0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:34:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 1960.767556] FAULT_INJECTION: forcing a failure. [ 1960.767556] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.769105] CPU: 1 PID: 27140 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 1960.770054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1960.771188] Call Trace: [ 1960.771554] dump_stack+0x107/0x167 [ 1960.772059] should_fail.cold+0x5/0xa [ 1960.772579] ? getname_flags.part.0+0x50/0x4f0 [ 1960.773198] should_failslab+0x5/0x20 [ 1960.773715] kmem_cache_alloc+0x5b/0x310 [ 1960.774281] getname_flags.part.0+0x50/0x4f0 [ 1960.774883] getname+0x8e/0xd0 [ 1960.775325] do_sys_openat2+0xf9/0x4d0 [ 1960.775864] ? build_open_flags+0x6f0/0x6f0 [ 1960.776453] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1960.777113] ? wait_for_completion_io+0x270/0x270 [ 1960.777782] __x64_sys_openat+0x13f/0x1f0 [ 1960.778363] ? __ia32_sys_open+0x1c0/0x1c0 [ 1960.778935] ? ksys_write+0x1a9/0x260 [ 1960.779463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1960.780178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1960.780891] do_syscall_64+0x33/0x40 [ 1960.781399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1960.782097] RIP: 0033:0x7f04f6dcfa04 [ 1960.782616] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1960.784186] FAULT_INJECTION: forcing a failure. [ 1960.784186] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.785102] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1960.785119] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 1960.785127] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 1960.785135] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 08:34:14 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) [ 1960.785143] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1960.785151] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 1960.801636] CPU: 0 PID: 27143 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 1960.803452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1960.805588] Call Trace: [ 1960.806306] dump_stack+0x107/0x167 [ 1960.807193] should_fail.cold+0x5/0xa [ 1960.808041] ? percpu_ref_init+0xd8/0x3d0 [ 1960.808954] should_failslab+0x5/0x20 [ 1960.809783] kmem_cache_alloc_trace+0x55/0x320 [ 1960.810812] ? io_tctx_exit_cb+0xf0/0xf0 [ 1960.811698] percpu_ref_init+0xd8/0x3d0 [ 1960.812591] io_uring_setup+0x47a/0x2980 [ 1960.813508] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1960.814595] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1960.815679] ? wait_for_completion_io+0x270/0x270 [ 1960.816847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1960.817986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1960.819140] do_syscall_64+0x33/0x40 [ 1960.819964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1960.821062] RIP: 0033:0x7f12dae86b19 [ 1960.821875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1960.825786] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1960.827427] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 1960.828953] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1960.830486] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1960.832007] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 1960.833523] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:34:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:34:14 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 2) 08:34:14 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x77, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:34:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x800, 0x81, 0x8}) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000140)="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") read(r0, &(0x7f00000000c0)=""/96, 0x60) [ 1960.931870] FAULT_INJECTION: forcing a failure. [ 1960.931870] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.933410] CPU: 1 PID: 27162 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 1960.934307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1960.935366] Call Trace: [ 1960.935710] dump_stack+0x107/0x167 [ 1960.936181] should_fail.cold+0x5/0xa [ 1960.936671] ? create_object.isra.0+0x3a/0xa30 [ 1960.937263] should_failslab+0x5/0x20 [ 1960.937753] kmem_cache_alloc+0x5b/0x310 [ 1960.938291] create_object.isra.0+0x3a/0xa30 [ 1960.938856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1960.939508] kmem_cache_alloc+0x159/0x310 [ 1960.940052] getname_flags.part.0+0x50/0x4f0 [ 1960.940621] getname+0x8e/0xd0 [ 1960.941039] do_sys_openat2+0xf9/0x4d0 [ 1960.941538] ? build_open_flags+0x6f0/0x6f0 [ 1960.942087] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1960.942712] ? wait_for_completion_io+0x270/0x270 [ 1960.943336] __x64_sys_openat+0x13f/0x1f0 [ 1960.943862] ? __ia32_sys_open+0x1c0/0x1c0 [ 1960.944394] ? ksys_write+0x1a9/0x260 [ 1960.944893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1960.945559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1960.946224] do_syscall_64+0x33/0x40 [ 1960.946699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1960.947352] RIP: 0033:0x7f04f6dcfa04 [ 1960.947821] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1960.950155] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1960.951120] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 1960.952024] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 1960.952927] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 1960.953828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1960.954733] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:34:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x24e, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:34:14 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 1) [ 1960.984894] FAULT_INJECTION: forcing a failure. [ 1960.984894] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.986337] CPU: 1 PID: 27166 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 1960.987209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1960.988234] Call Trace: [ 1960.988565] dump_stack+0x107/0x167 [ 1960.989019] should_fail.cold+0x5/0xa [ 1960.989491] ? getname_flags.part.0+0x50/0x4f0 [ 1960.990050] should_failslab+0x5/0x20 [ 1960.990532] kmem_cache_alloc+0x5b/0x310 [ 1960.991037] getname_flags.part.0+0x50/0x4f0 [ 1960.991578] getname+0x8e/0xd0 [ 1960.991975] do_sys_openat2+0xf9/0x4d0 [ 1960.992461] ? build_open_flags+0x6f0/0x6f0 [ 1960.992997] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1960.993598] ? wait_for_completion_io+0x270/0x270 [ 1960.994201] __x64_sys_openat+0x13f/0x1f0 [ 1960.994712] ? __ia32_sys_open+0x1c0/0x1c0 [ 1960.995232] ? ksys_write+0x1a9/0x260 [ 1960.995702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1960.996351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1960.996991] do_syscall_64+0x33/0x40 [ 1960.997457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1960.998097] RIP: 0033:0x7f41dcffda04 [ 1960.998568] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1961.000832] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1961.001767] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 1961.002652] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 1961.003539] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 1961.004419] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1961.005294] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 08:34:14 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 11) 08:34:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:34:14 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 3) [ 1961.066864] FAULT_INJECTION: forcing a failure. [ 1961.066864] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.068302] CPU: 1 PID: 27177 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 1961.069143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1961.070157] Call Trace: [ 1961.070485] dump_stack+0x107/0x167 [ 1961.070933] should_fail.cold+0x5/0xa [ 1961.071398] ? create_object.isra.0+0x3a/0xa30 [ 1961.071951] should_failslab+0x5/0x20 [ 1961.072425] kmem_cache_alloc+0x5b/0x310 [ 1961.072926] create_object.isra.0+0x3a/0xa30 [ 1961.073455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1961.074078] kmem_cache_alloc+0x159/0x310 [ 1961.074592] getname_flags.part.0+0x50/0x4f0 [ 1961.075130] getname+0x8e/0xd0 [ 1961.075520] do_sys_openat2+0xf9/0x4d0 [ 1961.075996] ? build_open_flags+0x6f0/0x6f0 [ 1961.076516] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1961.077099] ? wait_for_completion_io+0x270/0x270 [ 1961.077692] __x64_sys_openat+0x13f/0x1f0 [ 1961.078200] ? __ia32_sys_open+0x1c0/0x1c0 [ 1961.078711] ? ksys_write+0x1a9/0x260 [ 1961.079176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1961.079799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.080419] do_syscall_64+0x33/0x40 [ 1961.080862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1961.081477] RIP: 0033:0x7f04f6dcfa04 [ 1961.081925] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1961.084120] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1961.085033] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 1961.085879] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 1961.086735] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 1961.087580] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1961.088435] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 1961.102868] FAULT_INJECTION: forcing a failure. [ 1961.102868] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.104247] CPU: 1 PID: 27181 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 1961.105081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1961.106076] Call Trace: [ 1961.106408] dump_stack+0x107/0x167 [ 1961.106849] should_fail.cold+0x5/0xa [ 1961.107312] ? create_object.isra.0+0x3a/0xa30 [ 1961.107857] should_failslab+0x5/0x20 [ 1961.108311] kmem_cache_alloc+0x5b/0x310 [ 1961.108822] create_object.isra.0+0x3a/0xa30 [ 1961.109352] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1961.109971] kmem_cache_alloc_trace+0x151/0x320 [ 1961.110584] ? io_tctx_exit_cb+0xf0/0xf0 [ 1961.111076] percpu_ref_init+0xd8/0x3d0 [ 1961.111555] io_uring_setup+0x47a/0x2980 [ 1961.112046] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1961.112632] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1961.113237] ? wait_for_completion_io+0x270/0x270 [ 1961.113827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1961.114469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.115092] do_syscall_64+0x33/0x40 [ 1961.115531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1961.116142] RIP: 0033:0x7f12dae86b19 [ 1961.116585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.118787] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1961.119701] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 1961.120552] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1961.121405] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1961.122252] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 1961.123101] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:34:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x7, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:34:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:34:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x300, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:34:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:34:33 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 12) 08:34:33 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:34:33 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 2) 08:34:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 4) [ 1980.350001] FAULT_INJECTION: forcing a failure. [ 1980.350001] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.351928] CPU: 0 PID: 27203 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 1980.353064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.354450] Call Trace: [ 1980.354892] dump_stack+0x107/0x167 [ 1980.355480] should_fail.cold+0x5/0xa [ 1980.356123] ? create_object.isra.0+0x3a/0xa30 [ 1980.356869] should_failslab+0x5/0x20 [ 1980.357486] kmem_cache_alloc+0x5b/0x310 [ 1980.358170] create_object.isra.0+0x3a/0xa30 [ 1980.358886] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.359719] kmem_cache_alloc+0x159/0x310 [ 1980.360409] getname_flags.part.0+0x50/0x4f0 [ 1980.361131] getname+0x8e/0xd0 [ 1980.361639] do_sys_openat2+0xf9/0x4d0 [ 1980.362280] ? build_open_flags+0x6f0/0x6f0 [ 1980.362993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.363798] ? wait_for_completion_io+0x270/0x270 [ 1980.364262] FAULT_INJECTION: forcing a failure. [ 1980.364262] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.364595] __x64_sys_openat+0x13f/0x1f0 [ 1980.364615] ? __ia32_sys_open+0x1c0/0x1c0 [ 1980.364638] ? ksys_write+0x1a9/0x260 [ 1980.369139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.369988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.370852] do_syscall_64+0x33/0x40 [ 1980.371460] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.372248] RIP: 0033:0x7f41dcffda04 [ 1980.372851] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1980.375853] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1980.377087] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 1980.378253] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 1980.379424] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 1980.380582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1980.381759] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 1980.383001] CPU: 1 PID: 27206 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 1980.384595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.386493] Call Trace: [ 1980.387113] dump_stack+0x107/0x167 [ 1980.387956] should_fail.cold+0x5/0xa [ 1980.388835] ? __alloc_file+0x21/0x320 [ 1980.389731] should_failslab+0x5/0x20 [ 1980.390606] kmem_cache_alloc+0x5b/0x310 [ 1980.391545] __alloc_file+0x21/0x320 [ 1980.392402] alloc_empty_file+0x6d/0x170 [ 1980.393336] path_openat+0xe6/0x2770 [ 1980.394193] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1980.395338] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1980.396485] ? path_lookupat+0x860/0x860 [ 1980.397409] ? perf_trace_lock+0x2bd/0x490 [ 1980.398381] ? lock_acquire+0x197/0x470 [ 1980.399281] ? find_held_lock+0x2c/0x110 [ 1980.400203] ? __lockdep_reset_lock+0x180/0x180 [ 1980.401277] do_filp_open+0x190/0x3e0 [ 1980.402157] ? may_open_dev+0xf0/0xf0 [ 1980.403041] ? alloc_fd+0x2e7/0x670 [ 1980.403875] ? lock_downgrade+0x6d0/0x6d0 [ 1980.404823] ? do_raw_spin_lock+0x121/0x260 [ 1980.405800] ? rwlock_bug.part.0+0x90/0x90 [ 1980.406780] ? _raw_spin_unlock+0x1a/0x30 [ 1980.407708] ? alloc_fd+0x2e7/0x670 [ 1980.408554] do_sys_openat2+0x171/0x4d0 [ 1980.409455] ? build_open_flags+0x6f0/0x6f0 [ 1980.410423] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.411508] ? wait_for_completion_io+0x270/0x270 [ 1980.412606] __x64_sys_openat+0x13f/0x1f0 [ 1980.413539] ? __ia32_sys_open+0x1c0/0x1c0 [ 1980.414485] ? ksys_write+0x1a9/0x260 [ 1980.415357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.416537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.417700] do_syscall_64+0x33/0x40 08:34:33 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1980.418688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.419889] RIP: 0033:0x7f04f6dcfa04 [ 1980.420714] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1980.424769] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1980.426452] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 1980.428026] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 1980.429597] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 1980.431170] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1980.432736] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 1980.446665] FAULT_INJECTION: forcing a failure. [ 1980.446665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1980.449261] CPU: 1 PID: 27212 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 1980.450766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.452565] Call Trace: [ 1980.453140] dump_stack+0x107/0x167 [ 1980.453933] should_fail.cold+0x5/0xa [ 1980.454779] __alloc_pages_nodemask+0x182/0x600 [ 1980.455792] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1980.457107] ? cap_capable+0x1cd/0x230 [ 1980.457960] alloc_pages_current+0x187/0x280 [ 1980.458920] __get_free_pages+0xc/0xa0 [ 1980.459758] io_uring_setup+0xe27/0x2980 [ 1980.460641] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.461731] ? wait_for_completion_io+0x270/0x270 [ 1980.462807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.463940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.465048] do_syscall_64+0x33/0x40 08:34:33 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1980.465851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.467138] RIP: 0033:0x7f12dae86b19 [ 1980.467929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.471847] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.473463] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 1980.474981] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1980.476488] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1980.477994] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 1980.479515] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:34:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:34:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:ssh_exec_t:s0\x00', 0x20, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @can={0x1d, 0x0}, @nl=@kern={0x10, 0x0, 0x0, 0x10000000}, @l2tp={0x2, 0x0, @multicast2, 0x4}, 0x2970, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000240)='ipvlan1\x00', 0x3f3, 0x8, 0x6}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10044001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB='./file0\x00']) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:34:33 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1980.580041] audit: type=1400 audit(1782462873.925:268): avc: denied { relabelto } for pid=27217 comm="syz-executor.1" name="HCI" dev="sockfs" ino=39950 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=bluetooth_socket permissive=1 08:34:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x8, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:34:33 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 13) 08:34:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x500, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:34:33 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 3) [ 1980.676327] FAULT_INJECTION: forcing a failure. [ 1980.676327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1980.678351] CPU: 0 PID: 27230 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 1980.679380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.680578] Call Trace: [ 1980.680978] dump_stack+0x107/0x167 [ 1980.681530] should_fail.cold+0x5/0xa [ 1980.682115] __alloc_pages_nodemask+0x182/0x600 [ 1980.682825] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1980.683729] ? cap_capable+0x1cd/0x230 [ 1980.684345] alloc_pages_current+0x187/0x280 [ 1980.685010] __get_free_pages+0xc/0xa0 [ 1980.685596] io_uring_setup+0xf9a/0x2980 [ 1980.686222] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1980.686979] ? wait_for_completion_io+0x270/0x270 [ 1980.687764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.688535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.689311] do_syscall_64+0x33/0x40 [ 1980.689876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.690639] RIP: 0033:0x7f12dae86b19 [ 1980.691184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.692899] FAULT_INJECTION: forcing a failure. [ 1980.692899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1980.693812] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1980.693837] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 1980.693849] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1980.693868] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1980.700439] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 1980.701459] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 1980.702567] CPU: 1 PID: 27233 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 1980.704030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.705777] Call Trace: [ 1980.706344] dump_stack+0x107/0x167 [ 1980.707131] should_fail.cold+0x5/0xa [ 1980.707921] strncpy_from_user+0x34/0x470 [ 1980.708796] getname_flags.part.0+0x95/0x4f0 [ 1980.709721] getname+0x8e/0xd0 [ 1980.710412] do_sys_openat2+0xf9/0x4d0 [ 1980.711234] ? build_open_flags+0x6f0/0x6f0 [ 1980.712133] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.713149] ? wait_for_completion_io+0x270/0x270 [ 1980.714165] __x64_sys_openat+0x13f/0x1f0 [ 1980.715049] ? __ia32_sys_open+0x1c0/0x1c0 [ 1980.715930] ? ksys_write+0x1a9/0x260 [ 1980.716735] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.717833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.718930] do_syscall_64+0x33/0x40 [ 1980.719714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.720798] RIP: 0033:0x7f41dcffda04 [ 1980.721587] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1980.725497] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1980.727103] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 1980.728605] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 1980.730104] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 1980.731618] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1980.733115] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 1994.133459] FAULT_INJECTION: forcing a failure. [ 1994.133459] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.134885] CPU: 1 PID: 27254 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 1994.135672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.136630] Call Trace: [ 1994.136941] dump_stack+0x107/0x167 [ 1994.137362] should_fail.cold+0x5/0xa [ 1994.137803] ? __alloc_file+0x21/0x320 [ 1994.138251] should_failslab+0x5/0x20 [ 1994.138716] kmem_cache_alloc+0x5b/0x310 [ 1994.139189] __alloc_file+0x21/0x320 [ 1994.139618] alloc_empty_file+0x6d/0x170 [ 1994.140087] path_openat+0xe6/0x2770 [ 1994.140519] ? __lock_acquire+0x1657/0x5b00 [ 1994.141025] ? path_lookupat+0x860/0x860 [ 1994.141486] ? perf_trace_lock+0xac/0x490 [ 1994.141961] ? lock_acquire+0x197/0x470 [ 1994.142410] ? find_held_lock+0x2c/0x110 [ 1994.142891] ? __lockdep_reset_lock+0x180/0x180 [ 1994.143434] do_filp_open+0x190/0x3e0 [ 1994.143863] ? may_open_dev+0xf0/0xf0 [ 1994.144310] ? alloc_fd+0x2e7/0x670 [ 1994.144727] ? lock_downgrade+0x6d0/0x6d0 [ 1994.145210] ? do_raw_spin_lock+0x121/0x260 [ 1994.145699] ? rwlock_bug.part.0+0x90/0x90 [ 1994.146193] ? _raw_spin_unlock+0x1a/0x30 [ 1994.146682] ? alloc_fd+0x2e7/0x670 [ 1994.147103] do_sys_openat2+0x171/0x4d0 [ 1994.147561] ? build_open_flags+0x6f0/0x6f0 08:34:47 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:34:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:34:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x9, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:34:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x600, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:34:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB='le0\x00'/16]) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xbfff, 0x4}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10044001}, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x1b) read(r2, &(0x7f00000000c0)=""/96, 0x60) 08:34:47 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 14) 08:34:47 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 4) [ 1994.148051] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1994.148865] ? wait_for_completion_io+0x270/0x270 [ 1994.149474] __x64_sys_openat+0x13f/0x1f0 08:34:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 5) [ 1994.149949] ? __ia32_sys_open+0x1c0/0x1c0 [ 1994.150612] ? ksys_write+0x1a9/0x260 [ 1994.151048] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.151644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.152231] do_syscall_64+0x33/0x40 [ 1994.152654] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.153228] RIP: 0033:0x7f41dcffda04 [ 1994.153654] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1994.155746] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1994.156609] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 1994.157412] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 1994.158220] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 1994.159045] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1994.159853] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 1994.181601] FAULT_INJECTION: forcing a failure. [ 1994.181601] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.182931] CPU: 1 PID: 27264 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 1994.183470] FAULT_INJECTION: forcing a failure. [ 1994.183470] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.183709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.183724] Call Trace: [ 1994.187354] dump_stack+0x107/0x167 [ 1994.187774] should_fail.cold+0x5/0xa [ 1994.188213] ? create_object.isra.0+0x3a/0xa30 [ 1994.188731] should_failslab+0x5/0x20 [ 1994.189162] kmem_cache_alloc+0x5b/0x310 [ 1994.189631] create_object.isra.0+0x3a/0xa30 [ 1994.190129] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.190731] kmem_cache_alloc+0x159/0x310 [ 1994.191211] __alloc_file+0x21/0x320 [ 1994.191640] alloc_empty_file+0x6d/0x170 [ 1994.192106] path_openat+0xe6/0x2770 [ 1994.192534] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1994.193100] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1994.193673] ? path_lookupat+0x860/0x860 [ 1994.194133] ? perf_trace_lock+0x2bd/0x490 [ 1994.194642] ? lock_acquire+0x197/0x470 [ 1994.195094] ? find_held_lock+0x2c/0x110 [ 1994.195563] ? __lockdep_reset_lock+0x180/0x180 [ 1994.196098] do_filp_open+0x190/0x3e0 [ 1994.196530] ? may_open_dev+0xf0/0xf0 [ 1994.196971] ? alloc_fd+0x2e7/0x670 [ 1994.197389] ? lock_downgrade+0x6d0/0x6d0 [ 1994.197864] ? do_raw_spin_lock+0x121/0x260 [ 1994.198355] ? rwlock_bug.part.0+0x90/0x90 [ 1994.198871] ? _raw_spin_unlock+0x1a/0x30 [ 1994.199344] ? alloc_fd+0x2e7/0x670 [ 1994.199770] do_sys_openat2+0x171/0x4d0 [ 1994.200228] ? build_open_flags+0x6f0/0x6f0 [ 1994.200720] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1994.201274] ? wait_for_completion_io+0x270/0x270 [ 1994.201833] __x64_sys_openat+0x13f/0x1f0 [ 1994.202306] ? __ia32_sys_open+0x1c0/0x1c0 [ 1994.202802] ? ksys_write+0x1a9/0x260 [ 1994.203242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.203834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.204422] do_syscall_64+0x33/0x40 [ 1994.204847] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.205429] RIP: 0033:0x7f04f6dcfa04 [ 1994.205853] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1994.207948] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1994.208812] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 1994.209619] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 1994.210424] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 1994.211249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1994.212056] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 1994.212905] CPU: 0 PID: 27260 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 1994.214429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.216226] Call Trace: [ 1994.216825] dump_stack+0x107/0x167 [ 1994.217647] should_fail.cold+0x5/0xa [ 1994.218494] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1994.219715] should_failslab+0x5/0x20 [ 1994.220544] kmem_cache_alloc_trace+0x55/0x320 [ 1994.221567] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1994.222754] io_uring_setup+0x14f6/0x2980 [ 1994.223703] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1994.224797] ? wait_for_completion_io+0x270/0x270 [ 1994.225952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.227103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.228252] do_syscall_64+0x33/0x40 [ 1994.229069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.230178] RIP: 0033:0x7f12dae86b19 [ 1994.230996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.234993] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1994.236683] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 1994.238219] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 1994.239785] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 1994.241316] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 1994.242855] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:34:47 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 5) [ 1994.247624] FAULT_INJECTION: forcing a failure. [ 1994.247624] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.248956] CPU: 1 PID: 27266 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 1994.249735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.250707] Call Trace: [ 1994.251009] dump_stack+0x107/0x167 [ 1994.251424] should_fail.cold+0x5/0xa [ 1994.251869] ? create_object.isra.0+0x3a/0xa30 [ 1994.252383] should_failslab+0x5/0x20 [ 1994.252818] kmem_cache_alloc+0x5b/0x310 [ 1994.253278] create_object.isra.0+0x3a/0xa30 [ 1994.253773] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.254356] kmem_cache_alloc+0x159/0x310 [ 1994.254855] __alloc_file+0x21/0x320 [ 1994.255274] alloc_empty_file+0x6d/0x170 [ 1994.255744] path_openat+0xe6/0x2770 [ 1994.256162] ? __lock_acquire+0x1657/0x5b00 [ 1994.256663] ? path_lookupat+0x860/0x860 [ 1994.257119] ? perf_trace_lock+0xac/0x490 [ 1994.257595] ? lock_acquire+0x197/0x470 [ 1994.258042] ? find_held_lock+0x2c/0x110 [ 1994.258510] ? __lockdep_reset_lock+0x180/0x180 [ 1994.259057] do_filp_open+0x190/0x3e0 [ 1994.259483] ? may_open_dev+0xf0/0xf0 [ 1994.259922] ? alloc_fd+0x2e7/0x670 [ 1994.260333] ? lock_downgrade+0x6d0/0x6d0 [ 1994.260809] ? do_raw_spin_lock+0x121/0x260 [ 1994.261299] ? rwlock_bug.part.0+0x90/0x90 [ 1994.261788] ? _raw_spin_unlock+0x1a/0x30 [ 1994.262258] ? alloc_fd+0x2e7/0x670 [ 1994.262703] do_sys_openat2+0x171/0x4d0 [ 1994.263155] ? build_open_flags+0x6f0/0x6f0 [ 1994.263648] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1994.264192] ? wait_for_completion_io+0x270/0x270 [ 1994.264747] __x64_sys_openat+0x13f/0x1f0 [ 1994.265213] ? __ia32_sys_open+0x1c0/0x1c0 [ 1994.265701] ? ksys_write+0x1a9/0x260 [ 1994.266135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.266760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.267341] do_syscall_64+0x33/0x40 [ 1994.267767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.268345] RIP: 0033:0x7f41dcffda04 [ 1994.268768] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1994.270845] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1994.271717] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 1994.272521] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 1994.273338] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 1994.274141] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1994.274954] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 08:34:47 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:34:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:34:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 6) [ 1994.332596] FAULT_INJECTION: forcing a failure. [ 1994.332596] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.334006] CPU: 1 PID: 27272 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 1994.334832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.335789] Call Trace: [ 1994.336095] dump_stack+0x107/0x167 [ 1994.336522] should_fail.cold+0x5/0xa [ 1994.336972] ? security_file_alloc+0x34/0x170 [ 1994.337493] should_failslab+0x5/0x20 [ 1994.337935] kmem_cache_alloc+0x5b/0x310 [ 1994.338417] security_file_alloc+0x34/0x170 [ 1994.338948] __alloc_file+0xb7/0x320 [ 1994.339384] alloc_empty_file+0x6d/0x170 [ 1994.339857] path_openat+0xe6/0x2770 [ 1994.340287] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1994.340865] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1994.341447] ? path_lookupat+0x860/0x860 [ 1994.341917] ? perf_trace_lock+0x2bd/0x490 [ 1994.342410] ? lock_acquire+0x197/0x470 [ 1994.342891] ? find_held_lock+0x2c/0x110 [ 1994.343370] ? __lockdep_reset_lock+0x180/0x180 [ 1994.343919] do_filp_open+0x190/0x3e0 [ 1994.344362] ? may_open_dev+0xf0/0xf0 [ 1994.344809] ? alloc_fd+0x2e7/0x670 [ 1994.345222] ? lock_downgrade+0x6d0/0x6d0 [ 1994.345705] ? do_raw_spin_lock+0x121/0x260 [ 1994.346202] ? rwlock_bug.part.0+0x90/0x90 [ 1994.346711] ? _raw_spin_unlock+0x1a/0x30 [ 1994.347181] ? alloc_fd+0x2e7/0x670 [ 1994.347607] do_sys_openat2+0x171/0x4d0 [ 1994.348065] ? build_open_flags+0x6f0/0x6f0 [ 1994.348549] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1994.349101] ? wait_for_completion_io+0x270/0x270 [ 1994.349657] __x64_sys_openat+0x13f/0x1f0 [ 1994.350132] ? __ia32_sys_open+0x1c0/0x1c0 [ 1994.350641] ? ksys_write+0x1a9/0x260 [ 1994.351083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.351692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.352283] do_syscall_64+0x33/0x40 [ 1994.352718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1994.353300] RIP: 0033:0x7f04f6dcfa04 [ 1994.353735] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1994.355823] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1994.356686] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 1994.357491] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 1994.358297] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 1994.359116] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1994.359919] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:35:02 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x0, 0x20, 0x81, 0x0, 0x2, 0x440c1, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10440, 0x52, 0x3, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0xe05, 0x0, 0xdee4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) read(r1, &(0x7f0000000040)=""/112, 0x70) write$bt_hci(r0, &(0x7f00000002c0)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc8}}}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x1, 0x3, "de2de9", 0x20, 0xfe}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x40}, 0x6) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f00000001c0)="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") 08:35:02 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 15) 08:35:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:35:02 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 6) 08:35:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xa, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2008.851493] FAULT_INJECTION: forcing a failure. [ 2008.851493] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.853955] CPU: 1 PID: 27296 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2008.855445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.857181] Call Trace: [ 2008.857743] dump_stack+0x107/0x167 [ 2008.858521] should_fail.cold+0x5/0xa [ 2008.859358] ? create_object.isra.0+0x3a/0xa30 [ 2008.860325] should_failslab+0x5/0x20 [ 2008.861130] kmem_cache_alloc+0x5b/0x310 [ 2008.861995] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2008.863186] create_object.isra.0+0x3a/0xa30 [ 2008.864113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2008.865192] kmem_cache_alloc+0x159/0x310 [ 2008.866083] security_file_alloc+0x34/0x170 [ 2008.867032] __alloc_file+0xb7/0x320 [ 2008.867829] alloc_empty_file+0x6d/0x170 [ 2008.868694] path_openat+0xe6/0x2770 [ 2008.869488] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2008.870542] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2008.871629] ? path_lookupat+0x860/0x860 [ 2008.872490] ? perf_trace_lock+0x2bd/0x490 [ 2008.873390] ? lock_acquire+0x197/0x470 [ 2008.874229] ? find_held_lock+0x2c/0x110 [ 2008.875120] ? __lockdep_reset_lock+0x180/0x180 [ 2008.876125] do_filp_open+0x190/0x3e0 [ 2008.876928] ? may_open_dev+0xf0/0xf0 [ 2008.877749] ? alloc_fd+0x2e7/0x670 [ 2008.878528] ? lock_downgrade+0x6d0/0x6d0 [ 2008.879432] ? do_raw_spin_lock+0x121/0x260 [ 2008.880349] ? rwlock_bug.part.0+0x90/0x90 [ 2008.881264] ? _raw_spin_unlock+0x1a/0x30 [ 2008.882143] ? alloc_fd+0x2e7/0x670 [ 2008.882972] do_sys_openat2+0x171/0x4d0 [ 2008.883821] ? build_open_flags+0x6f0/0x6f0 [ 2008.884733] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2008.885759] ? wait_for_completion_io+0x270/0x270 [ 2008.886835] __x64_sys_openat+0x13f/0x1f0 [ 2008.887713] ? __ia32_sys_open+0x1c0/0x1c0 [ 2008.888615] ? ksys_write+0x1a9/0x260 [ 2008.889436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2008.890557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.891687] do_syscall_64+0x33/0x40 [ 2008.892478] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2008.893565] RIP: 0033:0x7f04f6dcfa04 [ 2008.894359] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2008.898253] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2008.899899] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2008.901420] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2008.902952] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2008.904457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2008.905962] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2008.909108] FAULT_INJECTION: forcing a failure. [ 2008.909108] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.910829] CPU: 0 PID: 27298 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2008.911796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.912941] Call Trace: [ 2008.913092] FAULT_INJECTION: forcing a failure. [ 2008.913092] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.913316] dump_stack+0x107/0x167 [ 2008.913341] should_fail.cold+0x5/0xa [ 2008.916716] ? security_file_alloc+0x34/0x170 [ 2008.917343] should_failslab+0x5/0x20 [ 2008.917874] kmem_cache_alloc+0x5b/0x310 [ 2008.918452] security_file_alloc+0x34/0x170 [ 2008.919074] __alloc_file+0xb7/0x320 [ 2008.919596] alloc_empty_file+0x6d/0x170 [ 2008.920164] path_openat+0xe6/0x2770 [ 2008.920691] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2008.921394] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2008.922100] ? path_lookupat+0x860/0x860 [ 2008.922668] ? perf_trace_lock+0x2bd/0x490 [ 2008.923279] ? lock_acquire+0x197/0x470 [ 2008.923832] ? find_held_lock+0x2c/0x110 [ 2008.924401] ? __lockdep_reset_lock+0x180/0x180 [ 2008.925059] do_filp_open+0x190/0x3e0 [ 2008.925587] ? may_open_dev+0xf0/0xf0 [ 2008.926119] ? alloc_fd+0x2e7/0x670 [ 2008.926630] ? lock_downgrade+0x6d0/0x6d0 [ 2008.927210] ? do_raw_spin_lock+0x121/0x260 [ 2008.927812] ? rwlock_bug.part.0+0x90/0x90 [ 2008.928414] ? _raw_spin_unlock+0x1a/0x30 [ 2008.928982] ? alloc_fd+0x2e7/0x670 [ 2008.929511] do_sys_openat2+0x171/0x4d0 [ 2008.930074] ? build_open_flags+0x6f0/0x6f0 [ 2008.930665] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2008.931361] ? wait_for_completion_io+0x270/0x270 [ 2008.932037] __x64_sys_openat+0x13f/0x1f0 [ 2008.932609] ? __ia32_sys_open+0x1c0/0x1c0 [ 2008.933195] ? ksys_write+0x1a9/0x260 [ 2008.933731] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2008.934455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.935181] do_syscall_64+0x33/0x40 [ 2008.935696] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2008.936405] RIP: 0033:0x7f41dcffda04 [ 2008.936922] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2008.939457] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2008.940509] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2008.941490] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2008.942471] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2008.943459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2008.944430] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 2008.945465] CPU: 1 PID: 27299 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2008.946982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.948736] Call Trace: [ 2008.949302] dump_stack+0x107/0x167 [ 2008.950071] should_fail.cold+0x5/0xa [ 2008.950903] ? create_object.isra.0+0x3a/0xa30 [ 2008.951862] should_failslab+0x5/0x20 08:35:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x700, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:02 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 7) 08:35:02 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x40}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffc, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) [ 2008.952662] kmem_cache_alloc+0x5b/0x310 [ 2008.953728] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2008.955068] create_object.isra.0+0x3a/0xa30 [ 2008.955996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2008.957073] kmem_cache_alloc_trace+0x151/0x320 [ 2008.958059] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2008.959232] io_uring_setup+0x14f6/0x2980 [ 2008.960122] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2008.961188] ? wait_for_completion_io+0x270/0x270 [ 2008.962228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2008.963361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.964452] do_syscall_64+0x33/0x40 08:35:02 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2008.965242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2008.966446] RIP: 0033:0x7f12dae86b19 [ 2008.967266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.971165] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2008.972760] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2008.974253] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2008.975772] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2008.977266] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2008.978782] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:35:02 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:35:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x900, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:02 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:35:02 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 16) [ 2009.178630] FAULT_INJECTION: forcing a failure. [ 2009.178630] name failslab, interval 1, probability 0, space 0, times 0 [ 2009.180290] CPU: 1 PID: 27330 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2009.181264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2009.182436] Call Trace: [ 2009.182842] dump_stack+0x107/0x167 [ 2009.183362] should_fail.cold+0x5/0xa [ 2009.183903] ? create_object.isra.0+0x3a/0xa30 [ 2009.184549] should_failslab+0x5/0x20 [ 2009.185085] kmem_cache_alloc+0x5b/0x310 [ 2009.185664] create_object.isra.0+0x3a/0xa30 [ 2009.186290] kmemleak_alloc_percpu+0xa0/0x100 [ 2009.186914] pcpu_alloc+0x4e2/0x1240 [ 2009.187461] ? io_async_queue_proc+0x80/0x80 [ 2009.188080] percpu_ref_init+0x31/0x3d0 [ 2009.188649] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2009.189416] io_uring_setup+0x14f6/0x2980 [ 2009.190017] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2009.190735] ? wait_for_completion_io+0x270/0x270 [ 2009.191429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2009.192168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2009.192891] do_syscall_64+0x33/0x40 [ 2009.193399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2009.194092] RIP: 0033:0x7f12dae86b19 [ 2009.194599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2009.197097] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2009.198136] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2009.199109] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2009.200073] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2009.201074] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2009.202079] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:35:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xa00, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xb, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="749678b8319413619d1bd4af19dc10ee9c72dd976b21fd4bf71d8b3c0921bc6ae0f6f6") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:35:21 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 17) 08:35:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:35:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 8) 08:35:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:21 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 7) [ 2027.718929] FAULT_INJECTION: forcing a failure. [ 2027.718929] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.721360] CPU: 1 PID: 27353 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2027.722822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.724593] Call Trace: [ 2027.725152] dump_stack+0x107/0x167 [ 2027.725918] should_fail.cold+0x5/0xa [ 2027.726722] ? create_object.isra.0+0x3a/0xa30 [ 2027.727693] should_failslab+0x5/0x20 [ 2027.727893] FAULT_INJECTION: forcing a failure. [ 2027.727893] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.728488] kmem_cache_alloc+0x5b/0x310 [ 2027.728510] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2027.728533] create_object.isra.0+0x3a/0xa30 [ 2027.728550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2027.728580] kmem_cache_alloc+0x159/0x310 [ 2027.736154] security_file_alloc+0x34/0x170 [ 2027.737054] __alloc_file+0xb7/0x320 [ 2027.737839] alloc_empty_file+0x6d/0x170 [ 2027.738680] path_openat+0xe6/0x2770 [ 2027.739467] ? __lock_acquire+0x1657/0x5b00 [ 2027.740368] ? path_lookupat+0x860/0x860 [ 2027.741223] ? perf_trace_lock+0xac/0x490 [ 2027.742064] ? lock_acquire+0x197/0x470 [ 2027.742890] ? find_held_lock+0x2c/0x110 [ 2027.743762] ? __lockdep_reset_lock+0x180/0x180 [ 2027.744749] do_filp_open+0x190/0x3e0 [ 2027.745546] ? may_open_dev+0xf0/0xf0 [ 2027.746351] ? alloc_fd+0x2e7/0x670 [ 2027.747119] ? lock_downgrade+0x6d0/0x6d0 [ 2027.747990] ? do_raw_spin_lock+0x121/0x260 [ 2027.748886] ? rwlock_bug.part.0+0x90/0x90 [ 2027.749779] ? _raw_spin_unlock+0x1a/0x30 [ 2027.750648] ? alloc_fd+0x2e7/0x670 [ 2027.751429] do_sys_openat2+0x171/0x4d0 [ 2027.752268] ? build_open_flags+0x6f0/0x6f0 [ 2027.753164] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2027.754174] ? wait_for_completion_io+0x270/0x270 [ 2027.755191] __x64_sys_openat+0x13f/0x1f0 [ 2027.756059] ? __ia32_sys_open+0x1c0/0x1c0 [ 2027.756938] ? ksys_write+0x1a9/0x260 [ 2027.757749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2027.758846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2027.759947] do_syscall_64+0x33/0x40 [ 2027.760729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2027.761796] RIP: 0033:0x7f41dcffda04 [ 2027.762578] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2027.766441] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2027.768048] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2027.769543] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2027.771042] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2027.772535] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2027.774022] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 2027.775548] CPU: 0 PID: 27357 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2027.777045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.778812] Call Trace: [ 2027.779397] dump_stack+0x107/0x167 [ 2027.780186] should_fail.cold+0x5/0xa [ 2027.781001] ? proc_self_get_link+0x18b/0x200 [ 2027.781954] should_failslab+0x5/0x20 [ 2027.782768] kmem_cache_alloc_trace+0x55/0x320 [ 2027.783757] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2027.784714] proc_self_get_link+0x18b/0x200 [ 2027.785705] step_into+0x1595/0x1ce0 [ 2027.786519] ? lookup_fast+0x6e0/0x6e0 [ 2027.787361] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2027.788342] walk_component+0x171/0x6a0 [ 2027.789194] ? trace_hardirqs_on+0x5b/0x180 [ 2027.790118] ? handle_dots.part.0+0x15c0/0x15c0 [ 2027.791132] ? security_inode_permission+0xcb/0x100 [ 2027.792210] link_path_walk.part.0+0x699/0xbf0 [ 2027.793211] ? walk_component+0x6a0/0x6a0 [ 2027.794097] ? percpu_counter_add_batch+0x8b/0x140 [ 2027.795172] path_openat+0x25d/0x2770 [ 2027.795988] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2027.797055] ? path_lookupat+0x860/0x860 [ 2027.797919] ? perf_trace_lock+0x2bd/0x490 [ 2027.798823] ? lock_acquire+0x197/0x470 [ 2027.799672] ? find_held_lock+0x2c/0x110 [ 2027.800541] ? __lockdep_reset_lock+0x180/0x180 [ 2027.801552] do_filp_open+0x190/0x3e0 [ 2027.802371] ? may_open_dev+0xf0/0xf0 [ 2027.803215] ? rwlock_bug.part.0+0x90/0x90 [ 2027.804139] ? _raw_spin_unlock+0x1a/0x30 [ 2027.805016] ? alloc_fd+0x2e7/0x670 [ 2027.805826] do_sys_openat2+0x171/0x4d0 [ 2027.806675] ? build_open_flags+0x6f0/0x6f0 [ 2027.807600] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2027.808632] ? wait_for_completion_io+0x270/0x270 [ 2027.809674] __x64_sys_openat+0x13f/0x1f0 [ 2027.810558] ? __ia32_sys_open+0x1c0/0x1c0 [ 2027.811453] ? ksys_write+0x1a9/0x260 [ 2027.812273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2027.813396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2027.814497] do_syscall_64+0x33/0x40 [ 2027.815307] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2027.816387] RIP: 0033:0x7f04f6dcfa04 [ 2027.817183] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2027.821080] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2027.822708] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2027.824242] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2027.825761] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2027.827287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2027.828816] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:35:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0xb) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) read(r0, &(0x7f0000000040)=""/106, 0xb1) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000100)) dup3(r0, r0, 0x0) [ 2027.841920] FAULT_INJECTION: forcing a failure. [ 2027.841920] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.844472] CPU: 0 PID: 27355 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2027.845970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.847768] Call Trace: [ 2027.848366] dump_stack+0x107/0x167 [ 2027.849187] should_fail.cold+0x5/0xa [ 2027.850035] ? create_object.isra.0+0x3a/0xa30 [ 2027.851052] should_failslab+0x5/0x20 [ 2027.851885] kmem_cache_alloc+0x5b/0x310 [ 2027.852815] create_object.isra.0+0x3a/0xa30 [ 2027.853809] kmemleak_alloc_percpu+0xa0/0x100 [ 2027.854820] pcpu_alloc+0x4e2/0x1240 [ 2027.855722] ? io_async_queue_proc+0x80/0x80 [ 2027.856694] percpu_ref_init+0x31/0x3d0 [ 2027.857600] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2027.858795] io_uring_setup+0x14f6/0x2980 [ 2027.859756] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2027.860858] ? wait_for_completion_io+0x270/0x270 [ 2027.862024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2027.863174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2027.864333] do_syscall_64+0x33/0x40 [ 2027.865157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2027.866268] RIP: 0033:0x7f12dae86b19 [ 2027.867087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2027.871045] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2027.872703] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2027.874246] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2027.875801] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2027.877337] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2027.878884] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:35:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 9) 08:35:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) [ 2027.970665] FAULT_INJECTION: forcing a failure. [ 2027.970665] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.975068] CPU: 1 PID: 27370 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2027.976507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.978223] Call Trace: [ 2027.978787] dump_stack+0x107/0x167 [ 2027.979571] should_fail.cold+0x5/0xa [ 2027.980366] ? find_held_lock+0x2c/0x110 [ 2027.981436] ? create_object.isra.0+0x3a/0xa30 [ 2027.982581] should_failslab+0x5/0x20 [ 2027.983377] kmem_cache_alloc+0x5b/0x310 [ 2027.984219] ? __task_pid_nr_ns+0x1b8/0x500 [ 2027.985142] create_object.isra.0+0x3a/0xa30 [ 2027.986041] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2027.987114] kmem_cache_alloc_trace+0x151/0x320 [ 2027.988091] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2027.989015] proc_self_get_link+0x18b/0x200 [ 2027.989910] step_into+0x1595/0x1ce0 [ 2027.990699] ? lookup_fast+0x6e0/0x6e0 [ 2027.991518] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2027.992488] walk_component+0x171/0x6a0 [ 2027.993309] ? trace_hardirqs_on+0x5b/0x180 [ 2027.994218] ? handle_dots.part.0+0x15c0/0x15c0 [ 2027.995200] ? security_inode_permission+0xcb/0x100 [ 2027.996277] link_path_walk.part.0+0x699/0xbf0 [ 2027.997244] ? walk_component+0x6a0/0x6a0 [ 2027.998128] ? percpu_counter_add_batch+0x8b/0x140 [ 2027.999178] path_openat+0x25d/0x2770 [ 2028.000015] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2028.001060] ? path_lookupat+0x860/0x860 [ 2028.001928] ? perf_trace_lock+0x2bd/0x490 [ 2028.002811] ? lock_acquire+0x197/0x470 [ 2028.003681] ? find_held_lock+0x2c/0x110 [ 2028.004542] ? __lockdep_reset_lock+0x180/0x180 [ 2028.005524] do_filp_open+0x190/0x3e0 [ 2028.006316] ? may_open_dev+0xf0/0xf0 [ 2028.007150] ? rwlock_bug.part.0+0x90/0x90 [ 2028.008047] ? _raw_spin_unlock+0x1a/0x30 [ 2028.008899] ? alloc_fd+0x2e7/0x670 [ 2028.009693] do_sys_openat2+0x171/0x4d0 [ 2028.010520] ? build_open_flags+0x6f0/0x6f0 [ 2028.011421] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2028.012425] ? wait_for_completion_io+0x270/0x270 [ 2028.013446] __x64_sys_openat+0x13f/0x1f0 [ 2028.014305] ? __ia32_sys_open+0x1c0/0x1c0 [ 2028.015174] ? ksys_write+0x1a9/0x260 [ 2028.015988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2028.017070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.018145] do_syscall_64+0x33/0x40 [ 2028.018946] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2028.019998] RIP: 0033:0x7f04f6dcfa04 [ 2028.020777] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2028.024539] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2028.026140] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2028.027626] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2028.029093] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2028.030560] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2028.032042] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:35:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xb00, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 08:35:21 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 18) 08:35:21 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 8) [ 2028.161389] FAULT_INJECTION: forcing a failure. [ 2028.161389] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.164019] CPU: 0 PID: 27387 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2028.165501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2028.167280] Call Trace: [ 2028.167858] dump_stack+0x107/0x167 [ 2028.168645] should_fail.cold+0x5/0xa [ 2028.169468] ? proc_self_get_link+0x18b/0x200 [ 2028.170436] should_failslab+0x5/0x20 [ 2028.171259] kmem_cache_alloc_trace+0x55/0x320 [ 2028.172249] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2028.173209] proc_self_get_link+0x18b/0x200 [ 2028.174143] step_into+0x1595/0x1ce0 [ 2028.174967] ? lookup_fast+0x6e0/0x6e0 [ 2028.175802] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2028.176788] walk_component+0x171/0x6a0 [ 2028.177642] ? trace_hardirqs_on+0x5b/0x180 [ 2028.178555] ? handle_dots.part.0+0x15c0/0x15c0 [ 2028.179567] ? security_inode_permission+0xcb/0x100 [ 2028.180647] link_path_walk.part.0+0x699/0xbf0 [ 2028.181649] ? walk_component+0x6a0/0x6a0 [ 2028.182525] ? percpu_counter_add_batch+0x8b/0x140 [ 2028.183607] path_openat+0x25d/0x2770 [ 2028.184432] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2028.185511] ? path_lookupat+0x860/0x860 [ 2028.186391] ? perf_trace_lock+0x2bd/0x490 [ 2028.187304] ? lock_acquire+0x197/0x470 [ 2028.188148] ? find_held_lock+0x2c/0x110 [ 2028.189021] ? __lockdep_reset_lock+0x180/0x180 [ 2028.190049] do_filp_open+0x190/0x3e0 [ 2028.190868] ? may_open_dev+0xf0/0xf0 [ 2028.191718] ? rwlock_bug.part.0+0x90/0x90 [ 2028.192643] ? _raw_spin_unlock+0x1a/0x30 [ 2028.193540] ? alloc_fd+0x2e7/0x670 [ 2028.194353] do_sys_openat2+0x171/0x4d0 [ 2028.195227] ? build_open_flags+0x6f0/0x6f0 [ 2028.196154] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2028.197185] ? wait_for_completion_io+0x270/0x270 [ 2028.198230] __x64_sys_openat+0x13f/0x1f0 [ 2028.199128] ? __ia32_sys_open+0x1c0/0x1c0 [ 2028.200017] ? ksys_write+0x1a9/0x260 [ 2028.200849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2028.201969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.203073] do_syscall_64+0x33/0x40 [ 2028.203871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2028.204967] RIP: 0033:0x7f41dcffda04 [ 2028.205752] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2028.209645] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2028.211275] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2028.212792] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2028.214296] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2028.215823] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2028.217341] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 2028.223168] FAULT_INJECTION: forcing a failure. [ 2028.223168] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.225560] CPU: 1 PID: 27384 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2028.227001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2028.228705] Call Trace: [ 2028.229244] dump_stack+0x107/0x167 [ 2028.230009] should_fail.cold+0x5/0xa [ 2028.230797] ? percpu_ref_init+0xd8/0x3d0 [ 2028.231659] should_failslab+0x5/0x20 [ 2028.232444] kmem_cache_alloc_trace+0x55/0x320 [ 2028.233391] ? io_async_queue_proc+0x80/0x80 [ 2028.234294] percpu_ref_init+0xd8/0x3d0 [ 2028.235133] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2028.236251] io_uring_setup+0x14f6/0x2980 [ 2028.237131] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2028.238180] ? wait_for_completion_io+0x270/0x270 [ 2028.239207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2028.240291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.241357] do_syscall_64+0x33/0x40 [ 2028.242132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2028.243205] RIP: 0033:0x7f12dae86b19 [ 2028.243974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.247779] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2028.249358] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2028.250838] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2028.252322] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2028.253790] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2028.255266] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:35:36 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f0000000040)=""/104, 0x68) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x80, 0x4, "6bdb11", "6a349d", 0xa0, 0x4, 0x3f, @none, 0x5, 0x2, 0x40, 0x3f, 0xc0, 0x0, 0x9}}}, 0x1d) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10044001}, 0x0) write(r3, &(0x7f0000000100)="aa31861d887db371625dfab35184cff182344a27ba9a4c51d9dd1ed540e59b9efa9e61db38204bc4b171ba7966c8d0810643b062f76a042e85a5f511e9f59d78becca661b780be03d4e27b35a644d86192ac561e9e2451a740def78d36b948af5f7ba8e18e26a2df656a8a0c0764", 0x6e) 08:35:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf00, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:36 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 9) 08:35:36 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 10) 08:35:36 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 08:35:36 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 19) 08:35:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x10, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2043.581874] FAULT_INJECTION: forcing a failure. [ 2043.581874] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.584365] CPU: 1 PID: 27412 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2043.585831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.587403] FAULT_INJECTION: forcing a failure. [ 2043.587403] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.587593] Call Trace: [ 2043.587620] dump_stack+0x107/0x167 [ 2043.587649] should_fail.cold+0x5/0xa [ 2043.587668] ? find_held_lock+0x2c/0x110 [ 2043.593163] ? create_object.isra.0+0x3a/0xa30 [ 2043.594133] should_failslab+0x5/0x20 [ 2043.594930] kmem_cache_alloc+0x5b/0x310 [ 2043.595809] ? __task_pid_nr_ns+0x1b8/0x500 [ 2043.596732] create_object.isra.0+0x3a/0xa30 [ 2043.597666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2043.598739] kmem_cache_alloc_trace+0x151/0x320 [ 2043.599729] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2043.600681] proc_self_get_link+0x18b/0x200 [ 2043.601593] step_into+0x1595/0x1ce0 [ 2043.602390] ? lookup_fast+0x6e0/0x6e0 [ 2043.603227] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2043.604203] walk_component+0x171/0x6a0 [ 2043.605043] ? trace_hardirqs_on+0x5b/0x180 [ 2043.605960] ? handle_dots.part.0+0x15c0/0x15c0 [ 2043.606951] ? security_inode_permission+0xcb/0x100 [ 2043.608029] link_path_walk.part.0+0x699/0xbf0 [ 2043.609008] ? walk_component+0x6a0/0x6a0 [ 2043.609886] ? percpu_counter_add_batch+0x8b/0x140 [ 2043.610937] path_openat+0x25d/0x2770 [ 2043.611766] ? path_lookupat+0x860/0x860 [ 2043.612630] ? perf_trace_lock+0xac/0x490 [ 2043.613503] ? lock_acquire+0x197/0x470 [ 2043.614344] ? find_held_lock+0x2c/0x110 [ 2043.615219] ? __lockdep_reset_lock+0x180/0x180 [ 2043.616216] do_filp_open+0x190/0x3e0 [ 2043.617022] ? may_open_dev+0xf0/0xf0 [ 2043.617842] ? rwlock_bug.part.0+0x90/0x90 [ 2043.618747] ? _raw_spin_unlock+0x1a/0x30 [ 2043.619643] ? alloc_fd+0x2e7/0x670 [ 2043.620428] do_sys_openat2+0x171/0x4d0 [ 2043.621271] ? build_open_flags+0x6f0/0x6f0 [ 2043.622178] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2043.623214] ? wait_for_completion_io+0x270/0x270 [ 2043.624241] __x64_sys_openat+0x13f/0x1f0 [ 2043.625125] ? __ia32_sys_open+0x1c0/0x1c0 [ 2043.626022] ? ksys_write+0x1a9/0x260 [ 2043.627058] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2043.628484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2043.629884] do_syscall_64+0x33/0x40 [ 2043.630902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2043.632249] RIP: 0033:0x7f41dcffda04 [ 2043.633035] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2043.636987] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2043.638788] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2043.640306] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2043.641807] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2043.643324] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2043.644834] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 2043.646380] CPU: 0 PID: 27415 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2043.647928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.649703] Call Trace: [ 2043.650293] dump_stack+0x107/0x167 [ 2043.651096] should_fail.cold+0x5/0xa [ 2043.651941] ? __d_alloc+0x2a/0x990 [ 2043.652729] should_failslab+0x5/0x20 [ 2043.653551] kmem_cache_alloc+0x5b/0x310 [ 2043.654442] __d_alloc+0x2a/0x990 [ 2043.655211] d_alloc+0x46/0x240 [ 2043.655935] d_alloc_parallel+0xe9/0x1a30 [ 2043.656836] ? __lock_acquire+0x1657/0x5b00 [ 2043.657807] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2043.658694] ? lock_acquire+0x197/0x470 [ 2043.659557] ? find_held_lock+0x2c/0x110 [ 2043.660438] ? lockdep_init_map_type+0x2c7/0x780 [ 2043.661462] ? lockdep_init_map_type+0x2c7/0x780 [ 2043.662506] __lookup_slow+0x193/0x490 [ 2043.663353] ? lookup_open.isra.0+0x1270/0x1270 [ 2043.664405] ? selinux_inode_permission+0x401/0x640 [ 2043.665479] ? selinux_path_notify+0x4d0/0x4d0 [ 2043.666469] walk_component+0x41e/0x6a0 [ 2043.667335] ? handle_dots.part.0+0x15c0/0x15c0 [ 2043.668347] ? security_inode_permission+0xcb/0x100 [ 2043.669416] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2043.670395] link_path_walk.part.0+0x699/0xbf0 [ 2043.671409] ? walk_component+0x6a0/0x6a0 [ 2043.672287] ? percpu_counter_add_batch+0x8b/0x140 [ 2043.673370] path_openat+0x25d/0x2770 [ 2043.674202] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2043.675278] ? path_lookupat+0x860/0x860 [ 2043.676145] ? perf_trace_lock+0x2bd/0x490 [ 2043.677042] ? lock_acquire+0x197/0x470 [ 2043.677902] ? find_held_lock+0x2c/0x110 [ 2043.678781] ? __lockdep_reset_lock+0x180/0x180 [ 2043.679802] do_filp_open+0x190/0x3e0 [ 2043.680613] ? may_open_dev+0xf0/0xf0 [ 2043.681465] ? simple_attr_release+0x50/0x50 [ 2043.682447] ? _raw_spin_unlock+0x1a/0x30 [ 2043.683493] ? alloc_fd+0x2e7/0x670 [ 2043.684301] do_sys_openat2+0x171/0x4d0 [ 2043.685161] ? build_open_flags+0x6f0/0x6f0 [ 2043.686074] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2043.687124] ? wait_for_completion_io+0x270/0x270 [ 2043.688178] __x64_sys_openat+0x13f/0x1f0 [ 2043.689057] ? __ia32_sys_open+0x1c0/0x1c0 [ 2043.689944] ? ksys_write+0x1a9/0x260 [ 2043.690769] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2043.691897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2043.693004] do_syscall_64+0x33/0x40 [ 2043.693800] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2043.694884] RIP: 0033:0x7f04f6dcfa04 [ 2043.695687] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2043.699565] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2043.701172] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2043.702668] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2043.704194] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2043.705697] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2043.707231] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2043.710815] FAULT_INJECTION: forcing a failure. [ 2043.710815] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.713954] CPU: 1 PID: 27411 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2043.715808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.718011] Call Trace: [ 2043.718734] dump_stack+0x107/0x167 [ 2043.719739] should_fail.cold+0x5/0xa [ 2043.720766] ? create_object.isra.0+0x3a/0xa30 [ 2043.722009] should_failslab+0x5/0x20 [ 2043.723039] kmem_cache_alloc+0x5b/0x310 [ 2043.724175] create_object.isra.0+0x3a/0xa30 [ 2043.725377] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2043.726769] kmem_cache_alloc_trace+0x151/0x320 [ 2043.728062] ? io_async_queue_proc+0x80/0x80 [ 2043.729256] percpu_ref_init+0xd8/0x3d0 [ 2043.730347] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2043.731882] io_uring_setup+0x14f6/0x2980 [ 2043.732944] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2043.734214] ? wait_for_completion_io+0x270/0x270 [ 2043.735476] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2043.736676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2043.737766] do_syscall_64+0x33/0x40 [ 2043.738540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2043.739623] RIP: 0033:0x7f12dae86b19 [ 2043.740412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2043.744308] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2043.745920] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2043.747430] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2043.748935] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2043.750441] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2043.751955] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:35:37 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 10) 08:35:37 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0x4, 0x7fffffff}) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000200)="d3de654bac9029fc1c99e7a4600dd6ded82c19873c18a46233bce5dda7d113912a0853e47b88f2195fa002b3ade384c8e812f7bc333e3222744178f6823a7cf4652c5330aace3db70a018c231287c9c92b956c27cc95b97c54947d1dba7a047ca399622c944e9f5f1debf34954c0ed317b3db5edc3cba51774851e30fb81e8") r2 = syz_io_uring_setup(0x4d4b, &(0x7f0000000140), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/96, 0x60) [ 2043.859745] FAULT_INJECTION: forcing a failure. [ 2043.859745] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.862264] CPU: 1 PID: 27424 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2043.863751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.865518] Call Trace: [ 2043.866078] dump_stack+0x107/0x167 [ 2043.866858] should_fail.cold+0x5/0xa [ 2043.867671] ? __d_alloc+0x2a/0x990 [ 2043.868445] should_failslab+0x5/0x20 [ 2043.869260] kmem_cache_alloc+0x5b/0x310 [ 2043.870122] __d_alloc+0x2a/0x990 [ 2043.870862] ? __lock_acquire+0xbb1/0x5b00 [ 2043.871768] d_alloc+0x46/0x240 [ 2043.872474] d_alloc_parallel+0xe9/0x1a30 [ 2043.873353] ? __lock_acquire+0x1657/0x5b00 [ 2043.874285] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2043.875170] ? lock_acquire+0x197/0x470 [ 2043.876016] ? find_held_lock+0x2c/0x110 [ 2043.876871] ? lockdep_init_map_type+0x2c7/0x780 [ 2043.877882] ? lockdep_init_map_type+0x2c7/0x780 [ 2043.878896] __lookup_slow+0x193/0x490 [ 2043.879742] ? lookup_open.isra.0+0x1270/0x1270 [ 2043.880744] ? selinux_inode_permission+0x401/0x640 08:35:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x1100, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:37 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 1) [ 2043.881806] ? selinux_path_notify+0x4d0/0x4d0 [ 2043.882943] walk_component+0x41e/0x6a0 [ 2043.883794] ? handle_dots.part.0+0x15c0/0x15c0 [ 2043.884786] ? security_inode_permission+0xcb/0x100 [ 2043.885840] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2043.886801] link_path_walk.part.0+0x699/0xbf0 [ 2043.887783] ? walk_component+0x6a0/0x6a0 [ 2043.888659] ? percpu_counter_add_batch+0x8b/0x140 [ 2043.889715] path_openat+0x25d/0x2770 [ 2043.890523] ? path_lookupat+0x860/0x860 [ 2043.891397] ? perf_trace_lock+0xac/0x490 [ 2043.892267] ? lock_acquire+0x197/0x470 [ 2043.893114] ? find_held_lock+0x2c/0x110 [ 2043.893989] ? __lockdep_reset_lock+0x180/0x180 [ 2043.894984] do_filp_open+0x190/0x3e0 [ 2043.895801] ? may_open_dev+0xf0/0xf0 [ 2043.896624] ? simple_attr_release+0x50/0x50 [ 2043.897562] ? _raw_spin_unlock+0x1a/0x30 [ 2043.898440] ? alloc_fd+0x2e7/0x670 [ 2043.899228] do_sys_openat2+0x171/0x4d0 [ 2043.900072] ? build_open_flags+0x6f0/0x6f0 [ 2043.900982] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2043.901998] ? wait_for_completion_io+0x270/0x270 [ 2043.903024] __x64_sys_openat+0x13f/0x1f0 [ 2043.903910] ? __ia32_sys_open+0x1c0/0x1c0 [ 2043.904790] ? ksys_write+0x1a9/0x260 [ 2043.905607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2043.906729] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2043.907822] do_syscall_64+0x33/0x40 [ 2043.908611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2043.909691] RIP: 0033:0x7f41dcffda04 [ 2043.910477] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2043.914319] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2043.915926] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2043.917444] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2043.918955] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2043.920470] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2043.921973] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 08:35:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x11, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2043.958614] FAULT_INJECTION: forcing a failure. [ 2043.958614] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.961114] CPU: 0 PID: 27431 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2043.962600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.964390] Call