat(&(0x7f0000001440)='.\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4e23, 0x3ff, 0x4e21, 0xfff0, 0xa, 0x20, 0xe0, 0x32, 0x0, r1}, {0xf3, 0x3, 0x2, 0x3, 0x3, 0x5, 0x92, 0x8}, {0x40, 0x3, 0x1ff, 0x4}, 0x1ff, 0x6e6bbf, 0x0, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4d4, 0x3c}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x0, 0x5, 0x4, 0x7db4, 0xfffffc01}}, 0xe8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs', 0x224080, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r2, 0x8000000) io_uring_enter(r2, 0x222e, 0x3070, 0x3, &(0x7f0000000040), 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1276, 0x0) 02:04:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004b01) 02:04:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2287, 0x0, 0x0, "9c"}) 02:04:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003401) 02:04:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000040)=""/94, 0x5e, 0x2105, 0x4}) 02:04:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:04:41 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 55) [ 2596.320228] FAULT_INJECTION: forcing a failure. [ 2596.320228] name failslab, interval 1, probability 0, space 0, times 0 [ 2596.322985] CPU: 0 PID: 18032 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2596.324535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2596.326401] Call Trace: [ 2596.327001] dump_stack+0x107/0x167 [ 2596.327822] should_fail.cold+0x5/0xa [ 2596.328682] ? io_wq_create+0x6ef/0xc00 [ 2596.329573] should_failslab+0x5/0x20 [ 2596.330440] kmem_cache_alloc_node_trace+0x59/0x340 [ 2596.331588] io_wq_create+0x6ef/0xc00 [ 2596.332456] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2596.333613] ? io_import_iovec+0x1120/0x1120 [ 2596.334622] ? io_apoll_task_func+0x2d0/0x2d0 [ 2596.335630] ? __io_req_find_next+0x300/0x300 [ 2596.336641] ? do_raw_spin_lock+0x121/0x260 [ 2596.337613] ? rwlock_bug.part.0+0x90/0x90 [ 2596.338588] __io_uring_add_tctx_node+0x2c6/0x520 [ 2596.339670] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2596.340844] ? alloc_fd+0x2e7/0x670 [ 2596.341683] io_uring_setup+0x1fbb/0x2980 [ 2596.342640] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2596.343784] ? wait_for_completion_io+0x270/0x270 [ 2596.344897] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2596.346083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2596.347256] do_syscall_64+0x33/0x40 [ 2596.348107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2596.349269] RIP: 0033:0x7f928d897b19 [ 2596.350109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2596.354275] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2596.356012] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2596.357619] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2596.359224] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2596.360831] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2596.362438] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:04:57 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 56) 02:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004c00) 02:04:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2612.783458] FAULT_INJECTION: forcing a failure. [ 2612.783458] name failslab, interval 1, probability 0, space 0, times 0 [ 2612.786349] CPU: 1 PID: 18119 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2612.787901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2612.789753] Call Trace: [ 2612.790346] dump_stack+0x107/0x167 [ 2612.791419] should_fail.cold+0x5/0xa [ 2612.792361] ? xas_alloc+0x336/0x440 [ 2612.793271] should_failslab+0x5/0x20 [ 2612.794195] kmem_cache_alloc+0x5b/0x310 02:04:57 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000180)='net/packet\x00') r3 = gettid() syz_open_procfs(r3, &(0x7f0000000180)='net/packet\x00') process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/148, 0x94}, {&(0x7f0000000280)=""/119, 0x77}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000005c0)=""/124, 0x7c}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000640)=""/11, 0xb}, {&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/166, 0xa6}], 0x9, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x91, 0x7f, 0x8, 0x0, 0x9, 0x48000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x200, 0x10001, 0x99, 0x3, 0x101, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, r2, 0x7, r0, 0x3) 02:04:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:04:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2288, 0x0, 0x0, "9c"}) 02:04:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003500) 02:04:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000014c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001540)=""/44, 0x2c}, {&(0x7f0000001580)=""/242, 0xf2}, {&(0x7f0000001680)=""/34, 0x22}, {&(0x7f00000016c0)=""/204, 0xcc}, {&(0x7f00000017c0)=""/176, 0xb0}], 0x5, &(0x7f0000001900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x160) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) connect$inet6(r1, &(0x7f0000001a00)={0xa, 0x4e20, 0x201, @private0, 0x2}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') readv(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040028bd7000fbdbdf2507000000080003003ee4d11a984c27de55911d91509df49d6f1aca8334f0efa1a66d70096d", @ANYRES32=r8, @ANYBLOB="080032008100000008002c00ff0f000005002a000100000008000b0080000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000050) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}}, 0x80) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{r2}, 0x0, 0x2, @unused=[0x1f, 0x32, 0x3, 0xd841], @devid}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) [ 2612.795388] ? stack_trace_consume_entry+0x160/0x160 [ 2612.796907] xas_alloc+0x336/0x440 [ 2612.797784] xas_create+0x34a/0x10d0 [ 2612.798731] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2612.800025] xas_store+0x8c/0x1c40 [ 2612.800936] __xa_store+0x164/0x2d0 [ 2612.801838] ? xa_delete_node+0x280/0x280 [ 2612.802889] ? trace_hardirqs_on+0x5b/0x180 [ 2612.803971] xa_store+0x31/0x50 [ 2612.804807] __io_uring_add_tctx_node+0x1cf/0x520 [ 2612.806013] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2612.807259] ? alloc_fd+0x2e7/0x670 [ 2612.808040] io_uring_setup+0x1fbb/0x2980 [ 2612.808922] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2612.809985] ? wait_for_completion_io+0x270/0x270 [ 2612.811034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2612.812135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2612.813218] do_syscall_64+0x33/0x40 [ 2612.813995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2612.815082] RIP: 0033:0x7f928d897b19 [ 2612.815866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2612.819724] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2612.821318] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2612.822819] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2612.824308] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2612.825801] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2612.827311] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:04:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98d", 0x0, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:04:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004c01) 02:04:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2289, 0x0, 0x0, "9c"}) 02:04:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:04:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003501) 02:04:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x3, 0x200040) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:04:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98d", 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)}) 02:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004d00) 02:05:14 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r0, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0xf227e73, 0x5, 0x8303, 0x5769, 0x2, 0xfffffffffffffff7, 0x8, 0x3f, 0x1, 0x9, 0x8, 0xffff, 0x3, 0x10000}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{r1, 0x1400, 0x100000001, 0x101, 0x0, 0x2, 0x7, 0x7f, 0x9, 0x101, 0x2, 0x100000001, 0x101, 0x10000, 0x4}, 0x18, [0x0, 0x0, 0x0]}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x10bbc3) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1276, 0x0) 02:05:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x4b47, 0x0, 0x0, "9c"}) 02:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004d01) 02:05:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:05:14 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 57) 02:05:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003600) 02:05:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x8, 0x0, 0x120000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x80000000000, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001600)={0x53, 0xfffffffffffffffb, 0x93, 0x4, @scatter={0x7, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000000140)=""/125, 0x7d}, {&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f00000001c0)=""/208, 0xd0}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/158, 0x9e}]}, &(0x7f0000000540)="622f980a258914f73e77fbe3324f393b8e29ca208daaa1486a787e44b749f2e680e19ce267280e45ca10b4103a0175eb4535a7276b83bc104081b17e582fd6d8899a4d478b2d4a1409be0e72b32f59e84817d3acf205da4fcfe2139560b88eee92ce51e9f54b99d6902dfb0eeab19dc24c434f2b961a441d195516869807680c4987fcae9469acc72f22e67fd1bb65c8e52c32", &(0x7f0000000600)=""/4096, 0x1, 0x0, 0x0, &(0x7f0000000400)}) 02:05:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98d", 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) [ 2629.006998] FAULT_INJECTION: forcing a failure. [ 2629.006998] name failslab, interval 1, probability 0, space 0, times 0 [ 2629.009399] CPU: 1 PID: 18271 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2629.010862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2629.012611] Call Trace: [ 2629.013172] dump_stack+0x107/0x167 [ 2629.013926] should_fail.cold+0x5/0xa [ 2629.014739] ? create_object.isra.0+0x3a/0xa30 [ 2629.015700] should_failslab+0x5/0x20 [ 2629.016511] kmem_cache_alloc+0x5b/0x310 [ 2629.017382] create_object.isra.0+0x3a/0xa30 [ 2629.018315] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2629.019407] kmem_cache_alloc+0x159/0x310 [ 2629.020301] xas_alloc+0x336/0x440 [ 2629.021065] xas_create+0x34a/0x10d0 [ 2629.021883] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2629.023012] xas_store+0x8c/0x1c40 [ 2629.023789] __xa_store+0x164/0x2d0 [ 2629.024567] ? xa_delete_node+0x280/0x280 [ 2629.025470] ? trace_hardirqs_on+0x5b/0x180 [ 2629.026404] xa_store+0x31/0x50 [ 2629.027130] __io_uring_add_tctx_node+0x1cf/0x520 [ 2629.028162] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2629.029274] ? alloc_fd+0x2e7/0x670 [ 2629.030063] io_uring_setup+0x1fbb/0x2980 [ 2629.030966] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2629.032047] ? wait_for_completion_io+0x270/0x270 [ 2629.033106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2629.034226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2629.035334] do_syscall_64+0x33/0x40 [ 2629.036128] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2629.037220] RIP: 0033:0x7f928d897b19 [ 2629.038012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2629.041940] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2629.043568] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2629.045080] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2629.046590] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2629.048117] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2629.049630] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004e00) 02:05:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98d", 0x0, 0x0, 0x0, 0x0, 0x0}) 02:05:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffd, 0x98, 0x4, @scatter={0x5, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000080)=""/89, 0x59}, {&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000280)=""/75, 0x4b}]}, &(0x7f0000000380)="d9681808b84d12dac2a299f5f8c85ab181066f4478d2087d9024cb34b58abc802ea4d37c49b1c41fd2cedf6296ca52405365761956c33486f796f2293bc98f68065dc492a7585a8ae14859b718c10700039a5e9e3c659088b77625ed821415fbdc549b2afd1d65f123fd4cf45529a2f7009b64e9ac5da463f5e330b63ad4500439f87e729d7df7539a27e3ab28404064ed4a0f834c908e6c", &(0x7f0000000440)=""/170, 0x4, 0x10021, 0x1, &(0x7f0000000500)}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x20680) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)={0xf9, 0x2, 0x6, "b28b321e22d3120a3ad415839a96919551c891611cd2746dc6f7cb0489380acc8dbf5c4f789abdc740381a3891d0f9ecd0c5184b321967ef59f86e808aadeba3010e163baba57c9f2b7b30ad216094cbd28de1e9f05314902fc1b1ac67d8f8a17d6d67f7f419bcea74e73fe46daabc52468d0ec40e243f92a1bfe8fd1c4ad8dba280292cf9b2ee141fab7a3451eb9f5aee4b8ea27e3456ae4b8ca5bc2212841714f409e5a081724c392b965083431ea5453a272fa1302f32e36470fcaf8e770dbe615dfb636cbef370d1e8d3ec0c6ec7638f470c95f038c5c412b2b4bcf45972cdeb3e904bd6dd31d224bac268185524db6951a1033d5f571a"}) 02:05:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x4b49, 0x0, 0x0, "9c"}) 02:05:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003601) 02:05:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004e01) [ 2629.242917] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2629.244973] sd 0:0:0:0: [sg0] tag#0 CDB: opcode=0xd9 (vendor) [ 2629.246260] sd 0:0:0:0: [sg0] tag#0 CDB[00]: d9 68 18 08 b8 4d 12 da c2 a2 99 f5 f8 c8 5a b1 [ 2629.248094] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 81 06 6f 44 78 d2 08 7d 90 24 cb 34 b5 8a bc 80 [ 2629.249894] sd 0:0:0:0: [sg0] tag#0 CDB[20]: 2e a4 d3 7c 49 b1 c4 1f d2 ce df 62 96 ca 52 40 [ 2629.251697] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 53 65 76 19 56 c3 34 86 f7 96 f2 29 3b c9 8f 68 [ 2629.253484] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 06 5d c4 92 a7 58 5a 8a e1 48 59 b7 18 c1 07 00 [ 2629.255271] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 03 9a 5e 9e 3c 65 90 88 b7 76 25 ed 82 14 15 fb [ 2629.257085] sd 0:0:0:0: [sg0] tag#0 