Trace: [ 2043.964961] dump_stack+0x107/0x167 [ 2043.965741] should_fail.cold+0x5/0xa [ 2043.966557] ? getname_flags.part.0+0x50/0x4f0 [ 2043.967545] should_failslab+0x5/0x20 [ 2043.968356] kmem_cache_alloc+0x5b/0x310 [ 2043.969237] getname_flags.part.0+0x50/0x4f0 [ 2043.970191] getname+0x8e/0xd0 [ 2043.970886] do_sys_openat2+0xf9/0x4d0 [ 2043.971732] ? build_open_flags+0x6f0/0x6f0 [ 2043.972642] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2043.973672] ? wait_for_completion_io+0x270/0x270 [ 2043.974717] __x64_sys_openat+0x13f/0x1f0 [ 2043.975604] ? __ia32_sys_open+0x1c0/0x1c0 [ 2043.976495] ? ksys_write+0x1a9/0x260 [ 2043.977326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2043.978444] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2043.979533] do_syscall_64+0x33/0x40 [ 2043.980327] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2043.981416] RIP: 0033:0x7efd9561da04 [ 2043.982218] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2043.986137] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2043.987774] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2043.989283] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2043.990779] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2043.992302] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2043.993808] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:35:37 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:37 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 20) [ 2044.075492] FAULT_INJECTION: forcing a failure. [ 2044.075492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2044.078330] CPU: 0 PID: 27443 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2044.079807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2044.081570] Call Trace: [ 2044.082153] dump_stack+0x107/0x167 [ 2044.082963] should_fail.cold+0x5/0xa [ 2044.083837] _copy_to_user+0x2e/0x180 [ 2044.084681] io_uring_setup+0x11b5/0x2980 [ 2044.085629] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2044.086719] ? wait_for_completion_io+0x270/0x270 [ 2044.087876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2044.088999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2044.090131] do_syscall_64+0x33/0x40 [ 2044.090939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2044.092042] RIP: 0033:0x7f12dae86b19 [ 2044.092845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2044.096764] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2044.098395] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2044.099916] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2044.101435] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2044.102957] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2044.104473] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x13, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:54 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 11) 08:35:54 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 11) 08:35:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 21) 08:35:54 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 2) 08:35:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x1300, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x40}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) [ 2061.185457] FAULT_INJECTION: forcing a failure. [ 2061.185457] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.188419] CPU: 0 PID: 27454 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2061.190200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.192309] Call Trace: [ 2061.193096] dump_stack+0x107/0x167 [ 2061.194301] should_fail.cold+0x5/0xa [ 2061.195568] ? create_object.isra.0+0x3a/0xa30 [ 2061.197059] should_failslab+0x5/0x20 [ 2061.198299] kmem_cache_alloc+0x5b/0x310 [ 2061.199583] create_object.isra.0+0x3a/0xa30 [ 2061.200800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2061.202174] kmem_cache_alloc+0x159/0x310 [ 2061.203283] __d_alloc+0x2a/0x990 [ 2061.204254] d_alloc+0x46/0x240 [ 2061.205149] d_alloc_parallel+0xe9/0x1a30 [ 2061.206251] ? __lock_acquire+0x1657/0x5b00 [ 2061.207447] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2061.208548] ? lock_acquire+0x197/0x470 [ 2061.209610] ? find_held_lock+0x2c/0x110 [ 2061.210756] ? lockdep_init_map_type+0x2c7/0x780 [ 2061.212018] ? lockdep_init_map_type+0x2c7/0x780 [ 2061.213288] __lookup_slow+0x193/0x490 [ 2061.214299] ? lookup_open.isra.0+0x1270/0x1270 [ 2061.215578] ? selinux_inode_permission+0x401/0x640 [ 2061.216940] ? selinux_path_notify+0x4d0/0x4d0 [ 2061.218154] walk_component+0x41e/0x6a0 [ 2061.219206] ? handle_dots.part.0+0x15c0/0x15c0 [ 2061.220392] ? security_inode_permission+0xcb/0x100 [ 2061.221500] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2061.222506] link_path_walk.part.0+0x699/0xbf0 [ 2061.223551] ? walk_component+0x6a0/0x6a0 [ 2061.224471] ? percpu_counter_add_batch+0x8b/0x140 [ 2061.225589] path_openat+0x25d/0x2770 [ 2061.226451] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2061.227599] ? path_lookupat+0x860/0x860 [ 2061.228504] ? perf_trace_lock+0x2bd/0x490 [ 2061.229455] ? lock_acquire+0x197/0x470 [ 2061.230327] ? find_held_lock+0x2c/0x110 [ 2061.231233] ? __lockdep_reset_lock+0x180/0x180 [ 2061.232284] do_filp_open+0x190/0x3e0 [ 2061.233127] ? may_open_dev+0xf0/0xf0 [ 2061.233976] ? simple_attr_release+0x50/0x50 [ 2061.234942] ? _raw_spin_unlock+0x1a/0x30 [ 2061.235846] ? alloc_fd+0x2e7/0x670 [ 2061.236663] do_sys_openat2+0x171/0x4d0 [ 2061.237546] ? build_open_flags+0x6f0/0x6f0 [ 2061.238482] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2061.239543] ? wait_for_completion_io+0x270/0x270 [ 2061.240611] __x64_sys_openat+0x13f/0x1f0 [ 2061.241525] ? __ia32_sys_open+0x1c0/0x1c0 [ 2061.242434] ? ksys_write+0x1a9/0x260 [ 2061.243286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2061.244433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2061.245590] do_syscall_64+0x33/0x40 [ 2061.246404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2061.247528] RIP: 0033:0x7f41dcffda04 [ 2061.248338] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2061.252324] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2061.253995] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2061.255570] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2061.257132] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2061.258683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2061.260245] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 2061.266565] FAULT_INJECTION: forcing a failure. [ 2061.266565] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.269395] CPU: 1 PID: 27459 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2061.271167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.273328] Call Trace: [ 2061.274011] dump_stack+0x107/0x167 [ 2061.274955] should_fail.cold+0x5/0xa [ 2061.275945] ? create_object.isra.0+0x3a/0xa30 [ 2061.276741] should_failslab+0x5/0x20 [ 2061.277358] kmem_cache_alloc+0x5b/0x310 [ 2061.278015] create_object.isra.0+0x3a/0xa30 [ 2061.278713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2061.279552] kmem_cache_alloc+0x159/0x310 [ 2061.280221] __d_alloc+0x2a/0x990 [ 2061.280775] d_alloc+0x46/0x240 [ 2061.281306] d_alloc_parallel+0xe9/0x1a30 [ 2061.281802] FAULT_INJECTION: forcing a failure. [ 2061.281802] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.281981] ? __lock_acquire+0x1657/0x5b00 [ 2061.285527] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2061.286176] ? lock_acquire+0x197/0x470 [ 2061.286775] ? find_held_lock+0x2c/0x110 [ 2061.287405] ? lockdep_init_map_type+0x2c7/0x780 [ 2061.288119] ? lockdep_init_map_type+0x2c7/0x780 [ 2061.288852] __lookup_slow+0x193/0x490 [ 2061.289439] ? lookup_open.isra.0+0x1270/0x1270 [ 2061.290180] ? selinux_inode_permission+0x401/0x640 [ 2061.290933] ? selinux_path_notify+0x4d0/0x4d0 [ 2061.291634] walk_component+0x41e/0x6a0 [ 2061.292239] ? handle_dots.part.0+0x15c0/0x15c0 [ 2061.292982] ? security_inode_permission+0xcb/0x100 [ 2061.293731] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2061.294418] link_path_walk.part.0+0x699/0xbf0 [ 2061.295119] ? walk_component+0x6a0/0x6a0 [ 2061.295747] ? percpu_counter_add_batch+0x8b/0x140 [ 2061.296499] path_openat+0x25d/0x2770 [ 2061.297079] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2061.297836] ? path_lookupat+0x860/0x860 [ 2061.298445] ? perf_trace_lock+0x2bd/0x490 [ 2061.299080] ? lock_acquire+0x197/0x470 [ 2061.299684] ? find_held_lock+0x2c/0x110 [ 2061.300303] ? __lockdep_reset_lock+0x180/0x180 [ 2061.301044] do_filp_open+0x190/0x3e0 [ 2061.301621] ? may_open_dev+0xf0/0xf0 [ 2061.302220] ? simple_attr_release+0x50/0x50 [ 2061.302943] ? _raw_spin_unlock+0x1a/0x30 [ 2061.303583] ? alloc_fd+0x2e7/0x670 [ 2061.304203] do_sys_openat2+0x171/0x4d0 [ 2061.304871] ? build_open_flags+0x6f0/0x6f0 [ 2061.305709] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2061.306644] ? wait_for_completion_io+0x270/0x270 [ 2061.307610] __x64_sys_openat+0x13f/0x1f0 [ 2061.308428] ? __ia32_sys_open+0x1c0/0x1c0 [ 2061.309248] ? ksys_write+0x1a9/0x260 [ 2061.310019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2061.311041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2061.312078] do_syscall_64+0x33/0x40 [ 2061.312823] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2061.313817] RIP: 0033:0x7f04f6dcfa04 [ 2061.314554] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2061.318150] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2061.319648] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2061.321026] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2061.322413] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2061.323799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2061.325197] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2061.326631] CPU: 0 PID: 27460 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2061.328515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.330726] Call Trace: [ 2061.331459] dump_stack+0x107/0x167 [ 2061.332462] should_fail.cold+0x5/0xa [ 2061.333496] ? __d_alloc+0x2a/0x990 [ 2061.334492] should_failslab+0x5/0x20 [ 2061.335526] kmem_cache_alloc+0x5b/0x310 [ 2061.336673] __d_alloc+0x2a/0x990 [ 2061.337594] ? find_held_lock+0x2c/0x110 [ 2061.338759] d_alloc_pseudo+0x19/0x70 [ 2061.339800] alloc_file_pseudo+0xce/0x250 [ 2061.340899] ? trace_hardirqs_on+0x5b/0x180 [ 2061.342044] ? alloc_file+0x5a0/0x5a0 [ 2061.343169] anon_inode_getfile+0xc8/0x1f0 [ 2061.344340] io_uring_setup+0x138b/0x2980 [ 2061.345488] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2061.346844] ? wait_for_completion_io+0x270/0x270 [ 2061.348265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2061.349651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2061.351073] do_syscall_64+0x33/0x40 [ 2061.352095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2061.353452] RIP: 0033:0x7f12dae86b19 [ 2061.354505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2061.359277] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2061.361285] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2061.363144] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2061.365007] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2061.366862] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2061.368730] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2061.381751] FAULT_INJECTION: forcing a failure. [ 2061.381751] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.383676] CPU: 1 PID: 27468 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2061.384796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.386094] Call Trace: [ 2061.386526] dump_stack+0x107/0x167 [ 2061.387110] should_fail.cold+0x5/0xa [ 2061.387737] ? create_object.isra.0+0x3a/0xa30 [ 2061.388465] should_failslab+0x5/0x20 [ 2061.389079] kmem_cache_alloc+0x5b/0x310 [ 2061.389731] create_object.isra.0+0x3a/0xa30 [ 2061.390437] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2061.391257] kmem_cache_alloc+0x159/0x310 [ 2061.391937] getname_flags.part.0+0x50/0x4f0 [ 2061.392640] getname+0x8e/0xd0 [ 2061.393157] do_sys_openat2+0xf9/0x4d0 [ 2061.393782] ? build_open_flags+0x6f0/0x6f0 [ 2061.394475] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2061.395243] ? wait_for_completion_io+0x270/0x270 [ 2061.396029] __x64_sys_openat+0x13f/0x1f0 [ 2061.396693] ? __ia32_sys_open+0x1c0/0x1c0 [ 2061.397363] ? ksys_write+0x1a9/0x260 [ 2061.397981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2061.398818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2061.399647] do_syscall_64+0x33/0x40 [ 2061.400246] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2061.401062] RIP: 0033:0x7efd9561da04 [ 2061.401655] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2061.404585] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2061.405805] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2061.406942] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2061.408094] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2061.409226] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2061.410357] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:54 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 3) 08:35:54 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 12) 08:35:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:54 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 12) [ 2061.568669] FAULT_INJECTION: forcing a failure. [ 2061.568669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2061.571483] CPU: 0 PID: 27480 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2061.573138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.575094] Call Trace: [ 2061.575761] dump_stack+0x107/0x167 [ 2061.576620] should_fail.cold+0x5/0xa [ 2061.577541] strncpy_from_user+0x34/0x470 [ 2061.578539] getname_flags.part.0+0x95/0x4f0 [ 2061.579602] getname+0x8e/0xd0 [ 2061.580397] do_sys_openat2+0xf9/0x4d0 [ 2061.581351] ? build_open_flags+0x6f0/0x6f0 [ 2061.582403] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2061.583566] ? wait_for_completion_io+0x270/0x270 [ 2061.584710] __x64_sys_openat+0x13f/0x1f0 [ 2061.585673] ? __ia32_sys_open+0x1c0/0x1c0 [ 2061.586653] ? ksys_write+0x1a9/0x260 [ 2061.587566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2061.588782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2061.589978] do_syscall_64+0x33/0x40 [ 2061.590834] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2061.592014] RIP: 0033:0x7efd9561da04 [ 2061.592870] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2061.597087] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2061.598828] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2061.600462] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2061.601695] FAULT_INJECTION: forcing a failure. [ 2061.601695] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.602093] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2061.605968] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2061.607998] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2061.609692] CPU: 1 PID: 27485 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2061.610814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.612134] Call Trace: [ 2061.612559] dump_stack+0x107/0x167 [ 2061.613144] should_fail.cold+0x5/0xa [ 2061.613760] ? proc_alloc_inode+0x18/0x200 [ 2061.614427] should_failslab+0x5/0x20 [ 2061.615031] kmem_cache_alloc+0x5b/0x310 [ 2061.615689] ? find_held_lock+0x2c/0x110 [ 2061.616348] ? proc_free_inode+0x20/0x20 [ 2061.616990] proc_alloc_inode+0x18/0x200 [ 2061.617645] ? proc_free_inode+0x20/0x20 [ 2061.618299] alloc_inode+0x63/0x240 [ 2061.618888] new_inode+0x23/0x250 [ 2061.619455] proc_pid_make_inode+0x22/0x220 [ 2061.620153] proc_pident_instantiate+0x81/0x320 [ 2061.620898] proc_pident_lookup+0x1eb/0x270 [ 2061.621606] __lookup_slow+0x252/0x490 [ 2061.622228] ? lookup_open.isra.0+0x1270/0x1270 [ 2061.622980] ? selinux_inode_permission+0x401/0x640 [ 2061.623779] ? selinux_path_notify+0x4d0/0x4d0 [ 2061.624518] walk_component+0x41e/0x6a0 [ 2061.625145] ? handle_dots.part.0+0x15c0/0x15c0 [ 2061.625885] ? security_inode_permission+0xcb/0x100 [ 2061.626660] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2061.627389] link_path_walk.part.0+0x699/0xbf0 [ 2061.628132] ? walk_component+0x6a0/0x6a0 [ 2061.628792] ? percpu_counter_add_batch+0x8b/0x140 [ 2061.629592] path_openat+0x25d/0x2770 [ 2061.630204] ? path_lookupat+0x860/0x860 [ 2061.630852] ? perf_trace_lock+0xac/0x490 [ 2061.631514] ? lock_acquire+0x197/0x470 [ 2061.632145] ? find_held_lock+0x2c/0x110 [ 2061.632791] ? __lockdep_reset_lock+0x180/0x180 [ 2061.633555] do_filp_open+0x190/0x3e0 [ 2061.634165] ? may_open_dev+0xf0/0xf0 [ 2061.634789] ? simple_attr_release+0x50/0x50 [ 2061.635507] ? _raw_spin_unlock+0x1a/0x30 [ 2061.636165] ? alloc_fd+0x2e7/0x670 [ 2061.636763] do_sys_openat2+0x171/0x4d0 [ 2061.637404] ? build_open_flags+0x6f0/0x6f0 [ 2061.638092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2061.638876] ? wait_for_completion_io+0x270/0x270 [ 2061.639666] __x64_sys_openat+0x13f/0x1f0 [ 2061.640327] ? __ia32_sys_open+0x1c0/0x1c0 [ 2061.641005] ? ksys_write+0x1a9/0x260 [ 2061.641614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2061.642458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2061.643291] do_syscall_64+0x33/0x40 [ 2061.643896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2061.644707] RIP: 0033:0x7f41dcffda04 [ 2061.645308] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2061.648221] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2061.649441] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2061.650583] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2061.651729] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2061.652864] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2061.654021] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 08:35:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x4e02, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:35:55 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 22) 08:35:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x15b, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2061.667894] FAULT_INJECTION: forcing a failure. [ 2061.667894] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.670533] CPU: 0 PID: 27481 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2061.672107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.673959] Call Trace: [ 2061.674547] dump_stack+0x107/0x167 [ 2061.675402] should_fail.cold+0x5/0xa [ 2061.676263] ? proc_alloc_inode+0x18/0x200 [ 2061.677216] should_failslab+0x5/0x20 [ 2061.678073] kmem_cache_alloc+0x5b/0x310 [ 2061.678998] ? find_held_lock+0x2c/0x110 [ 2061.679932] ? proc_free_inode+0x20/0x20 [ 2061.680838] proc_alloc_inode+0x18/0x200 [ 2061.681737] ? proc_free_inode+0x20/0x20 [ 2061.682614] alloc_inode+0x63/0x240 [ 2061.683455] new_inode+0x23/0x250 [ 2061.684241] proc_pid_make_inode+0x22/0x220 [ 2061.685204] proc_pident_instantiate+0x81/0x320 [ 2061.686235] proc_pident_lookup+0x1eb/0x270 [ 2061.687221] __lookup_slow+0x252/0x490 [ 2061.688103] ? lookup_open.isra.0+0x1270/0x1270 [ 2061.689179] ? selinux_inode_permission+0x401/0x640 [ 2061.690289] ? selinux_path_notify+0x4d0/0x4d0 [ 2061.691315] walk_component+0x41e/0x6a0 [ 2061.692217] ? handle_dots.part.0+0x15c0/0x15c0 [ 2061.693254] ? security_inode_permission+0xcb/0x100 [ 2061.694352] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2061.695383] link_path_walk.part.0+0x699/0xbf0 [ 2061.697030] ? walk_component+0x6a0/0x6a0 [ 2061.698330] ? percpu_counter_add_batch+0x8b/0x140 [ 2061.699921] path_openat+0x25d/0x2770 [ 2061.700700] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2061.701702] ? path_lookupat+0x860/0x860 [ 2061.702506] ? perf_trace_lock+0x2bd/0x490 [ 2061.703359] ? lock_acquire+0x197/0x470 [ 2061.704151] ? find_held_lock+0x2c/0x110 [ 2061.704989] ? __lockdep_reset_lock+0x180/0x180 [ 2061.705946] do_filp_open+0x190/0x3e0 [ 2061.706713] ? may_open_dev+0xf0/0xf0 [ 2061.707518] ? simple_attr_release+0x50/0x50 [ 2061.708441] ? _raw_spin_unlock+0x1a/0x30 [ 2061.709270] ? alloc_fd+0x2e7/0x670 [ 2061.710024] do_sys_openat2+0x171/0x4d0 [ 2061.710823] ? build_open_flags+0x6f0/0x6f0 [ 2061.711697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2061.712674] ? wait_for_completion_io+0x270/0x270 [ 2061.713672] __x64_sys_openat+0x13f/0x1f0 [ 2061.714499] ? __ia32_sys_open+0x1c0/0x1c0 [ 2061.715358] ? ksys_write+0x1a9/0x260 [ 2061.716137] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2061.717159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2061.718038] do_syscall_64+0x33/0x40 [ 2061.718684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2061.719566] RIP: 0033:0x7f04f6dcfa04 [ 2061.720211] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2061.723301] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2061.724608] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2061.725825] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2061.727060] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2061.728284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2061.729499] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2061.738531] FAULT_INJECTION: forcing a failure. [ 2061.738531] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.740409] CPU: 1 PID: 27492 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2061.741523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2061.742877] Call Trace: [ 2061.743300] dump_stack+0x107/0x167 [ 2061.743889] should_fail.cold+0x5/0xa [ 2061.744505] ? create_object.isra.0+0x3a/0xa30 [ 2061.745236] should_failslab+0x5/0x20 [ 2061.745847] kmem_cache_alloc+0x5b/0x310 [ 2061.746498] create_object.isra.0+0x3a/0xa30 [ 2061.747204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2061.748023] kmem_cache_alloc+0x159/0x310 [ 2061.748680] __d_alloc+0x2a/0x990 [ 2061.749248] ? find_held_lock+0x2c/0x110 [ 2061.749891] d_alloc_pseudo+0x19/0x70 [ 2061.750504] alloc_file_pseudo+0xce/0x250 [ 2061.751167] ? trace_hardirqs_on+0x5b/0x180 [ 2061.751867] ? alloc_file+0x5a0/0x5a0 [ 2061.752483] anon_inode_getfile+0xc8/0x1f0 [ 2061.753160] io_uring_setup+0x138b/0x2980 [ 2061.753823] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2061.754625] ? wait_for_completion_io+0x270/0x270 [ 2061.755400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2061.756239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2061.757055] do_syscall_64+0x33/0x40 [ 2061.757647] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2061.758468] RIP: 0033:0x7f12dae86b19 [ 2061.759056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2061.761996] RSP: 002b:00007f12d83db108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2061.763216] RAX: ffffffffffffffda RBX: 00007f12daf9a020 RCX: 00007f12dae86b19 [ 2061.764338] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2061.765484] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2061.766614] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2061.767747] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:36:11 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 4) 08:36:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc9}}}, 0x6) 08:36:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:36:11 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 23) 08:36:11 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 13) 08:36:11 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:36:11 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 13) 08:36:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x300, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2077.963645] FAULT_INJECTION: forcing a failure. [ 2077.963645] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.966070] CPU: 0 PID: 27512 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2077.967549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.969307] Call Trace: [ 2077.969883] dump_stack+0x107/0x167 [ 2077.970674] should_fail.cold+0x5/0xa [ 2077.971494] ? __alloc_file+0x21/0x320 [ 2077.972335] should_failslab+0x5/0x20 [ 2077.973147] kmem_cache_alloc+0x5b/0x310 [ 2077.974025] __alloc_file+0x21/0x320 [ 2077.974826] alloc_empty_file+0x6d/0x170 [ 2077.975711] path_openat+0xe6/0x2770 [ 2077.976512] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2077.977576] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2077.978643] ? path_lookupat+0x860/0x860 [ 2077.979525] ? perf_trace_lock+0x2bd/0x490 [ 2077.980434] ? lock_acquire+0x197/0x470 [ 2077.981279] ? find_held_lock+0x2c/0x110 [ 2077.982157] ? __lockdep_reset_lock+0x180/0x180 [ 2077.983159] do_filp_open+0x190/0x3e0 [ 2077.983988] ? may_open_dev+0xf0/0xf0 [ 2077.984817] ? alloc_fd+0x2e7/0x670 [ 2077.985594] ? lock_downgrade+0x6d0/0x6d0 [ 2077.986482] ? do_raw_spin_lock+0x121/0x260 [ 2077.987402] ? rwlock_bug.part.0+0x90/0x90 [ 2077.988337] ? _raw_spin_unlock+0x1a/0x30 [ 2077.989260] ? alloc_fd+0x2e7/0x670 [ 2077.990067] do_sys_openat2+0x171/0x4d0 [ 2077.990928] ? build_open_flags+0x6f0/0x6f0 [ 2077.991856] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2077.992889] ? wait_for_completion_io+0x270/0x270 [ 2077.993938] __x64_sys_openat+0x13f/0x1f0 [ 2077.994824] ? __ia32_sys_open+0x1c0/0x1c0 [ 2077.995372] FAULT_INJECTION: forcing a failure. [ 2077.995372] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.995728] ? ksys_write+0x1a9/0x260 [ 2077.995775] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.000026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.001127] do_syscall_64+0x33/0x40 [ 2078.001924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.003004] RIP: 0033:0x7efd9561da04 [ 2078.003803] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2078.007700] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2078.009319] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2078.010827] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2078.012385] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2078.013902] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2078.015413] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2078.016990] CPU: 1 PID: 27518 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2078.018454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.020220] Call Trace: [ 2078.020781] dump_stack+0x107/0x167 [ 2078.021553] should_fail.cold+0x5/0xa [ 2078.022364] ? create_object.isra.0+0x3a/0xa30 [ 2078.023331] should_failslab+0x5/0x20 [ 2078.024166] kmem_cache_alloc+0x5b/0x310 [ 2078.025037] create_object.isra.0+0x3a/0xa30 [ 2078.025965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2078.027042] kmem_cache_alloc+0x159/0x310 [ 2078.027944] ? find_held_lock+0x2c/0x110 [ 2078.028811] ? proc_free_inode+0x20/0x20 [ 2078.029671] proc_alloc_inode+0x18/0x200 [ 2078.030522] ? proc_free_inode+0x20/0x20 [ 2078.031373] alloc_inode+0x63/0x240 [ 2078.032171] new_inode+0x23/0x250 [ 2078.032910] proc_pid_make_inode+0x22/0x220 [ 2078.033818] proc_pident_instantiate+0x81/0x320 [ 2078.034794] proc_pident_lookup+0x1eb/0x270 [ 2078.035743] __lookup_slow+0x252/0x490 [ 2078.036558] ? lookup_open.isra.0+0x1270/0x1270 [ 2078.037573] ? selinux_inode_permission+0x401/0x640 [ 2078.038644] ? selinux_path_notify+0x4d0/0x4d0 [ 2078.039647] walk_component+0x41e/0x6a0 [ 2078.040483] ? handle_dots.part.0+0x15c0/0x15c0 [ 2078.041464] ? security_inode_permission+0xcb/0x100 [ 2078.042517] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2078.043463] link_path_walk.part.0+0x699/0xbf0 [ 2078.044463] ? walk_component+0x6a0/0x6a0 [ 2078.045330] ? percpu_counter_add_batch+0x8b/0x140 [ 2078.046369] path_openat+0x25d/0x2770 [ 2078.047177] ? path_lookupat+0x860/0x860 [ 2078.048050] ? perf_trace_lock+0xac/0x490 [ 2078.048918] ? lock_acquire+0x197/0x470 [ 2078.049753] ? find_held_lock+0x2c/0x110 [ 2078.050606] ? __lockdep_reset_lock+0x180/0x180 [ 2078.051639] do_filp_open+0x190/0x3e0 [ 2078.052438] ? may_open_dev+0xf0/0xf0 [ 2078.053253] ? simple_attr_release+0x50/0x50 [ 2078.054195] ? _raw_spin_unlock+0x1a/0x30 [ 2078.055066] ? alloc_fd+0x2e7/0x670 [ 2078.055870] do_sys_openat2+0x171/0x4d0 [ 2078.056709] ? build_open_flags+0x6f0/0x6f0 [ 2078.057612] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2078.058621] ? wait_for_completion_io+0x270/0x270 [ 2078.059667] __x64_sys_openat+0x13f/0x1f0 [ 2078.060532] ? __ia32_sys_open+0x1c0/0x1c0 [ 2078.061417] ? ksys_write+0x1a9/0x260 [ 2078.062229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.063337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.064446] do_syscall_64+0x33/0x40 [ 2078.065240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.066305] RIP: 0033:0x7f41dcffda04 [ 2078.067079] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2078.070976] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2078.072593] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2078.074082] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2078.075604] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2078.077103] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2078.078604] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 2078.138684] FAULT_INJECTION: forcing a failure. [ 2078.138684] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.140414] FAULT_INJECTION: forcing a failure. [ 2078.140414] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.141204] CPU: 1 PID: 27529 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2078.144910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.146660] Call Trace: [ 2078.147220] dump_stack+0x107/0x167 [ 2078.148020] should_fail.cold+0x5/0xa [ 2078.148825] ? __alloc_file+0x21/0x320 [ 2078.149648] should_failslab+0x5/0x20 [ 2078.150454] kmem_cache_alloc+0x5b/0x310 [ 2078.151313] __alloc_file+0x21/0x320 [ 2078.152126] alloc_empty_file+0x6d/0x170 [ 2078.152981] alloc_file+0x5e/0x5a0 [ 2078.153734] alloc_file_pseudo+0x16a/0x250 [ 2078.154623] ? alloc_file+0x5a0/0x5a0 [ 2078.155444] anon_inode_getfile+0xc8/0x1f0 [ 2078.156364] io_uring_setup+0x138b/0x2980 [ 2078.157246] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2078.158317] ? wait_for_completion_io+0x270/0x270 [ 2078.159355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.160490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.161582] do_syscall_64+0x33/0x40 [ 2078.162369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.163449] RIP: 0033:0x7f12dae86b19 [ 2078.164268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2078.168175] RSP: 002b:00007f12d83db108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2078.169774] RAX: ffffffffffffffda RBX: 00007f12daf9a020 RCX: 00007f12dae86b19 [ 2078.171270] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2078.172801] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2078.174295] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2078.175823] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2078.177352] CPU: 0 PID: 27530 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2078.178829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.180596] Call Trace: 08:36:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000140)="4cb8175cf7f1734b397ff65a787262a425ff757324decbc3171cfb8dafdcf9e1308dc7cabd9a2ea1569c087714c62d3ff5c29ba629d6a74cea4e085bf3403c208816dca32673970939a538f7b033ce6df39add6f35aa72c2f7f624757064f109bf78741a90f3681a7fcca4cbbe0aa0dd528c1598f64093e62d46e694263794d4facf68afababb1e2421811957a27e95230423c760de3e70d381ba0ecef57f79f5e6d5c97043a4d") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f00000000c0)=""/82, 0x52) [ 2078.181157] dump_stack+0x107/0x167 [ 2078.182119] should_fail.cold+0x5/0xa [ 2078.182933] ? create_object.isra.0+0x3a/0xa30 [ 2078.183910] should_failslab+0x5/0x20 [ 2078.184723] kmem_cache_alloc+0x5b/0x310 [ 2078.185600] create_object.isra.0+0x3a/0xa30 [ 2078.186533] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2078.187629] kmem_cache_alloc+0x159/0x310 [ 2078.188507] ? find_held_lock+0x2c/0x110 [ 2078.189372] ? proc_free_inode+0x20/0x20 [ 2078.190236] proc_alloc_inode+0x18/0x200 [ 2078.191094] ? proc_free_inode+0x20/0x20 [ 2078.191957] alloc_inode+0x63/0x240 [ 2078.192727] new_inode+0x23/0x250 [ 2078.193466] proc_pid_make_inode+0x22/0x220 [ 2078.194384] proc_pident_instantiate+0x81/0x320 [ 2078.195374] proc_pident_lookup+0x1eb/0x270 [ 2078.196310] __lookup_slow+0x252/0x490 [ 2078.197136] ? lookup_open.isra.0+0x1270/0x1270 [ 2078.198151] ? selinux_inode_permission+0x401/0x640 [ 2078.199210] ? selinux_path_notify+0x4d0/0x4d0 [ 2078.200189] walk_component+0x41e/0x6a0 [ 2078.201029] ? handle_dots.part.0+0x15c0/0x15c0 [ 2078.202015] ? security_inode_permission+0xcb/0x100 [ 2078.203076] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2078.204035] link_path_walk.part.0+0x699/0xbf0 [ 2078.205010] ? walk_component+0x6a0/0x6a0 [ 2078.205885] ? percpu_counter_add_batch+0x8b/0x140 [ 2078.206931] path_openat+0x25d/0x2770 [ 2078.207757] ? path_lookupat+0x860/0x860 [ 2078.208617] ? perf_trace_lock+0xac/0x490 [ 2078.209489] ? lock_acquire+0x197/0x470 [ 2078.210335] ? find_held_lock+0x2c/0x110 [ 2078.211195] ? __lockdep_reset_lock+0x180/0x180 [ 2078.212190] do_filp_open+0x190/0x3e0 [ 2078.212994] ? may_open_dev+0xf0/0xf0 [ 2078.213814] ? simple_attr_release+0x50/0x50 [ 2078.214758] ? _raw_spin_unlock+0x1a/0x30 [ 2078.215638] ? alloc_fd+0x2e7/0x670 [ 2078.216420] do_sys_openat2+0x171/0x4d0 [ 2078.217266] ? build_open_flags+0x6f0/0x6f0 [ 2078.218178] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2078.219200] ? wait_for_completion_io+0x270/0x270 [ 2078.220234] __x64_sys_openat+0x13f/0x1f0 [ 2078.221115] ? __ia32_sys_open+0x1c0/0x1c0 [ 2078.222003] ? ksys_write+0x1a9/0x260 [ 2078.222820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.223944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.225042] do_syscall_64+0x33/0x40 [ 2078.225830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.226913] RIP: 0033:0x7f04f6dcfa04 [ 2078.227705] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2078.231574] RSP: 002b:00007f04f4371060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2078.233188] RAX: ffffffffffffffda RBX: 00007f04f6f30020 RCX: 00007f04f6dcfa04 [ 2078.234696] RDX: 0000000000000002 RSI: 00007f04f43710f0 RDI: 00000000ffffff9c [ 2078.236218] RBP: 00007f04f43710f0 R08: 0000000000000000 R09: 00007f04f4370f70 [ 2078.237726] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2078.239232] R13: 00007ffff354a23f R14: 00007f04f4371300 R15: 0000000000022000 08:36:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000140)="da2276165f91a3a17ce265e9cd9ca9a0d1791954442b4772517352d69fe2e025f6f074871c0d4b8c6d51743d4f7af7ff7027429396a60a395647933c638dafa5256bea22f065bece72f14fb7979aa201c9758caac6e28c0a776d586dadf5e0c34feb7107a7e5f2991af64efc1db7f5edef27786d21b6cfd9b6f64f22691aff5e1a5c49013bd67611c26171cf9d3ca3f4d83dfca53fba19c2d1651ea4f2db4adac825ea04cb61d4e0613c59f4232ffd89b6374dfa901a5fa4bca88f7c9f624b6f8d") 08:36:11 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 14) 08:36:11 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 14) 08:36:11 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 24) 08:36:11 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 5) 08:36:11 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2078.393011] FAULT_INJECTION: forcing a failure. [ 2078.393011] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.395632] CPU: 0 PID: 27543 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2078.397113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.398874] Call Trace: [ 2078.399444] dump_stack+0x107/0x167 [ 2078.400239] should_fail.cold+0x5/0xa [ 2078.401054] ? security_inode_alloc+0x34/0x160 [ 2078.402032] should_failslab+0x5/0x20 [ 2078.402848] kmem_cache_alloc+0x5b/0x310 [ 2078.403737] security_inode_alloc+0x34/0x160 [ 2078.404689] inode_init_always+0xa4e/0xd10 [ 2078.405595] ? proc_free_inode+0x20/0x20 [ 2078.405921] FAULT_INJECTION: forcing a failure. [ 2078.405921] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.406467] alloc_inode+0x84/0x240 [ 2078.406492] new_inode+0x23/0x250 [ 2078.406532] proc_pid_make_inode+0x22/0x220 [ 2078.411293] proc_pident_instantiate+0x81/0x320 [ 2078.412309] proc_pident_lookup+0x1eb/0x270 [ 2078.413250] __lookup_slow+0x252/0x490 [ 2078.414093] ? lookup_open.isra.0+0x1270/0x1270 [ 2078.415140] ? selinux_inode_permission+0x401/0x640 [ 2078.416223] ? selinux_path_notify+0x4d0/0x4d0 [ 2078.417212] walk_component+0x41e/0x6a0 [ 2078.418066] ? handle_dots.part.0+0x15c0/0x15c0 [ 2078.419074] ? security_inode_permission+0xcb/0x100 [ 2078.420147] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2078.421125] link_path_walk.part.0+0x699/0xbf0 [ 2078.422125] ? walk_component+0x6a0/0x6a0 [ 2078.423014] ? percpu_counter_add_batch+0x8b/0x140 [ 2078.424096] path_openat+0x25d/0x2770 [ 2078.424927] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2078.426004] ? path_lookupat+0x860/0x860 [ 2078.426879] ? perf_trace_lock+0x2bd/0x490 [ 2078.427793] ? lock_acquire+0x197/0x470 [ 2078.428640] ? find_held_lock+0x2c/0x110 [ 2078.429515] ? __lockdep_reset_lock+0x180/0x180 [ 2078.430523] do_filp_open+0x190/0x3e0 [ 2078.431340] ? may_open_dev+0xf0/0xf0 [ 2078.432190] ? simple_attr_release+0x50/0x50 [ 2078.433156] ? _raw_spin_unlock+0x1a/0x30 [ 2078.434041] ? alloc_fd+0x2e7/0x670 [ 2078.434847] do_sys_openat2+0x171/0x4d0 [ 2078.435716] ? build_open_flags+0x6f0/0x6f0 [ 2078.436635] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2078.437669] ? wait_for_completion_io+0x270/0x270 [ 2078.438717] __x64_sys_openat+0x13f/0x1f0 [ 2078.439617] ? __ia32_sys_open+0x1c0/0x1c0 [ 2078.440510] ? ksys_write+0x1a9/0x260 [ 2078.441338] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.442455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.443572] do_syscall_64+0x33/0x40 [ 2078.444371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.445462] RIP: 0033:0x7f41dcffda04 [ 2078.446264] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2078.450210] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2078.451849] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2078.453377] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2078.454898] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2078.456438] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2078.457967] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 2078.459576] CPU: 1 PID: 27545 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2078.461350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.463463] Call Trace: [ 2078.464178] dump_stack+0x107/0x167 [ 2078.465116] should_fail.cold+0x5/0xa [ 2078.466100] ? security_inode_alloc+0x34/0x160 [ 2078.467240] should_failslab+0x5/0x20 [ 2078.468224] kmem_cache_alloc+0x5b/0x310 [ 2078.469264] security_inode_alloc+0x34/0x160 [ 2078.470369] inode_init_always+0xa4e/0xd10 [ 2078.471431] ? proc_free_inode+0x20/0x20 [ 2078.472488] alloc_inode+0x84/0x240 [ 2078.473403] new_inode+0x23/0x250 [ 2078.474282] proc_pid_make_inode+0x22/0x220 [ 2078.475380] proc_pident_instantiate+0x81/0x320 [ 2078.476596] proc_pident_lookup+0x1eb/0x270 [ 2078.477702] __lookup_slow+0x252/0x490 [ 2078.478683] ? lookup_open.isra.0+0x1270/0x1270 [ 2078.479934] ? selinux_inode_permission+0x401/0x640 [ 2078.481223] ? selinux_path_notify+0x4d0/0x4d0 [ 2078.482399] walk_component+0x41e/0x6a0 [ 2078.483422] ? handle_dots.part.0+0x15c0/0x15c0 [ 2078.484646] ? security_inode_permission+0xcb/0x100 [ 2078.485912] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2078.487071] link_path_walk.part.0+0x699/0xbf0 [ 2078.488177] ? walk_component+0x6a0/0x6a0 [ 2078.489059] ? percpu_counter_add_batch+0x8b/0x140 [ 2078.490120] path_openat+0x25d/0x2770 [ 2078.490942] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2078.492037] ? path_lookupat+0x860/0x860 [ 2078.492902] ? perf_trace_lock+0x2bd/0x490 [ 2078.493800] ? lock_acquire+0x197/0x470 [ 2078.494641] ? find_held_lock+0x2c/0x110 [ 2078.495512] ? __lockdep_reset_lock+0x180/0x180 [ 2078.496536] do_filp_open+0x190/0x3e0 [ 2078.497344] ? may_open_dev+0xf0/0xf0 [ 2078.498183] ? simple_attr_release+0x50/0x50 [ 2078.499147] ? _raw_spin_unlock+0x1a/0x30 [ 2078.500060] ? alloc_fd+0x2e7/0x670 [ 2078.500865] do_sys_openat2+0x171/0x4d0 [ 2078.501715] ? build_open_flags+0x6f0/0x6f0 [ 2078.502625] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2078.503676] ? wait_for_completion_io+0x270/0x270 [ 2078.504718] __x64_sys_openat+0x13f/0x1f0 [ 2078.505598] ? __ia32_sys_open+0x1c0/0x1c0 [ 2078.506487] ? ksys_write+0x1a9/0x260 [ 2078.507315] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.508453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.509561] do_syscall_64+0x33/0x40 [ 2078.510354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.511442] RIP: 0033:0x7f04f6dcfa04 [ 2078.512259] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2078.516154] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2078.517759] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2078.519259] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2078.520782] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2078.522284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2078.523809] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2078.542990] FAULT_INJECTION: forcing a failure. [ 2078.542990] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.545458] CPU: 0 PID: 27550 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2078.546932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.548682] Call Trace: [ 2078.549243] dump_stack+0x107/0x167 [ 2078.550020] should_fail.cold+0x5/0xa [ 2078.550839] ? create_object.isra.0+0x3a/0xa30 [ 2078.551814] should_failslab+0x5/0x20 [ 2078.552623] kmem_cache_alloc+0x5b/0x310 [ 2078.553514] create_object.isra.0+0x3a/0xa30 [ 2078.554447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2078.555536] kmem_cache_alloc+0x159/0x310 [ 2078.556438] __alloc_file+0x21/0x320 [ 2078.557237] alloc_empty_file+0x6d/0x170 [ 2078.558100] path_openat+0xe6/0x2770 [ 2078.558891] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2078.559955] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2078.561014] ? path_lookupat+0x860/0x860 [ 2078.561865] ? perf_trace_lock+0x2bd/0x490 [ 2078.562759] ? lock_acquire+0x197/0x470 [ 2078.563613] ? find_held_lock+0x2c/0x110 [ 2078.564498] ? __lockdep_reset_lock+0x180/0x180 [ 2078.565495] do_filp_open+0x190/0x3e0 [ 2078.566313] ? may_open_dev+0xf0/0xf0 [ 2078.567139] ? alloc_fd+0x2e7/0x670 [ 2078.567941] ? lock_downgrade+0x6d0/0x6d0 [ 2078.568817] ? do_raw_spin_lock+0x121/0x260 [ 2078.569730] ? rwlock_bug.part.0+0x90/0x90 [ 2078.570637] ? _raw_spin_unlock+0x1a/0x30 [ 2078.571526] ? alloc_fd+0x2e7/0x670 [ 2078.572322] do_sys_openat2+0x171/0x4d0 [ 2078.573186] ? build_open_flags+0x6f0/0x6f0 [ 2078.574100] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2078.575139] ? wait_for_completion_io+0x270/0x270 [ 2078.576189] __x64_sys_openat+0x13f/0x1f0 [ 2078.577072] ? __ia32_sys_open+0x1c0/0x1c0 [ 2078.577971] ? ksys_write+0x1a9/0x260 [ 2078.578799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.579919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.581027] do_syscall_64+0x33/0x40 [ 2078.581813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.582897] RIP: 0033:0x7efd9561da04 [ 2078.583690] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2078.587565] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2078.589183] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2078.590688] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2078.592216] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2078.592882] FAULT_INJECTION: forcing a failure. [ 2078.592882] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.593716] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2078.593731] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2078.599208] CPU: 1 PID: 27553 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2078.600670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2078.602403] Call Trace: [ 2078.602958] dump_stack+0x107/0x167 [ 2078.603753] should_fail.cold+0x5/0xa [ 2078.604557] ? create_object.isra.0+0x3a/0xa30 [ 2078.605511] should_failslab+0x5/0x20 [ 2078.606312] kmem_cache_alloc+0x5b/0x310 [ 2078.607184] create_object.isra.0+0x3a/0xa30 [ 2078.608127] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2078.609210] kmem_cache_alloc+0x159/0x310 [ 2078.610080] __alloc_file+0x21/0x320 [ 2078.610862] alloc_empty_file+0x6d/0x170 [ 2078.611760] alloc_file+0x5e/0x5a0 [ 2078.612507] alloc_file_pseudo+0x16a/0x250 [ 2078.613397] ? alloc_file+0x5a0/0x5a0 [ 2078.614209] anon_inode_getfile+0xc8/0x1f0 [ 2078.615101] io_uring_setup+0x138b/0x2980 [ 2078.616007] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2078.617068] ? wait_for_completion_io+0x270/0x270 [ 2078.618100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2078.619207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2078.620320] do_syscall_64+0x33/0x40 [ 2078.621100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2078.622163] RIP: 0033:0x7f12dae86b19 [ 2078.622942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2078.626828] RSP: 002b:00007f12d83db108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2078.628443] RAX: ffffffffffffffda RBX: 00007f12daf9a020 RCX: 00007f12dae86b19 [ 2078.629931] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2078.631410] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2078.632930] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2078.634425] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:36:28 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 15) 08:36:28 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xf4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xfe}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xc8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r1, &(0x7f00000000c0)=""/96, 0x60) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_PAGE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x80}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044000}, 0x880) 08:36:28 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 25) 08:36:28 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 15) 08:36:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x500, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:36:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x20000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:36:28 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:36:28 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 6) [ 2094.945358] FAULT_INJECTION: forcing a failure. [ 2094.945358] name failslab, interval 1, probability 0, space 0, times 0 [ 2094.948289] CPU: 0 PID: 27561 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2094.950070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2094.952213] Call Trace: [ 2094.952909] dump_stack+0x107/0x167 [ 2094.953861] should_fail.cold+0x5/0xa [ 2094.954855] ? create_object.isra.0+0x3a/0xa30 [ 2094.956040] should_failslab+0x5/0x20 [ 2094.957039] kmem_cache_alloc+0x5b/0x310 [ 2094.958111] create_object.isra.0+0x3a/0xa30 [ 2094.959240] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2094.960575] kmem_cache_alloc+0x159/0x310 [ 2094.961658] security_inode_alloc+0x34/0x160 [ 2094.962794] inode_init_always+0xa4e/0xd10 [ 2094.963894] ? proc_free_inode+0x20/0x20 [ 2094.964952] alloc_inode+0x84/0x240 [ 2094.965902] new_inode+0x23/0x250 [ 2094.966809] proc_pid_make_inode+0x22/0x220 [ 2094.967946] proc_pident_instantiate+0x81/0x320 [ 2094.969157] proc_pident_lookup+0x1eb/0x270 [ 2094.970294] __lookup_slow+0x252/0x490 [ 2094.971302] ? lookup_open.isra.0+0x1270/0x1270 [ 2094.972576] ? selinux_inode_permission+0x401/0x640 [ 2094.973872] ? selinux_path_notify+0x4d0/0x4d0 [ 2094.975061] walk_component+0x41e/0x6a0 [ 2094.976103] ? handle_dots.part.0+0x15c0/0x15c0 [ 2094.977316] ? security_inode_permission+0xcb/0x100 [ 2094.978598] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2094.979790] link_path_walk.part.0+0x699/0xbf0 [ 2094.980705] FAULT_INJECTION: forcing a failure. [ 2094.980705] name failslab, interval 1, probability 0, space 0, times 0 [ 2094.980951] ? walk_component+0x6a0/0x6a0 [ 2094.984224] ? percpu_counter_add_batch+0x8b/0x140 [ 2094.985370] path_openat+0x25d/0x2770 [ 2094.986261] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2094.987416] ? path_lookupat+0x860/0x860 [ 2094.988353] ? perf_trace_lock+0x2bd/0x490 [ 2094.989330] ? lock_acquire+0x197/0x470 [ 2094.990230] ? find_held_lock+0x2c/0x110 [ 2094.991167] ? __lockdep_reset_lock+0x180/0x180 [ 2094.992253] do_filp_open+0x190/0x3e0 [ 2094.993126] ? may_open_dev+0xf0/0xf0 [ 2094.994033] ? simple_attr_release+0x50/0x50 [ 2094.995074] ? _raw_spin_unlock+0x1a/0x30 [ 2094.996024] ? alloc_fd+0x2e7/0x670 [ 2094.996888] do_sys_openat2+0x171/0x4d0 [ 2094.997805] ? build_open_flags+0x6f0/0x6f0 [ 2094.998788] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2094.999914] ? wait_for_completion_io+0x270/0x270 [ 2095.001035] __x64_sys_openat+0x13f/0x1f0 [ 2095.001983] ? __ia32_sys_open+0x1c0/0x1c0 [ 2095.002946] ? ksys_write+0x1a9/0x260 [ 2095.003832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.005026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.006209] do_syscall_64+0x33/0x40 [ 2095.007068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.008308] RIP: 0033:0x7f04f6dcfa04 [ 2095.009177] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2095.013340] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2095.015063] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2095.016687] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2095.018298] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2095.019922] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2095.021527] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2095.023207] CPU: 1 PID: 27568 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2095.024698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.026455] Call Trace: [ 2095.027017] dump_stack+0x107/0x167 [ 2095.027808] should_fail.cold+0x5/0xa [ 2095.028618] ? security_file_alloc+0x34/0x170 [ 2095.029572] should_failslab+0x5/0x20 [ 2095.030378] kmem_cache_alloc+0x5b/0x310 [ 2095.031258] security_file_alloc+0x34/0x170 [ 2095.032180] __alloc_file+0xb7/0x320 [ 2095.032970] alloc_empty_file+0x6d/0x170 [ 2095.033841] alloc_file+0x5e/0x5a0 [ 2095.034606] alloc_file_pseudo+0x16a/0x250 [ 2095.035502] ? alloc_file+0x5a0/0x5a0 [ 2095.036332] anon_inode_getfile+0xc8/0x1f0 [ 2095.037247] io_uring_setup+0x138b/0x2980 [ 2095.038144] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2095.039225] ? wait_for_completion_io+0x270/0x270 [ 2095.040287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.041393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.042496] do_syscall_64+0x33/0x40 [ 2095.043281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.044378] RIP: 0033:0x7f12dae86b19 [ 2095.045160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.049058] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2095.050657] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2095.052170] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2095.053682] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2095.055025] FAULT_INJECTION: forcing a failure. [ 2095.055025] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.055220] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2095.055232] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2095.061310] CPU: 0 PID: 27576 Comm: syz-executor.4 Not tainted 5.10.259 #1 [ 2095.062874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.064763] Call Trace: [ 2095.065374] dump_stack+0x107/0x167 [ 2095.066209] should_fail.cold+0x5/0xa [ 2095.067086] ? create_object.isra.0+0x3a/0xa30 [ 2095.068129] should_failslab+0x5/0x20 [ 2095.068992] kmem_cache_alloc+0x5b/0x310 [ 2095.069936] create_object.isra.0+0x3a/0xa30 [ 2095.070935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2095.072111] kmem_cache_alloc+0x159/0x310 [ 2095.073073] security_inode_alloc+0x34/0x160 [ 2095.074089] inode_init_always+0xa4e/0xd10 [ 2095.075042] ? proc_free_inode+0x20/0x20 [ 2095.075983] alloc_inode+0x84/0x240 [ 2095.076811] new_inode+0x23/0x250 [ 2095.077605] proc_pid_make_inode+0x22/0x220 [ 2095.078592] proc_pident_instantiate+0x81/0x320 [ 2095.079662] proc_pident_lookup+0x1eb/0x270 [ 2095.080683] __lookup_slow+0x252/0x490 [ 2095.081577] ? lookup_open.isra.0+0x1270/0x1270 [ 2095.082686] ? selinux_inode_permission+0x401/0x640 [ 2095.083846] ? selinux_path_notify+0x4d0/0x4d0 [ 2095.084890] walk_component+0x41e/0x6a0 [ 2095.085796] ? handle_dots.part.0+0x15c0/0x15c0 [ 2095.086866] ? security_inode_permission+0xcb/0x100 [ 2095.088009] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2095.089054] link_path_walk.part.0+0x699/0xbf0 [ 2095.090117] ? walk_component+0x6a0/0x6a0 [ 2095.091056] ? percpu_counter_add_batch+0x8b/0x140 [ 2095.092205] path_openat+0x25d/0x2770 [ 2095.093083] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2095.094223] ? path_lookupat+0x860/0x860 [ 2095.095151] ? perf_trace_lock+0x2bd/0x490 [ 2095.096121] ? lock_acquire+0x197/0x470 [ 2095.097024] ? find_held_lock+0x2c/0x110 [ 2095.097954] ? __lockdep_reset_lock+0x180/0x180 [ 2095.099030] do_filp_open+0x190/0x3e0 [ 2095.099904] ? may_open_dev+0xf0/0xf0 [ 2095.100809] ? simple_attr_release+0x50/0x50 [ 2095.101840] ? _raw_spin_unlock+0x1a/0x30 [ 2095.102784] ? alloc_fd+0x2e7/0x670 [ 2095.103650] do_sys_openat2+0x171/0x4d0 [ 2095.104572] ? build_open_flags+0x6f0/0x6f0 [ 2095.105554] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2095.106665] ? wait_for_completion_io+0x270/0x270 [ 2095.107786] __x64_sys_openat+0x13f/0x1f0 [ 2095.108734] ? __ia32_sys_open+0x1c0/0x1c0 [ 2095.109686] ? ksys_write+0x1a9/0x260 [ 2095.110571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.111768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.112943] do_syscall_64+0x33/0x40 [ 2095.113791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.114956] RIP: 0033:0x7f41dcffda04 [ 2095.115809] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2095.119964] RSP: 002b:00007f41da5c0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2095.121690] RAX: ffffffffffffffda RBX: 00007f41dd15df60 RCX: 00007f41dcffda04 [ 2095.123362] RDX: 0000000000000002 RSI: 00007f41da5c00f0 RDI: 00000000ffffff9c [ 2095.125013] RBP: 00007f41da5c00f0 R08: 0000000000000000 R09: 00007f41da5bff70 [ 2095.126617] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2095.128250] R13: 00007ffe2894e7af R14: 00007f41da5c0300 R15: 0000000000022000 [ 2095.130898] FAULT_INJECTION: forcing a failure. [ 2095.130898] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.133607] CPU: 0 PID: 27575 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2095.135172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.137066] Call Trace: [ 2095.137673] dump_stack+0x107/0x167 [ 2095.138516] should_fail.cold+0x5/0xa [ 2095.139387] ? security_file_alloc+0x34/0x170 [ 2095.140421] should_failslab+0x5/0x20 [ 2095.141286] kmem_cache_alloc+0x5b/0x310 [ 2095.142225] security_file_alloc+0x34/0x170 [ 2095.143208] __alloc_file+0xb7/0x320 [ 2095.144070] alloc_empty_file+0x6d/0x170 [ 2095.144998] path_openat+0xe6/0x2770 [ 2095.145848] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2095.146982] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2095.148131] ? path_lookupat+0x860/0x860 [ 2095.149055] ? perf_trace_lock+0x2bd/0x490 [ 2095.150019] ? lock_acquire+0x197/0x470 [ 2095.150923] ? find_held_lock+0x2c/0x110 [ 2095.151858] ? __lockdep_reset_lock+0x180/0x180 [ 2095.152936] do_filp_open+0x190/0x3e0 [ 2095.153802] ? may_open_dev+0xf0/0xf0 [ 2095.154677] ? alloc_fd+0x2e7/0x670 [ 2095.155508] ? lock_downgrade+0x6d0/0x6d0 [ 2095.156456] ? do_raw_spin_lock+0x121/0x260 [ 2095.157445] ? rwlock_bug.part.0+0x90/0x90 [ 2095.158464] ? _raw_spin_unlock+0x1a/0x30 [ 2095.159444] ? alloc_fd+0x2e7/0x670 [ 2095.160311] do_sys_openat2+0x171/0x4d0 [ 2095.161238] ? build_open_flags+0x6f0/0x6f0 [ 2095.162227] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2095.163327] ? wait_for_completion_io+0x270/0x270 [ 2095.164451] __x64_sys_openat+0x13f/0x1f0 [ 2095.165400] ? __ia32_sys_open+0x1c0/0x1c0 [ 2095.166360] ? ksys_write+0x1a9/0x260 [ 2095.167235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.168439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.169626] do_syscall_64+0x33/0x40 [ 2095.170479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.171649] RIP: 0033:0x7efd9561da04 [ 2095.172497] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2095.176667] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2095.178382] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2095.179994] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2095.181603] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2095.183214] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2095.184852] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:36:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x43f1, &(0x7f0000000200)={0x0, 0x80c9, 0x4, 0x3, 0xd4, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000340)) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x7, 0x7, 0x0, 0x8}, 0x0) r8 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r8, 0x3f06, 0x1547, 0x2, &(0x7f00000003c0)={[0x3ff]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10044001}, 0x0) accept(r4, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000140)=0x80) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x80300, 0x1c0) read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:36:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x80000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:36:28 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 26) 08:36:28 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 16) 08:36:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x600, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:36:28 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2095.357104] FAULT_INJECTION: forcing a failure. [ 2095.357104] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.359576] CPU: 1 PID: 27590 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2095.361064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.362813] Call Trace: [ 2095.363375] dump_stack+0x107/0x167 [ 2095.364156] should_fail.cold+0x5/0xa [ 2095.364969] ? create_object.isra.0+0x3a/0xa30 [ 2095.365942] should_failslab+0x5/0x20 [ 2095.366755] kmem_cache_alloc+0x5b/0x310 [ 2095.367621] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2095.368799] create_object.isra.0+0x3a/0xa30 [ 2095.369727] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2095.370804] kmem_cache_alloc+0x159/0x310 [ 2095.371687] security_file_alloc+0x34/0x170 [ 2095.372608] __alloc_file+0xb7/0x320 [ 2095.373385] alloc_empty_file+0x6d/0x170 [ 2095.374236] alloc_file+0x5e/0x5a0 [ 2095.374966] alloc_file_pseudo+0x16a/0x250 [ 2095.375872] ? alloc_file+0x5a0/0x5a0 [ 2095.376671] anon_inode_getfile+0xc8/0x1f0 [ 2095.377562] io_uring_setup+0x138b/0x2980 [ 2095.378445] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2095.379510] ? wait_for_completion_io+0x270/0x270 [ 2095.380559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.381672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.382755] do_syscall_64+0x33/0x40 [ 2095.383540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.384635] RIP: 0033:0x7f12dae86b19 [ 2095.385426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.389294] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2095.390897] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2095.392383] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2095.393866] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2095.395355] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2095.396862] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:36:28 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 7) 08:36:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x40}, 0x6) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000040)="94b487d4199003ed323dfc182fb969289456ea9f8fa4bc2be72dde9fe09a2191816f2f7fd3e3f953e605c528b9b35367fa0ff1cea9ed9ff9cf359653530d17f2dec71f9102d151d69e85b570d9bfa2c9e44b9d76cbc050a1d4f1b5d50e070c1ca6003718bb77e8cefec0f26ed341294c514fe062cc9d2a424c7499") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) [ 2095.446475] FAULT_INJECTION: forcing a failure. [ 2095.446475] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.449177] CPU: 1 PID: 27594 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2095.450667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.452431] Call Trace: [ 2095.452999] dump_stack+0x107/0x167 [ 2095.453787] should_fail.cold+0x5/0xa [ 2095.454602] ? __d_alloc+0x2a/0x990 [ 2095.455379] should_failslab+0x5/0x20 [ 2095.456195] kmem_cache_alloc+0x5b/0x310 [ 2095.457057] ? perf_trace_lock+0x2bd/0x490 [ 2095.457964] __d_alloc+0x2a/0x990 [ 2095.458705] ? __lockdep_reset_lock+0x180/0x180 [ 2095.459705] d_alloc+0x46/0x240 [ 2095.460427] d_alloc_parallel+0xe9/0x1a30 [ 2095.461315] ? __d_lookup+0x396/0x760 [ 2095.462124] ? lock_downgrade+0x6d0/0x6d0 [ 2095.463010] ? find_held_lock+0x2c/0x110 [ 2095.463894] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2095.464788] ? __d_lookup+0x3bf/0x760 [ 2095.465616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.466747] lookup_open.isra.0+0x962/0x1270 [ 2095.467700] ? vfs_tmpfile+0x350/0x350 [ 2095.468580] ? __mnt_want_write+0x196/0x280 [ 2095.469517] path_openat+0x972/0x2770 [ 2095.470355] ? path_lookupat+0x860/0x860 [ 2095.471215] ? perf_trace_lock+0x2bd/0x490 [ 2095.472121] ? lock_acquire+0x197/0x470 [ 2095.472962] ? find_held_lock+0x2c/0x110 [ 2095.473831] ? __lockdep_reset_lock+0x180/0x180 [ 2095.474837] do_filp_open+0x190/0x3e0 [ 2095.475645] ? may_open_dev+0xf0/0xf0 [ 2095.476493] ? simple_attr_release+0x50/0x50 [ 2095.477450] ? _raw_spin_unlock+0x1a/0x30 [ 2095.478334] ? alloc_fd+0x2e7/0x670 [ 2095.479138] do_sys_openat2+0x171/0x4d0 [ 2095.480006] ? build_open_flags+0x6f0/0x6f0 [ 2095.480927] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2095.481957] ? wait_for_completion_io+0x270/0x270 [ 2095.483005] __x64_sys_openat+0x13f/0x1f0 [ 2095.483898] ? __ia32_sys_open+0x1c0/0x1c0 [ 2095.484786] ? ksys_write+0x1a9/0x260 [ 2095.485619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.486729] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.487840] do_syscall_64+0x33/0x40 [ 2095.488630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.489716] RIP: 0033:0x7f04f6dcfa04 [ 2095.490511] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2095.494407] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2095.496036] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2095.497550] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2095.499067] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2095.500582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2095.502082] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:36:28 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 16) [ 2095.559453] FAULT_INJECTION: forcing a failure. [ 2095.559453] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.561885] CPU: 1 PID: 27603 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2095.563345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.565101] Call Trace: [ 2095.565666] dump_stack+0x107/0x167 [ 2095.566452] should_fail.cold+0x5/0xa [ 2095.567265] ? create_object.isra.0+0x3a/0xa30 [ 2095.568241] should_failslab+0x5/0x20 [ 2095.569057] kmem_cache_alloc+0x5b/0x310 [ 2095.569923] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2095.571094] create_object.isra.0+0x3a/0xa30 [ 2095.572034] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2095.573121] kmem_cache_alloc+0x159/0x310 [ 2095.574015] security_file_alloc+0x34/0x170 [ 2095.574931] __alloc_file+0xb7/0x320 [ 2095.575743] alloc_empty_file+0x6d/0x170 [ 2095.576615] path_openat+0xe6/0x2770 [ 2095.577408] ? __lock_acquire+0x1657/0x5b00 [ 2095.578338] ? path_lookupat+0x860/0x860 [ 2095.579209] ? perf_trace_lock+0xac/0x490 [ 2095.580093] ? lock_acquire+0x197/0x470 [ 2095.580942] ? find_held_lock+0x2c/0x110 [ 2095.581808] ? __lockdep_reset_lock+0x180/0x180 [ 2095.582802] do_filp_open+0x190/0x3e0 [ 2095.583608] ? may_open_dev+0xf0/0xf0 [ 2095.584440] ? alloc_fd+0x2e7/0x670 [ 2095.585226] ? lock_downgrade+0x6d0/0x6d0 [ 2095.586104] ? do_raw_spin_lock+0x121/0x260 [ 2095.587015] ? rwlock_bug.part.0+0x90/0x90 [ 2095.587929] ? _raw_spin_unlock+0x1a/0x30 [ 2095.588807] ? alloc_fd+0x2e7/0x670 [ 2095.589590] do_sys_openat2+0x171/0x4d0 [ 2095.590438] ? build_open_flags+0x6f0/0x6f0 [ 2095.591349] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2095.592382] ? wait_for_completion_io+0x270/0x270 [ 2095.593413] __x64_sys_openat+0x13f/0x1f0 [ 2095.594298] ? __ia32_sys_open+0x1c0/0x1c0 [ 2095.595191] ? ksys_write+0x1a9/0x260 [ 2095.596016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.597129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.598236] do_syscall_64+0x33/0x40 [ 2095.599031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.600131] RIP: 0033:0x7efd9561da04 [ 2095.600917] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2095.604813] RSP: 002b:00007efd92bbf060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2095.606443] RAX: ffffffffffffffda RBX: 00007efd9577e020 RCX: 00007efd9561da04 [ 2095.607954] RDX: 0000000000000002 RSI: 00007efd92bbf0f0 RDI: 00000000ffffff9c [ 2095.609456] RBP: 00007efd92bbf0f0 R08: 0000000000000000 R09: 00007efd92bbef70 [ 2095.610962] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2095.612475] R13: 00007ffd1cc654df R14: 00007efd92bbf300 R15: 0000000000022000 08:36:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x2}, 0xffffffffffffff7e) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000040)="b9f2d277650e01ee237cb1c6b2281a0d869dabbfe4a10ed3328150d6528236abff5eedab72153429cb097d4647a9f2574b604f83ab59a03c58071eabd5b30640b220a374") read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:36:29 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 17) 08:36:29 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2095.765019] FAULT_INJECTION: forcing a failure. [ 2095.765019] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.767616] CPU: 1 PID: 27709 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2095.769093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.770846] Call Trace: [ 2095.771415] dump_stack+0x107/0x167 [ 2095.772203] should_fail.cold+0x5/0xa [ 2095.773021] ? create_object.isra.0+0x3a/0xa30 [ 2095.773988] should_failslab+0x5/0x20 [ 2095.774804] kmem_cache_alloc+0x5b/0x310 [ 2095.775694] create_object.isra.0+0x3a/0xa30 [ 2095.776640] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2095.777725] kmem_cache_alloc+0x159/0x310 [ 2095.778615] __d_alloc+0x2a/0x990 [ 2095.779363] ? __lockdep_reset_lock+0x180/0x180 [ 2095.780372] d_alloc+0x46/0x240 [ 2095.781081] d_alloc_parallel+0xe9/0x1a30 [ 2095.781974] ? __d_lookup+0x396/0x760 [ 2095.782783] ? lock_downgrade+0x6d0/0x6d0 [ 2095.783689] ? find_held_lock+0x2c/0x110 [ 2095.784600] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2095.785502] ? __d_lookup+0x3bf/0x760 [ 2095.786348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.787515] lookup_open.isra.0+0x962/0x1270 [ 2095.788504] ? vfs_tmpfile+0x350/0x350 [ 2095.789405] ? __mnt_want_write+0x196/0x280 [ 2095.790365] path_openat+0x972/0x2770 [ 2095.791224] ? path_lookupat+0x860/0x860 [ 2095.792120] ? perf_trace_lock+0x2bd/0x490 [ 2095.793046] ? lock_acquire+0x197/0x470 [ 2095.793907] ? find_held_lock+0x2c/0x110 [ 2095.794825] ? __lockdep_reset_lock+0x180/0x180 [ 2095.795868] do_filp_open+0x190/0x3e0 [ 2095.796704] ? may_open_dev+0xf0/0xf0 [ 2095.797565] ? simple_attr_release+0x50/0x50 [ 2095.798552] ? _raw_spin_unlock+0x1a/0x30 [ 2095.799459] ? alloc_fd+0x2e7/0x670 [ 2095.800292] do_sys_openat2+0x171/0x4d0 [ 2095.801166] ? build_open_flags+0x6f0/0x6f0 [ 2095.802106] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2095.803161] ? wait_for_completion_io+0x270/0x270 [ 2095.804235] __x64_sys_openat+0x13f/0x1f0 [ 2095.805139] ? __ia32_sys_open+0x1c0/0x1c0 [ 2095.806053] ? ksys_write+0x1a9/0x260 [ 2095.806899] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.808042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.809148] do_syscall_64+0x33/0x40 [ 2095.809945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2095.811033] RIP: 0033:0x7f04f6dcfa04 [ 2095.811837] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2095.815744] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2095.817356] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2095.818862] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2095.820381] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2095.821880] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2095.823387] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2110.551214] FAULT_INJECTION: forcing a failure. [ 2110.551214] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.553690] CPU: 1 PID: 27736 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2110.555155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.556914] FAULT_INJECTION: forcing a failure. [ 2110.556914] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.559209] Call Trace: [ 2110.559237] dump_stack+0x107/0x167 [ 2110.559263] should_fail.cold+0x5/0xa [ 2110.561457] ? proc_self_get_link+0x18b/0x200 [ 2110.562405] should_failslab+0x5/0x20 [ 2110.563239] kmem_cache_alloc_trace+0x55/0x320 [ 2110.564249] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2110.565226] proc_self_get_link+0x18b/0x200 [ 2110.566168] step_into+0x1595/0x1ce0 [ 2110.566990] ? lookup_fast+0x6e0/0x6e0 [ 2110.567841] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2110.568841] walk_component+0x171/0x6a0 [ 2110.569707] ? trace_hardirqs_on+0x5b/0x180 [ 2110.570650] ? handle_dots.part.0+0x15c0/0x15c0 [ 2110.571672] ? security_inode_permission+0xcb/0x100 [ 2110.572778] link_path_walk.part.0+0x699/0xbf0 [ 2110.573785] ? walk_component+0x6a0/0x6a0 [ 2110.574690] ? percpu_counter_add_batch+0x8b/0x140 [ 2110.575772] path_openat+0x25d/0x2770 [ 2110.576624] ? path_lookupat+0x860/0x860 [ 2110.577512] ? perf_trace_lock+0xac/0x490 [ 2110.578410] ? lock_acquire+0x197/0x470 [ 2110.579272] ? find_held_lock+0x2c/0x110 [ 2110.580222] ? __lockdep_reset_lock+0x180/0x180 [ 2110.581465] do_filp_open+0x190/0x3e0 [ 2110.582471] ? may_open_dev+0xf0/0xf0 [ 2110.583450] ? rwlock_bug.part.0+0x90/0x90 [ 2110.584390] ? _raw_spin_unlock+0x1a/0x30 [ 2110.585276] ? alloc_fd+0x2e7/0x670 [ 2110.586063] do_sys_openat2+0x171/0x4d0 [ 2110.586914] ? build_open_flags+0x6f0/0x6f0 [ 2110.587822] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2110.588871] ? wait_for_completion_io+0x270/0x270 [ 2110.589907] __x64_sys_openat+0x13f/0x1f0 [ 2110.590794] ? __ia32_sys_open+0x1c0/0x1c0 [ 2110.591692] ? ksys_write+0x1a9/0x260 [ 2110.592524] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.593646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.594754] do_syscall_64+0x33/0x40 [ 2110.595551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2110.596652] RIP: 0033:0x7efd9561da04 [ 2110.597449] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2110.601388] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2110.603017] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2110.604552] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2110.606075] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2110.607601] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2110.609137] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2110.610686] CPU: 0 PID: 27732 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2110.612187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.613975] Call Trace: [ 2110.614552] dump_stack+0x107/0x167 [ 