CDB[60]: dc 54 9b 2a fd 1d 65 f1 23 fd 4c f4 55 29 a2 f7 [ 2629.258913] sd 0:0:0:0: [sg0] tag#0 CDB[70]: 00 9b 64 e9 ac 5d a4 63 f5 e3 30 b6 3a d4 50 04 [ 2629.260722] sd 0:0:0:0: [sg0] tag#0 CDB[80]: 39 f8 7e 72 9d 7d f7 53 9a 27 e3 ab 28 40 40 64 [ 2629.262523] sd 0:0:0:0: [sg0] tag#0 CDB[90]: ed 4a 0f 83 4c 90 8e 6c 02:05:14 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 58) [ 2629.300879] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2629.302919] sd 0:0:0:0: [sg0] tag#0 CDB: opcode=0xd9 (vendor) [ 2629.304203] sd 0:0:0:0: [sg0] tag#0 CDB[00]: d9 68 18 08 b8 4d 12 da c2 a2 99 f5 f8 c8 5a b1 [ 2629.305994] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 81 06 6f 44 78 d2 08 7d 90 24 cb 34 b5 8a bc 80 [ 2629.307818] sd 0:0:0:0: [sg0] tag#0 CDB[20]: 2e a4 d3 7c 49 b1 c4 1f d2 ce df 62 96 ca 52 40 [ 2629.309601] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 53 65 76 19 56 c3 34 86 f7 96 f2 29 3b c9 8f 68 [ 2629.311397] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 06 5d c4 92 a7 58 5a 8a e1 48 59 b7 18 c1 07 00 [ 2629.313191] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 03 9a 5e 9e 3c 65 90 88 b7 76 25 ed 82 14 15 fb [ 2629.315017] sd 0:0:0:0: [sg0] tag#0 CDB[60]: dc 54 9b 2a fd 1d 65 f1 23 fd 4c f4 55 29 a2 f7 [ 2629.316803] sd 0:0:0:0: [sg0] tag#0 CDB[70]: 00 9b 64 e9 ac 5d a4 63 f5 e3 30 b6 3a d4 50 04 [ 2629.318598] sd 0:0:0:0: [sg0] tag#0 CDB[80]: 39 f8 7e 72 9d 7d f7 53 9a 27 e3 ab 28 40 40 64 [ 2629.320392] sd 0:0:0:0: [sg0] tag#0 CDB[90]: ed 4a 0f 83 4c 90 8e 6c 02:05:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000014c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001540)=""/44, 0x2c}, {&(0x7f0000001580)=""/242, 0xf2}, {&(0x7f0000001680)=""/34, 0x22}, {&(0x7f00000016c0)=""/204, 0xcc}, {&(0x7f00000017c0)=""/176, 0xb0}], 0x5, &(0x7f0000001900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x160) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) connect$inet6(r1, &(0x7f0000001a00)={0xa, 0x4e20, 0x201, @private0, 0x2}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') readv(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040028bd7000fbdbdf2507000000080003003ee4d11a984c27de55911d91509df49d6f1aca8334f0efa1a66d70096d", @ANYRES32=r8, @ANYBLOB="080032008100000008002c00ff0f000005002a000100000008000b0080000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000050) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}}, 0x80) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{r2}, 0x0, 0x2, @unused=[0x1f, 0x32, 0x3, 0xd841], @devid}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:05:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x5382, 0x0, 0x0, "9c"}) [ 2629.351336] FAULT_INJECTION: forcing a failure. [ 2629.351336] name failslab, interval 1, probability 0, space 0, times 0 [ 2629.353953] CPU: 0 PID: 18405 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2629.355421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2629.357131] Call Trace: [ 2629.357691] dump_stack+0x107/0x167 [ 2629.358456] should_fail.cold+0x5/0xa [ 2629.359270] ? xas_alloc+0x336/0x440 [ 2629.360047] should_failslab+0x5/0x20 [ 2629.360843] kmem_cache_alloc+0x5b/0x310 [ 2629.361697] xas_alloc+0x336/0x440 [ 2629.362442] xas_create+0x34a/0x10d0 [ 2629.363268] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2629.364359] xas_store+0x8c/0x1c40 [ 2629.365115] __xa_store+0x164/0x2d0 [ 2629.365875] ? xa_delete_node+0x280/0x280 [ 2629.366764] ? trace_hardirqs_on+0x5b/0x180 [ 2629.367679] xa_store+0x31/0x50 [ 2629.368378] __io_uring_add_tctx_node+0x1cf/0x520 [ 2629.369384] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2629.370469] ? alloc_fd+0x2e7/0x670 [ 2629.371268] io_uring_setup+0x1fbb/0x2980 [ 2629.372152] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2629.373200] ? wait_for_completion_io+0x270/0x270 [ 2629.374221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2629.375345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2629.376424] do_syscall_64+0x33/0x40 [ 2629.377198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2629.378262] RIP: 0033:0x7f928d897b19 [ 2629.379061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2629.382866] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2629.384428] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2629.385919] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2629.387412] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2629.388883] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2629.390345] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:05:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xa0, 0x78, 0x1, 0x9, 0x0, 0x6, 0x10041, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x3040, 0x4, 0x1, 0x4, 0x0, 0x9, 0x20, 0x0, 0x5, 0x0, 0xe}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x7, 0x6, 0x8, 0x7, 0x0, 0x3ff, 0x1, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x20, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0x4, 0x0, 0x8, 0x0, 0xfffffffffffffaa9}) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:05:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0xc0481273, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 02:05:31 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 59) [ 2646.863450] FAULT_INJECTION: forcing a failure. [ 2646.863450] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.865958] CPU: 1 PID: 18423 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2646.867425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2646.869171] Call Trace: 02:05:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:05:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004f00) 02:05:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003700) 02:05:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x5385, 0x0, 0x0, "9c"}) [ 2646.869730] dump_stack+0x107/0x167 [ 2646.870675] should_fail.cold+0x5/0xa [ 2646.871505] ? create_object.isra.0+0x3a/0xa30 [ 2646.872466] should_failslab+0x5/0x20 [ 2646.873269] kmem_cache_alloc+0x5b/0x310 [ 2646.874125] ? mark_held_locks+0x9e/0xe0 [ 2646.874999] create_object.isra.0+0x3a/0xa30 [ 2646.875926] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2646.877011] kmem_cache_alloc+0x159/0x310 [ 2646.877903] xas_alloc+0x336/0x440 [ 2646.878670] xas_create+0x34a/0x10d0 [ 2646.879485] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2646.880604] xas_store+0x8c/0x1c40 [ 2646.881379] __xa_store+0x164/0x2d0 [ 2646.882156] ? xa_delete_node+0x280/0x280 [ 2646.883053] ? trace_hardirqs_on+0x5b/0x180 [ 2646.883980] xa_store+0x31/0x50 [ 2646.884686] __io_uring_add_tctx_node+0x1cf/0x520 [ 2646.885713] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2646.886822] ? alloc_fd+0x2e7/0x670 [ 2646.887625] io_uring_setup+0x1fbb/0x2980 [ 2646.888516] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2646.889587] ? wait_for_completion_io+0x270/0x270 [ 2646.890623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2646.891748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2646.892845] do_syscall_64+0x33/0x40 [ 2646.893639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2646.894727] RIP: 0033:0x7f928d897b19 [ 2646.895523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2646.899462] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2646.901091] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2646.902618] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2646.904113] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2646.905593] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2646.907081] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:05:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004f01) 02:05:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:05:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x5386, 0x0, 0x0, "9c"}) 02:05:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c"], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) pread64(r1, &(0x7f0000000000)=""/126, 0x7e, 0x7f) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 02:05:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003701) 02:05:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005000) 02:05:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2648.999853] Bluetooth: hci7: command 0x0405 tx timeout 02:05:47 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x0) 02:05:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:05:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x541b, 0x0, 0x0, "9c"}) 02:05:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:05:47 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 60) 02:05:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003800) 02:05:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005001) 02:05:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x20002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESOCT=r3]) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r4, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000280)) fallocate(r4, 0x10, 0x8, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESOCT=r5]) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000000)={"6b0a206057c71a7d828b8fe9b6826cb0", r3, r5, {0x0, 0x5}, {0x9, 0x20}, 0x2, [0x3, 0xefb, 0x401, 0x7, 0x6, 0x5, 0xff, 0x57b8, 0xc18, 0x1, 0x8, 0x3b933362, 0x1000, 0x5, 0x6, 0x100000000]}) [ 2661.987392] FAULT_INJECTION: forcing a failure. [ 2661.987392] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.989817] CPU: 1 PID: 18675 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2661.991279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2661.993026] Call Trace: [ 2661.993584] dump_stack+0x107/0x167 [ 2661.994350] should_fail.cold+0x5/0xa [ 2661.995162] ? xas_alloc+0x336/0x440 [ 2661.995941] should_failslab+0x5/0x20 [ 2661.996738] kmem_cache_alloc+0x5b/0x310 [ 2661.997596] xas_alloc+0x336/0x440 [ 2661.998345] xas_create+0x34a/0x10d0 [ 2661.999151] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2662.000252] xas_store+0x8c/0x1c40 [ 2662.000997] __xa_store+0x164/0x2d0 [ 2662.001765] ? xa_delete_node+0x280/0x280 [ 2662.002654] ? trace_hardirqs_on+0x5b/0x180 [ 2662.003578] xa_store+0x31/0x50 [ 2662.004280] __io_uring_add_tctx_node+0x1cf/0x520 [ 2662.005296] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2662.006404] ? alloc_fd+0x2e7/0x670 [ 2662.007188] io_uring_setup+0x1fbb/0x2980 [ 2662.008067] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2662.009131] ? wait_for_completion_io+0x270/0x270 [ 2662.010181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2662.011295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2662.012383] do_syscall_64+0x33/0x40 [ 2662.013167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2662.014237] RIP: 0033:0x7f928d897b19 [ 2662.015012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2662.018875] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2662.020482] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2662.021997] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2662.023488] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2662.024983] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2662.026472] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:05:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005100) 02:05:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x120) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:05:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2270, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x44000, 0x0) read$ptp(r1, 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r0, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x8) 02:05:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 02:05:47 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 61) 02:05:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005101) 02:05:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x5421, 0x0, 0x0, "9c"}) 02:05:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003801) 02:05:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) dup(r0) [ 2662.287021] FAULT_INJECTION: forcing a failure. [ 2662.287021] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.289476] CPU: 1 PID: 18799 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2662.290915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2662.292638] Call Trace: [ 2662.293195] dump_stack+0x107/0x167 [ 2662.293960] should_fail.cold+0x5/0xa [ 2662.294753] ? create_object.isra.0+0x3a/0xa30 [ 2662.295711] should_failslab+0x5/0x20 [ 2662.296506] kmem_cache_alloc+0x5b/0x310 [ 2662.297349] ? mark_held_locks+0x9e/0xe0 [ 2662.298194] create_object.isra.0+0x3a/0xa30 [ 2662.299119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2662.300197] kmem_cache_alloc+0x159/0x310 [ 2662.301071] xas_alloc+0x336/0x440 [ 2662.301814] xas_create+0x34a/0x10d0 [ 2662.302602] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2662.303707] xas_store+0x8c/0x1c40 [ 2662.304470] __xa_store+0x164/0x2d0 [ 2662.305233] ? xa_delete_node+0x280/0x280 [ 2662.306102] ? trace_hardirqs_on+0x5b/0x180 [ 2662.307009] xa_store+0x31/0x50 [ 2662.307713] __io_uring_add_tctx_node+0x1cf/0x520 [ 2662.308730] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2662.309824] ? alloc_fd+0x2e7/0x670 [ 2662.310597] io_uring_setup+0x1fbb/0x2980 [ 2662.311480] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2662.312540] ? wait_for_completion_io+0x270/0x270 [ 2662.313570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2662.314658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2662.315749] do_syscall_64+0x33/0x40 [ 2662.316523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2662.317584] RIP: 0033:0x7f928d897b19 [ 2662.318353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2662.322200] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2662.323827] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2662.325323] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2662.326819] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2662.328334] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2662.329837] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:05:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:05:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:06:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:06:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:06:02 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 62) 02:06:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0xfff, 0xe7, 0xc1, 0x401}, {0x5, 0x0, 0x1f, 0x7ff}, {0xbf, 0x81, 0x8}, {0x2, 0xfe, 0x6}, {0x7, 0x8, 0x7f, 0x3}, {0x1, 0x0, 0xb3, 0x3f}, {0xbb16, 0x40, 0x81, 0xffffff81}]}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1ff}, 0x1020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80400, 0x18) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:06:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x5450, 0x0, 0x0, "9c"}) 02:06:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005200) 02:06:02 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:06:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003900) [ 2677.681452] FAULT_INJECTION: forcing a failure. [ 2677.681452] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.683920] CPU: 1 PID: 18935 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2677.685396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2677.687159] Call Trace: [ 2677.687744] dump_stack+0x107/0x167 [ 2677.688522] should_fail.cold+0x5/0xa [ 2677.689334] ? xas_alloc+0x336/0x440 [ 2677.690127] should_failslab+0x5/0x20 [ 2677.690937] kmem_cache_alloc+0x5b/0x310 [ 2677.691819] xas_alloc+0x336/0x440 [ 2677.692586] xas_create+0x34a/0x10d0 [ 2677.693395] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2677.694512] xas_store+0x8c/0x1c40 [ 2677.695298] __xa_store+0x164/0x2d0 [ 2677.696078] ? xa_delete_node+0x280/0x280 [ 2677.696970] ? trace_hardirqs_on+0x5b/0x180 [ 2677.697897] xa_store+0x31/0x50 [ 2677.698606] __io_uring_add_tctx_node+0x1cf/0x520 [ 2677.699642] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2677.700755] ? alloc_fd+0x2e7/0x670 [ 2677.701543] io_uring_setup+0x1fbb/0x2980 [ 2677.702437] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2677.703520] ? wait_for_completion_io+0x270/0x270 [ 2677.704574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2677.705690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2677.706789] do_syscall_64+0x33/0x40 [ 2677.707592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2677.708679] RIP: 0033:0x7f928d897b19 [ 2677.709468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2677.713390] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2677.715008] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2677.716538] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2677.718048] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2677.719568] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2677.721081] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:06:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x57, 0xfffffff7, 0xffffff55, "719a69f9bda4b20dae7acf43077f622e665ca9f316a6db8ee207d88c43ff903997f6aa655e85958f2ece0603f6733a4a02d7c53e1a16ce909e459ca88b657c2584d138e5d00346134525a4070d88d878a960bc5128dbbc"}) 02:06:02 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:06:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003901) 02:06:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005201) 02:06:02 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r0, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0xd9, 0x2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x2649, 0xfffffffffffffbff}, 0x18600, 0x0, 0x4, 0x0, 0x0, 0x4, 0x6, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x7ff, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000040)) 02:06:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x5451, 0x0, 0x0, "9c"}) 02:06:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x5452, 0x0, 0x0, "9c"}) 02:06:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x120) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000980)={0x0, 0xfffffffffffffffd, 0xf, 0x20, @scatter={0x6, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/234, 0xea}]}, &(0x7f00000000c0)="d1ca8ff96eaad508d00f5a9ed9c75a", &(0x7f0000000880)=""/185, 0xffff, 0x6, 0x3, &(0x7f0000000940)}) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000a00)=0x40) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x6) 02:06:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:06:18 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:06:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005300) 02:06:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003a00) [ 2693.403549] FAULT_INJECTION: forcing a failure. [ 2693.403549] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.406032] CPU: 1 PID: 19079 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2693.407506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.409280] Call Trace: [ 2693.409841] dump_stack+0x107/0x167 [ 2693.410612] should_fail.cold+0x5/0xa [ 2693.411416] ? create_object.isra.0+0x3a/0xa30 [ 2693.412395] should_failslab+0x5/0x20 [ 2693.413199] kmem_cache_alloc+0x5b/0x310 [ 2693.414056] ? mark_held_locks+0x9e/0xe0 [ 2693.414918] create_object.isra.0+0x3a/0xa30 [ 2693.415852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2693.416925] kmem_cache_alloc+0x159/0x310 [ 2693.417813] xas_alloc+0x336/0x440 [ 2693.418570] xas_create+0x34a/0x10d0 [ 2693.419372] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2693.420483] xas_store+0x8c/0x1c40 [ 2693.421259] __xa_store+0x164/0x2d0 02:06:18 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 63) 02:06:18 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) r4 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x7fff, 0x101000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000240)=ANY=[@ANYRES64=r8, @ANYBLOB="000001000000000003000000000000000e000d00000000008000000000000000000000000000000000000000000000000000faffffffffffffff00000500000000000000000000000600000000000000a90000000000000008000000000000002800"/144]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000240)=ANY=[@ANYRES64=r11, @ANYBLOB="000001000000000003000000000000000e000000000000008000000000000000000000000000000000000000000000000000000000100000000800000500000000000000000000000600000000000000a9000000000000000800000000000000280000000000000000000000000000000000000000000000000000000000fd8d9fcd65af09dd00"/144]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0xd8, "c3b057e37f7fda"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000600)={r7, 0x0, "b34eba63f887e74b89ee2adde391ea26d8c2eab9e401504953a5611bea9dd8b2fec8f7f49e977a18046d8b349e3066fa4a92c4b28fc24156573722f71bfbf17062aa56772ca0e9230b71e4a3ccfbb1a000b7dd8ce5c3ac6800f1d49f40e27780c99514666a1a44bc9ac0441a71fe549a2a6b3bd32776e71fb1cfd721ee751e5ec6fab5b4f3167b457b9c2906b7be0f3f4fbf4ac7ef6b62170d2e2c91f02ab80a6a18e75680f8511a2af6c4563493184dcf1fbd76425a3d4007ba62469a997601342beaa3e67f5b2a544d37f69c0fcff3642b9e36db604ca7ddb731c73d4f7dcb984714d64763261d818d6fe595be1f61caf06bb0b021cd8213239ae9105f0d0a", "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"}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x4810, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x100, 0xf5, 0x1f, 0x5, 0x40, 0x1, 0x2, 0x0, 0x7ff, 0x0, 0x8}, r1, 0x0, r2, 0xb) fcntl$dupfd(r0, 0x406, r3) r12 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r12, 0x2270, 0x0) [ 2693.422307] ? xa_delete_node+0x280/0x280 [ 2693.423325] ? trace_hardirqs_on+0x5b/0x180 [ 2693.424264] xa_store+0x31/0x50 [ 2693.424974] __io_uring_add_tctx_node+0x1cf/0x520 [ 2693.425985] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2693.427083] ? alloc_fd+0x2e7/0x670 [ 2693.427875] io_uring_setup+0x1fbb/0x2980 [ 2693.428766] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2693.429849] ? wait_for_completion_io+0x270/0x270 [ 2693.430903] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.432021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.433114] do_syscall_64+0x33/0x40 [ 2693.433901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2693.434980] RIP: 0033:0x7f928d897b19 [ 2693.435770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.439654] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2693.441262] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2693.442770] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2693.444283] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2693.445776] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2693.447272] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:06:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003a01) 02:06:18 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:06:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005301) 02:06:18 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x5460, 0x0, 0x0, "9c"}) 02:06:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:06:18 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 64) 02:06:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003b00) [ 2693.649313] FAULT_INJECTION: forcing a failure. [ 2693.649313] name failslab, interval 1, probability 0, space 0, times 0 [ 2693.651812] CPU: 1 PID: 19195 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2693.653276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2693.655027] Call Trace: [ 2693.655601] dump_stack+0x107/0x167 [ 2693.656377] should_fail.cold+0x5/0xa [ 2693.657180] ? xas_alloc+0x336/0x440 [ 2693.657964] should_failslab+0x5/0x20 [ 2693.658762] kmem_cache_alloc+0x5b/0x310 [ 2693.659631] xas_alloc+0x336/0x440 [ 2693.660393] xas_create+0x34a/0x10d0 [ 2693.661195] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2693.662281] xas_store+0x8c/0x1c40 [ 2693.663049] __xa_store+0x164/0x2d0 [ 2693.663836] ? xa_delete_node+0x280/0x280 [ 2693.664720] ? trace_hardirqs_on+0x5b/0x180 [ 2693.665639] xa_store+0x31/0x50 [ 2693.666340] __io_uring_add_tctx_node+0x1cf/0x520 [ 2693.667357] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2693.668476] ? alloc_fd+0x2e7/0x670 [ 2693.669257] io_uring_setup+0x1fbb/0x2980 02:06:18 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2693.670150] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2693.671386] ? wait_for_completion_io+0x270/0x270 [ 2693.672469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2693.673625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2693.674805] do_syscall_64+0x33/0x40 [ 2693.675602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2693.676685] RIP: 0033:0x7f928d897b19 [ 2693.677470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2693.681509] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2693.683176] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2693.684763] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2693.686343] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2693.687918] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2693.689516] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 [ 2709.850731] FAULT_INJECTION: forcing a failure. [ 2709.850731] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.852277] CPU: 1 PID: 19230 Comm: syz-executor.7 Not tainted 5.10.258 #1 02:06:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:06:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005400) 02:06:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003b01) 02:06:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:06:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x80000, 0x0, 0x0, "9c"}) 02:06:34 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x5c, 0x1, 0x0, 0x3, 0xd4f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4a008, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x591b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01d07f0590e65e81208b0000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c65300005524cd5fbefe528610e9f9f01d4b63b4be16df6d368f297dc74f21fe78ff2c0d262364ae3d08d9ee8f8b1d217ec83bfbc8b9869795afa877c5f6e4d9d3887a80f2162da6848a87bd1d70bb8810d951b06ab3552d07eab04502d6f17ea0157c517db525099e572a96fd259610c2eea9272"]) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) 02:06:34 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 65) 02:06:34 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0xc0182) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2709.853138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2709.854290] Call Trace: [ 2709.854625] dump_stack+0x107/0x167 [ 2709.855081] should_fail.cold+0x5/0xa [ 2709.855560] ? create_object.isra.0+0x3a/0xa30 [ 2709.856132] should_failslab+0x5/0x20 [ 2709.856601] kmem_cache_alloc+0x5b/0x310 [ 2709.857102] ? mark_held_locks+0x9e/0xe0 [ 2709.857604] create_object.isra.0+0x3a/0xa30 [ 2709.858142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2709.858775] kmem_cache_alloc+0x159/0x310 [ 2709.859301] xas_alloc+0x336/0x440 [ 2709.859751] xas_create+0x34a/0x10d0 [ 2709.860216] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2709.860860] xas_store+0x8c/0x1c40 [ 2709.861310] __xa_store+0x164/0x2d0 [ 2709.861765] ? xa_delete_node+0x280/0x280 [ 2709.862280] ? trace_hardirqs_on+0x5b/0x180 [ 2709.862814] xa_store+0x31/0x50 [ 2709.863227] __io_uring_add_tctx_node+0x1cf/0x520 [ 2709.863829] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2709.864472] ? alloc_fd+0x2e7/0x670 [ 2709.864926] io_uring_setup+0x1fbb/0x2980 [ 2709.865442] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2709.866064] ? wait_for_completion_io+0x270/0x270 [ 2709.866671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.867316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.867957] do_syscall_64+0x33/0x40 [ 2709.868421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2709.869048] RIP: 0033:0x7f928d897b19 [ 2709.869506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.871778] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2709.872711] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2709.873586] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2709.874461] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2709.875333] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2709.876210] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:06:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:06:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003c00) 