2110.615346] should_fail.cold+0x5/0xa [ 2110.616180] ? proc_alloc_inode+0x18/0x200 [ 2110.617111] should_failslab+0x5/0x20 [ 2110.617943] kmem_cache_alloc+0x5b/0x310 [ 2110.618825] ? proc_free_inode+0x20/0x20 [ 2110.619707] proc_alloc_inode+0x18/0x200 [ 2110.620601] ? proc_free_inode+0x20/0x20 [ 2110.621474] alloc_inode+0x63/0x240 [ 2110.622261] new_inode+0x23/0x250 [ 2110.623018] proc_pid_make_inode+0x22/0x220 [ 2110.623974] proc_ns_instantiate+0x55/0x100 [ 2110.624911] proc_ns_dir_lookup+0x210/0x2c0 [ 2110.625854] lookup_open.isra.0+0x79f/0x1270 [ 2110.626822] ? vfs_tmpfile+0x350/0x350 [ 2110.627729] ? __mnt_want_write+0x196/0x280 [ 2110.628698] path_openat+0x972/0x2770 [ 2110.629553] ? path_lookupat+0x860/0x860 [ 2110.630437] ? perf_trace_lock+0x2bd/0x490 [ 2110.631342] ? lock_acquire+0x197/0x470 [ 2110.632202] ? find_held_lock+0x2c/0x110 [ 2110.633076] ? __lockdep_reset_lock+0x180/0x180 [ 2110.634088] do_filp_open+0x190/0x3e0 [ 2110.634915] ? may_open_dev+0xf0/0xf0 [ 2110.635763] ? simple_attr_release+0x50/0x50 [ 2110.636743] ? _raw_spin_unlock+0x1a/0x30 [ 2110.637643] ? alloc_fd+0x2e7/0x670 [ 2110.638459] do_sys_openat2+0x171/0x4d0 [ 2110.639321] ? build_open_flags+0x6f0/0x6f0 [ 2110.640241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2110.641288] ? wait_for_completion_io+0x270/0x270 [ 2110.642342] __x64_sys_openat+0x13f/0x1f0 [ 2110.643237] ? __ia32_sys_open+0x1c0/0x1c0 [ 2110.644150] ? ksys_write+0x1a9/0x260 [ 2110.644987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.646114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.647229] do_syscall_64+0x33/0x40 [ 2110.648041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2110.649139] RIP: 0033:0x7f04f6dcfa04 [ 2110.649939] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2110.653860] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2110.655493] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2110.657032] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2110.658572] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2110.660100] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2110.661632] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:36:43 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 27) 08:36:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x700, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:36:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) dup3(0xffffffffffffffff, r0, 0x0) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x31) 08:36:43 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 18) 08:36:43 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:36:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 8) 08:36:43 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:36:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf0ffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2110.692089] FAULT_INJECTION: forcing a failure. [ 2110.692089] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.694573] CPU: 1 PID: 27744 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2110.696075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.697837] Call Trace: [ 2110.698407] dump_stack+0x107/0x167 [ 2110.699190] should_fail.cold+0x5/0xa [ 2110.700015] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2110.701105] should_failslab+0x5/0x20 [ 2110.701918] kmem_cache_alloc_trace+0x55/0x320 [ 2110.702891] io_uring_alloc_task_context+0x99/0x6a0 [ 2110.703972] ? io_import_iovec+0x1120/0x1120 [ 2110.704917] ? lock_downgrade+0x6d0/0x6d0 [ 2110.705790] ? do_raw_spin_lock+0x121/0x260 [ 2110.706698] ? rwlock_bug.part.0+0x90/0x90 [ 2110.707600] __io_uring_add_tctx_node+0x2c6/0x520 [ 2110.708636] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2110.709746] ? alloc_fd+0x2e7/0x670 [ 2110.710534] io_uring_setup+0x1fbb/0x2980 [ 2110.711424] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2110.712502] ? wait_for_completion_io+0x270/0x270 [ 2110.713545] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.714650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.715753] do_syscall_64+0x33/0x40 [ 2110.716551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2110.717643] RIP: 0033:0x7f12dae86b19 [ 2110.718430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2110.722330] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2110.723942] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2110.725449] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2110.726958] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2110.728470] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2110.729971] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:36:44 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 28) 08:36:44 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 9) [ 2110.852399] FAULT_INJECTION: forcing a failure. [ 2110.852399] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.854982] CPU: 1 PID: 27751 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2110.856451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.858201] Call Trace: [ 2110.858762] dump_stack+0x107/0x167 [ 2110.859537] should_fail.cold+0x5/0xa [ 2110.860351] ? create_object.isra.0+0x3a/0xa30 [ 2110.861416] should_failslab+0x5/0x20 [ 2110.862216] kmem_cache_alloc+0x5b/0x310 [ 2110.863081] create_object.isra.0+0x3a/0xa30 [ 2110.864016] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2110.865089] kmem_cache_alloc_trace+0x151/0x320 [ 2110.866074] io_uring_alloc_task_context+0x99/0x6a0 [ 2110.867122] ? io_import_iovec+0x1120/0x1120 [ 2110.868059] ? lock_downgrade+0x6d0/0x6d0 [ 2110.868927] ? do_raw_spin_lock+0x121/0x260 [ 2110.869839] ? rwlock_bug.part.0+0x90/0x90 [ 2110.870743] __io_uring_add_tctx_node+0x2c6/0x520 [ 2110.871759] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2110.872864] ? alloc_fd+0x2e7/0x670 [ 2110.873641] io_uring_setup+0x1fbb/0x2980 [ 2110.874521] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2110.875588] ? wait_for_completion_io+0x270/0x270 [ 2110.876634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.877738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.878823] do_syscall_64+0x33/0x40 [ 2110.879610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2110.880696] RIP: 0033:0x7f12dae86b19 [ 2110.881478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2110.885337] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2110.886928] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2110.888424] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2110.889916] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2110.891413] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2110.892922] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2110.900020] FAULT_INJECTION: forcing a failure. [ 2110.900020] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.902506] CPU: 1 PID: 27753 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2110.903975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.905737] Call Trace: [ 2110.906293] dump_stack+0x107/0x167 [ 2110.907067] should_fail.cold+0x5/0xa [ 2110.907870] ? find_held_lock+0x2c/0x110 [ 2110.908739] ? create_object.isra.0+0x3a/0xa30 [ 2110.909700] should_failslab+0x5/0x20 [ 2110.910509] kmem_cache_alloc+0x5b/0x310 [ 2110.911363] ? __task_pid_nr_ns+0x1b8/0x500 [ 2110.912297] create_object.isra.0+0x3a/0xa30 [ 2110.913232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2110.914316] kmem_cache_alloc_trace+0x151/0x320 [ 2110.915307] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2110.916267] proc_self_get_link+0x18b/0x200 [ 2110.917183] step_into+0x1595/0x1ce0 [ 2110.917974] ? lookup_fast+0x6e0/0x6e0 [ 2110.918799] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2110.919764] walk_component+0x171/0x6a0 [ 2110.920613] ? trace_hardirqs_on+0x5b/0x180 [ 2110.921527] ? handle_dots.part.0+0x15c0/0x15c0 [ 2110.922513] ? security_inode_permission+0xcb/0x100 [ 2110.923572] link_path_walk.part.0+0x699/0xbf0 [ 2110.924552] ? walk_component+0x6a0/0x6a0 [ 2110.925424] ? percpu_counter_add_batch+0x8b/0x140 [ 2110.926464] path_openat+0x25d/0x2770 [ 2110.927281] ? path_lookupat+0x860/0x860 [ 2110.928142] ? perf_trace_lock+0xac/0x490 [ 2110.929014] ? lock_acquire+0x197/0x470 [ 2110.929852] ? find_held_lock+0x2c/0x110 [ 2110.930713] ? __lockdep_reset_lock+0x180/0x180 [ 2110.931698] do_filp_open+0x190/0x3e0 [ 2110.932507] ? may_open_dev+0xf0/0xf0 [ 2110.933322] ? rwlock_bug.part.0+0x90/0x90 [ 2110.934224] ? _raw_spin_unlock+0x1a/0x30 [ 2110.935096] ? alloc_fd+0x2e7/0x670 [ 2110.935880] do_sys_openat2+0x171/0x4d0 [ 2110.936724] ? build_open_flags+0x6f0/0x6f0 [ 2110.937629] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2110.938647] ? wait_for_completion_io+0x270/0x270 [ 2110.939673] __x64_sys_openat+0x13f/0x1f0 [ 2110.940555] ? __ia32_sys_open+0x1c0/0x1c0 [ 2110.941441] ? ksys_write+0x1a9/0x260 [ 2110.942252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.943356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.944457] do_syscall_64+0x33/0x40 [ 2110.945244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2110.946322] RIP: 0033:0x7efd9561da04 [ 2110.947103] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2110.950977] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2110.952588] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2110.954084] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2110.955583] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2110.957093] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2110.958601] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:37:00 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:37:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x53) 08:37:00 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 29) 08:37:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x1000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:00 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 19) 08:37:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x140400, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r1}}, {@access_user}, {@mmap}, {@access_uid={'access', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x1}}, {@mmap}, {@msize={'msize', 0x3d, 0x2}}, {@nodevmap}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '#).,'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@measure}, {@hash}]}}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000300)=r3) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) 08:37:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x900, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:00 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 10) [ 2127.122049] FAULT_INJECTION: forcing a failure. [ 2127.122049] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.124499] CPU: 1 PID: 27765 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2127.125966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2127.127737] Call Trace: [ 2127.128300] dump_stack+0x107/0x167 [ 2127.129076] should_fail.cold+0x5/0xa [ 2127.129887] ? __d_alloc+0x2a/0x990 [ 2127.130655] should_failslab+0x5/0x20 [ 2127.131457] kmem_cache_alloc+0x5b/0x310 [ 2127.132335] __d_alloc+0x2a/0x990 [ 2127.133081] ? __lock_acquire+0xbb1/0x5b00 [ 2127.133972] d_alloc+0x46/0x240 [ 2127.134673] d_alloc_parallel+0xe9/0x1a30 [ 2127.135549] ? __lock_acquire+0x1657/0x5b00 [ 2127.136492] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2127.137368] ? lock_acquire+0x197/0x470 [ 2127.138214] ? find_held_lock+0x2c/0x110 [ 2127.139086] ? lockdep_init_map_type+0x2c7/0x780 [ 2127.140117] ? lockdep_init_map_type+0x2c7/0x780 [ 2127.141136] __lookup_slow+0x193/0x490 [ 2127.141967] ? lookup_open.isra.0+0x1270/0x1270 [ 2127.142976] ? selinux_inode_permission+0x401/0x640 [ 2127.144026] ? selinux_path_notify+0x4d0/0x4d0 [ 2127.145004] walk_component+0x41e/0x6a0 [ 2127.145862] ? handle_dots.part.0+0x15c0/0x15c0 [ 2127.146863] ? security_inode_permission+0xcb/0x100 [ 2127.147919] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2127.148904] link_path_walk.part.0+0x699/0xbf0 [ 2127.149877] ? walk_component+0x6a0/0x6a0 [ 2127.150745] ? percpu_counter_add_batch+0x8b/0x140 [ 2127.151791] path_openat+0x25d/0x2770 [ 2127.152616] ? path_lookupat+0x860/0x860 [ 2127.153485] ? perf_trace_lock+0xac/0x490 [ 2127.154361] ? lock_acquire+0x197/0x470 [ 2127.155200] ? find_held_lock+0x2c/0x110 [ 2127.156065] ? __lockdep_reset_lock+0x180/0x180 [ 2127.157062] do_filp_open+0x190/0x3e0 [ 2127.157879] ? may_open_dev+0xf0/0xf0 [ 2127.158699] ? simple_attr_release+0x50/0x50 [ 2127.159640] ? _raw_spin_unlock+0x1a/0x30 [ 2127.160530] ? alloc_fd+0x2e7/0x670 [ 2127.161322] do_sys_openat2+0x171/0x4d0 [ 2127.162174] ? build_open_flags+0x6f0/0x6f0 [ 2127.163080] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2127.164113] ? wait_for_completion_io+0x270/0x270 [ 2127.165146] __x64_sys_openat+0x13f/0x1f0 [ 2127.166026] ? __ia32_sys_open+0x1c0/0x1c0 [ 2127.166917] ? ksys_write+0x1a9/0x260 [ 2127.167734] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2127.168870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2127.169976] do_syscall_64+0x33/0x40 [ 2127.170765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2127.171848] RIP: 0033:0x7efd9561da04 [ 2127.172640] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2127.176528] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2127.178125] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2127.179631] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2127.181158] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2127.182663] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2127.184172] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2127.192723] FAULT_INJECTION: forcing a failure. [ 2127.192723] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.195258] CPU: 1 PID: 27773 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2127.196741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2127.198506] Call Trace: [ 2127.199078] dump_stack+0x107/0x167 [ 2127.199864] should_fail.cold+0x5/0xa [ 2127.200710] ? create_object.isra.0+0x3a/0xa30 [ 2127.201693] should_failslab+0x5/0x20 [ 2127.202502] kmem_cache_alloc+0x5b/0x310 [ 2127.203375] create_object.isra.0+0x3a/0xa30 [ 2127.204327] kmemleak_alloc_percpu+0xa0/0x100 [ 2127.205297] pcpu_alloc+0x4e2/0x1240 [ 2127.206105] __percpu_counter_init+0x10d/0x2d0 [ 2127.207087] io_uring_alloc_task_context+0xcc/0x6a0 [ 2127.208160] ? io_import_iovec+0x1120/0x1120 [ 2127.209091] ? lock_downgrade+0x6d0/0x6d0 [ 2127.209970] ? do_raw_spin_lock+0x121/0x260 [ 2127.210893] ? rwlock_bug.part.0+0x90/0x90 [ 2127.211805] __io_uring_add_tctx_node+0x2c6/0x520 [ 2127.212834] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2127.213948] ? alloc_fd+0x2e7/0x670 [ 2127.214745] io_uring_setup+0x1fbb/0x2980 [ 2127.215644] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2127.216733] ? wait_for_completion_io+0x270/0x270 [ 2127.217787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2127.218897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2127.219986] do_syscall_64+0x33/0x40 [ 2127.220787] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2127.221874] RIP: 0033:0x7f12dae86b19 [ 2127.222676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2127.226576] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2127.228197] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2127.229709] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2127.231212] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2127.232721] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2127.234232] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2127.240866] FAULT_INJECTION: forcing a failure. [ 2127.240866] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.243661] CPU: 1 PID: 27776 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2127.245145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2127.246880] Call Trace: [ 2127.247441] dump_stack+0x107/0x167 [ 2127.248236] should_fail.cold+0x5/0xa [ 2127.249045] ? create_object.isra.0+0x3a/0xa30 [ 2127.250007] should_failslab+0x5/0x20 [ 2127.250822] kmem_cache_alloc+0x5b/0x310 [ 2127.251690] create_object.isra.0+0x3a/0xa30 [ 2127.252630] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2127.253719] kmem_cache_alloc+0x159/0x310 [ 2127.254594] ? proc_free_inode+0x20/0x20 [ 2127.255451] proc_alloc_inode+0x18/0x200 [ 2127.256314] ? proc_free_inode+0x20/0x20 [ 2127.257179] alloc_inode+0x63/0x240 [ 2127.257964] new_inode+0x23/0x250 [ 2127.258711] proc_pid_make_inode+0x22/0x220 [ 2127.259637] proc_ns_instantiate+0x55/0x100 [ 2127.260564] proc_ns_dir_lookup+0x210/0x2c0 [ 2127.261490] lookup_open.isra.0+0x79f/0x1270 [ 2127.262437] ? vfs_tmpfile+0x350/0x350 [ 2127.263292] ? __mnt_want_write+0x196/0x280 [ 2127.264216] path_openat+0x972/0x2770 [ 2127.265036] ? path_lookupat+0x860/0x860 [ 2127.265893] ? perf_trace_lock+0xac/0x490 [ 2127.266773] ? lock_acquire+0x197/0x470 [ 2127.267612] ? find_held_lock+0x2c/0x110 [ 2127.268481] ? __lockdep_reset_lock+0x180/0x180 [ 2127.269472] do_filp_open+0x190/0x3e0 [ 2127.270286] ? may_open_dev+0xf0/0xf0 [ 2127.271106] ? simple_attr_release+0x50/0x50 [ 2127.272059] ? _raw_spin_unlock+0x1a/0x30 [ 2127.272944] ? alloc_fd+0x2e7/0x670 [ 2127.273745] do_sys_openat2+0x171/0x4d0 [ 2127.274599] ? build_open_flags+0x6f0/0x6f0 [ 2127.275506] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2127.276533] ? wait_for_completion_io+0x270/0x270 [ 2127.277568] __x64_sys_openat+0x13f/0x1f0 [ 2127.278441] ? __ia32_sys_open+0x1c0/0x1c0 [ 2127.279324] ? ksys_write+0x1a9/0x260 [ 2127.280144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2127.281256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2127.282355] do_syscall_64+0x33/0x40 [ 2127.283150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2127.284239] RIP: 0033:0x7f04f6dcfa04 [ 2127.285040] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2127.288966] RSP: 002b:00007f04f4371060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2127.290577] RAX: ffffffffffffffda RBX: 00007f04f6f30020 RCX: 00007f04f6dcfa04 [ 2127.292098] RDX: 0000000000000002 RSI: 00007f04f43710f0 RDI: 00000000ffffff9c [ 2127.293609] RBP: 00007f04f43710f0 R08: 0000000000000000 R09: 00007f04f4370f70 [ 2127.295115] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2127.296625] R13: 00007ffff354a23f R14: 00007f04f4371300 R15: 0000000000022000 08:37:00 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:37:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10044001}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = fork() ptrace(0x10, r5) syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/mnt\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x4002840}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf4, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48}, 0x0) 08:37:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:37:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xa00, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:00 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 30) 08:37:00 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 11) 08:37:00 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2127.549733] FAULT_INJECTION: forcing a failure. [ 2127.549733] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.552245] CPU: 0 PID: 27897 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2127.553731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2127.555486] Call Trace: [ 2127.556049] dump_stack+0x107/0x167 [ 2127.556841] should_fail.cold+0x5/0xa [ 2127.557662] ? create_object.isra.0+0x3a/0xa30 [ 2127.558629] should_failslab+0x5/0x20 [ 2127.559433] kmem_cache_alloc+0x5b/0x310 [ 2127.560317] create_object.isra.0+0x3a/0xa30 [ 2127.561242] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2127.562326] kmem_cache_alloc+0x159/0x310 [ 2127.563217] __d_alloc+0x2a/0x990 [ 2127.563962] d_alloc+0x46/0x240 [ 2127.564688] d_alloc_parallel+0xe9/0x1a30 [ 2127.565569] ? __lock_acquire+0x1657/0x5b00 [ 2127.566522] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2127.567397] ? lock_acquire+0x197/0x470 [ 2127.568254] ? find_held_lock+0x2c/0x110 [ 2127.569124] ? lockdep_init_map_type+0x2c7/0x780 [ 2127.570129] ? lockdep_init_map_type+0x2c7/0x780 [ 2127.571169] __lookup_slow+0x193/0x490 [ 2127.571994] ? lookup_open.isra.0+0x1270/0x1270 [ 2127.573039] ? selinux_inode_permission+0x401/0x640 [ 2127.574116] ? selinux_path_notify+0x4d0/0x4d0 [ 2127.575090] walk_component+0x41e/0x6a0 [ 2127.575940] ? handle_dots.part.0+0x15c0/0x15c0 [ 2127.576951] ? security_inode_permission+0xcb/0x100 [ 2127.578020] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2127.578989] link_path_walk.part.0+0x699/0xbf0 [ 2127.579975] ? walk_component+0x6a0/0x6a0 [ 2127.580865] ? percpu_counter_add_batch+0x8b/0x140 [ 2127.581931] path_openat+0x25d/0x2770 [ 2127.582758] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2127.583829] ? path_lookupat+0x860/0x860 [ 2127.584702] ? perf_trace_lock+0x2bd/0x490 [ 2127.585615] ? lock_acquire+0x197/0x470 [ 2127.586460] ? find_held_lock+0x2c/0x110 [ 2127.587330] ? __lockdep_reset_lock+0x180/0x180 [ 2127.588337] do_filp_open+0x190/0x3e0 [ 2127.589140] ? may_open_dev+0xf0/0xf0 [ 2127.589978] ? simple_attr_release+0x50/0x50 [ 2127.590926] ? _raw_spin_unlock+0x1a/0x30 [ 2127.591801] ? alloc_fd+0x2e7/0x670 [ 2127.592600] do_sys_openat2+0x171/0x4d0 [ 2127.593470] ? build_open_flags+0x6f0/0x6f0 [ 2127.594387] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2127.595415] ? wait_for_completion_io+0x270/0x270 [ 2127.596456] __x64_sys_openat+0x13f/0x1f0 [ 2127.597342] ? __ia32_sys_open+0x1c0/0x1c0 [ 2127.598230] ? ksys_write+0x1a9/0x260 [ 2127.599046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2127.600156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2127.601260] do_syscall_64+0x33/0x40 [ 2127.602052] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2127.603137] RIP: 0033:0x7efd9561da04 [ 2127.603926] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2127.607811] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2127.609432] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2127.610941] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2127.612446] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2127.613953] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2127.615454] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2127.634928] FAULT_INJECTION: forcing a failure. [ 2127.634928] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.637408] CPU: 1 PID: 27914 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2127.638871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2127.640645] Call Trace: [ 2127.641208] dump_stack+0x107/0x167 [ 2127.641983] should_fail.cold+0x5/0xa [ 2127.642771] ? create_object.isra.0+0x3a/0xa30 [ 2127.643738] should_failslab+0x5/0x20 [ 2127.644562] kmem_cache_alloc+0x5b/0x310 [ 2127.645432] create_object.isra.0+0x3a/0xa30 [ 2127.646373] kmemleak_alloc_percpu+0xa0/0x100 [ 2127.647315] pcpu_alloc+0x4e2/0x1240 [ 2127.648133] __percpu_counter_init+0x10d/0x2d0 [ 2127.649116] io_uring_alloc_task_context+0xcc/0x6a0 [ 2127.650190] ? io_import_iovec+0x1120/0x1120 08:37:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x2000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:00 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 20) [ 2127.651121] ? lock_downgrade+0x6d0/0x6d0 [ 2127.652237] ? do_raw_spin_lock+0x121/0x260 [ 2127.653153] ? rwlock_bug.part.0+0x90/0x90 [ 2127.654051] __io_uring_add_tctx_node+0x2c6/0x520 [ 2127.655068] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2127.656177] ? alloc_fd+0x2e7/0x670 [ 2127.656959] io_uring_setup+0x1fbb/0x2980 [ 2127.657848] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2127.658919] ? wait_for_completion_io+0x270/0x270 [ 2127.659962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2127.661078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2127.662176] do_syscall_64+0x33/0x40 [ 2127.662958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2127.664042] RIP: 0033:0x7f12dae86b19 [ 2127.664837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2127.668729] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2127.670353] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2127.671853] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2127.673366] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2127.674881] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2127.676390] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:37:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 12) [ 2127.756715] FAULT_INJECTION: forcing a failure. [ 2127.756715] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.759184] CPU: 1 PID: 28012 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2127.760681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2127.762439] Call Trace: [ 2127.763010] dump_stack+0x107/0x167 [ 2127.763789] should_fail.cold+0x5/0xa [ 2127.764621] ? security_inode_alloc+0x34/0x160 [ 2127.765591] should_failslab+0x5/0x20 [ 2127.766405] kmem_cache_alloc+0x5b/0x310 [ 2127.767280] security_inode_alloc+0x34/0x160 [ 2127.768228] inode_init_always+0xa4e/0xd10 [ 2127.769113] ? proc_free_inode+0x20/0x20 [ 2127.769978] alloc_inode+0x84/0x240 [ 2127.770755] new_inode+0x23/0x250 [ 2127.771497] proc_pid_make_inode+0x22/0x220 [ 2127.772423] proc_ns_instantiate+0x55/0x100 [ 2127.773336] proc_ns_dir_lookup+0x210/0x2c0 [ 2127.774260] lookup_open.isra.0+0x79f/0x1270 [ 2127.775213] ? vfs_tmpfile+0x350/0x350 [ 2127.776063] ? __mnt_want_write+0x196/0x280 [ 2127.777005] path_openat+0x972/0x2770 [ 2127.777820] ? path_lookupat+0x860/0x860 [ 2127.778688] ? perf_trace_lock+0xac/0x490 [ 2127.779561] ? lock_acquire+0x197/0x470 [ 2127.780414] ? find_held_lock+0x2c/0x110 [ 2127.781274] ? __lockdep_reset_lock+0x180/0x180 [ 2127.782271] do_filp_open+0x190/0x3e0 [ 2127.783078] ? may_open_dev+0xf0/0xf0 [ 2127.783304] FAULT_INJECTION: forcing a failure. [ 2127.783304] name failslab, interval 1, probability 0, space 0, times 0 [ 2127.783900] ? simple_attr_release+0x50/0x50 [ 2127.783936] ? _raw_spin_unlock+0x1a/0x30 [ 2127.787949] ? alloc_fd+0x2e7/0x670 [ 2127.788741] do_sys_openat2+0x171/0x4d0 [ 2127.789597] ? build_open_flags+0x6f0/0x6f0 [ 2127.790507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2127.791534] ? wait_for_completion_io+0x270/0x270 [ 2127.792576] __x64_sys_openat+0x13f/0x1f0 [ 2127.793462] ? __ia32_sys_open+0x1c0/0x1c0 [ 2127.794356] ? ksys_write+0x1a9/0x260 [ 2127.795172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2127.796293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2127.797398] do_syscall_64+0x33/0x40 [ 2127.798191] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2127.799268] RIP: 0033:0x7f04f6dcfa04 [ 2127.800051] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2127.803899] RSP: 002b:00007f04f4371060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2127.805501] RAX: ffffffffffffffda RBX: 00007f04f6f30020 RCX: 00007f04f6dcfa04 [ 2127.806982] RDX: 0000000000000002 RSI: 00007f04f43710f0 RDI: 00000000ffffff9c [ 2127.808478] RBP: 00007f04f43710f0 R08: 0000000000000000 R09: 00007f04f4370f70 [ 2127.809961] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2127.811448] R13: 00007ffff354a23f R14: 00007f04f4371300 R15: 0000000000022000 [ 2127.812972] CPU: 0 PID: 28013 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2127.814344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2127.815974] Call Trace: [ 2127.816507] dump_stack+0x107/0x167 [ 2127.817219] should_fail.cold+0x5/0xa [ 2127.817978] ? proc_alloc_inode+0x18/0x200 [ 2127.818812] should_failslab+0x5/0x20 [ 2127.819552] kmem_cache_alloc+0x5b/0x310 [ 2127.820354] ? find_held_lock+0x2c/0x110 [ 2127.821146] ? proc_free_inode+0x20/0x20 [ 2127.821931] proc_alloc_inode+0x18/0x200 [ 2127.822721] ? proc_free_inode+0x20/0x20 [ 2127.823512] alloc_inode+0x63/0x240 [ 2127.824225] new_inode+0x23/0x250 [ 2127.824899] proc_pid_make_inode+0x22/0x220 [ 2127.825747] proc_pident_instantiate+0x81/0x320 [ 2127.826648] proc_pident_lookup+0x1eb/0x270 [ 2127.827503] __lookup_slow+0x252/0x490 [ 2127.828274] ? lookup_open.isra.0+0x1270/0x1270 [ 2127.829198] ? selinux_inode_permission+0x401/0x640 [ 2127.830169] ? selinux_path_notify+0x4d0/0x4d0 [ 2127.831058] walk_component+0x41e/0x6a0 [ 2127.831835] ? handle_dots.part.0+0x15c0/0x15c0 [ 2127.832748] ? security_inode_permission+0xcb/0x100 [ 2127.833716] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2127.834590] link_path_walk.part.0+0x699/0xbf0 [ 2127.835490] ? walk_component+0x6a0/0x6a0 [ 2127.836302] ? percpu_counter_add_batch+0x8b/0x140 [ 2127.837282] path_openat+0x25d/0x2770 [ 2127.838035] ? path_lookupat+0x860/0x860 [ 2127.838829] ? perf_trace_lock+0xac/0x490 [ 2127.839627] ? lock_acquire+0x197/0x470 [ 2127.840409] ? find_held_lock+0x2c/0x110 [ 2127.841195] ? __lockdep_reset_lock+0x180/0x180 [ 2127.842094] do_filp_open+0x190/0x3e0 [ 2127.842834] ? may_open_dev+0xf0/0xf0 [ 2127.843579] ? simple_attr_release+0x50/0x50 [ 2127.844445] ? _raw_spin_unlock+0x1a/0x30 [ 2127.845248] ? alloc_fd+0x2e7/0x670 [ 2127.845962] do_sys_openat2+0x171/0x4d0 [ 2127.846734] ? build_open_flags+0x6f0/0x6f0 [ 2127.847563] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2127.848502] ? wait_for_completion_io+0x270/0x270 [ 2127.849448] __x64_sys_openat+0x13f/0x1f0 [ 2127.850245] ? __ia32_sys_open+0x1c0/0x1c0 [ 2127.851049] ? ksys_write+0x1a9/0x260 [ 2127.851788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2127.852805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2127.853799] do_syscall_64+0x33/0x40 [ 2127.854518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2127.855500] RIP: 0033:0x7efd9561da04 [ 2127.856222] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2127.859739] RSP: 002b:00007efd92bbf060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2127.861210] RAX: ffffffffffffffda RBX: 00007efd9577e020 RCX: 00007efd9561da04 [ 2127.862572] RDX: 0000000000000002 RSI: 00007efd92bbf0f0 RDI: 00000000ffffff9c [ 2127.863926] RBP: 00007efd92bbf0f0 R08: 0000000000000000 R09: 00007efd92bbef70 [ 2127.865299] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2127.866646] R13: 00007ffd1cc654df R14: 00007efd92bbf300 R15: 0000000000022000 08:37:01 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10044001}, 0x0) syz_io_uring_setup(0x119a, &(0x7f0000000080)={0x0, 0x44af, 0x0, 0x2, 0x19a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x5, 0x0, &(0x7f0000000140)="fd1eed5225a02aa86205ac6ca00181d6a0d5dcf235b9548b7cf7fc170dd28b7faaf86e1561b5af2611581d0ceb58a6296d285816b30141bde413cfb0fb", 0x2, 0x0, 0x0, {0x3}}, 0x3c) r4 = fork() ptrace(0x10, r4) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x4002840}, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000200)='ns/net\x00') 08:37:18 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 31) 08:37:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xb00, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:18 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:37:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000140)="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") r1 = fork() ptrace(0x10, r1) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x4002840}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{&(0x7f0000001140), 0x6e, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/149, 0x95}, {&(0x7f0000001280)=""/203, 0xcb}, {&(0x7f0000001380)=""/103, 0x67}], 0x3, &(0x7f0000001400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x40000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c00)={&(0x7f0000001500)={0x6f8, 0x12, 0xf, 0x801, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x8}, [@nested={0x176, 0x32, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @pid=r1}, @generic="4f1a15a32da78e61acb6ab6ed3fbdf705799ece1308330fe2530091f92e5ba4bcb937a8c2d758f0a2caf3f8680d96febc0018af98cf663b82483b93a319b9d874272ac4a9ba2401ce847c70b99a8ed6a25fc993570be7d7e538cc820f27d82162daa0c0756093af586706b0bebfe339ade4df5b31e230b029ad0e9ef8503238e30c665", @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="b90ad644b96d2ade9cd80057e9e6216a0d040a6e325c408a03638b9fea4cc9fa4b1447c28f6e3d3ee089dee1c501fc9536c0fcf8b766ba3decf8503347e1c0ebfdb9f052953839c53cfe7061bdc27edb524d7762e348e29357e5a821923b7508cc53ab0dc98102e59d3fb94ac74b8a854fa84a6163cec27629abce9b31693038e6633984bfe82733dc7cfaa9ee5bc26b76f1b31ad5cd3f82a7fcf8c2294bb958407fad72fe4a532611e9a3ec35f7a39a1ccae2d70714cc3f8bf43aa0060296d7c2047fa71353ab28d8e6c9da11b2b18991f388dcd38776417ce908eb9f7794"]}, @nested={0x390, 0x62, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @uid=r3}, @generic="20ee4a2e28c57336c59ec1c5669c7e86a9eb20e95f16502af36f1df52edc890eb011d8f89741322cb22b1689b04ef4e97413901f55ce12fe793d4b36482c3bb847cb970a3f509cc2cb8038b0452718e0119d1c82758cb02a586a797454e4c8b4feda8794a4e2d6ccee4829c1bfafbdf9ec3544ef7b44874b406bdd6d6f8112f480ad205a3793e3a64f66efb8ef2b7595dc5b562ee1e2b89cc901b3b8424595005f176bec97090969f9d9", @generic="a924d942289e1af1cda95f98f6cb26d43bb05a329d90e95a65904babdf63e23adf1d5d3f31ce4ea2bb5aca0114836f5f96c3178d7ac8c8e659d70334090b69ddc1b66d7918092113d79222f2402ab40de3fb1a9f11b1a29ce6342332568208026d9d92cdae1f1194e4c29ed5947c8470d31606361df92aabff159edaec5ffcae39b2cec81d3cb69570418a16984c8096b559621bd1531a23b959b1e8c50646825d73fe48b608d5ebc82f7e88cc7dcee7062311987857596f6edde3", @typed={0x8, 0x7a, 0x0, 0x0, @fd=r0}, @generic="c704140c261fdd3418d84761eca8dd7ce0e63ac32c20bd01af06f7764d2e6e9bf174079875d7f9aa1ecd588cb153cd3331eb9fa67f1abf483e9ec91404b258549ca159ad5c3eae0f6821c2eec66c88e4af246653e922597cf0b6fa43097d80a382feff05c1f46454fe0dd997f6fad103ab5b3263166a2be025f0a0cd22b214e6bb95fbd1499240018f4a9dfddf7ec169d4e0e48ea5acea87e11ea6f22e5b6291d827f4c30f481da9a590d0bca4ba3afe", @typed={0xf3, 0x3c, 0x0, 0x0, @binary="b6a056b701ffc09f30b4aa3e250bf3ad278c2e59392490b221d0357178863022dfad9a20de845e110893ed92e5309b5efff41c4a92e36a658dcdfcb862b770bf98d0538e2f5840fb1b842c222fac8e03cf0564a039775309f69b336d546da65a5f66e628b32912757c74eb540cee57943918aea64c369b20798774152d935a09b609be47a886cf675b7ef546dce3819fe1f2fa81165b5116a64874f3ffe365493906d766521fa5794869cf7ad7274adeea58e3705b7229749a9d50bb83dff09233bffc84bceda1c863758296cdbdfaa9371c8b4ac9763e1faa8cbbdf1c8118475c78748d8fa81b94e9d74a7a703b83"}, @generic="120711204e7aecf8474b2b86a6cfbe6d8a9d72f7009f71ca517668f3eaaa6121dfc0760caacdb36039e286cf19cc590e47088bcdc0e1e713156c644512041d29e0f2fca4d6420ca479145efdd58899cf02b6816cc4eaf5e30db6865d72bcb28bde92f3cae3a268d9c41cd08ee59db021d02dac"]}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x8}, @generic="8612c2e52c74333cbf311100cb6f9c0237ed2843e8ab1a93a483a5b50a94ae85d4d86ba3c2862a687736837d8ccb474552f11683b74c8ce2d299066b7f80cf9e970c58f3d4e4630a9f4b93486e89db6ca1e601f22e705b9320e323bdc13596d1fe5b8f7028ec22239b5e599c2300de6fdeb3e45c24b1f6fc05b742543a316b7e8db4be7dbdc47218c90685a279f9d2de412658a97a19a0eeb3dd22e1c4626b1e991a08d165f71cb00a094dac5dfefe36c2049182a139f2", @generic="b848c205ba079bbfa8a3dc451da30145c280e79d7435b91937d3b4a07ee22aa615c6551274fd6d26b32abeb24b7dc2a87422c874cc72435c", @generic="d5b1834e7ca283e50db89a07aca6680a71cc478f1961570f25c556b77a2f0c770fdf99ca8c2eca6282e05b9a0840b77241ec16af29afc7e5b622b255d93c0bdd3ad9335e1369f1d1fa71a1a4b8d73f37e15f025e46855a776ed763d7afbbff400b80838427bfa97502e3e523aba4489ab440c3ee9fd96a9aa4b636b3f1561187833d39cae3d24c9b076627a8e58a4bae43576f446e87bc2b627b4968e5972ed82fede6b26756402658ea64120122dd6568ba68512960b9ae825c1455b5a6529adb363c5b96c52cc8de1645933b791e11495587be858232", @typed={0x8, 0x94, 0x0, 0x0, @pid}]}, 0x6f8}, 0x1, 0x0, 0x0, 0xf27c612f4b66eeed}, 0x40001) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:37:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x3000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 13) [ 2144.738776] FAULT_INJECTION: forcing a failure. [ 2144.738776] name failslab, interval 1, probability 0, space 0, times 