02:06:35 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000940)={0xbc, 0x2, 0xaaa0, "0fd8b08c5fcb0b4c6cbb62b7c54773b38b8010609cbcb73f86fbdb587336d692ee2e1b92383cc7c5bcd4db99341069a014b17cfef119378e25cadde1fc9d18abb8da222a33c98c75206b6c66d79edb7c152efad994972460ddbcdb62600c63e78bf3bb58f7b5e5ff1544d0d207b73ee4e39da35a56b0591b53b0586573421a37d7212980c24fe400007fea3e5015930444ea9243205c5b5f68589fba17cd080aa683920e723c29f924ed17edb99ddc54bb64ae82705379439758723c"}) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) r2 = signalfd4(r0, &(0x7f0000000000)={[0x4e]}, 0x8, 0x80800) ioctl$SG_IO(r2, 0x2285, &(0x7f00000008c0)={0x0, 0xfffffffffffffffb, 0x45, 0x80, @scatter={0x7, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000600)=""/153, 0x99}]}, &(0x7f0000000740)="6edba89c1422ae53ae101f06329f259ff0727cdef58bdf3494ac4093d677b7d26cae7c52c70625d87eb7883a86922995c1ebb3f3a5699a20f49a91e6813888b47a669f0ffa", &(0x7f00000007c0)=""/217, 0x200, 0x10, 0x3, &(0x7f0000000400)}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}], 0x1, 0x1, &(0x7f0000000080)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0x31, 0x8, 0x7f, "ab483e6caa42601cc1dc1cc712f7627f657d482b21f585a09ad8226b93e2177ede16965112c27fac2efe3a88345838df20"}) 02:06:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0xe6, 0x6, 0x7, "72d79bf235aff5e1434ee918dfdb4acebf277f01b8ecc9251b77ce5436efe47a225644f0fe1cae478a32beed411697b2c5abd58400ac4521ce6e3bcbcedffa51a1dea5a3cf9e5cdb4d87cf9f7c954268844bf9a2e2f667f5b2364ab3cd87947614ccd3a8f1069f7bad7b2086e307d4c663bcd1a23e12da9c0180eeb1ce3def69831d3e04b4f24df2d7c5c220a17b030bacb4de9dbd23f10e4c59199fb5cc0abd2beb72ec21d45feebd5bedf98c0c39c00ba6819e48bec52c4a163e21214c1d918beebedbfdef772198dfe15353fc2d38ae7416e4302afc049174ef290df3cf8666b8dc3d90a1"}) 02:06:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005401) 02:06:35 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1fffe00, 0x0, 0x0, "9c"}) 02:06:35 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 66) [ 2710.038730] FAULT_INJECTION: forcing a failure. [ 2710.038730] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.041159] CPU: 0 PID: 19356 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2710.042613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.044364] Call Trace: [ 2710.044936] dump_stack+0x107/0x167 [ 2710.045713] should_fail.cold+0x5/0xa [ 2710.046521] ? xas_alloc+0x336/0x440 [ 2710.047313] should_failslab+0x5/0x20 [ 2710.048158] kmem_cache_alloc+0x5b/0x310 [ 2710.049028] xas_alloc+0x336/0x440 [ 2710.049796] xas_create+0x34a/0x10d0 [ 2710.050607] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2710.051738] xas_store+0x8c/0x1c40 [ 2710.052523] __xa_store+0x164/0x2d0 [ 2710.053300] ? xa_delete_node+0x280/0x280 [ 2710.054194] ? trace_hardirqs_on+0x5b/0x180 [ 2710.055119] xa_store+0x31/0x50 [ 2710.055840] __io_uring_add_tctx_node+0x1cf/0x520 [ 2710.056868] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2710.057974] ? alloc_fd+0x2e7/0x670 [ 2710.058764] io_uring_setup+0x1fbb/0x2980 [ 2710.059669] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2710.060744] ? wait_for_completion_io+0x270/0x270 [ 2710.061791] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2710.062902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.064014] do_syscall_64+0x33/0x40 [ 2710.064807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2710.065900] RIP: 0033:0x7f928d897b19 [ 2710.066695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.070564] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2710.072184] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2710.073682] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2710.075184] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2710.076698] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2710.078202] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:06:49 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 67) 02:06:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005500) 02:06:49 executing program 0: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:06:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) 02:06:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:06:49 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r5 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r5, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240), 0x2, 0x3) syz_io_uring_submit(r3, r7, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r0, 0x3cc, 0x0, 0x100}, 0x4) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000000)="08c08baab78868ce0e7b276e839b4c", 0xf}], 0x1) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) 02:06:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003c01) 02:06:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x2000014f, 0x0, 0x0, "9c"}) [ 2724.413887] FAULT_INJECTION: forcing a failure. [ 2724.413887] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.416328] CPU: 1 PID: 19381 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2724.417800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.419591] Call Trace: [ 2724.420172] dump_stack+0x107/0x167 [ 2724.420956] should_fail.cold+0x5/0xa [ 2724.421772] ? ___slab_alloc+0x155/0x700 [ 2724.422643] ? create_object.isra.0+0x3a/0xa30 [ 2724.423634] should_failslab+0x5/0x20 [ 2724.424451] kmem_cache_alloc+0x5b/0x310 [ 2724.425326] create_object.isra.0+0x3a/0xa30 [ 2724.426254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.427344] kmem_cache_alloc+0x159/0x310 [ 2724.428254] xas_alloc+0x336/0x440 [ 2724.429007] xas_create+0x34a/0x10d0 [ 2724.429817] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2724.430939] xas_store+0x8c/0x1c40 [ 2724.431725] __xa_store+0x164/0x2d0 [ 2724.432517] ? xa_delete_node+0x280/0x280 [ 2724.433419] ? trace_hardirqs_on+0x5b/0x180 [ 2724.434351] xa_store+0x31/0x50 [ 2724.435059] __io_uring_add_tctx_node+0x1cf/0x520 [ 2724.436095] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2724.437200] ? alloc_fd+0x2e7/0x670 [ 2724.437993] io_uring_setup+0x1fbb/0x2980 [ 2724.438889] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2724.439987] ? wait_for_completion_io+0x270/0x270 [ 2724.441042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.442162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.443267] do_syscall_64+0x33/0x40 [ 2724.444082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2724.445183] RIP: 0033:0x7f928d897b19 [ 2724.445974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.449894] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2724.451519] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2724.453043] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2724.454560] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2724.456094] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2724.457623] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:06:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005501) 02:06:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x40049409, 0x0, 0x0, "9c"}) 02:06:49 executing program 0: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:06:49 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 68) 02:06:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000140)=0x1) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r4, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000280)) read(r4, &(0x7f0000000180)=""/37, 0x25) r5 = eventfd2(0x8001, 0x80802) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x9, 0x0, &(0x7f0000000080)=[r1, r0, r2, r0, r0, r0, r5]}, 0x7) 02:06:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) [ 2724.580163] FAULT_INJECTION: forcing a failure. [ 2724.580163] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.582724] CPU: 1 PID: 19499 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2724.584213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.585965] Call Trace: [ 2724.586534] dump_stack+0x107/0x167 [ 2724.587299] should_fail.cold+0x5/0xa [ 2724.588127] ? create_object.isra.0+0x3a/0xa30 [ 2724.589097] should_failslab+0x5/0x20 02:06:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003d00) [ 2724.589918] kmem_cache_alloc+0x5b/0x310 [ 2724.590982] ? mark_held_locks+0x9e/0xe0 [ 2724.591910] create_object.isra.0+0x3a/0xa30 [ 2724.592843] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.593929] kmem_cache_alloc+0x159/0x310 [ 2724.594819] xas_alloc+0x336/0x440 [ 2724.595586] xas_create+0x34a/0x10d0 [ 2724.596399] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2724.597523] xas_store+0x8c/0x1c40 [ 2724.598296] __xa_store+0x164/0x2d0 [ 2724.599077] ? xa_delete_node+0x280/0x280 [ 2724.599988] ? trace_hardirqs_on+0x5b/0x180 [ 2724.600918] xa_store+0x31/0x50 [ 2724.601632] __io_uring_add_tctx_node+0x1cf/0x520 [ 2724.602657] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2724.603762] ? alloc_fd+0x2e7/0x670 [ 2724.604557] io_uring_setup+0x1fbb/0x2980 [ 2724.605447] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2724.606534] ? wait_for_completion_io+0x270/0x270 [ 2724.607591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.608716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.609817] do_syscall_64+0x33/0x40 [ 2724.610616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2724.611707] RIP: 0033:0x7f928d897b19 02:06:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x2e0f, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) [ 2724.612500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.616572] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2724.618206] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2724.619719] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2724.621255] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2724.622772] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2724.624303] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:06:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x40086602, 0x0, 0x0, "9c"}) 02:06:49 executing program 0: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:06:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005600) 02:06:49 executing program 3: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40400000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000000c0)=0x1) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1276, 0x0) 02:06:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000180)='net/packet\x00') r2 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x40, 0x40, 0x6, 0x0, 0x0, 0x44170, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x7956bc0a, 0x5}, 0x100, 0x0, 0x4, 0x9, 0xf07, 0x346, 0x20, 0x0, 0x561, 0x0, 0xffffffff}, r1, 0xf, 0xffffffffffffffff, 0x4) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x18, 0x10, r2, 0xa593000) 02:06:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 02:06:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x200100, 0x20) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c"], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[r2, r0]}, 0x2) 02:06:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003d01) 02:06:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005601) 02:06:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x40087602, 0x0, 0x0, "9c"}) 02:07:05 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 69) 02:07:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1276, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 02:07:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x4020940d, 0x0, 0x0, "9c"}) 02:07:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6e, 0x0, 0x0, 0x3f, 0x0, 0x8006, 0xa4b28, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xffb, 0x80000001}, 0x103, 0xfffffffffffffc01, 0x2000000, 0x6, 0x200000000, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x9, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x8000, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 02:07:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 02:07:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003e00) 02:07:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:07:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005700) 02:07:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005701) [ 2740.804605] FAULT_INJECTION: forcing a failure. [ 2740.804605] name failslab, interval 1, probability 0, space 0, times 0 [ 2740.806195] CPU: 1 PID: 19663 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2740.807111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2740.808224] Call Trace: [ 2740.808578] dump_stack+0x107/0x167 [ 2740.809064] should_fail.cold+0x5/0xa [ 2740.809569] ? create_object.isra.0+0x3a/0xa30 [ 2740.810178] should_failslab+0x5/0x20 [ 2740.810683] kmem_cache_alloc+0x5b/0x310 [ 2740.811222] ? mark_held_locks+0x9e/0xe0 [ 2740.811764] create_object.isra.0+0x3a/0xa30 [ 2740.812355] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2740.813028] kmem_cache_alloc+0x159/0x310 [ 2740.813588] xas_alloc+0x336/0x440 [ 2740.814061] xas_create+0x34a/0x10d0 [ 2740.814563] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2740.815254] xas_store+0x8c/0x1c40 [ 2740.815735] __xa_store+0x164/0x2d0 [ 2740.816237] ? xa_delete_node+0x280/0x280 [ 2740.816794] ? trace_hardirqs_on+0x5b/0x180 [ 2740.817369] xa_store+0x31/0x50 [ 2740.817807] __io_uring_add_tctx_node+0x1cf/0x520 [ 2740.818440] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2740.819132] ? alloc_fd+0x2e7/0x670 [ 2740.819620] io_uring_setup+0x1fbb/0x2980 [ 2740.820180] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2740.820845] ? wait_for_completion_io+0x270/0x270 [ 2740.821494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2740.822188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2740.822869] do_syscall_64+0x33/0x40 [ 2740.823359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2740.824043] RIP: 0033:0x7f928d897b19 [ 2740.824533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2740.826950] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2740.827954] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2740.828901] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2740.829844] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2740.830779] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2740.831720] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:07:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:07:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:07:22 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 70) 02:07:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x80086601, 0x0, 0x0, "9c"}) 02:07:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 02:07:22 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:07:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005800) 02:07:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003e01) [ 2757.121843] FAULT_INJECTION: forcing a failure. [ 2757.121843] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.123422] CPU: 0 PID: 19787 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2757.124365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.125517] Call Trace: [ 2757.125885] dump_stack+0x107/0x167 [ 2757.126398] should_fail.cold+0x5/0xa [ 2757.126934] ? xas_alloc+0x336/0x440 [ 2757.127442] should_failslab+0x5/0x20 [ 2757.127976] kmem_cache_alloc+0x5b/0x310 [ 2757.128560] xas_alloc+0x336/0x440 [ 2757.129055] xas_create+0x34a/0x10d0 [ 2757.129584] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2757.130313] xas_store+0x8c/0x1c40 [ 2757.130819] __xa_store+0x164/0x2d0 [ 2757.131327] ? xa_delete_node+0x280/0x280 [ 2757.131919] ? trace_hardirqs_on+0x5b/0x180 [ 2757.132520] xa_store+0x31/0x50 [ 2757.132988] __io_uring_add_tctx_node+0x1cf/0x520 [ 2757.133668] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2757.134405] ? alloc_fd+0x2e7/0x670 [ 2757.134938] io_uring_setup+0x1fbb/0x2980 [ 2757.135537] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2757.136270] ? wait_for_completion_io+0x270/0x270 [ 2757.136974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2757.137722] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.138448] do_syscall_64+0x33/0x40 [ 2757.138977] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.139696] RIP: 0033:0x7f928d897b19 [ 2757.140234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.142826] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2757.143903] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2757.144926] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2757.145925] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2757.146926] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2757.147931] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:07:22 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 71) 02:07:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 02:07:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2757.221166] FAULT_INJECTION: forcing a failure. [ 2757.221166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2757.223852] CPU: 1 PID: 19801 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2757.225441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.227343] Call Trace: [ 2757.227953] dump_stack+0x107/0x167 [ 2757.228797] should_fail.cold+0x5/0xa [ 2757.229677] __alloc_pages_nodemask+0x182/0x600 [ 2757.230746] ? stack_trace_save+0x8c/0xc0 [ 2757.231697] ? stack_trace_consume_entry+0x160/0x160 [ 2757.232878] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2757.234273] ? kmem_cache_alloc+0x301/0x310 [ 2757.235267] alloc_pages_current+0x187/0x280 [ 2757.236287] allocate_slab+0x26f/0x380 [ 2757.237185] ___slab_alloc+0x470/0x700 [ 2757.238076] ? lock_acquire+0x197/0x470 [ 2757.238980] ? create_object.isra.0+0x3a/0xa30 [ 2757.240022] ? lock_release+0x680/0x680 [ 2757.240931] ? find_held_lock+0x2c/0x110 [ 2757.241857] ? create_object.isra.0+0x3a/0xa30 [ 2757.242897] ? kmem_cache_alloc+0x301/0x310 [ 2757.243872] ? create_object.isra.0+0x3a/0xa30 [ 2757.244913] kmem_cache_alloc+0x301/0x310 [ 2757.245864] create_object.isra.0+0x3a/0xa30 [ 2757.246859] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.248010] kmem_cache_alloc+0x159/0x310 [ 2757.248969] xas_alloc+0x336/0x440 [ 2757.249780] xas_create+0x34a/0x10d0 [ 2757.250638] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2757.251829] xas_store+0x8c/0x1c40 [ 2757.252660] __xa_store+0x164/0x2d0 [ 2757.253490] ? xa_delete_node+0x280/0x280 [ 2757.254441] ? trace_hardirqs_on+0x5b/0x180 [ 2757.255427] xa_store+0x31/0x50 [ 2757.256190] __io_uring_add_tctx_node+0x1cf/0x520 [ 2757.257276] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2757.258451] ? alloc_fd+0x2e7/0x670 [ 2757.259281] io_uring_setup+0x1fbb/0x2980 [ 2757.260244] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2757.261382] ? wait_for_completion_io+0x270/0x270 [ 2757.262493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2757.263673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.264844] do_syscall_64+0x33/0x40 [ 2757.265688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.266840] RIP: 0033:0x7f928d897b19 [ 2757.267672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.271801] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2757.273537] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2757.275125] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2757.276718] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2757.278301] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2757.279886] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:07:22 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0xbf, 0x1, @scatter={0x3, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/70, 0x46}, {&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f00000002c0)=""/221, 0xdd}]}, &(0x7f00000004c0)="e2eda8a5f7845c528957f48365a9f69ae0ff77e94f5f547a2269cba80a31121104567b9f02272f4b781d28d51fb7da57a5a0378fbe375c0a57b6a7f7705a60a129942c918d2000c5198f85aef7cc8c6d722f128af0cdc704b4a08307b04c2ae832a982f0089129bf21da3597e588078bce5b15981d0d884d849a2154b0ac158723a7e1aa71305260e3147d12ba096c6fb9fbbe201da5d82f0d8804bbc51c736b11754b48c013b6fad65629f81a3b51c1ef9d575bca72a92e388911b8c6a115", &(0x7f00000003c0)=""/102, 0x348, 0x10007, 0x2, &(0x7f0000000580)}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x181000) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000080)=0x1) 02:07:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x80087601, 0x0, 0x0, "9c"}) 02:07:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x60c840) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 02:07:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005801) 02:07:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 02:07:39 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 72) 02:07:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:07:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003f00) 02:07:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005900) 02:07:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0xc0045877, 0x0, 0x0, "9c"}) 02:07:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:07:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x400, 0x4080) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:07:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x1, 0x1, 0x4}) [ 2774.940726] FAULT_INJECTION: forcing a failure. [ 2774.940726] name failslab, interval 1, probability 0, space 0, times 0 [ 2774.943217] CPU: 1 PID: 19933 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2774.944696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2774.946446] Call Trace: [ 2774.947008] dump_stack+0x107/0x167 [ 2774.947782] should_fail.cold+0x5/0xa [ 2774.948601] ? xas_alloc+0x336/0x440 [ 2774.949385] should_failslab+0x5/0x20 [ 2774.950185] kmem_cache_alloc+0x5b/0x310 [ 2774.951058] xas_alloc+0x336/0x440 [ 2774.951811] xas_create+0x34a/0x10d0 [ 2774.952623] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2774.953735] xas_store+0x8c/0x1c40 [ 2774.954503] __xa_store+0x164/0x2d0 [ 2774.955273] ? xa_delete_node+0x280/0x280 [ 2774.956157] ? trace_hardirqs_on+0x5b/0x180 [ 2774.957086] xa_store+0x31/0x50 [ 2774.957788] __io_uring_add_tctx_node+0x1cf/0x520 [ 2774.958806] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2774.959913] ? alloc_fd+0x2e7/0x670 [ 2774.960702] io_uring_setup+0x1fbb/0x2980 [ 2774.961584] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2774.962648] ? wait_for_completion_io+0x270/0x270 [ 2774.963690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2774.964810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2774.965898] do_syscall_64+0x33/0x40 [ 2774.966686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2774.967760] RIP: 0033:0x7f928d897b19 [ 2774.968559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2774.972447] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2774.974085] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2774.975622] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2774.977171] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2774.978712] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2774.980254] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:07:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xe, 0x0, @buffer={0x0, 0xc1, &(0x7f0000000000)=""/193}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:07:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:07:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xe, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5739b8715a9ed", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:07:56 executing program 3: setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f00000000c0), 0xfffffffffffffd17, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 02:07:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, r3, &(0x7f0000000500), 0x0, 0x0) 02:07:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0xc0045878, 0x0, 0x0, "9c"}) 02:07:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005901) 02:07:56 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 73) 02:07:56 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2270, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000004c0)={{r0}, 0x0, 0x1a, @unused=[0x5, 0x0, 0x3, 0x4], @subvolid=0x990}) 02:07:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1003f01) [ 2791.189861] FAULT_INJECTION: forcing a failure. [ 2791.189861] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.192478] CPU: 1 PID: 20063 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2791.194084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.196000] Call Trace: [ 2791.196625] dump_stack+0x107/0x167 [ 2791.197473] should_fail.cold+0x5/0xa [ 2791.198358] ? xas_alloc+0x336/0x440 [ 2791.199215] should_failslab+0x5/0x20 [ 2791.200097] kmem_cache_alloc+0x5b/0x310 [ 2791.201065] xas_alloc+0x336/0x440 [ 2791.201886] xas_create+0x34a/0x10d0 [ 2791.202761] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2791.203969] xas_store+0x8c/0x1c40 [ 2791.204817] __xa_store+0x164/0x2d0 [ 2791.205659] ? xa_delete_node+0x280/0x280 [ 2791.206624] ? trace_hardirqs_on+0x5b/0x180 [ 2791.207627] xa_store+0x31/0x50 [ 2791.208393] __io_uring_add_tctx_node+0x1cf/0x520 [ 2791.209509] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2791.210710] ? alloc_fd+0x2e7/0x670 [ 2791.211560] io_uring_setup+0x1fbb/0x2980 [ 2791.212539] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2791.213703] ? wait_for_completion_io+0x270/0x270 [ 2791.214841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2791.216048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2791.217248] do_syscall_64+0x33/0x40 [ 2791.218105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2791.219286] RIP: 0033:0x7f928d897b19 [ 2791.220108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.224302] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2791.226016] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2791.227612] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2791.229224] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2791.230836] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2791.232442] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:07:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005a00) 02:07:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:07:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000240), 0xc4b, 0x802) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x49, 0xffff, 0xf7a, "1c59b13692b6fe222534e42890248813ee73f156c9777193e91a61e2294f196d8e6b5cb02bf80f53160828b4d8529b6ec9331247e08a0f0aa8ae5eb1ee4025cae5145a678331a00b7a"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 02:07:56 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 74) 02:07:56 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) 02:07:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0xc0189436, 0x0, 0x0, "9c"}) 02:07:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004000) [ 2791.445265] FAULT_INJECTION: forcing a failure. [ 2791.445265] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.447851] CPU: 1 PID: 20160 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2791.449416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.451281] Call Trace: [ 2791.451882] dump_stack+0x107/0x167 [ 2791.452716] should_fail.cold+0x5/0xa [ 2791.453584] ? xas_alloc+0x336/0x440 [ 2791.454434] should_failslab+0x5/0x20 [ 2791.455290] kmem_cache_alloc+0x5b/0x310 [ 2791.456209] xas_alloc+0x336/0x440 [ 2791.457029] xas_create+0x34a/0x10d0 [ 2791.457884] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2791.459066] xas_store+0x8c/0x1c40 [ 2791.459883] __xa_store+0x164/0x2d0 [ 2791.460722] ? xa_delete_node+0x280/0x280 [ 2791.461664] ? trace_hardirqs_on+0x5b/0x180 [ 2791.462649] xa_store+0x31/0x50 [ 2791.463411] __io_uring_add_tctx_node+0x1cf/0x520 [ 2791.464503] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2791.465684] ? alloc_fd+0x2e7/0x670 [ 2791.466528] io_uring_setup+0x1fbb/0x2980 [ 2791.467473] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2791.468622] ? wait_for_completion_io+0x270/0x270 [ 