0 [ 2144.740550] CPU: 1 PID: 28133 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2144.741554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2144.742739] Call Trace: [ 2144.743133] dump_stack+0x107/0x167 [ 2144.743667] should_fail.cold+0x5/0xa [ 2144.744223] ? create_object.isra.0+0x3a/0xa30 [ 2144.744907] should_failslab+0x5/0x20 [ 2144.745469] kmem_cache_alloc+0x5b/0x310 [ 2144.746060] create_object.isra.0+0x3a/0xa30 [ 2144.746700] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2144.747440] kmem_cache_alloc+0x159/0x310 [ 2144.748040] ? find_held_lock+0x2c/0x110 [ 2144.748650] ? proc_free_inode+0x20/0x20 [ 2144.749240] proc_alloc_inode+0x18/0x200 [ 2144.749833] ? proc_free_inode+0x20/0x20 [ 2144.750342] FAULT_INJECTION: forcing a failure. [ 2144.750342] name failslab, interval 1, probability 0, space 0, times 0 [ 2144.751970] alloc_inode+0x63/0x240 [ 2144.751983] new_inode+0x23/0x250 [ 2144.751998] proc_pid_make_inode+0x22/0x220 [ 2144.752012] proc_pident_instantiate+0x81/0x320 [ 2144.752027] proc_pident_lookup+0x1eb/0x270 [ 2144.752047] __lookup_slow+0x252/0x490 [ 2144.752060] ? lookup_open.isra.0+0x1270/0x1270 [ 2144.752092] ? selinux_inode_permission+0x401/0x640 [ 2144.752107] ? selinux_path_notify+0x4d0/0x4d0 [ 2144.752123] walk_component+0x41e/0x6a0 [ 2144.752137] ? handle_dots.part.0+0x15c0/0x15c0 [ 2144.752153] ? security_inode_permission+0xcb/0x100 [ 2144.752166] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2144.752184] link_path_walk.part.0+0x699/0xbf0 [ 2144.752204] ? walk_component+0x6a0/0x6a0 [ 2144.752232] ? percpu_counter_add_batch+0x8b/0x140 [ 2144.752252] path_openat+0x25d/0x2770 [ 2144.752275] ? path_lookupat+0x860/0x860 [ 2144.764013] ? perf_trace_lock+0xac/0x490 [ 2144.764626] ? lock_acquire+0x197/0x470 [ 2144.765201] ? find_held_lock+0x2c/0x110 [ 2144.765797] ? __lockdep_reset_lock+0x180/0x180 [ 2144.766474] do_filp_open+0x190/0x3e0 [ 2144.767026] ? may_open_dev+0xf0/0xf0 [ 2144.767586] ? simple_attr_release+0x50/0x50 [ 2144.768232] ? _raw_spin_unlock+0x1a/0x30 [ 2144.768890] ? alloc_fd+0x2e7/0x670 [ 2144.769426] do_sys_openat2+0x171/0x4d0 [ 2144.770001] ? build_open_flags+0x6f0/0x6f0 [ 2144.770618] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2144.771311] ? wait_for_completion_io+0x270/0x270 [ 2144.772012] __x64_sys_openat+0x13f/0x1f0 [ 2144.772615] ? __ia32_sys_open+0x1c0/0x1c0 [ 2144.773215] ? ksys_write+0x1a9/0x260 [ 2144.773775] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2144.774535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2144.775274] do_syscall_64+0x33/0x40 [ 2144.775807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2144.776555] RIP: 0033:0x7efd9561da04 [ 2144.777088] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2144.779722] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2144.780826] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2144.781844] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2144.782860] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2144.783875] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2144.784867] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2144.785915] CPU: 0 PID: 28135 Comm: syz-executor.7 Not tainted 5.10.259 #1 08:37:18 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 21) [ 2144.787467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2144.789519] Call Trace: [ 2144.790135] dump_stack+0x107/0x167 [ 2144.790990] should_fail.cold+0x5/0xa [ 2144.791919] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2144.793291] should_failslab+0x5/0x20 [ 2144.794271] kmem_cache_alloc_trace+0x55/0x320 [ 2144.795512] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2144.796861] ? io_import_iovec+0x1120/0x1120 [ 2144.798000] ? lock_downgrade+0x6d0/0x6d0 [ 2144.799085] ? do_raw_spin_lock+0x121/0x260 [ 2144.800207] ? rwlock_bug.part.0+0x90/0x90 [ 2144.801356] __io_uring_add_tctx_node+0x2c6/0x520 [ 2144.802602] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2144.803965] ? alloc_fd+0x2e7/0x670 [ 2144.805003] io_uring_setup+0x1fbb/0x2980 [ 2144.806125] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2144.807432] ? wait_for_completion_io+0x270/0x270 [ 2144.808847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2144.810199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2144.811559] do_syscall_64+0x33/0x40 [ 2144.812542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2144.813853] RIP: 0033:0x7f12dae86b19 [ 2144.814822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2144.819417] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2144.821364] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2144.823166] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2144.824970] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2144.826774] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2144.828579] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:37:18 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2144.878954] FAULT_INJECTION: forcing a failure. [ 2144.878954] name failslab, interval 1, probability 0, space 0, times 0 [ 2144.881513] CPU: 0 PID: 28168 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2144.883055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2144.884931] Call Trace: [ 2144.885528] dump_stack+0x107/0x167 [ 2144.886357] should_fail.cold+0x5/0xa [ 2144.887227] ? create_object.isra.0+0x3a/0xa30 [ 2144.888270] should_failslab+0x5/0x20 [ 2144.889147] kmem_cache_alloc+0x5b/0x310 [ 2144.890079] create_object.isra.0+0x3a/0xa30 [ 2144.891067] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2144.892231] kmem_cache_alloc+0x159/0x310 [ 2144.893207] security_inode_alloc+0x34/0x160 [ 2144.894211] inode_init_always+0xa4e/0xd10 [ 2144.895173] ? proc_free_inode+0x20/0x20 [ 2144.896114] alloc_inode+0x84/0x240 [ 2144.896963] new_inode+0x23/0x250 [ 2144.897765] proc_pid_make_inode+0x22/0x220 [ 2144.898755] proc_ns_instantiate+0x55/0x100 [ 2144.899761] proc_ns_dir_lookup+0x210/0x2c0 [ 2144.900783] lookup_open.isra.0+0x79f/0x1270 [ 2144.901807] ? vfs_tmpfile+0x350/0x350 [ 2144.902758] ? __mnt_want_write+0x196/0x280 [ 2144.903785] path_openat+0x972/0x2770 [ 2144.904717] ? path_lookupat+0x860/0x860 [ 2144.905644] ? perf_trace_lock+0x2bd/0x490 [ 2144.906606] ? lock_acquire+0x197/0x470 [ 2144.907521] ? find_held_lock+0x2c/0x110 [ 2144.908492] ? __lockdep_reset_lock+0x180/0x180 [ 2144.909573] do_filp_open+0x190/0x3e0 [ 2144.910456] ? may_open_dev+0xf0/0xf0 [ 2144.911374] ? simple_attr_release+0x50/0x50 [ 2144.912445] ? _raw_spin_unlock+0x1a/0x30 [ 2144.913408] ? alloc_fd+0x2e7/0x670 [ 2144.914279] do_sys_openat2+0x171/0x4d0 [ 2144.915212] ? build_open_flags+0x6f0/0x6f0 [ 2144.916221] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2144.917466] ? wait_for_completion_io+0x270/0x270 [ 2144.918878] __x64_sys_openat+0x13f/0x1f0 [ 2144.920079] ? __ia32_sys_open+0x1c0/0x1c0 [ 2144.921309] ? ksys_write+0x1a9/0x260 [ 2144.922433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2144.923935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2144.925451] do_syscall_64+0x33/0x40 [ 2144.926537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2144.928009] RIP: 0033:0x7f04f6dcfa04 [ 2144.929113] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2144.934389] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2144.936607] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2144.938679] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2144.940757] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2144.942836] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2144.944926] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:37:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 14) 08:37:18 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:37:18 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 32) 08:37:18 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 22) 08:37:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2145.055726] FAULT_INJECTION: forcing a failure. [ 2145.055726] name failslab, interval 1, probability 0, space 0, times 0 [ 2145.057502] CPU: 0 PID: 28250 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2145.058591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2145.059891] Call Trace: [ 2145.060322] dump_stack+0x107/0x167 [ 2145.060902] should_fail.cold+0x5/0xa [ 2145.061503] ? security_inode_alloc+0x34/0x160 [ 2145.062229] should_failslab+0x5/0x20 [ 2145.062832] kmem_cache_alloc+0x5b/0x310 [ 2145.063487] security_inode_alloc+0x34/0x160 [ 2145.064193] inode_init_always+0xa4e/0xd10 [ 2145.065446] ? proc_free_inode+0x20/0x20 [ 2145.066563] alloc_inode+0x84/0x240 [ 2145.067549] new_inode+0x23/0x250 [ 2145.068525] proc_pid_make_inode+0x22/0x220 [ 2145.069597] proc_pident_instantiate+0x81/0x320 [ 2145.070666] proc_pident_lookup+0x1eb/0x270 [ 2145.071676] __lookup_slow+0x252/0x490 [ 2145.072579] ? lookup_open.isra.0+0x1270/0x1270 [ 2145.073693] ? selinux_inode_permission+0x401/0x640 [ 2145.074872] ? selinux_path_notify+0x4d0/0x4d0 [ 2145.075928] walk_component+0x41e/0x6a0 [ 2145.076864] ? handle_dots.part.0+0x15c0/0x15c0 [ 2145.077969] ? security_inode_permission+0xcb/0x100 [ 2145.079110] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2145.080145] link_path_walk.part.0+0x699/0xbf0 [ 2145.081223] ? walk_component+0x6a0/0x6a0 [ 2145.082165] ? percpu_counter_add_batch+0x8b/0x140 [ 2145.083322] path_openat+0x25d/0x2770 [ 2145.084226] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2145.085386] ? path_lookupat+0x860/0x860 [ 2145.086309] ? perf_trace_lock+0x2bd/0x490 [ 2145.087270] ? lock_acquire+0x197/0x470 [ 2145.088171] ? find_held_lock+0x2c/0x110 [ 2145.089117] ? __lockdep_reset_lock+0x180/0x180 [ 2145.090192] do_filp_open+0x190/0x3e0 08:37:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) [ 2145.091059] ? may_open_dev+0xf0/0xf0 [ 2145.092108] ? simple_attr_release+0x50/0x50 [ 2145.093152] ? _raw_spin_unlock+0x1a/0x30 [ 2145.094096] ? alloc_fd+0x2e7/0x670 [ 2145.094952] do_sys_openat2+0x171/0x4d0 [ 2145.095864] ? build_open_flags+0x6f0/0x6f0 [ 2145.096868] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2145.097969] ? wait_for_completion_io+0x270/0x270 [ 2145.099071] __x64_sys_openat+0x13f/0x1f0 [ 2145.100005] ? __ia32_sys_open+0x1c0/0x1c0 [ 2145.100958] ? ksys_write+0x1a9/0x260 [ 2145.101831] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2145.103011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2145.104181] do_syscall_64+0x33/0x40 [ 2145.105028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2145.105563] FAULT_INJECTION: forcing a failure. [ 2145.105563] name failslab, interval 1, probability 0, space 0, times 0 [ 2145.106189] RIP: 0033:0x7efd9561da04 [ 2145.109580] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2145.113747] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2145.115447] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2145.117053] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2145.118637] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2145.120233] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2145.121820] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2145.123475] CPU: 1 PID: 28253 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2145.125127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2145.127103] Call Trace: [ 2145.127723] dump_stack+0x107/0x167 [ 2145.128587] should_fail.cold+0x5/0xa [ 2145.129473] ? create_object.isra.0+0x3a/0xa30 [ 2145.130524] should_failslab+0x5/0x20 [ 2145.131402] kmem_cache_alloc+0x5b/0x310 [ 2145.132351] create_object.isra.0+0x3a/0xa30 [ 2145.133391] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2145.134569] kmem_cache_alloc_trace+0x151/0x320 [ 2145.135652] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2145.136832] ? io_import_iovec+0x1120/0x1120 [ 2145.137850] ? lock_downgrade+0x6d0/0x6d0 [ 2145.138803] ? do_raw_spin_lock+0x121/0x260 [ 2145.139796] ? rwlock_bug.part.0+0x90/0x90 [ 2145.140792] __io_uring_add_tctx_node+0x2c6/0x520 [ 2145.141904] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2145.143107] ? alloc_fd+0x2e7/0x670 [ 2145.143964] io_uring_setup+0x1fbb/0x2980 [ 2145.144979] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2145.146153] ? wait_for_completion_io+0x270/0x270 [ 2145.147301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2145.148564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2145.149771] do_syscall_64+0x33/0x40 [ 2145.150638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2145.151818] RIP: 0033:0x7f12dae86b19 [ 2145.152685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2145.156923] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2145.158673] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2145.160323] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2145.161964] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2145.163607] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2145.165252] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:37:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf00, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x4000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2145.226080] FAULT_INJECTION: forcing a failure. [ 2145.226080] name failslab, interval 1, probability 0, space 0, times 0 [ 2145.228741] CPU: 1 PID: 28260 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2145.230344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2145.232260] Call Trace: [ 2145.232889] dump_stack+0x107/0x167 [ 2145.233744] should_fail.cold+0x5/0xa [ 2145.234634] ? create_object.isra.0+0x3a/0xa30 [ 2145.235696] should_failslab+0x5/0x20 [ 2145.236588] kmem_cache_alloc+0x5b/0x310 [ 2145.237546] create_object.isra.0+0x3a/0xa30 [ 2145.238563] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2145.239752] kmem_cache_alloc+0x159/0x310 [ 2145.240750] security_inode_alloc+0x34/0x160 [ 2145.241784] inode_init_always+0xa4e/0xd10 [ 2145.242766] ? proc_free_inode+0x20/0x20 [ 2145.243716] alloc_inode+0x84/0x240 [ 2145.244576] new_inode+0x23/0x250 [ 2145.245392] proc_pid_make_inode+0x22/0x220 [ 2145.246400] proc_ns_instantiate+0x55/0x100 [ 2145.247410] proc_ns_dir_lookup+0x210/0x2c0 [ 2145.248434] lookup_open.isra.0+0x79f/0x1270 [ 2145.249474] ? vfs_tmpfile+0x350/0x350 [ 2145.250431] ? __mnt_want_write+0x196/0x280 [ 2145.251457] path_openat+0x972/0x2770 [ 2145.252381] ? path_lookupat+0x860/0x860 [ 2145.253325] ? perf_trace_lock+0x2bd/0x490 [ 2145.254318] ? lock_acquire+0x197/0x470 [ 2145.255248] ? find_held_lock+0x2c/0x110 [ 2145.256206] ? __lockdep_reset_lock+0x180/0x180 [ 2145.257324] do_filp_open+0x190/0x3e0 [ 2145.258211] ? may_open_dev+0xf0/0xf0 [ 2145.259131] ? simple_attr_release+0x50/0x50 [ 2145.260180] ? _raw_spin_unlock+0x1a/0x30 [ 2145.261161] ? alloc_fd+0x2e7/0x670 [ 2145.262036] do_sys_openat2+0x171/0x4d0 [ 2145.262970] ? build_open_flags+0x6f0/0x6f0 [ 2145.263969] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2145.265105] ? wait_for_completion_io+0x270/0x270 [ 2145.266245] __x64_sys_openat+0x13f/0x1f0 [ 2145.267210] ? __ia32_sys_open+0x1c0/0x1c0 [ 2145.268188] ? ksys_write+0x1a9/0x260 [ 2145.269097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2145.270314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2145.271520] do_syscall_64+0x33/0x40 [ 2145.272398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2145.273588] RIP: 0033:0x7f04f6dcfa04 [ 2145.274455] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2145.278704] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2145.280474] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2145.282121] RDX: 0000000000000002 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2145.283800] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2145.285456] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2145.287112] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:37:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xea, 0x35, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x201, 0xf26b, 0x1ff, 0x2, 0x8, 0x3f, 0x3, 0x0, 0x1, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r2 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10044001}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x6, 0xc2, 0x0, 0x7, 0x0, 0x0, {0x0, r6}}, 0x5) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="849fe74fff6f5cb8", 0x8}, {&(0x7f0000000200)="2323492df7104b3221194812786039c2a93fb85f1efa15f69bdbfec5eee697879ce8b5c9035a28a95fcc7edbd9384bfe0e46c2dcadc41dc817718a7f50b45aab3b8e0c4aab12ffe9ac91a923d380bc9619c4fec00b7082e556418509171aee97cbb025453e44807b63cfd0e025402a9c71dd3cb65b88e09db332a7b176b012eba3b3a4c0cc02dbd76df354d9829018e439ec002dcbe715cb0ab4930250ebcbd636fc00ef721b71de75c664", 0xab}], 0x2) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x8010, r2, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x111583, 0x0) syz_io_uring_setup(0x74fd, &(0x7f00000003c0)={0x0, 0x85b3, 0x4, 0x0, 0x76, 0x0, r8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) poll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0) read$snapshot(r7, &(0x7f0000000080)=""/177, 0xb1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x0, 0xfb, 0x80, 0x0, 0x4, 0x4800, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x5000, 0xee73, 0x69, 0x6, 0x180000000000, 0x3fe7, 0xfff9, 0x0, 0x40, 0x0, 0xfff}, 0x0, 0x9, r7, 0x0) [ 2161.652809] FAULT_INJECTION: forcing a failure. [ 2161.652809] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.655603] CPU: 0 PID: 28384 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2161.657134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2161.658929] Call Trace: [ 2161.659522] dump_stack+0x107/0x167 [ 2161.660334] should_fail.cold+0x5/0xa [ 2161.661199] ? create_object.isra.0+0x3a/0xa30 [ 2161.662199] should_failslab+0x5/0x20 [ 2161.663052] kmem_cache_alloc+0x5b/0x310 [ 2161.663963] create_object.isra.0+0x3a/0xa30 [ 2161.664941] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2161.666074] kmem_cache_alloc+0x159/0x310 [ 2161.667005] security_inode_alloc+0x34/0x160 [ 2161.667985] inode_init_always+0xa4e/0xd10 [ 2161.669123] ? proc_free_inode+0x20/0x20 [ 2161.670041] alloc_inode+0x84/0x240 [ 2161.670841] new_inode+0x23/0x250 [ 2161.671626] proc_pid_make_inode+0x22/0x220 [ 2161.672600] proc_pident_instantiate+0x81/0x320 [ 2161.673644] proc_pident_lookup+0x1eb/0x270 [ 2161.674616] __lookup_slow+0x252/0x490 [ 2161.675485] ? lookup_open.isra.0+0x1270/0x1270 [ 2161.676578] ? selinux_inode_permission+0x401/0x640 [ 2161.677688] ? selinux_path_notify+0x4d0/0x4d0 [ 2161.678706] walk_component+0x41e/0x6a0 [ 2161.679754] ? handle_dots.part.0+0x15c0/0x15c0 [ 2161.680801] ? security_inode_permission+0xcb/0x100 [ 2161.682129] ? proc_pid_attr_read+0x2b0/0x2b0 [ 2161.683167] link_path_walk.part.0+0x699/0xbf0 [ 2161.684385] ? walk_component+0x6a0/0x6a0 [ 2161.685493] ? percpu_counter_add_batch+0x8b/0x140 [ 2161.686831] path_openat+0x25d/0x2770 [ 2161.687855] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2161.689217] ? path_lookupat+0x860/0x860 [ 2161.690294] ? perf_trace_lock+0x2bd/0x490 [ 2161.691417] ? lock_acquire+0x197/0x470 [ 2161.692482] ? find_held_lock+0x2c/0x110 [ 2161.693580] ? __lockdep_reset_lock+0x180/0x180 [ 2161.694828] do_filp_open+0x190/0x3e0 [ 2161.695831] ? may_open_dev+0xf0/0xf0 [ 2161.696889] ? simple_attr_release+0x50/0x50 [ 2161.698076] ? _raw_spin_unlock+0x1a/0x30 [ 2161.699169] ? alloc_fd+0x2e7/0x670 [ 2161.700162] do_sys_openat2+0x171/0x4d0 [ 2161.701242] ? build_open_flags+0x6f0/0x6f0 [ 2161.702375] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2161.703660] ? wait_for_completion_io+0x270/0x270 [ 2161.704962] __x64_sys_openat+0x13f/0x1f0 [ 2161.706061] ? __ia32_sys_open+0x1c0/0x1c0 [ 2161.707172] ? ksys_write+0x1a9/0x260 [ 2161.708198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2161.709577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2161.710939] do_syscall_64+0x33/0x40 [ 2161.711778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2161.713139] RIP: 0033:0x7efd9561da04 [ 2161.713981] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2161.717964] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2161.719622] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2161.721194] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2161.722742] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2161.724287] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2161.725853] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:37:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 15) 08:37:34 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:37:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc1}) write$bt_hci(r2, &(0x7f0000000080)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x3}}}, 0x5) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:37:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/177, 0xb1) setns(r1, 0x62000000) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 08:37:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x1100, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 23) 08:37:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x5000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:35 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 33) [ 2161.767004] FAULT_INJECTION: forcing a failure. [ 2161.767004] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.770131] CPU: 0 PID: 28419 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2161.771903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2161.774210] Call Trace: [ 2161.774923] dump_stack+0x107/0x167 [ 2161.775892] should_fail.cold+0x5/0xa [ 2161.776930] ? create_object.isra.0+0x3a/0xa30 [ 2161.778049] should_failslab+0x5/0x20 [ 2161.778909] kmem_cache_alloc+0x5b/0x310 [ 2161.779844] ? exit_to_user_mode_prepare+0x1cc/0x1e0 08:37:35 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 16) [ 2161.781004] ? syscall_exit_to_user_mode+0x38/0x1d0 [ 2161.782254] create_object.isra.0+0x3a/0xa30 [ 2161.783251] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2161.784414] kmem_cache_alloc+0x159/0x310 [ 2161.785373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2161.786563] getname_flags.part.0+0x50/0x4f0 [ 2161.787572] getname+0x8e/0xd0 [ 2161.788309] do_sys_openat2+0xf9/0x4d0 [ 2161.789207] ? security_file_free+0xaa/0xd0 [ 2161.790177] ? build_open_flags+0x6f0/0x6f0 [ 2161.791172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2161.792351] ? call_rcu+0x3e7/0x9e0 [ 2161.793182] __x64_sys_openat+0x13f/0x1f0 [ 2161.794129] ? __ia32_sys_open+0x1c0/0x1c0 [ 2161.795098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2161.796284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2161.797462] do_syscall_64+0x33/0x40 [ 2161.798309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2161.799467] RIP: 0033:0x7f04f6dcfa04 [ 2161.800306] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2161.804467] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2161.806205] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2161.807830] RDX: 0000000000000000 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2161.809441] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2161.811053] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2161.812665] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2161.828998] FAULT_INJECTION: forcing a failure. [ 2161.828998] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.830632] CPU: 1 PID: 28503 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2161.831543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2161.832644] Call Trace: [ 2161.833001] dump_stack+0x107/0x167 [ 2161.833486] should_fail.cold+0x5/0xa [ 2161.833989] ? __d_alloc+0x2a/0x990 [ 2161.834471] should_failslab+0x5/0x20 [ 2161.834985] kmem_cache_alloc+0x5b/0x310 [ 2161.835526] __d_alloc+0x2a/0x990 [ 2161.835986] ? __lockdep_reset_lock+0x180/0x180 [ 2161.836610] d_alloc+0x46/0x240 [ 2161.837052] d_alloc_parallel+0xe9/0x1a30 [ 2161.837602] ? __d_lookup+0x396/0x760 [ 2161.838107] ? lock_downgrade+0x6d0/0x6d0 [ 2161.838654] ? find_held_lock+0x2c/0x110 [ 2161.839200] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2161.839751] ? __d_lookup+0x3bf/0x760 [ 2161.840272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2161.840982] lookup_open.isra.0+0x962/0x1270 [ 2161.841573] ? vfs_tmpfile+0x350/0x350 [ 2161.842112] ? __mnt_want_write+0x196/0x280 [ 2161.842686] path_openat+0x972/0x2770 [ 2161.843208] ? path_lookupat+0x860/0x860 [ 2161.843754] ? perf_trace_lock+0xac/0x490 [ 2161.844307] ? lock_acquire+0x197/0x470 [ 2161.844840] ? find_held_lock+0x2c/0x110 [ 2161.845387] ? __lockdep_reset_lock+0x180/0x180 [ 2161.845999] do_filp_open+0x190/0x3e0 [ 2161.846502] ? may_open_dev+0xf0/0xf0 [ 2161.847016] ? simple_attr_release+0x50/0x50 [ 2161.847612] ? _raw_spin_unlock+0x1a/0x30 [ 2161.848168] ? alloc_fd+0x2e7/0x670 [ 2161.848670] do_sys_openat2+0x171/0x4d0 [ 2161.849198] ? build_open_flags+0x6f0/0x6f0 [ 2161.849768] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2161.850411] ? wait_for_completion_io+0x270/0x270 [ 2161.851048] __x64_sys_openat+0x13f/0x1f0 [ 2161.851594] ? __ia32_sys_open+0x1c0/0x1c0 [ 2161.852148] ? ksys_write+0x1a9/0x260 [ 2161.852665] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2161.853360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2161.854039] do_syscall_64+0x33/0x40 [ 2161.854536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2161.855219] RIP: 0033:0x7efd9561da04 [ 2161.855709] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2161.858136] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2161.859137] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2161.860078] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2161.861039] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2161.861977] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2161.862911] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2161.864972] FAULT_INJECTION: forcing a failure. [ 2161.864972] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.866441] CPU: 1 PID: 28505 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2161.867345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2161.868433] Call Trace: [ 2161.868789] dump_stack+0x107/0x167 [ 2161.869277] should_fail.cold+0x5/0xa [ 2161.869789] ? io_wq_create+0xeb/0xc00 [ 2161.870305] should_failslab+0x5/0x20 [ 2161.870800] __kmalloc+0x72/0x390 [ 2161.871267] io_wq_create+0xeb/0xc00 [ 2161.871758] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2161.872416] ? io_import_iovec+0x1120/0x1120 [ 2161.873010] ? io_apoll_task_func+0x2d0/0x2d0 [ 2161.873592] ? __io_req_find_next+0x300/0x300 [ 2161.874176] ? do_raw_spin_lock+0x121/0x260 [ 2161.874746] ? rwlock_bug.part.0+0x90/0x90 [ 2161.875303] __io_uring_add_tctx_node+0x2c6/0x520 [ 2161.875952] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2161.876637] ? alloc_fd+0x2e7/0x670 [ 2161.877119] io_uring_setup+0x1fbb/0x2980 [ 2161.877670] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2161.878333] ? wait_for_completion_io+0x270/0x270 [ 2161.878988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2161.879658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2161.880336] do_syscall_64+0x33/0x40 [ 2161.880833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2161.881502] RIP: 0033:0x7f12dae86b19 [ 2161.881977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2161.884356] RSP: 002b:00007f12d83db108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2161.885333] RAX: ffffffffffffffda RBX: 00007f12daf9a020 RCX: 00007f12dae86b19 [ 2161.886241] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2161.887154] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2161.888068] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2161.888991] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:37:35 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:37:35 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r2 = fork() ptrace(0x10, r2) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x4002840}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0) read$snapshot(r4, &(0x7f0000000080)=""/177, 0xb1) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10044001}, 0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r1, &(0x7f0000000000)={r4, r7, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xf4}}, './file0\x00'}) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/time\x00') setns(r1, 0x0) [ 2174.708555] FAULT_INJECTION: forcing a failure. [ 2174.708555] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.709876] CPU: 1 PID: 28626 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2174.710639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.711564] Call Trace: [ 2174.711870] dump_stack+0x107/0x167 [ 2174.712294] should_fail.cold+0x5/0xa [ 2174.712737] ? create_object.isra.0+0x3a/0xa30 [ 2174.713246] should_failslab+0x5/0x20 [ 2174.713673] kmem_cache_alloc+0x5b/0x310 [ 2174.714129] create_object.isra.0+0x3a/0xa30 [ 2174.714614] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2174.715181] kmem_cache_alloc+0x159/0x310 [ 2174.715650] __d_alloc+0x2a/0x990 [ 2174.716040] ? __lockdep_reset_lock+0x180/0x180 [ 2174.716558] d_alloc+0x46/0x240 [ 2174.716939] d_alloc_parallel+0xe9/0x1a30 [ 2174.717402] ? __d_lookup+0x396/0x760 [ 2174.717825] ? lock_downgrade+0x6d0/0x6d0 [ 2174.718295] ? find_held_lock+0x2c/0x110 [ 2174.718749] ? __d_lookup_rcu+0x6d0/0x6d0 [ 2174.719214] ? __d_lookup+0x3bf/0x760 [ 2174.719637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.720222] lookup_open.isra.0+0x962/0x1270 [ 2174.720722] ? vfs_tmpfile+0x350/0x350 [ 2174.721173] ? __mnt_want_write+0x196/0x280 [ 2174.721659] path_openat+0x972/0x2770 [ 2174.722096] ? path_lookupat+0x860/0x860 [ 2174.722548] ? perf_trace_lock+0xac/0x490 [ 2174.723006] ? lock_acquire+0x197/0x470 [ 2174.723445] ? find_held_lock+0x2c/0x110 [ 2174.723903] ? __lockdep_reset_lock+0x180/0x180 [ 2174.724432] do_filp_open+0x190/0x3e0 [ 2174.724864] ? may_open_dev+0xf0/0xf0 [ 2174.725301] ? simple_attr_release+0x50/0x50 [ 2174.725798] ? _raw_spin_unlock+0x1a/0x30 [ 2174.726260] ? alloc_fd+0x2e7/0x670 [ 2174.726673] do_sys_openat2+0x171/0x4d0 [ 2174.727117] ? build_open_flags+0x6f0/0x6f0 [ 2174.727594] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2174.728126] ? wait_for_completion_io+0x270/0x270 [ 2174.728676] __x64_sys_openat+0x13f/0x1f0 [ 2174.729140] ? __ia32_sys_open+0x1c0/0x1c0 [ 2174.729609] ? ksys_write+0x1a9/0x260 [ 2174.730038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.730625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.731201] do_syscall_64+0x33/0x40 [ 2174.731614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2174.732183] RIP: 0033:0x7efd9561da04 [ 2174.732595] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2174.734643] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2174.735487] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2174.736290] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2174.737096] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2174.737893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2174.738685] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2174.753294] FAULT_INJECTION: forcing a failure. [ 2174.753294] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.754614] CPU: 1 PID: 28632 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2174.755376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.756294] Call Trace: [ 2174.756591] dump_stack+0x107/0x167 [ 2174.757008] should_fail.cold+0x5/0xa [ 2174.757433] ? io_wq_create+0xeb/0xc00 [ 2174.757871] should_failslab+0x5/0x20 [ 2174.758304] __kmalloc+0x72/0x390 [ 2174.758702] FAULT_INJECTION: forcing a failure. [ 2174.758702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2174.758742] io_wq_create+0xeb/0xc00 [ 2174.762104] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2174.762667] ? io_import_iovec+0x1120/0x1120 [ 2174.763153] ? io_apoll_task_func+0x2d0/0x2d0 [ 2174.763648] ? __io_req_find_next+0x300/0x300 [ 2174.764144] ? do_raw_spin_lock+0x121/0x260 [ 2174.764619] ? rwlock_bug.part.0+0x90/0x90 [ 2174.765100] __io_uring_add_tctx_node+0x2c6/0x520 [ 2174.765635] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2174.766220] ? alloc_fd+0x2e7/0x670 [ 2174.766630] io_uring_setup+0x1fbb/0x2980 [ 2174.767092] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2174.767653] ? wait_for_completion_io+0x270/0x270 [ 2174.768198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.768787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.769361] do_syscall_64+0x33/0x40 [ 2174.769777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2174.770350] RIP: 0033:0x7f12dae86b19 [ 2174.770763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.772799] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2174.773641] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2174.774425] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2174.775219] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2174.776007] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2174.776804] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2174.777619] CPU: 0 PID: 28637 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2174.779099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.780859] Call Trace: [ 2174.781433] dump_stack+0x107/0x167 [ 2174.782214] should_fail.cold+0x5/0xa [ 2174.783036] strncpy_from_user+0x34/0x470 [ 2174.783938] getname_flags.part.0+0x95/0x4f0 [ 2174.784887] getname+0x8e/0xd0 [ 2174.785590] do_sys_openat2+0xf9/0x4d0 [ 2174.786418] ? security_file_free+0xaa/0xd0 [ 2174.787338] ? build_open_flags+0x6f0/0x6f0 [ 2174.788270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.789387] ? call_rcu+0x3e7/0x9e0 [ 2174.790180] __x64_sys_openat+0x13f/0x1f0 [ 2174.791064] ? __ia32_sys_open+0x1c0/0x1c0 [ 2174.791979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.793102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.794204] do_syscall_64+0x33/0x40 [ 2174.794997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2174.796081] RIP: 0033:0x7f04f6dcfa04 [ 2174.796877] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2174.800758] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2174.802364] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2174.803876] RDX: 0000000000000000 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2174.805385] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2174.806893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2174.808400] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:37:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 17) 08:37:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x6000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x1300, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:37:48 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 34) 08:37:48 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 24) 08:37:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) write$bt_hci(r0, &(0x7f0000000040)={0x1, @reject_conn_req={{0x40a, 0x7}, {@none, 0x9}}}, 0xb) 08:37:48 executing program 4: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff9, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:37:48 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x88, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:37:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 18) 08:37:48 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x40044590, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) read$snapshot(r2, &(0x7f0000000080)=""/177, 0xb1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/112) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r1, &(0x7f00000000c0)=""/96, 0x60) [ 2174.924080] FAULT_INJECTION: forcing a failure. [ 2174.924080] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.925580] CPU: 1 PID: 28740 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2174.926365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.927287] Call