2791.469737] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2791.470917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2791.472091] do_syscall_64+0x33/0x40 [ 2791.472938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2791.474093] RIP: 0033:0x7f928d897b19 [ 2791.474929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.479073] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2791.480801] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2791.482404] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2791.484008] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2791.485618] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2791.487221] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:07:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005a01) 02:07:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, &(0x7f0000000500), 0x0, 0x0) 02:07:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:07:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0xc020660b, 0x0, 0x0, "9c"}) 02:07:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:07:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3f, 0x5, 0x6, 0xf9, 0x0, 0x4, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x4a22, 0x1, 0x4, 0x4, 0xfffffffffffeffff, 0x6, 0xff0, 0x0, 0x8001, 0x0, 0x48a1}, 0xffffffffffffffff, 0x0, r1, 0x2) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:08:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:08:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004001) 02:08:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, &(0x7f0000000500), 0x0, 0x0) 02:08:16 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ed8d1f7c0abc"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x10000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@empty, r3}, 0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x2008840) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r4, 0x2, 0x70bd2c, 0x80000000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMK={0x14, 0xfe, "1eb38dbd626634609241a51a71cbb72b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "cffca8ded87292eb370680e0d2f4383a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) 02:08:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0xc0481273, 0x0, 0x0, "9c"}) 02:08:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xd0, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf6d}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:08:16 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 75) 02:08:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005b00) [ 2811.366166] FAULT_INJECTION: forcing a failure. [ 2811.366166] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.368675] CPU: 1 PID: 20334 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2811.370157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.371895] Call Trace: [ 2811.372457] dump_stack+0x107/0x167 [ 2811.373239] should_fail.cold+0x5/0xa [ 2811.374054] ? create_object.isra.0+0x3a/0xa30 [ 2811.375025] should_failslab+0x5/0x20 [ 2811.375840] kmem_cache_alloc+0x5b/0x310 [ 2811.376714] ? mark_held_locks+0x9e/0xe0 [ 2811.377594] create_object.isra.0+0x3a/0xa30 [ 2811.378529] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.379621] kmem_cache_alloc+0x159/0x310 [ 2811.380499] xas_alloc+0x336/0x440 [ 2811.381264] xas_create+0x34a/0x10d0 [ 2811.382060] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2811.383162] xas_store+0x8c/0x1c40 [ 2811.383940] __xa_store+0x164/0x2d0 [ 2811.384709] ? xa_delete_node+0x280/0x280 [ 2811.385604] ? trace_hardirqs_on+0x5b/0x180 [ 2811.386531] xa_store+0x31/0x50 [ 2811.387245] __io_uring_add_tctx_node+0x1cf/0x520 [ 2811.388270] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2811.389394] ? alloc_fd+0x2e7/0x670 [ 2811.390187] io_uring_setup+0x1fbb/0x2980 [ 2811.391080] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2811.392147] ? wait_for_completion_io+0x270/0x270 [ 2811.393202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.394328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.395440] do_syscall_64+0x33/0x40 [ 2811.396240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2811.397351] RIP: 0033:0x7f928d897b19 02:08:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005b01) [ 2811.398143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.402287] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2811.403896] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2811.405437] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2811.406948] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2811.408440] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2811.409967] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:08:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140), &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:08:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@empty}}, [@policy_type={0xa}]}, 0x5c}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1276, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa000, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x9, 0x0) 02:08:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x0, 0x0, "9c"}) 02:08:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004100) 02:08:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) dup(r0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) 02:08:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005c00) 02:08:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140), &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:08:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005c01) 02:08:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004101) 02:08:30 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 76) 02:08:30 executing program 3: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x408000, 0x3072c0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1276, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x0, 0xcf4, 0x5}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x80800) sendfile(r1, r2, 0x0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x164) 02:08:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, &(0x7f0000000500), 0x0, 0x0) 02:08:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x2, 0x0, "9c"}) 02:08:30 executing program 5: fchown(0xffffffffffffffff, 0xee01, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x5df7, &(0x7f0000000040)={0x0, 0x7dea, 0x0, 0x2, 0x2c3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x108001, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0xfffffffffffffcf2}, './file0\x00'}) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) [ 2825.598483] FAULT_INJECTION: forcing a failure. [ 2825.598483] name failslab, interval 1, probability 0, space 0, times 0 [ 2825.600921] CPU: 0 PID: 20480 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2825.602376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2825.604122] Call Trace: [ 2825.604683] dump_stack+0x107/0x167 [ 2825.605463] should_fail.cold+0x5/0xa [ 2825.606270] ? xas_alloc+0x336/0x440 [ 2825.607056] should_failslab+0x5/0x20 [ 2825.607856] kmem_cache_alloc+0x5b/0x310 [ 2825.608721] xas_alloc+0x336/0x440 [ 2825.609490] xas_create+0x34a/0x10d0 [ 2825.610289] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2825.611391] xas_store+0x8c/0x1c40 [ 2825.612156] __xa_store+0x164/0x2d0 [ 2825.612931] ? xa_delete_node+0x280/0x280 [ 2825.613810] ? trace_hardirqs_on+0x5b/0x180 [ 2825.614725] xa_store+0x31/0x50 [ 2825.615420] __io_uring_add_tctx_node+0x1cf/0x520 [ 2825.616443] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2825.617556] ? alloc_fd+0x2e7/0x670 [ 2825.618339] io_uring_setup+0x1fbb/0x2980 [ 2825.619224] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2825.620286] ? wait_for_completion_io+0x270/0x270 [ 2825.621332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2825.622435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2825.623520] do_syscall_64+0x33/0x40 [ 2825.624301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2825.625388] RIP: 0033:0x7f928d897b19 [ 2825.626168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.630049] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2825.631662] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2825.633161] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2825.634658] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2825.636155] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2825.637644] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:08:30 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:08:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005d00) 02:08:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x6, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x254102) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8200000001000000d4ee00007be314000dae4aca9dd93f546f862f5f712f4844d0958e76178b40163e31b12df35a1b1a09c7163737c0f56b4de68267a6906bb67fa3615701dd842634297df1ae65d3c6e36d24b2b7c7acaa73acf7393afbfa5b4fa3fd0a9b05c3ce9453f079bf7c16375806fd30e85b55a7f1089ebc95143ecb14d92adce848e4e7ec87dc74f80e"]) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:08:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x3, 0x0, "9c"}) 02:08:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004200) 02:08:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140), &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:08:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:08:30 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10010, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xff, 0x29, 0x20, 0x81, 0x0, 0xffffffffffffffff, 0x2800, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7}, 0x1c042, 0x3, 0xfffffffd, 0x9, 0x7f, 0x3, 0x1, 0x0, 0x100}, 0xffffffffffffffff, 0x4, r0, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) 02:08:30 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x4, 0x0, "9c"}) 02:08:30 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 77) 02:08:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005d01) 02:08:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004201) [ 2825.946948] FAULT_INJECTION: forcing a failure. [ 2825.946948] name failslab, interval 1, probability 0, space 0, times 0 [ 2825.949819] CPU: 1 PID: 20619 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2825.951418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2825.953229] Call Trace: [ 2825.953818] dump_stack+0x107/0x167 [ 2825.954629] should_fail.cold+0x5/0xa [ 2825.955471] ? create_object.isra.0+0x3a/0xa30 [ 2825.956469] should_failslab+0x5/0x20 [ 2825.957322] kmem_cache_alloc+0x5b/0x310 [ 2825.958198] ? mark_held_locks+0x9e/0xe0 [ 2825.959099] create_object.isra.0+0x3a/0xa30 [ 2825.960057] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2825.961181] kmem_cache_alloc+0x159/0x310 [ 2825.962096] xas_alloc+0x336/0x440 [ 2825.962890] xas_create+0x34a/0x10d0 [ 2825.963731] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2825.964938] xas_store+0x8c/0x1c40 [ 2825.965738] __xa_store+0x164/0x2d0 [ 2825.966521] ? xa_delete_node+0x280/0x280 [ 2825.967415] ? trace_hardirqs_on+0x5b/0x180 [ 2825.968348] xa_store+0x31/0x50 [ 2825.969080] __io_uring_add_tctx_node+0x1cf/0x520 [ 2825.970148] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2825.971308] ? alloc_fd+0x2e7/0x670 [ 2825.972114] io_uring_setup+0x1fbb/0x2980 [ 2825.973047] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2825.974155] ? wait_for_completion_io+0x270/0x270 [ 2825.975261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2825.976416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2825.977558] do_syscall_64+0x33/0x40 [ 2825.978385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2825.979610] RIP: 0033:0x7f928d897b19 [ 2825.980439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.984465] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2825.986127] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2825.987677] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2825.989248] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2825.990808] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2825.992383] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:08:47 executing program 3: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x4) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r2) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='K', 0x1, r1) r6 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r6) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000005c0)={'fscrypt:', @desc2}, &(0x7f0000000600)={0x0, "ed8032eaaa72d6ec87f643cab0c926e43e52b45be0718fa1bf8470d7984fa56fcfff09b72ebb3708a98b7788cc66f98aa4689951ea7c382c2fedcc5dd5391b33", 0x1d}, 0x48, r6) r7 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "a6ac3ca6302644e72f5d6dbc3352ee9560c5256cbbc10eaed9f27b5f13ae85e7a80e63700098a337a9517ea8bb18b16961bbfdfcf5074089f0f86fa218943adf"}, 0x48, r4) keyctl$link(0x11, r5, r7) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f00000004c0)="e8a8cbf223196039b6f6f4d07354007b8d8f5bad160855c372be29ecc2c3f8b5d42dc98c7b99d85454457d7d88732d9ff8e61f009a72caee18ca0ad96c3ea626268b102afe85834b1158130041fba6de23e9c574922c90ef84e89226e73f848f3fecba14f57f2b6aa81aaa4a9ba0063b7e45f5069089f7c086748d194537df6d573e08a95f86f546d59010e7607bdd4e18b76b9aa91aa8685a33eb95a77bd5e21fdf82563e9df90231bcf1589132be8113d186d7260d506e4286a27d746c0db27157184cf8c1fc9dd66ceed1765508fc89f47a25fffe00d967d43953b67c42ed9cee70e3bc53eb451e784753c8ddacf3c168175f4db00c", 0xf7, r7) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00', 0x2, 0x0) keyctl$negate(0xd, 0x0, 0x100000001, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c4e1844", 0x20}, 0x48, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 02:08:47 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 78) 02:08:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100), r3, &(0x7f0000000500), 0x0, 0x0) 02:08:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004300) 02:08:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005e00) 02:08:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2842.008559] FAULT_INJECTION: forcing a failure. [ 2842.008559] name failslab, interval 1, probability 0, space 0, times 0 [ 2842.011188] CPU: 0 PID: 20633 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2842.012685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2842.014513] Call Trace: [ 2842.015092] dump_stack+0x107/0x167 [ 2842.015886] should_fail.cold+0x5/0xa [ 2842.016717] ? vm_area_dup+0x78/0x290 [ 2842.017567] should_failslab+0x5/0x20 [ 2842.018395] kmem_cache_alloc+0x5b/0x310 [ 2842.019277] vm_area_dup+0x78/0x290 [ 2842.020063] ? lock_release+0x680/0x680 [ 2842.020817] ? mark_lock+0xf5/0x2df0 [ 2842.021637] ? lock_chain_count+0x20/0x20 [ 2842.022524] ? mark_lock+0xf5/0x2df0 [ 2842.023335] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2842.024444] ? lock_chain_count+0x20/0x20 [ 2842.025242] ? mark_lock+0xf5/0x2df0 [ 2842.026048] ? vm_area_alloc+0x110/0x110 [ 2842.026944] ? __lock_acquire+0x1657/0x5b00 [ 2842.027897] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2842.029024] ? SOFTIRQ_verbose+0x10/0x10 [ 2842.029924] ? vmacache_find+0x55/0x2a0 [ 2842.030784] __split_vma+0xa8/0x4e0 [ 2842.031579] __do_munmap+0x365/0x1260 [ 2842.032411] ? arch_get_unmapped_area+0x450/0x450 [ 2842.033450] ? lock_release+0x680/0x680 [ 2842.034326] mmap_region+0x7cc/0x1500 [ 2842.035163] do_mmap+0x868/0x1370 [ 2842.035918] vm_mmap_pgoff+0x198/0x1f0 [ 2842.036759] ? randomize_page+0xb0/0xb0 [ 2842.037573] ksys_mmap_pgoff+0x41c/0x560 [ 2842.038456] ? find_mergeable_anon_vma+0x250/0x250 [ 2842.039522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2842.040439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2842.041557] do_syscall_64+0x33/0x40 [ 2842.042355] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2842.043455] RIP: 0033:0x7f928d897b62 [ 2842.044263] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2842.048165] RSP: 002b:00007f928ae0d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2842.049797] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f928d897b62 [ 2842.051327] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 2842.052833] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 2842.054376] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2842.055886] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:08:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) 02:08:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x8, 0x0, "9c"}) 02:08:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:09:04 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 79) 02:09:04 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x23, 0xfc, 0xeb, 0x4, 0x0, 0x5, 0x20, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc00000, 0x4, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x9b5b, 0x8, 0x5, 0x9, 0xde, 0x9, 0x0, 0x1000, 0x0, 0x1}, r2, 0x2, r0, 0x2) 02:09:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100), r3, &(0x7f0000000500), 0x0, 0x0) 02:09:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005e01) 02:09:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffd, 0x7f, 0x5, @buffer={0x0, 0x9a, &(0x7f0000000000)=""/154}, &(0x7f0000000140)="411fff37a8978c726c1ac5158c3c7a9dd632bebe0d1e5eec6c25309868acfd79358fac561c304f5e0dedb160b87905d80d76aa9f449a6fec1d79a8069be1509bb3359076499b3aaf158b01def782a7463c7c5de48df40068e752af5dcb0e3d33ac24f50a6536d1ddd413472bad0185ecb3195a4846d7b35bcb533abf77b39f", &(0x7f00000001c0)=""/236, 0x5e, 0x1, 0x0, &(0x7f00000000c0)}) 02:09:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004301) 02:09:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x9, 0x0, "9c"}) 02:09:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xb, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5739b87", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) [ 2859.588929] FAULT_INJECTION: forcing a failure. [ 2859.588929] name failslab, interval 1, probability 0, space 0, times 0 [ 2859.590644] CPU: 0 PID: 20769 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2859.591663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2859.592861] Call Trace: [ 2859.593258] dump_stack+0x107/0x167 [ 2859.593801] should_fail.cold+0x5/0xa [ 2859.594353] ? vm_area_dup+0x78/0x290 [ 2859.594909] should_failslab+0x5/0x20 [ 2859.595462] kmem_cache_alloc+0x5b/0x310 [ 2859.596058] vm_area_dup+0x78/0x290 [ 2859.596603] ? lock_release+0x680/0x680 [ 2859.597202] ? mark_lock+0xf5/0x2df0 [ 2859.597754] ? lock_chain_count+0x20/0x20 [ 2859.598349] ? mark_lock+0xf5/0x2df0 [ 2859.598897] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.599656] ? lock_chain_count+0x20/0x20 [ 2859.600257] ? mark_lock+0xf5/0x2df0 [ 2859.600795] ? vm_area_alloc+0x110/0x110 [ 2859.601396] ? __lock_acquire+0x1657/0x5b00 [ 2859.602030] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.602778] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.603362] ? vmacache_find+0x55/0x2a0 [ 2859.603933] __split_vma+0xa8/0x4e0 [ 2859.604461] __do_munmap+0x365/0x1260 [ 2859.605010] ? arch_get_unmapped_area+0x450/0x450 [ 2859.605712] ? lock_release+0x680/0x680 [ 2859.606285] mmap_region+0x7cc/0x1500 [ 2859.606844] do_mmap+0x868/0x1370 [ 2859.607355] vm_mmap_pgoff+0x198/0x1f0 [ 2859.607921] ? randomize_page+0xb0/0xb0 [ 2859.608503] ksys_mmap_pgoff+0x41c/0x560 [ 2859.609094] ? find_mergeable_anon_vma+0x250/0x250 [ 2859.609819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2859.610579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2859.611324] do_syscall_64+0x33/0x40 [ 2859.611860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2859.612597] RIP: 0033:0x7f928d897b62 [ 2859.613133] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2859.615802] RSP: 002b:00007f928ae0d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2859.616902] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f928d897b62 [ 2859.617943] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 2859.618965] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 2859.619993] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2859.621028] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:09:04 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 80) 02:09:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0xc0182) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008e787e7f7a7154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e52500000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7f0c1b83160f99dbc4d427c1be6fb1ba8ca9352768c417a10d85e6731faca1d306fafb7c795dcef032b689c11cbfba06c7c42fe292eacc4729a638490d061daa7d45d3e1f740a6c7f5ad91090d2eb3fcd8374568114b7ff65d41b14fa912a97f5a7183a6440fdc20b78a09a2a87ada3f7a1eb90f7797e66bef75c"], 0x120) ioctl$SG_GET_PACK_ID(r1, 0x227c, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000240)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0xc1, 0x1f, 0xfffff801, "d35817d09927720bfa2b9f49bf424c4215809951062926013f9ff354157a8f4efb25b90fcb54deb2ad6deeeeb403ec396d048ee143613797984fbe23df68e219306f393c5abfd06d6c82e5a2f1c652b9566c0ef8787f61d877203406f3e544b6bda4cca53538a251f531057935ebe93f810c129a06d6141b2392fa966a55a11b9d8cb4d2233106d38ac0a48cf7a416d47ed2580087689e04bf3fc6d015c0d511e78b179b09de335532241600a42c91d660e5ddf589d596e016a772a0690b51dd70"}) [ 2859.674137] FAULT_INJECTION: forcing a failure. [ 2859.674137] name failslab, interval 1, probability 0, space 0, times 0 [ 2859.675837] CPU: 0 PID: 20779 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2859.676813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2859.677982] Call Trace: [ 2859.678358] dump_stack+0x107/0x167 [ 2859.678877] should_fail.cold+0x5/0xa [ 2859.679411] ? anon_vma_clone+0xdc/0x590 [ 2859.679978] should_failslab+0x5/0x20 [ 2859.680511] kmem_cache_alloc+0x5b/0x310 [ 2859.681082] anon_vma_clone+0xdc/0x590 [ 2859.681646] __split_vma+0x17c/0x4e0 [ 2859.682168] __do_munmap+0x365/0x1260 [ 2859.682705] ? arch_get_unmapped_area+0x450/0x450 [ 2859.683378] ? lock_release+0x680/0x680 [ 2859.683938] mmap_region+0x7cc/0x1500 [ 2859.684488] do_mmap+0x868/0x1370 [ 2859.684979] vm_mmap_pgoff+0x198/0x1f0 [ 2859.685545] ? randomize_page+0xb0/0xb0 [ 2859.686120] ksys_mmap_pgoff+0x41c/0x560 [ 2859.686687] ? find_mergeable_anon_vma+0x250/0x250 [ 2859.687374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2859.688107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2859.688823] do_syscall_64+0x33/0x40 [ 2859.689350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2859.690060] RIP: 0033:0x7f928d897b62 [ 2859.690576] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2859.693101] RSP: 002b:00007f928ae0d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2859.694159] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f928d897b62 [ 2859.695157] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 2859.696137] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 2859.697125] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2859.698121] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:09:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0xa, 0x0, "9c"}) 02:09:04 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 81) 02:09:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005f00) 02:09:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:09:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x72, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) [ 2859.796522] FAULT_INJECTION: forcing a failure. [ 2859.796522] name failslab, interval 1, probability 0, space 0, times 0 [ 2859.798106] CPU: 0 PID: 20858 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2859.799014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2859.800117] Call Trace: [ 2859.800476] dump_stack+0x107/0x167 [ 2859.800961] should_fail.cold+0x5/0xa [ 2859.801483] ? xas_alloc+0x336/0x440 [ 2859.801984] should_failslab+0x5/0x20 [ 2859.802494] kmem_cache_alloc+0x5b/0x310 [ 2859.803056] xas_alloc+0x336/0x440 [ 2859.803531] xas_create+0x34a/0x10d0 [ 2859.804033] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2859.804732] xas_store+0x8c/0x1c40 [ 2859.805215] __xa_store+0x164/0x2d0 [ 2859.805708] ? xa_delete_node+0x280/0x280 [ 2859.806271] ? trace_hardirqs_on+0x5b/0x180 [ 2859.806849] xa_store+0x31/0x50 [ 2859.807290] __io_uring_add_tctx_node+0x1cf/0x520 [ 2859.807935] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2859.808630] ? alloc_fd+0x2e7/0x670 [ 2859.809124] io_uring_setup+0x1fbb/0x2980 [ 2859.809690] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2859.810365] ? wait_for_completion_io+0x270/0x270 [ 2859.811015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2859.811722] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2859.812415] do_syscall_64+0x33/0x40 [ 2859.812913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2859.813606] RIP: 0033:0x7f928d897b19 [ 2859.814106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2859.816535] RSP: 002b:00007f928ae0d108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2859.817542] RAX: ffffffffffffffda RBX: 00007f928d9aaf60 RCX: 00007f928d897b19 [ 2859.818478] RDX: 0000000020ffe000 RSI: 0000000020000080 RDI: 00000000000016eb [ 2859.819410] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2859.820350] R10: 0000000020000140 R11: 0000000000000202 R12: 0000000020000180 [ 2859.821351] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:09:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0xb, 0x0, "9c"}) 02:09:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1005f01) 02:09:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004400) 02:09:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:09:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2322, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 02:09:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100), r3, &(0x7f0000000500), 0x0, 0x0) 02:09:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1006000) 02:09:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0xd, 0x0, "9c"}) 02:09:20 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 82) 02:09:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) [ 2875.626108] FAULT_INJECTION: forcing a failure. [ 2875.626108] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.628014] CPU: 1 PID: 20924 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2875.629138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.630493] Call Trace: [ 2875.630930] dump_stack+0x107/0x167 [ 2875.631535] should_fail.cold+0x5/0xa [ 2875.632163] ? vm_area_alloc+0x1c/0x110 [ 2875.632813] should_failslab+0x5/0x20 [ 2875.633438] kmem_cache_alloc+0x5b/0x310 [ 2875.634100] vm_area_alloc+0x1c/0x110 [ 2875.634716] mmap_region+0x982/0x1500 [ 2875.635346] do_mmap+0x868/0x1370 [ 2875.635916] vm_mmap_pgoff+0x198/0x1f0 [ 2875.636552] ? randomize_page+0xb0/0xb0 [ 2875.637204] ksys_mmap_pgoff+0x41c/0x560 [ 2875.637867] ? find_mergeable_anon_vma+0x250/0x250 [ 2875.638660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.639512] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.640348] do_syscall_64+0x33/0x40 [ 2875.640941] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2875.641781] RIP: 0033:0x7f928d897b62 [ 2875.642387] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2875.645332] RSP: 002b:00007f928ae0d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2875.646567] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f928d897b62 [ 2875.647714] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 2875.648867] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 2875.650029] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2875.651167] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:09:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0xe, 0x0, "9c"}) 02:09:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004401) 02:09:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:09:20 executing program 5: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000180)='net/packet\x00') perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2048, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x9}, 0x10010, 0x0, 0xc7e, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb62e}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2270, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x8000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffb, 0xb7, 0x7, @buffer={0x0, 0xfe, &(0x7f0000000140)=""/254}, &(0x7f0000000040)="f2ec359a4250d50904a76449f998ce1eff8beea0dea521962c9188b8448341294e4700abdfeacca9962e9b36b5454fe410660459ea70d84b0124d6e6148dab4890dce88336c854d1c05c3d981e9d98076266b191e31a172fb3e99f4a0fefaa078f22df337ecedf34fa98439b06f0a4b7d5f553be567d50dc04fcd81cbfc0e18df85ae2c9062579b03b54a7935fad569c0ebafa0a65291ca4506f07c1b44b4e1566b602b6c1c4fe1305e6246a0e5a12a38b4ec9de85eafb", &(0x7f0000000240)=""/198, 0x9, 0x10000, 0xffffffffffffffff, &(0x7f0000000340)}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000004c0)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000500)=0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x3, 0x3, 0x3e, 0x7, 0x0, 0x8, 0x10008, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x7}, 0x1801, 0x800, 0x5, 0x5, 0x0, 0xfffeffff, 0x7fff, 0x0, 0x8, 0x0, 0x8}, r0, 0x0, r3, 0x9) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000180)='net/packet\x00') r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000640)) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f00000005c0)='.pending_reads\x00', 0x40000, 0x1) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r7, &(0x7f0000000600)={r3, r8, 0x9}) 02:09:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1006001) 02:09:20 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 83) 02:09:20 executing program 3: setreuid(0xffffffffffffffff, 0x0) stat(&(0x7f0000001440)='.