Trace: [ 2174.927587] dump_stack+0x107/0x167 [ 2174.927995] should_fail.cold+0x5/0xa [ 2174.928424] ? proc_alloc_inode+0x18/0x200 [ 2174.928910] should_failslab+0x5/0x20 [ 2174.929338] kmem_cache_alloc+0x5b/0x310 [ 2174.929793] ? proc_free_inode+0x20/0x20 [ 2174.930247] proc_alloc_inode+0x18/0x200 [ 2174.930704] ? proc_free_inode+0x20/0x20 [ 2174.931151] alloc_inode+0x63/0x240 [ 2174.931557] new_inode+0x23/0x250 [ 2174.931945] proc_pid_make_inode+0x22/0x220 [ 2174.932444] proc_ns_instantiate+0x55/0x100 [ 2174.932934] proc_ns_dir_lookup+0x210/0x2c0 [ 2174.933433] lookup_open.isra.0+0x79f/0x1270 [ 2174.933925] ? vfs_tmpfile+0x350/0x350 [ 2174.934379] ? __mnt_want_write+0x196/0x280 [ 2174.934871] path_openat+0x972/0x2770 [ 2174.935311] ? path_lookupat+0x860/0x860 [ 2174.935774] ? perf_trace_lock+0xac/0x490 [ 2174.936239] ? lock_acquire+0x197/0x470 [ 2174.936692] ? find_held_lock+0x2c/0x110 [ 2174.937142] ? __lockdep_reset_lock+0x180/0x180 [ 2174.937661] do_filp_open+0x190/0x3e0 [ 2174.938081] ? may_open_dev+0xf0/0xf0 [ 2174.938535] ? simple_attr_release+0x50/0x50 [ 2174.939030] ? _raw_spin_unlock+0x1a/0x30 [ 2174.939493] ? alloc_fd+0x2e7/0x670 [ 2174.939945] do_sys_openat2+0x171/0x4d0 08:37:48 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 35) [ 2174.939958] ? build_open_flags+0x6f0/0x6f0 [ 2174.939967] ? __mutex_unlock_slowpath+0xe1/0x600 08:37:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x3f00, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2174.939983] ? wait_for_completion_io+0x270/0x270 [ 2174.939999] __x64_sys_openat+0x13f/0x1f0 [ 2174.940010] ? __ia32_sys_open+0x1c0/0x1c0 08:37:48 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x89, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:37:48 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 25) [ 2174.940018] ? ksys_write+0x1a9/0x260 [ 2174.940033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.940045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.940058] do_syscall_64+0x33/0x40 [ 2174.940069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2174.940076] RIP: 0033:0x7efd9561da04 [ 2174.940086] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2174.940091] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2174.940103] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2174.940110] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2174.940117] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2174.940122] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2174.940129] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2174.993430] FAULT_INJECTION: forcing a failure. [ 2174.993430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2174.993469] CPU: 1 PID: 28757 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2174.993476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.993481] Call Trace: [ 2174.993498] dump_stack+0x107/0x167 [ 2174.993514] should_fail.cold+0x5/0xa [ 2174.993532] strncpy_from_user+0x34/0x470 [ 2174.993551] getname_flags.part.0+0x95/0x4f0 [ 2174.993572] getname+0x8e/0xd0 [ 2174.993586] do_sys_openat2+0xf9/0x4d0 [ 2174.993599] ? security_file_free+0xaa/0xd0 [ 2174.993611] ? build_open_flags+0x6f0/0x6f0 [ 2174.993634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.993644] ? call_rcu+0x3e7/0x9e0 [ 2174.993662] __x64_sys_openat+0x13f/0x1f0 [ 2174.993674] ? __ia32_sys_open+0x1c0/0x1c0 [ 2174.993694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.993708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.993725] do_syscall_64+0x33/0x40 [ 2174.993738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2174.993747] RIP: 0033:0x7f04f6dcfa04 [ 2174.993757] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2174.993764] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2174.993778] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2174.993785] RDX: 0000000000000000 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2174.993793] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2174.993799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2174.993806] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2175.043867] FAULT_INJECTION: forcing a failure. [ 2175.043867] name failslab, interval 1, probability 0, space 0, times 0 [ 2175.043898] CPU: 0 PID: 28761 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2175.043915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2175.043927] Call Trace: [ 2175.043964] dump_stack+0x107/0x167 [ 2175.044010] should_fail.cold+0x5/0xa [ 2175.044050] ? io_wq_create+0x6ef/0xc00 [ 2175.044086] should_failslab+0x5/0x20 [ 2175.044112] kmem_cache_alloc_node_trace+0x59/0x340 [ 2175.044183] io_wq_create+0x6ef/0xc00 [ 2175.044271] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2175.044315] ? io_import_iovec+0x1120/0x1120 [ 2175.044351] ? io_apoll_task_func+0x2d0/0x2d0 [ 2175.044374] ? __io_req_find_next+0x300/0x300 [ 2175.044395] ? do_raw_spin_lock+0x121/0x260 [ 2175.044429] ? rwlock_bug.part.0+0x90/0x90 [ 2175.044493] __io_uring_add_tctx_node+0x2c6/0x520 [ 2175.044530] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2175.044552] ? alloc_fd+0x2e7/0x670 [ 2175.044646] io_uring_setup+0x1fbb/0x2980 [ 2175.044726] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2175.044749] ? wait_for_completion_io+0x270/0x270 [ 2175.044884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2175.044915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2175.044971] do_syscall_64+0x33/0x40 [ 2175.044998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2175.045017] RIP: 0033:0x7f12dae86b19 [ 2175.045041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2175.045057] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2175.045090] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2175.045107] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2175.045124] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2175.045140] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2175.045157] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2190.017438] FAULT_INJECTION: forcing a failure. [ 2190.017438] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.019999] CPU: 0 PID: 28774 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2190.021510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.023293] Call Trace: [ 2190.023901] dump_stack+0x107/0x167 [ 2190.024735] should_fail.cold+0x5/0xa [ 2190.025604] ? create_object.isra.0+0x3a/0xa30 [ 2190.026624] should_failslab+0x5/0x20 [ 2190.027469] kmem_cache_alloc+0x5b/0x310 [ 2190.028404] create_object.isra.0+0x3a/0xa30 [ 2190.029384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.030530] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2190.031694] io_wq_create+0x6ef/0xc00 [ 2190.032588] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2190.033739] ? io_import_iovec+0x1120/0x1120 [ 2190.034716] ? io_apoll_task_func+0x2d0/0x2d0 [ 2190.035703] ? __io_req_find_next+0x300/0x300 [ 2190.036675] ? do_raw_spin_lock+0x121/0x260 [ 2190.037653] ? rwlock_bug.part.0+0x90/0x90 [ 2190.038623] __io_uring_add_tctx_node+0x2c6/0x520 [ 2190.039686] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2190.040838] ? alloc_fd+0x2e7/0x670 [ 2190.041707] io_uring_setup+0x1fbb/0x2980 [ 2190.042668] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2190.043774] ? wait_for_completion_io+0x270/0x270 [ 2190.044957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.046104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.047251] do_syscall_64+0x33/0x40 [ 2190.048080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.049210] RIP: 0033:0x7f12dae86b19 [ 2190.050029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.053949] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2190.055603] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2190.057155] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2190.058691] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2190.060228] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2190.061850] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2190.075061] FAULT_INJECTION: forcing a failure. [ 2190.075061] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.077679] CPU: 1 PID: 28786 Comm: syz-executor.5 Not tainted 5.10.259 #1 08:38:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 26) 08:38:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:38:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x4000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:03 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x7000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 19) 08:38:03 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xee01, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0xee01, 0x0) keyctl$chown(0x4, r1, 0x0, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$chown(0x4, r0, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r0, 0xf5, 0x1000}, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613531322d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b02000000"], &(0x7f0000000100)="0d84418cfe5c300b2a0f7acb96156b3a7a79b626b920d6225e0b4773025b55ada6fe7985ce0ac1bcdc6dc1a0d30e776870f411c5ffca3475e9fa2b4e008428f6378a7a8d24d62e9f2d89c3b7d84287aa5ad3bf61326d4b1bd402abc00eb3684ea2cf3d5eeaa017eea32a54e6992eb6e9209b6a5d3b1cfecb5c7691c794891f9e6bbe6d41f971c57341b0d88dc2840be3c591f35f9d43d107ca90870bff8d4a5c639379e49f0287a540bb9f0afb568de9c2f38a43767b8201c104b1fe4b947b4e5e75d590c63d0fb0cef24b44649d366b47475cab79a5d2b50b07c1c45b1fe65d89a6b398b5689b060f96d5d8a0053021f30e14eaaa", &(0x7f00000004c0)=""/4096) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:38:03 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 36) [ 2190.079207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.081092] Call Trace: [ 2190.081655] dump_stack+0x107/0x167 [ 2190.082435] should_fail.cold+0x5/0xa [ 2190.083252] ? create_object.isra.0+0x3a/0xa30 [ 2190.084231] should_failslab+0x5/0x20 [ 2190.085055] kmem_cache_alloc+0x5b/0x310 [ 2190.085921] create_object.isra.0+0x3a/0xa30 [ 2190.086854] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.087935] kmem_cache_alloc+0x159/0x310 [ 2190.088819] ? proc_free_inode+0x20/0x20 [ 2190.089695] proc_alloc_inode+0x18/0x200 [ 2190.090552] ? proc_free_inode+0x20/0x20 [ 2190.091409] alloc_inode+0x63/0x240 [ 2190.092182] new_inode+0x23/0x250 [ 2190.092927] proc_pid_make_inode+0x22/0x220 [ 2190.093847] proc_ns_instantiate+0x55/0x100 [ 2190.094769] proc_ns_dir_lookup+0x210/0x2c0 [ 2190.095696] lookup_open.isra.0+0x79f/0x1270 [ 2190.096640] ? vfs_tmpfile+0x350/0x350 [ 2190.097502] ? __mnt_want_write+0x196/0x280 [ 2190.098430] path_openat+0x972/0x2770 [ 2190.099256] ? path_lookupat+0x860/0x860 [ 2190.100120] ? perf_trace_lock+0xac/0x490 [ 2190.101009] ? lock_acquire+0x197/0x470 [ 2190.101851] ? find_held_lock+0x2c/0x110 [ 2190.102713] ? __lockdep_reset_lock+0x180/0x180 [ 2190.103710] do_filp_open+0x190/0x3e0 [ 2190.104517] ? may_open_dev+0xf0/0xf0 [ 2190.105350] ? simple_attr_release+0x50/0x50 [ 2190.106298] ? _raw_spin_unlock+0x1a/0x30 [ 2190.107180] ? alloc_fd+0x2e7/0x670 [ 2190.107971] do_sys_openat2+0x171/0x4d0 [ 2190.108844] ? build_open_flags+0x6f0/0x6f0 [ 2190.109761] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2190.110792] ? wait_for_completion_io+0x270/0x270 [ 2190.111827] __x64_sys_openat+0x13f/0x1f0 [ 2190.112705] ? __ia32_sys_open+0x1c0/0x1c0 [ 2190.113618] ? ksys_write+0x1a9/0x260 [ 2190.114433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.115543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.116643] do_syscall_64+0x33/0x40 [ 2190.117441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.118523] RIP: 0033:0x7efd9561da04 [ 2190.119317] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2190.123234] RSP: 002b:00007efd92bbf060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2190.124852] RAX: ffffffffffffffda RBX: 00007efd9577e020 RCX: 00007efd9561da04 [ 2190.126364] RDX: 0000000000000002 RSI: 00007efd92bbf0f0 RDI: 00000000ffffff9c [ 2190.127871] RBP: 00007efd92bbf0f0 R08: 0000000000000000 R09: 00007efd92bbef70 [ 2190.129393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2190.130898] R13: 00007ffd1cc654df R14: 00007efd92bbf300 R15: 0000000000022000 [ 2190.134502] FAULT_INJECTION: forcing a failure. [ 2190.134502] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.137029] CPU: 0 PID: 28790 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2190.138506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.140265] Call Trace: [ 2190.140851] dump_stack+0x107/0x167 [ 2190.141660] should_fail.cold+0x5/0xa [ 2190.142480] ? create_object.isra.0+0x3a/0xa30 [ 2190.143473] should_failslab+0x5/0x20 [ 2190.144293] kmem_cache_alloc+0x5b/0x310 [ 2190.145184] create_object.isra.0+0x3a/0xa30 [ 2190.146133] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.147232] kmem_cache_alloc+0x159/0x310 [ 2190.148128] __alloc_file+0x21/0x320 [ 2190.148941] alloc_empty_file+0x6d/0x170 [ 2190.149811] path_openat+0xe6/0x2770 [ 2190.150613] ? __lock_acquire+0x1657/0x5b00 [ 2190.151546] ? path_lookupat+0x860/0x860 [ 2190.152419] ? perf_trace_lock+0xac/0x490 [ 2190.153315] ? lock_acquire+0x197/0x470 [ 2190.154171] ? find_held_lock+0x2c/0x110 [ 2190.155043] ? __lockdep_reset_lock+0x180/0x180 [ 2190.156059] do_filp_open+0x190/0x3e0 [ 2190.156901] ? may_open_dev+0xf0/0xf0 [ 2190.157727] ? alloc_fd+0x2e7/0x670 [ 2190.158509] ? lock_downgrade+0x6d0/0x6d0 [ 2190.159396] ? do_raw_spin_lock+0x121/0x260 [ 2190.160315] ? rwlock_bug.part.0+0x90/0x90 [ 2190.161244] ? _raw_spin_unlock+0x1a/0x30 [ 2190.162131] ? alloc_fd+0x2e7/0x670 [ 2190.162931] do_sys_openat2+0x171/0x4d0 [ 2190.163782] ? security_file_free+0xaa/0xd0 [ 2190.164715] ? build_open_flags+0x6f0/0x6f0 [ 2190.165662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.166776] ? call_rcu+0x3e7/0x9e0 [ 2190.167561] __x64_sys_openat+0x13f/0x1f0 [ 2190.168458] ? __ia32_sys_open+0x1c0/0x1c0 [ 2190.169386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.170504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.171610] do_syscall_64+0x33/0x40 [ 2190.172406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.173511] RIP: 0033:0x7f04f6dcfa04 [ 2190.174315] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2190.178210] RSP: 002b:00007f04f4371060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2190.179831] RAX: ffffffffffffffda RBX: 00007f04f6f30020 RCX: 00007f04f6dcfa04 [ 2190.181356] RDX: 0000000000000000 RSI: 00007f04f43710f0 RDI: 00000000ffffff9c [ 2190.182882] RBP: 00007f04f43710f0 R08: 0000000000000000 R09: 00007f04f4370f70 [ 2190.184402] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2190.185931] R13: 00007ffff354a23f R14: 00007f04f4371300 R15: 0000000000022000 08:38:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 20) 08:38:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:03 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 37) 08:38:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 27) 08:38:03 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2190.375959] FAULT_INJECTION: forcing a failure. [ 2190.375959] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.378737] CPU: 0 PID: 28901 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2190.380217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.381999] Call Trace: [ 2190.382589] dump_stack+0x107/0x167 [ 2190.383387] should_fail.cold+0x5/0xa [ 2190.384216] ? security_inode_alloc+0x34/0x160 [ 2190.385225] should_failslab+0x5/0x20 [ 2190.386051] kmem_cache_alloc+0x5b/0x310 [ 2190.386944] security_inode_alloc+0x34/0x160 [ 2190.387901] inode_init_always+0xa4e/0xd10 [ 2190.388817] ? proc_free_inode+0x20/0x20 [ 2190.389721] alloc_inode+0x84/0x240 [ 2190.390511] new_inode+0x23/0x250 [ 2190.391274] proc_pid_make_inode+0x22/0x220 [ 2190.392210] proc_ns_instantiate+0x55/0x100 [ 2190.393163] proc_ns_dir_lookup+0x210/0x2c0 [ 2190.393735] FAULT_INJECTION: forcing a failure. [ 2190.393735] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.394074] lookup_open.isra.0+0x79f/0x1270 [ 2190.394125] ? vfs_tmpfile+0x350/0x350 [ 2190.398257] ? __mnt_want_write+0x196/0x280 [ 2190.399176] path_openat+0x972/0x2770 [ 2190.400011] ? path_lookupat+0x860/0x860 [ 2190.400881] ? perf_trace_lock+0x2bd/0x490 [ 2190.401777] ? lock_acquire+0x197/0x470 [ 2190.402617] ? find_held_lock+0x2c/0x110 [ 2190.403485] ? __lockdep_reset_lock+0x180/0x180 [ 2190.404501] do_filp_open+0x190/0x3e0 [ 2190.405322] ? may_open_dev+0xf0/0xf0 [ 2190.406159] ? simple_attr_release+0x50/0x50 [ 2190.407125] ? _raw_spin_unlock+0x1a/0x30 [ 2190.408007] ? alloc_fd+0x2e7/0x670 [ 2190.408813] do_sys_openat2+0x171/0x4d0 [ 2190.409673] ? build_open_flags+0x6f0/0x6f0 [ 2190.410583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2190.411615] ? wait_for_completion_io+0x270/0x270 [ 2190.412653] __x64_sys_openat+0x13f/0x1f0 [ 2190.413547] ? __ia32_sys_open+0x1c0/0x1c0 [ 2190.414422] ? ksys_write+0x1a9/0x260 [ 2190.415248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.416375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.417506] do_syscall_64+0x33/0x40 [ 2190.418311] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.419401] RIP: 0033:0x7efd9561da04 [ 2190.420195] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2190.424086] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2190.425714] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2190.427211] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2190.428694] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2190.430220] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2190.431744] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2190.433312] CPU: 1 PID: 28905 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2190.434809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.436586] Call Trace: [ 2190.437175] dump_stack+0x107/0x167 [ 2190.437961] should_fail.cold+0x5/0xa [ 2190.438787] ? create_object.isra.0+0x3a/0xa30 [ 2190.439760] should_failslab+0x5/0x20 [ 2190.440573] kmem_cache_alloc+0x5b/0x310 [ 2190.441467] create_object.isra.0+0x3a/0xa30 [ 2190.442409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.443501] kmem_cache_alloc+0x159/0x310 [ 2190.444401] __alloc_file+0x21/0x320 [ 2190.445223] alloc_empty_file+0x6d/0x170 [ 2190.446094] path_openat+0xe6/0x2770 [ 2190.446894] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2190.447962] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2190.449045] ? path_lookupat+0x860/0x860 [ 2190.449910] ? perf_trace_lock+0x2bd/0x490 [ 2190.450815] ? lock_acquire+0x197/0x470 [ 2190.451666] ? find_held_lock+0x2c/0x110 [ 2190.452543] ? __lockdep_reset_lock+0x180/0x180 [ 2190.453568] do_filp_open+0x190/0x3e0 [ 2190.454384] ? may_open_dev+0xf0/0xf0 [ 2190.455208] ? alloc_fd+0x2e7/0x670 [ 2190.456000] ? lock_downgrade+0x6d0/0x6d0 [ 2190.456893] ? do_raw_spin_lock+0x121/0x260 08:38:03 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2190.457813] ? rwlock_bug.part.0+0x90/0x90 [ 2190.458918] ? _raw_spin_unlock+0x1a/0x30 [ 2190.459814] ? alloc_fd+0x2e7/0x670 [ 2190.460623] do_sys_openat2+0x171/0x4d0 [ 2190.461484] ? security_file_free+0xaa/0xd0 [ 2190.462399] ? build_open_flags+0x6f0/0x6f0 [ 2190.463331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.463437] FAULT_INJECTION: forcing a failure. [ 2190.463437] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.464437] ? call_rcu+0x3e7/0x9e0 [ 2190.464471] __x64_sys_openat+0x13f/0x1f0 [ 2190.464502] ? __ia32_sys_open+0x1c0/0x1c0 [ 2190.469348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.470462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.471570] do_syscall_64+0x33/0x40 [ 2190.472363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.473458] RIP: 0033:0x7f04f6dcfa04 [ 2190.474248] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2190.478128] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2190.479742] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2190.481261] RDX: 0000000000000000 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2190.482773] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2190.484281] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2190.485795] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2190.487358] CPU: 0 PID: 28903 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2190.488870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.490657] Call Trace: [ 2190.491245] dump_stack+0x107/0x167 [ 2190.492061] should_fail.cold+0x5/0xa [ 2190.492924] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2190.494015] should_failslab+0x5/0x20 [ 2190.494848] kmem_cache_alloc_trace+0x55/0x320 [ 2190.495889] __io_uring_add_tctx_node+0x15c/0x520 [ 2190.496960] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2190.498103] ? alloc_fd+0x2e7/0x670 [ 2190.498974] io_uring_setup+0x1fbb/0x2980 [ 2190.499927] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2190.501034] ? wait_for_completion_io+0x270/0x270 [ 2190.502206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.503346] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.504493] do_syscall_64+0x33/0x40 [ 2190.505324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.506433] RIP: 0033:0x7f12dae86b19 [ 2190.507256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.511124] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2190.512769] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2190.514304] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2190.515833] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2190.517375] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2190.518905] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:38:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x9000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x5b01, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:03 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 21) 08:38:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x10, 0x0, 0xffffffff, 0x0, 0x0, 0xfbfffffd, 0xffff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:38:20 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:20 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 28) 08:38:20 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 38) 08:38:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000340)="5c0069c8d85436943432c665e9f302a0db9160c32afc203b68236415b94fd52495911d444229422cf65b84c1341cfaf4ccaa67ba4d6a0fcf9b3d1098474e49c4770916f9e357c06954ce30e0637727e3ccd7c438c208fffebd3455a4913443da96de0df32bf8963edeaeae9984926f10570260c0af626a2ef017bd3ad2ed5636556a84262a4a3571e83d79d32d35986fec9c894240b51573e7674c8c4f01f4a010a30dcd59d5e22e0875d88a955f7beff620aac585351c5a1be1c7f0c685e6ef5903d62b45749fbf940701dc21af91b5aa2b7633cb6323671fffd55ac179546a14dde0a7a57aba1be5") perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x59e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x13) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000040)={0x0, 0x3}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4045}, 0x8801) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000001) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x500000001) 08:38:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xa000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2207.162175] FAULT_INJECTION: forcing a failure. [ 2207.162175] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.165037] CPU: 0 PID: 29042 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2207.166743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.168786] Call Trace: [ 2207.169464] dump_stack+0x107/0x167 [ 2207.170377] should_fail.cold+0x5/0xa [ 2207.171347] ? create_object.isra.0+0x3a/0xa30 [ 2207.172500] should_failslab+0x5/0x20 [ 2207.173454] kmem_cache_alloc+0x5b/0x310 [ 2207.174460] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2207.175825] create_object.isra.0+0x3a/0xa30 [ 2207.176907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2207.178203] kmem_cache_alloc+0x159/0x310 [ 2207.179345] security_file_alloc+0x34/0x170 [ 2207.180449] __alloc_file+0xb7/0x320 [ 2207.181400] alloc_empty_file+0x6d/0x170 [ 2207.182395] path_openat+0xe6/0x2770 [ 2207.183317] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2207.184532] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2207.185770] ? path_lookupat+0x860/0x860 [ 2207.186763] ? perf_trace_lock+0x2bd/0x490 [ 2207.187800] ? lock_acquire+0x197/0x470 [ 2207.188757] ? find_held_lock+0x2c/0x110 [ 2207.189769] ? __lockdep_reset_lock+0x180/0x180 [ 2207.190885] do_filp_open+0x190/0x3e0 [ 2207.191804] ? may_open_dev+0xf0/0xf0 [ 2207.192747] ? alloc_fd+0x2e7/0x670 [ 2207.193645] ? lock_downgrade+0x6d0/0x6d0 [ 2207.194649] ? do_raw_spin_lock+0x121/0x260 [ 2207.195721] ? rwlock_bug.part.0+0x90/0x90 [ 2207.196775] ? _raw_spin_unlock+0x1a/0x30 [ 2207.197817] ? alloc_fd+0x2e7/0x670 [ 2207.198742] do_sys_openat2+0x171/0x4d0 [ 2207.199713] ? security_file_free+0xaa/0xd0 [ 2207.200768] ? build_open_flags+0x6f0/0x6f0 [ 2207.201340] FAULT_INJECTION: forcing a failure. [ 2207.201340] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.201837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.204593] ? call_rcu+0x3e7/0x9e0 [ 2207.205488] __x64_sys_openat+0x13f/0x1f0 [ 2207.206483] ? __ia32_sys_open+0x1c0/0x1c0 [ 2207.207518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.208774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.210124] do_syscall_64+0x33/0x40 [ 2207.211024] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.212248] RIP: 0033:0x7f04f6dcfa04 [ 2207.213152] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2207.217580] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2207.219416] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2207.221155] RDX: 0000000000000000 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2207.222882] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2207.224600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2207.226325] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2207.228072] CPU: 1 PID: 29034 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2207.229019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.230147] Call Trace: [ 2207.230508] dump_stack+0x107/0x167 [ 2207.231006] should_fail.cold+0x5/0xa [ 2207.231522] ? create_object.isra.0+0x3a/0xa30 [ 2207.232141] should_failslab+0x5/0x20 [ 2207.232656] kmem_cache_alloc+0x5b/0x310 [ 2207.233226] create_object.isra.0+0x3a/0xa30 [ 2207.233816] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2207.234504] kmem_cache_alloc_trace+0x151/0x320 [ 2207.235144] __io_uring_add_tctx_node+0x15c/0x520 [ 2207.235796] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2207.236506] ? alloc_fd+0x2e7/0x670 [ 2207.237008] io_uring_setup+0x1fbb/0x2980 [ 2207.237585] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2207.238264] ? wait_for_completion_io+0x270/0x270 [ 2207.238985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.239688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.239861] FAULT_INJECTION: forcing a failure. [ 2207.239861] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.240395] do_syscall_64+0x33/0x40 [ 2207.240408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.240417] RIP: 0033:0x7f12dae86b19 [ 2207.240429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2207.240435] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2207.248285] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2207.249256] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2207.250218] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2207.251194] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2207.252160] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2207.253159] CPU: 0 PID: 29037 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2207.254810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.256758] Call Trace: [ 2207.257398] dump_stack+0x107/0x167 [ 2207.258271] should_fail.cold+0x5/0xa [ 2207.259198] ? create_object.isra.0+0x3a/0xa30 [ 2207.260281] should_failslab+0x5/0x20 [ 2207.261195] kmem_cache_alloc+0x5b/0x310 [ 2207.262174] create_object.isra.0+0x3a/0xa30 [ 2207.263221] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2207.264441] kmem_cache_alloc+0x159/0x310 [ 2207.265447] security_inode_alloc+0x34/0x160 [ 2207.266494] inode_init_always+0xa4e/0xd10 [ 2207.267485] ? proc_free_inode+0x20/0x20 [ 2207.268614] alloc_inode+0x84/0x240 [ 2207.269484] new_inode+0x23/0x250 [ 2207.270309] proc_pid_make_inode+0x22/0x220 [ 2207.271546] proc_ns_instantiate+0x55/0x100 [ 2207.272571] proc_ns_dir_lookup+0x210/0x2c0 [ 2207.273613] lookup_open.isra.0+0x79f/0x1270 [ 2207.274669] ? vfs_tmpfile+0x350/0x350 [ 2207.275646] ? __mnt_want_write+0x196/0x280 [ 2207.276687] path_openat+0x972/0x2770 [ 2207.277631] ? path_lookupat+0x860/0x860 [ 2207.278590] ? perf_trace_lock+0x2bd/0x490 [ 2207.279589] ? lock_acquire+0x197/0x470 [ 2207.280528] ? find_held_lock+0x2c/0x110 [ 2207.281694] ? __lockdep_reset_lock+0x180/0x180 [ 2207.282705] do_filp_open+0x190/0x3e0 [ 2207.283508] ? may_open_dev+0xf0/0xf0 [ 2207.284343] ? simple_attr_release+0x50/0x50 [ 2207.285318] ? _raw_spin_unlock+0x1a/0x30 [ 2207.286191] ? alloc_fd+0x2e7/0x670 [ 2207.286985] do_sys_openat2+0x171/0x4d0 [ 2207.287830] ? build_open_flags+0x6f0/0x6f0 [ 2207.288733] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2207.289764] ? wait_for_completion_io+0x270/0x270 [ 2207.290796] __x64_sys_openat+0x13f/0x1f0 [ 2207.291672] ? __ia32_sys_open+0x1c0/0x1c0 [ 2207.292559] ? ksys_write+0x1a9/0x260 [ 2207.293385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.294485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.295577] do_syscall_64+0x33/0x40 [ 2207.296359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.297445] RIP: 0033:0x7efd9561da04 [ 2207.298235] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2207.302087] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2207.303694] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2207.305206] RDX: 0000000000000002 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2207.306709] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2207.308207] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2207.309722] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:38:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x20000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:20 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 29) 08:38:20 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:20 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = fork() ptrace(0x10, r0) r1 = fork() ptrace(0x10, r1) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') tkill(r0, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x4002840}, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/ipc\x00') syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4002840}, 0x0) r4 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) 08:38:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 22) 08:38:20 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 39) [ 2207.439104] FAULT_INJECTION: forcing a failure. [ 2207.439104] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.440620] CPU: 1 PID: 29162 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2207.441488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.442509] Call Trace: [ 2207.442843] dump_stack+0x107/0x167 [ 2207.443303] should_fail.cold+0x5/0xa [ 2207.443780] ? proc_self_get_link+0x18b/0x200 [ 2207.444335] should_failslab+0x5/0x20 [ 2207.444809] kmem_cache_alloc_trace+0x55/0x320 [ 2207.445393] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2207.445946] proc_self_get_link+0x18b/0x200 [ 2207.446485] step_into+0x1595/0x1ce0 [ 2207.446957] ? lookup_fast+0x6e0/0x6e0 [ 2207.447444] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2207.448014] walk_component+0x171/0x6a0 [ 2207.448504] ? trace_hardirqs_on+0x5b/0x180 [ 2207.449047] ? handle_dots.part.0+0x15c0/0x15c0 [ 2207.449632] ? security_inode_permission+0xcb/0x100 [ 2207.450265] link_path_walk.part.0+0x699/0xbf0 [ 2207.450845] ? walk_component+0x6a0/0x6a0 [ 2207.451359] ? percpu_counter_add_batch+0x8b/0x140 [ 2207.451980] path_openat+0x25d/0x2770 [ 2207.452457] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2207.453089] ? path_lookupat+0x860/0x860 [ 2207.453589] ? perf_trace_lock+0x2bd/0x490 [ 2207.454112] ? lock_acquire+0x197/0x470 [ 2207.454604] ? find_held_lock+0x2c/0x110 [ 2207.455114] ? __lockdep_reset_lock+0x180/0x180 [ 2207.455694] do_filp_open+0x190/0x3e0 [ 2207.456161] ? may_open_dev+0xf0/0xf0 [ 2207.456649] ? rwlock_bug.part.0+0x90/0x90 [ 2207.457198] ? _raw_spin_unlock+0x1a/0x30 [ 2207.457710] ? alloc_fd+0x2e7/0x670 [ 2207.458175] do_sys_openat2+0x171/0x4d0 [ 2207.458664] ? security_file_free+0xaa/0xd0 [ 2207.459194] ? build_open_flags+0x6f0/0x6f0 [ 2207.459733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.460377] ? call_rcu+0x3e7/0x9e0 [ 2207.460831] __x64_sys_openat+0x13f/0x1f0 [ 2207.461354] ? __ia32_sys_open+0x1c0/0x1c0 [ 2207.461882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.462527] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.463163] do_syscall_64+0x33/0x40 [ 2207.463626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.464255] RIP: 0033:0x7f04f6dcfa04 [ 2207.464717] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2207.466972] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2207.467908] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2207.468779] RDX: 0000000000000000 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2207.469655] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2207.470536] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2207.471410] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 [ 2207.484903] FAULT_INJECTION: forcing a failure. [ 2207.484903] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.487428] CPU: 0 PID: 29165 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2207.488883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.490648] Call Trace: [ 2207.491220] dump_stack+0x107/0x167 [ 2207.492001] should_fail.cold+0x5/0xa [ 2207.492822] ? getname_flags.part.0+0x50/0x4f0 [ 2207.493800] should_failslab+0x5/0x20 08:38:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xb000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2207.494742] kmem_cache_alloc+0x5b/0x310 [ 2207.495611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.496736] getname_flags.part.0+0x50/0x4f0 [ 2207.497688] getname+0x8e/0xd0 [ 2207.498386] do_sys_openat2+0xf9/0x4d0 [ 2207.499214] ? security_file_free+0xaa/0xd0 [ 2207.500136] ? build_open_flags+0x6f0/0x6f0 [ 2207.501080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.502188] ? call_rcu+0x3e7/0x9e0 [ 2207.502977] __x64_sys_openat+0x13f/0x1f0 [ 2207.503864] ? __ia32_sys_open+0x1c0/0x1c0 [ 2207.504787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.505904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.507007] do_syscall_64+0x33/0x40 [ 2207.507802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.508888] RIP: 0033:0x7efd9561da04 [ 2207.509694] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2207.513585] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2207.515198] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2207.516700] RDX: 0000000000000000 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2207.518213] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2207.519724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2207.521239] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2207.541063] FAULT_INJECTION: forcing a failure. [ 2207.541063] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.542721] CPU: 1 PID: 29169 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2207.543532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.544504] Call Trace: [ 2207.544817] dump_stack+0x107/0x167 [ 2207.545276] should_fail.cold+0x5/0xa [ 2207.545722] ? xas_alloc+0x336/0x440 [ 2207.546158] should_failslab+0x5/0x20 [ 