\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) setresuid(0x0, r0, r1) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000240)={0x4c, 0x80000, 0x7, "e8ce6d14fe3755ad8c92b241c8d518dae7332435c4a033b6543af953911b5e071d61da20a2ecfa00c82ee09bebac93e2dc6e0de0e3408981ab14dc5af63bb146be693d61d9ae4121b8904cf6"}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000000)={0x7ff, 0x40, 0x4, 0x2}) 02:09:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004500) 02:09:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d5739b", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:09:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x31, 0xfffffa40, 0x4, "58b2297a06c63482c4b9bf6735d0bc6f7e967547e701f72df5844f63f95ae14074e594d4e0e21fc8de260364d0af8656a2"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) [ 2875.867424] FAULT_INJECTION: forcing a failure. [ 2875.867424] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.870301] CPU: 0 PID: 21051 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2875.872031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.874139] Call Trace: [ 2875.874810] dump_stack+0x107/0x167 [ 2875.875728] should_fail.cold+0x5/0xa [ 2875.876702] ? create_object.isra.0+0x3a/0xa30 [ 2875.877856] should_failslab+0x5/0x20 [ 2875.878823] kmem_cache_alloc+0x5b/0x310 [ 2875.879852] create_object.isra.0+0x3a/0xa30 [ 2875.880957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2875.882275] kmem_cache_alloc+0x159/0x310 [ 2875.883334] vm_area_alloc+0x1c/0x110 [ 2875.884301] mmap_region+0x982/0x1500 [ 2875.885282] do_mmap+0x868/0x1370 [ 2875.886195] vm_mmap_pgoff+0x198/0x1f0 [ 2875.887180] ? randomize_page+0xb0/0xb0 [ 2875.888203] ksys_mmap_pgoff+0x41c/0x560 [ 2875.889217] ? find_mergeable_anon_vma+0x250/0x250 [ 2875.890465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.891780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.893078] do_syscall_64+0x33/0x40 [ 2875.894019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2875.895287] RIP: 0033:0x7f928d897b62 [ 2875.896207] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2875.900796] RSP: 002b:00007f928ae0d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2875.902692] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f928d897b62 [ 2875.904460] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 2875.906218] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 2875.907969] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2875.909730] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 02:09:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x10, 0x0, "9c"}) 02:09:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, 0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0) 02:09:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2270, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x515802, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) 02:09:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20a81) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1276, 0x0) 02:09:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x5, 0x40, 0x3f, 0x8, 0x0, 0x29c4, 0x21400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6d4e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x1, 0x4, 0x2, 0x4, 0x6, 0xffff56d7, 0x3, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x100040) ptrace(0x4207, r2) fcntl$setown(0xffffffffffffffff, 0x8, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x72, @tick=0x3, 0x0, {0x9}, 0xea, 0x0, 0x4}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0xec}, 0xe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffe01, 0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0) 02:09:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1006100) 02:09:35 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1, 0x12, 0x0, "9c"}) 02:09:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x6, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x940, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_open_procfs(r1, &(0x7f0000000180)='net/packet\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) r3 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x5, 0x8, 0x3f, 0x5, 0x0, 0x1f80000, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x18520, 0x20, 0x4, 0x8, 0xfff, 0x1000, 0xffe, 0x0, 0x3, 0x0, 0x80000001}, r1, 0x6, r2, 0x3) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x8000, 0x50802) r5 = gettid() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x402, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001840), r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r7, 0x19, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0xa00, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x4) syz_open_procfs(r5, &(0x7f0000000180)='net/packet\x00') perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x1, 0x3f, 0x3, 0x7f, 0x0, 0x7, 0x41138, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x4aea}, 0x8, 0x1f, 0x8, 0x0, 0x5, 0x200, 0x8001, 0x0, 0x1, 0x0, 0x1}, r5, 0x6, r3, 0x13) ioctl$SG_GET_PACK_ID(r4, 0x2270, 0x0) 02:09:35 executing program 7: syz_io_uring_setup(0x16eb, &(0x7f0000000080)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (fail_nth: 84) 02:09:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)={0x33, 0xffff, 0x11, "91fb6787bd035e1d39bb8a58d8005a3b3ee6f251a11d720edea32818842965406d5b0840efaa6e33d94b14d859b168c37faaf8"}) [ 2890.408610] FAULT_INJECTION: forcing a failure. [ 2890.408610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2890.411522] CPU: 1 PID: 21189 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2890.413162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2890.415190] Call Trace: [ 2890.415817] dump_stack+0x107/0x167 [ 2890.416692] should_fail.cold+0x5/0xa [ 2890.417635] __alloc_pages_nodemask+0x182/0x600 [ 2890.418747] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2890.420184] ? walk_mem_res+0x170/0x170 [ 2890.421137] alloc_pages_current+0x187/0x280 [ 2890.422200] pte_alloc_one+0x16/0x1a0 [ 2890.423103] __pte_alloc+0x1d/0x330 [ 2890.423975] remap_pfn_range_internal+0x9a3/0xf60 [ 2890.425130] ? lookup_memtype+0x5b/0x200 [ 2890.426118] ? apply_to_existing_page_range+0x40/0x40 [ 2890.427358] remap_pfn_range+0xcd/0x160 [ 2890.428300] ? remap_pfn_range_notrack+0x70/0x70 02:09:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x9, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="28787931d98db9d573", &(0x7f00000001c0)=""/213, 0xffffff7b, 0x2, 0x0, &(0x7f00000002c0)}) 02:09:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1004501) [ 2890.429416] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2890.430808] io_uring_mmap+0x398/0x530 [ 2890.431728] mmap_file+0x5e/0xe0 [ 2890.432531] mmap_region+0xc4d/0x1500 [ 2890.433460] do_mmap+0x868/0x1370 [ 2890.434297] vm_mmap_pgoff+0x198/0x1f0 [ 2890.435224] ? randomize_page+0xb0/0xb0 [ 2890.436182] ksys_mmap_pgoff+0x41c/0x560 [ 2890.437137] ? find_mergeable_anon_vma+0x250/0x250 [ 2890.438303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2890.439538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2890.440750] do_syscall_64+0x33/0x40 [ 2890.441634] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2890.442840] RIP: 0033:0x7f928d897b62 [ 2890.443709] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2890.448023] RSP: 002b:00007f928ae0d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2890.449806] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f928d897b62 [ 2890.451454] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 2890.453096] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 2890.454743] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2890.456376] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 [ 2890.551864] ------------[ cut here ]------------ [ 2890.552559] WARNING: CPU: 0 PID: 21189 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2890.553732] Modules linked in: [ 2890.554163] CPU: 0 PID: 21189 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2890.555045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2890.556117] RIP: 0010:get_pat_info+0x216/0x270 [ 2890.557973] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 21 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 0a 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 c5 ae 5a 00 e9 [ 2890.560419] RSP: 0018:ffff88800c8c7890 EFLAGS: 00010216 [ 2890.561117] RAX: 000000000001363b RBX: ffff88800d138000 RCX: ffffc9000765a000 [ 2890.562035] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 2890.562937] RBP: ffff88800c8c7948 R08: 0000000000000000 R09: ffff88800c8c7818 [ 2890.563845] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2890.564732] R13: 1ffff11001918f12 R14: 0000000000000000 R15: ffff88800d138050 [ 2890.565652] FS: 00007f928ae0d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2890.566673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2890.567415] CR2: 0000555594199c58 CR3: 000000001cf20000 CR4: 0000000000350ef0 [ 2890.568321] Call Trace: [ 2890.568657] ? pgprot_writethrough+0xc0/0xc0 [ 2890.569229] ? finish_task_switch+0x126/0x5d0 [ 2890.569817] ? finish_task_switch+0xef/0x5d0 [ 2890.570705] untrack_pfn+0xdc/0x240 [ 2890.571985] ? track_pfn_insert+0x150/0x150 [ 2890.573416] ? lock_downgrade+0x6d0/0x6d0 [ 2890.575182] ? uprobe_munmap+0x95/0x670 [ 2890.576495] unmap_single_vma+0x1bc/0x300 [ 2890.577943] zap_page_range_single+0x2ce/0x450 [ 2890.578511] ? unmap_single_vma+0x300/0x300 [ 2890.579071] ? remap_pfn_range_internal+0xc56/0xf60 [ 2890.579694] ? lookup_memtype+0x5b/0x200 [ 2890.580231] ? apply_to_existing_page_range+0x40/0x40 [ 2890.580903] remap_pfn_range+0x139/0x160 [ 2890.581407] ? remap_pfn_range_notrack+0x70/0x70 [ 2890.582030] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2890.582675] io_uring_mmap+0x398/0x530 [ 2890.583187] mmap_file+0x5e/0xe0 [ 2890.583605] mmap_region+0xc4d/0x1500 [ 2890.584106] do_mmap+0x868/0x1370 [ 2890.584541] vm_mmap_pgoff+0x198/0x1f0 [ 2890.585048] ? randomize_page+0xb0/0xb0 [ 2890.585548] ksys_mmap_pgoff+0x41c/0x560 [ 2890.586082] ? find_mergeable_anon_vma+0x250/0x250 [ 2890.586688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2890.587355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2890.588014] do_syscall_64+0x33/0x40 [ 2890.588477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2890.589128] RIP: 0033:0x7f928d897b62 [ 2890.589587] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2890.591878] RSP: 002b:00007f928ae0d0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2890.592836] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f928d897b62 [ 2890.593724] RDX: 0000000000000003 RSI: 0000000000048140 RDI: 0000000020ffc000 [ 2890.594622] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 2890.595521] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2890.596419] R13: 0000000020ffe000 R14: 0000000020000140 R15: 0000000020ffc000 [ 2890.597331] irq event stamp: 1729 [ 2890.597793] hardirqs last enabled at (1739): [] console_unlock+0x92d/0xb40 [ 2890.598866] hardirqs last disabled at (1748): [] console_unlock+0x839/0xb40 [ 2890.599944] softirqs last enabled at (1282): [] asm_call_irq_on_stack+0x12/0x20 [ 2890.601061] softirqs last disabled at (1145): [] asm_call_irq_on_stack+0x12/0x20 [ 2890.602184] ---[ end trace 093e91fd778a7803 ]--- VM DIAGNOSIS: 02:09:35 Registers: info registers vcpu 0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e9701 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff88800c8c7238 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000064 R13=0000000000000064 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e9758 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f928ae0d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555594199c58 CR3=000000001cf20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f928d97e7c000007f928d97e7c8 XMM02=00007f928d97e7e000007f928d97e7c0 XMM03=00007f928d97e7c800007f928d97e7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff85037160 RCX=ffffffff81416281 RDX=0000000000000001 RSI=ffff88800f87cec0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88801792f870 R8 =0000000000000000 R9 =ffffffff868736a7 R10=0000000000000000 R11=0000000000000001 R12=00007f2e26e184bb R13=0000000000000000 R14=ffff88800f87cec0 R15=ffff8880446b1880 RIP=ffffffff8140e100 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2e2698c8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563e2e591c18 CR3=000000000e21e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000