2207.546606] kmem_cache_alloc+0x5b/0x310 [ 2207.547083] ? stack_trace_consume_entry+0x160/0x160 [ 2207.547681] xas_alloc+0x336/0x440 [ 2207.548105] xas_create+0x34a/0x10d0 [ 2207.548550] ? kernel_text_address+0xf2/0x120 [ 2207.549088] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2207.549703] xas_store+0x8c/0x1c40 [ 2207.550126] __xa_store+0x164/0x2d0 [ 2207.550555] ? xa_delete_node+0x280/0x280 [ 2207.551039] ? trace_hardirqs_on+0x5b/0x180 [ 2207.551551] xa_store+0x31/0x50 [ 2207.551942] __io_uring_add_tctx_node+0x1cf/0x520 [ 2207.552507] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2207.553130] ? alloc_fd+0x2e7/0x670 [ 2207.553563] io_uring_setup+0x1fbb/0x2980 [ 2207.554057] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2207.554649] ? wait_for_completion_io+0x270/0x270 [ 2207.555221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.555835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.556441] do_syscall_64+0x33/0x40 [ 2207.556875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.557481] RIP: 0033:0x7f12dae86b19 [ 2207.557914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2207.560056] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2207.560948] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2207.561785] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2207.562615] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2207.563446] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2207.564271] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:38:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x80000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:20 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:20 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 30) [ 2207.618810] FAULT_INJECTION: forcing a failure. [ 2207.618810] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.620241] CPU: 1 PID: 29235 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2207.621045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.622005] Call Trace: [ 2207.622324] dump_stack+0x107/0x167 [ 2207.622751] should_fail.cold+0x5/0xa [ 2207.623192] ? find_held_lock+0x2c/0x110 [ 2207.623664] ? create_object.isra.0+0x3a/0xa30 [ 2207.624195] should_failslab+0x5/0x20 [ 2207.624637] kmem_cache_alloc+0x5b/0x310 [ 2207.625117] ? __task_pid_nr_ns+0x1b8/0x500 [ 2207.625622] create_object.isra.0+0x3a/0xa30 [ 2207.626130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2207.626724] kmem_cache_alloc_trace+0x151/0x320 [ 2207.627268] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2207.627784] proc_self_get_link+0x18b/0x200 [ 2207.628295] step_into+0x1595/0x1ce0 [ 2207.628734] ? lookup_fast+0x6e0/0x6e0 [ 2207.629200] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2207.629738] walk_component+0x171/0x6a0 [ 2207.630199] ? trace_hardirqs_on+0x5b/0x180 [ 2207.630701] ? handle_dots.part.0+0x15c0/0x15c0 [ 2207.631248] ? security_inode_permission+0xcb/0x100 [ 2207.631832] link_path_walk.part.0+0x699/0xbf0 [ 2207.632372] ? walk_component+0x6a0/0x6a0 [ 2207.632851] ? percpu_counter_add_batch+0x8b/0x140 [ 2207.633444] path_openat+0x25d/0x2770 [ 2207.633897] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2207.634482] ? path_lookupat+0x860/0x860 [ 2207.634953] ? perf_trace_lock+0x2bd/0x490 [ 2207.635442] ? lock_acquire+0x197/0x470 [ 2207.635906] ? find_held_lock+0x2c/0x110 [ 2207.636379] ? __lockdep_reset_lock+0x180/0x180 [ 2207.636924] do_filp_open+0x190/0x3e0 [ 2207.637373] ? may_open_dev+0xf0/0xf0 [ 2207.637830] ? rwlock_bug.part.0+0x90/0x90 [ 2207.638336] ? _raw_spin_unlock+0x1a/0x30 [ 2207.638814] ? alloc_fd+0x2e7/0x670 [ 2207.639250] do_sys_openat2+0x171/0x4d0 [ 2207.639711] ? security_file_free+0xaa/0xd0 [ 2207.640212] ? build_open_flags+0x6f0/0x6f0 [ 2207.640722] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.641339] ? call_rcu+0x3e7/0x9e0 [ 2207.641766] __x64_sys_openat+0x13f/0x1f0 [ 2207.642249] ? __ia32_sys_open+0x1c0/0x1c0 [ 2207.642753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.643362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.643958] do_syscall_64+0x33/0x40 [ 2207.644393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.644983] RIP: 0033:0x7f04f6dcfa04 [ 2207.645429] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2207.647540] RSP: 002b:00007f04f4392060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2207.648423] RAX: ffffffffffffffda RBX: 00007f04f6f2ff60 RCX: 00007f04f6dcfa04 [ 2207.649253] RDX: 0000000000000000 RSI: 00007f04f43920f0 RDI: 00000000ffffff9c [ 2207.650074] RBP: 00007f04f43920f0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2207.650889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2207.651706] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:38:21 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 40) 08:38:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 23) 08:38:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 31) [ 2207.756134] FAULT_INJECTION: forcing a failure. [ 2207.756134] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.757551] CPU: 1 PID: 29290 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2207.758354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.759310] Call Trace: [ 2207.759618] dump_stack+0x107/0x167 [ 2207.760041] should_fail.cold+0x5/0xa [ 2207.760481] ? create_object.isra.0+0x3a/0xa30 [ 2207.761014] should_failslab+0x5/0x20 [ 2207.761463] kmem_cache_alloc+0x5b/0x310 [ 2207.761937] create_object.isra.0+0x3a/0xa30 [ 2207.762442] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2207.763027] kmem_cache_alloc+0x159/0x310 [ 2207.763511] xas_alloc+0x336/0x440 [ 2207.763924] xas_create+0x34a/0x10d0 [ 2207.764364] ? kernel_text_address+0xf2/0x120 [ 2207.764879] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2207.765494] xas_store+0x8c/0x1c40 [ 2207.765912] __xa_store+0x164/0x2d0 [ 2207.766334] ? xa_delete_node+0x280/0x280 [ 2207.766817] ? trace_hardirqs_on+0x5b/0x180 [ 2207.767324] xa_store+0x31/0x50 [ 2207.767707] __io_uring_add_tctx_node+0x1cf/0x520 [ 2207.768262] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2207.768862] ? alloc_fd+0x2e7/0x670 [ 2207.769294] io_uring_setup+0x1fbb/0x2980 [ 2207.769776] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2207.770357] ? wait_for_completion_io+0x270/0x270 [ 2207.770929] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.771536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.772131] do_syscall_64+0x33/0x40 [ 2207.772562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.773159] RIP: 0033:0x7f12dae86b19 [ 2207.773587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2207.775694] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2207.776569] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2207.777394] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2207.778209] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2207.779026] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2207.779840] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2207.829057] FAULT_INJECTION: forcing a failure. [ 2207.829057] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.831506] CPU: 0 PID: 29294 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2207.832964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.834706] Call Trace: [ 2207.835273] dump_stack+0x107/0x167 [ 2207.836053] should_fail.cold+0x5/0xa [ 2207.836864] ? create_object.isra.0+0x3a/0xa30 [ 2207.837841] should_failslab+0x5/0x20 [ 2207.838652] kmem_cache_alloc+0x5b/0x310 [ 2207.839528] ? exit_to_user_mode_prepare+0x1cc/0x1e0 [ 2207.840601] ? syscall_exit_to_user_mode+0x38/0x1d0 [ 2207.841675] create_object.isra.0+0x3a/0xa30 [ 2207.842605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2207.843689] kmem_cache_alloc+0x159/0x310 [ 2207.844571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.845709] getname_flags.part.0+0x50/0x4f0 [ 2207.846658] getname+0x8e/0xd0 [ 2207.847349] do_sys_openat2+0xf9/0x4d0 [ 2207.848176] ? security_file_free+0xaa/0xd0 [ 2207.849096] ? build_open_flags+0x6f0/0x6f0 [ 2207.850033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.851143] ? call_rcu+0x3e7/0x9e0 [ 2207.851933] __x64_sys_openat+0x13f/0x1f0 [ 2207.852811] ? __ia32_sys_open+0x1c0/0x1c0 [ 2207.853740] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.854846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.855944] do_syscall_64+0x33/0x40 [ 2207.856740] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.857839] RIP: 0033:0x7efd9561da04 [ 2207.858623] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2207.862515] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2207.864132] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2207.865650] RDX: 0000000000000000 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2207.867153] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2207.868653] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2207.870172] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2207.874853] FAULT_INJECTION: forcing a failure. [ 2207.874853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2207.877378] CPU: 0 PID: 29293 Comm: syz-executor.3 Not tainted 5.10.259 #1 [ 2207.878836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.880595] Call Trace: [ 2207.881173] dump_stack+0x107/0x167 [ 2207.881963] should_fail.cold+0x5/0xa [ 2207.882788] _copy_to_user+0x2e/0x180 [ 2207.883615] simple_read_from_buffer+0xcc/0x160 [ 2207.884613] proc_fail_nth_read+0x198/0x230 [ 2207.885552] ? proc_sessionid_read+0x230/0x230 [ 2207.886530] ? security_file_permission+0xb1/0xe0 [ 2207.887571] ? proc_sessionid_read+0x230/0x230 [ 2207.888533] vfs_read+0x228/0x620 [ 2207.889296] ksys_read+0x12d/0x260 [ 2207.890046] ? vfs_write+0xb10/0xb10 [ 2207.890851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.891975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.893086] do_syscall_64+0x33/0x40 [ 2207.893889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.894973] RIP: 0033:0x7f04f6dcf69c [ 2207.895759] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2207.899654] RSP: 002b:00007f04f4392170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2207.901270] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f04f6dcf69c [ 2207.902777] RDX: 000000000000000f RSI: 00007f04f43921e0 RDI: 0000000000000004 [ 2207.904279] RBP: 00007f04f43921d0 R08: 0000000000000000 R09: 00007f04f4391f70 [ 2207.905784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2207.907286] R13: 00007ffff354a23f R14: 00007f04f4392300 R15: 0000000000022000 08:38:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:38:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:35 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 24) 08:38:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x801, 0x1}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000140)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc8}}}, 0x6) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x40}, 0x6) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000200)="a6428c36e22eb5eda5") syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10044001}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000240)={0x6, 'bond_slave_0\x00', {0x3ff}, 0x6}) r8 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10044001}, 0x0) sendfile(r8, r1, &(0x7f0000000000)=0x2, 0x200000800000002) 08:38:35 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0}, 0x44080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:35 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf0ffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:35 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 41) [ 2222.037341] FAULT_INJECTION: forcing a failure. [ 2222.037341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2222.038929] CPU: 0 PID: 29306 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2222.039837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2222.040922] Call Trace: [ 2222.041287] dump_stack+0x107/0x167 [ 2222.041776] should_fail.cold+0x5/0xa [ 2222.042287] strncpy_from_user+0x34/0x470 [ 2222.042838] getname_flags.part.0+0x95/0x4f0 [ 2222.043423] getname+0x8e/0xd0 [ 2222.043844] do_sys_openat2+0xf9/0x4d0 [ 2222.044358] ? security_file_free+0xaa/0xd0 [ 2222.044927] ? build_open_flags+0x6f0/0x6f0 [ 2222.045526] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.046204] ? call_rcu+0x3e7/0x9e0 [ 2222.046686] __x64_sys_openat+0x13f/0x1f0 [ 2222.047241] ? __ia32_sys_open+0x1c0/0x1c0 [ 2222.047803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.048492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2222.049165] do_syscall_64+0x33/0x40 [ 2222.049662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2222.050330] RIP: 0033:0x7efd9561da04 [ 2222.050818] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2222.053213] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2222.054211] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2222.055133] RDX: 0000000000000000 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2222.056048] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2222.056967] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2222.057900] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2222.073931] FAULT_INJECTION: forcing a failure. [ 2222.073931] name failslab, interval 1, probability 0, space 0, times 0 [ 2222.076415] CPU: 1 PID: 29312 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2222.077905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2222.079683] Call Trace: [ 2222.080252] dump_stack+0x107/0x167 [ 2222.081036] should_fail.cold+0x5/0xa [ 2222.081858] ? xas_alloc+0x336/0x440 [ 2222.082656] should_failslab+0x5/0x20 [ 2222.083464] kmem_cache_alloc+0x5b/0x310 [ 2222.084333] xas_alloc+0x336/0x440 [ 2222.085093] xas_create+0x34a/0x10d0 [ 2222.085883] ? kernel_text_address+0xf2/0x120 [ 2222.086824] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2222.087900] xas_store+0x8c/0x1c40 [ 2222.088655] __xa_store+0x164/0x2d0 [ 2222.089439] ? xa_delete_node+0x280/0x280 [ 2222.090352] ? trace_hardirqs_on+0x5b/0x180 [ 2222.091274] xa_store+0x31/0x50 [ 2222.091971] __io_uring_add_tctx_node+0x1cf/0x520 [ 2222.092988] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2222.094106] ? alloc_fd+0x2e7/0x670 [ 2222.094883] io_uring_setup+0x1fbb/0x2980 [ 2222.095767] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2222.096835] ? wait_for_completion_io+0x270/0x270 [ 2222.097880] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.098983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2222.100066] do_syscall_64+0x33/0x40 [ 2222.100851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2222.101952] RIP: 0033:0x7f12dae86b19 [ 2222.102738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2222.106609] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2222.108209] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2222.109724] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2222.111222] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2222.112729] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2222.114233] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:38:35 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:38:35 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 25) 08:38:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x1000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:35 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x92, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x10000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2222.203118] FAULT_INJECTION: forcing a failure. [ 2222.203118] name failslab, interval 1, probability 0, space 0, times 0 [ 2222.204679] CPU: 0 PID: 29384 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2222.205534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2222.206547] Call Trace: [ 2222.206879] dump_stack+0x107/0x167 [ 2222.207328] should_fail.cold+0x5/0xa [ 2222.207800] ? __alloc_file+0x21/0x320 [ 2222.208276] should_failslab+0x5/0x20 [ 2222.208739] kmem_cache_alloc+0x5b/0x310 [ 2222.209247] __alloc_file+0x21/0x320 [ 2222.209704] alloc_empty_file+0x6d/0x170 [ 2222.210201] path_openat+0xe6/0x2770 [ 2222.210655] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2222.211271] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2222.211887] ? path_lookupat+0x860/0x860 [ 2222.212383] ? perf_trace_lock+0x2bd/0x490 [ 2222.212905] ? lock_acquire+0x197/0x470 [ 2222.213391] ? find_held_lock+0x2c/0x110 [ 2222.213885] ? __lockdep_reset_lock+0x180/0x180 [ 2222.214455] do_filp_open+0x190/0x3e0 [ 2222.214915] ? may_open_dev+0xf0/0xf0 [ 2222.215391] ? alloc_fd+0x2e7/0x670 [ 2222.215832] ? lock_downgrade+0x6d0/0x6d0 [ 2222.216331] ? do_raw_spin_lock+0x121/0x260 [ 2222.216851] ? rwlock_bug.part.0+0x90/0x90 [ 2222.217385] ? _raw_spin_unlock+0x1a/0x30 [ 2222.217883] ? alloc_fd+0x2e7/0x670 [ 2222.218337] do_sys_openat2+0x171/0x4d0 [ 2222.218816] ? security_file_free+0xaa/0xd0 [ 2222.219336] ? build_open_flags+0x6f0/0x6f0 [ 2222.219862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.220487] ? call_rcu+0x3e7/0x9e0 [ 2222.220932] __x64_sys_openat+0x13f/0x1f0 [ 2222.221439] ? __ia32_sys_open+0x1c0/0x1c0 [ 2222.221958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.222590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2222.223216] do_syscall_64+0x33/0x40 [ 2222.223673] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2222.224286] RIP: 0033:0x7efd9561da04 [ 2222.224735] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2222.226932] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2222.227843] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2222.228711] RDX: 0000000000000000 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2222.229566] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2222.230424] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2222.231273] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:38:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') setns(r0, 0x40000000) 08:38:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x2) read(r1, &(0x7f0000000040)=""/96, 0x60) 08:38:50 executing program 4: syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000200)='./file0\x00', 0x4, 0x1000, 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10044001}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5d1}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "cc6bfe727c5b8a4df7645bfbedb73d57c969da966d155376"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40001}, 0x41) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:38:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x11000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:50 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:50 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') 08:38:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x2000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 26) 08:38:50 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 42) [ 2237.428308] FAULT_INJECTION: forcing a failure. [ 2237.428308] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.429622] CPU: 1 PID: 29455 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2237.430411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.431361] Call Trace: [ 2237.431660] dump_stack+0x107/0x167 [ 2237.432080] should_fail.cold+0x5/0xa [ 2237.432529] ? create_object.isra.0+0x3a/0xa30 [ 2237.433055] should_failslab+0x5/0x20 [ 2237.433487] kmem_cache_alloc+0x5b/0x310 [ 2237.433956] ? mark_held_locks+0x9e/0xe0 [ 2237.434427] create_object.isra.0+0x3a/0xa30 [ 2237.434939] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.435524] kmem_cache_alloc+0x159/0x310 [ 2237.436009] xas_alloc+0x336/0x440 [ 2237.436401] xas_create+0x34a/0x10d0 [ 2237.436824] ? kernel_text_address+0xf2/0x120 [ 2237.437331] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2237.437945] xas_store+0x8c/0x1c40 [ 2237.438356] __xa_store+0x164/0x2d0 [ 2237.438754] ? xa_delete_node+0x280/0x280 [ 2237.439242] xa_store+0x31/0x50 [ 2237.439611] __io_uring_add_tctx_node+0x1cf/0x520 [ 2237.440168] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2237.440768] ? alloc_fd+0x2e7/0x670 [ 2237.441178] io_uring_setup+0x1fbb/0x2980 [ 2237.441671] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2237.442249] ? wait_for_completion_io+0x270/0x270 [ 2237.442819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.443402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.443998] do_syscall_64+0x33/0x40 [ 2237.444442] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.445031] RIP: 0033:0x7f12dae86b19 [ 2237.445471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.447594] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2237.448481] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2237.449305] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2237.450138] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2237.450963] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2237.451792] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2237.460530] FAULT_INJECTION: forcing a failure. [ 2237.460530] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.461913] CPU: 1 PID: 29462 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2237.462704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.463670] Call Trace: [ 2237.463972] dump_stack+0x107/0x167 [ 2237.464393] should_fail.cold+0x5/0xa [ 2237.464816] ? create_object.isra.0+0x3a/0xa30 [ 2237.465342] should_failslab+0x5/0x20 [ 2237.465771] kmem_cache_alloc+0x5b/0x310 [ 2237.466217] create_object.isra.0+0x3a/0xa30 [ 2237.466694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.467256] kmem_cache_alloc+0x159/0x310 [ 2237.467713] __alloc_file+0x21/0x320 [ 2237.468118] alloc_empty_file+0x6d/0x170 [ 2237.468592] path_openat+0xe6/0x2770 [ 2237.468999] ? __lock_acquire+0x1657/0x5b00 [ 2237.469504] ? path_lookupat+0x860/0x860 [ 2237.469946] ? perf_trace_lock+0xac/0x490 [ 2237.470399] ? lock_acquire+0x197/0x470 [ 2237.470831] ? find_held_lock+0x2c/0x110 [ 2237.471295] ? __lockdep_reset_lock+0x180/0x180 [ 2237.471829] do_filp_open+0x190/0x3e0 [ 2237.472249] ? may_open_dev+0xf0/0xf0 [ 2237.472695] ? alloc_fd+0x2e7/0x670 [ 2237.473118] ? lock_downgrade+0x6d0/0x6d0 [ 2237.473608] ? do_raw_spin_lock+0x121/0x260 [ 2237.474105] ? rwlock_bug.part.0+0x90/0x90 [ 2237.474597] ? _raw_spin_unlock+0x1a/0x30 [ 2237.475073] ? alloc_fd+0x2e7/0x670 [ 2237.475496] do_sys_openat2+0x171/0x4d0 [ 2237.475953] ? security_file_free+0xaa/0xd0 [ 2237.476453] ? build_open_flags+0x6f0/0x6f0 [ 2237.476951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.477567] ? call_rcu+0x3e7/0x9e0 [ 2237.477973] __x64_sys_openat+0x13f/0x1f0 [ 2237.478453] ? __ia32_sys_open+0x1c0/0x1c0 [ 2237.478952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.479564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.480162] do_syscall_64+0x33/0x40 [ 2237.480590] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.481175] RIP: 0033:0x7efd9561da04 [ 2237.481612] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2237.483711] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2237.484578] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2237.485359] RDX: 0000000000000000 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2237.486155] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2237.486952] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2237.487746] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:38:50 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 43) 08:38:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x13000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2237.590903] FAULT_INJECTION: forcing a failure. [ 2237.590903] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.592317] CPU: 1 PID: 29508 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2237.593106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.594083] Call Trace: [ 2237.594394] dump_stack+0x107/0x167 [ 2237.594819] should_fail.cold+0x5/0xa [ 2237.595263] ? xas_alloc+0x336/0x440 [ 2237.595696] should_failslab+0x5/0x20 [ 2237.596135] kmem_cache_alloc+0x5b/0x310 [ 2237.596585] xas_alloc+0x336/0x440 [ 2237.596994] xas_create+0x34a/0x10d0 [ 2237.597421] ? kernel_text_address+0xf2/0x120 [ 2237.597911] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2237.598500] xas_store+0x8c/0x1c40 [ 2237.598899] __xa_store+0x164/0x2d0 [ 2237.599318] ? xa_delete_node+0x280/0x280 [ 2237.599775] ? trace_hardirqs_on+0x5b/0x180 [ 2237.600275] xa_store+0x31/0x50 [ 2237.600644] __io_uring_add_tctx_node+0x1cf/0x520 [ 2237.601201] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2237.601780] ? alloc_fd+0x2e7/0x670 [ 2237.602210] io_uring_setup+0x1fbb/0x2980 [ 2237.602690] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2237.603277] ? wait_for_completion_io+0x270/0x270 [ 2237.603848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.604439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.605036] do_syscall_64+0x33/0x40 [ 2237.605452] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.606044] RIP: 0033:0x7f12dae86b19 [ 2237.606451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.608591] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2237.609479] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2237.610304] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2237.611127] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2237.611911] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2237.612735] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:38:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 27) 08:38:50 executing program 1: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "57b777b9f41812a2db3257ed3d380e"}, 0x13) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r1, &(0x7f00000000c0)=""/96, 0x60) 08:38:50 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:38:51 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:38:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200140, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:38:51 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 44) [ 2237.721604] FAULT_INJECTION: forcing a failure. [ 2237.721604] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.724099] CPU: 0 PID: 29594 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2237.725585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.727490] Call Trace: [ 2237.728118] dump_stack+0x107/0x167 [ 2237.728917] should_fail.cold+0x5/0xa [ 2237.729769] ? create_object.isra.0+0x3a/0xa30 [ 2237.730755] should_failslab+0x5/0x20 [ 2237.731590] kmem_cache_alloc+0x5b/0x310 [ 2237.732473] create_object.isra.0+0x3a/0xa30 [ 2237.733431] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.734766] kmem_cache_alloc+0x159/0x310 [ 2237.735818] __alloc_file+0x21/0x320 [ 2237.736763] alloc_empty_file+0x6d/0x170 [ 2237.737727] path_openat+0xe6/0x2770 [ 2237.738704] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2237.739873] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2237.741182] ? path_lookupat+0x860/0x860 [ 2237.742180] ? perf_trace_lock+0x2bd/0x490 [ 2237.743285] ? lock_acquire+0x197/0x470 [ 2237.744336] ? find_held_lock+0x2c/0x110 [ 2237.745423] ? __lockdep_reset_lock+0x180/0x180 [ 2237.746636] do_filp_open+0x190/0x3e0 [ 2237.747495] ? may_open_dev+0xf0/0xf0 [ 2237.748334] ? alloc_fd+0x2e7/0x670 [ 2237.749293] ? lock_downgrade+0x6d0/0x6d0 [ 2237.750383] ? do_raw_spin_lock+0x121/0x260 [ 2237.751516] ? rwlock_bug.part.0+0x90/0x90 [ 2237.752520] ? _raw_spin_unlock+0x1a/0x30 08:38:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10044001}, 0x0) syncfs(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10044001}, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000000)={0x8c, 0x1b32, 0x41f}) [ 2237.753425] ? alloc_fd+0x2e7/0x670 [ 2237.754441] do_sys_openat2+0x171/0x4d0 [ 2237.755291] ? security_file_free+0xaa/0xd0 [ 2237.756210] ? build_open_flags+0x6f0/0x6f0 [ 2237.757165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.758474] ? call_rcu+0x3e7/0x9e0 [ 2237.758964] FAULT_INJECTION: forcing a failure. [ 2237.758964] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.759431] __x64_sys_openat+0x13f/0x1f0 [ 2237.759462] ? __ia32_sys_open+0x1c0/0x1c0 [ 2237.762896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.764247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.765445] do_syscall_64+0x33/0x40 [ 2237.766271] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.767432] RIP: 0033:0x7efd9561da04 [ 2237.768316] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2237.772294] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2237.773931] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2237.775471] RDX: 0000000000000000 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2237.777013] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2237.778834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2237.780678] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2237.782593] CPU: 1 PID: 29597 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2237.783442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.784338] Call Trace: [ 2237.784633] dump_stack+0x107/0x167 [ 2237.785026] should_fail.cold+0x5/0xa [ 2237.785451] ? create_object.isra.0+0x3a/0xa30 [ 2237.785942] should_failslab+0x5/0x20 [ 2237.786351] kmem_cache_alloc+0x5b/0x310 [ 2237.786789] ? mark_held_locks+0x9e/0xe0 [ 2237.787232] create_object.isra.0+0x3a/0xa30 [ 2237.787701] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.788246] kmem_cache_alloc+0x159/0x310 [ 2237.788695] xas_alloc+0x336/0x440 [ 2237.789081] xas_create+0x34a/0x10d0 [ 2237.789523] ? kernel_text_address+0xf2/0x120 [ 2237.790036] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2237.790628] xas_store+0x8c/0x1c40 [ 2237.791018] __xa_store+0x164/0x2d0 [ 2237.791409] ? xa_delete_node+0x280/0x280 [ 2237.791859] ? trace_hardirqs_on+0x5b/0x180 [ 2237.792326] xa_store+0x31/0x50 [ 2237.792683] __io_uring_add_tctx_node+0x1cf/0x520 [ 2237.793239] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2237.793809] ? alloc_fd+0x2e7/0x670 [ 2237.794207] io_uring_setup+0x1fbb/0x2980 [ 2237.794658] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2237.795208] ? wait_for_completion_io+0x270/0x270 [ 2237.795742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.796306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.796893] do_syscall_64+0x33/0x40 [ 2237.797323] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.797917] RIP: 0033:0x7f12dae86b19 [ 2237.798326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.800291] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2237.801156] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2237.801933] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2237.802705] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2237.803472] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2237.804256] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:38:51 executing program 1: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040, 0x0, {0x0, r0}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x2, 0x3ff, 0x0, 0x81, 0x0, 0x0, {0x0, r0}}, 0x81) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x40}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) read(0xffffffffffffffff, &(0x7f00000000c0)=""/96, 0x60) 08:38:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x4e020000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:38:51 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) setns(r0, 0x20000000) 08:38:51 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x95, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:07 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 28) 08:39:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x3000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2253.807080] FAULT_INJECTION: forcing a failure. [ 2253.807080] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.808764] CPU: 0 PID: 29726 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2253.809751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.810913] Call Trace: [ 2253.811288] dump_stack+0x107/0x167 [ 2253.811831] should_fail.cold+0x5/0xa [ 2253.812395] ? create_object.isra.0+0x3a/0xa30 [ 2253.813014] should_failslab+0x5/0x20 [ 2253.813534] kmem_cache_alloc+0x5b/0x310 [ 2253.814096] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2253.814839] create_object.isra.0+0x3a/0xa30 [ 2253.815434] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2253.816124] kmem_cache_alloc+0x159/0x310 [ 2253.816697] security_file_alloc+0x34/0x170 [ 2253.817284] __alloc_file+0xb7/0x320 [ 2253.817799] alloc_empty_file+0x6d/0x170 [ 2253.818348] path_openat+0xe6/0x2770 [ 2253.818857] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2253.819532] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2253.820224] ? path_lookupat+0x860/0x860 [ 2253.820778] ? perf_trace_lock+0x2bd/0x490 [ 2253.821355] ? lock_acquire+0x197/0x470 [ 2253.822244] ? find_held_lock+0x2c/0x110 [ 2253.823297] ? __lockdep_reset_lock+0x180/0x180 [ 2253.824502] do_filp_open+0x190/0x3e0 [ 2253.825466] ? may_open_dev+0xf0/0xf0 [ 2253.826437] ? alloc_fd+0x2e7/0x670 [ 2253.827298] ? lock_downgrade+0x6d0/0x6d0 [ 2253.828271] ? do_raw_spin_lock+0x121/0x260 [ 2253.829263] ? rwlock_bug.part.0+0x90/0x90 [ 2253.830276] ? _raw_spin_unlock+0x1a/0x30 [ 2253.831238] ? alloc_fd+0x2e7/0x670 [ 2253.832115] do_sys_openat2+0x171/0x4d0 [ 2253.833036] ? security_file_free+0xaa/0xd0 [ 2253.833060] ? build_open_flags+0x6f0/0x6f0 [ 2253.833100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 08:39:07 executing program 3: r0 = fork() ptrace$setopts(0x4200, r0, 0x3, 0x2) ptrace(0x10, r0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4002840}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x8}, r0, 0xe, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) read$snapshot(r2, &(0x7f0000000080)=""/177, 0xb1) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101800, 0x4) 08:39:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x80ffffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10044001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESOCT=r4, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRESHEX=r1]) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10044001}, 0x0) getsockopt$netlink(r7, 0x10e, 0x2, &(0x7f0000000200)=""/155, &(0x7f0000000080)=0x9b) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000cc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f00000004c0)={0x7a0, r8, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_TID_CONFIG={0x120, 0x11d, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x4}, {0x7, 0x1}, {0x2, 0xa}, {0x7, 0x6}, {0x7, 0xa}, {0x7, 0x1}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x4}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x7}, {0x0, 0x4}, {0x6}, {0x3, 0x7}, {0x6}, {0x1}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x6, 0x2}, {0x5, 0x4}, {0x6, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0xa}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x2, 0x8}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x8, 0xc, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x89}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x81}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}]}]}, @NL80211_ATTR_TID_CONFIG={0x648, 0x11d, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x6, 0xfff9, 0xfe01, 0x5, 0x8, 0x0, 0x6c]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x7}, {0x2, 0x3}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0xa}, {0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x60, 0x12, 0x2, 0x17, 0x18, 0x2, 0x60, 0xc, 0x4, 0x60, 0x12, 0x1b, 0x1b, 0x18, 0xc, 0x6]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x1}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x6, 0x36, 0x986b7fab23a7a6b9, 0x1c, 0x2, 0xb, 0x6f, 0xc, 0x24, 0x48, 0x3, 0x1b, 0x30, 0x9, 0x1, 0x30, 0x3, 0x14, 0x30, 0x16, 0x3, 0x30, 0x36, 0x1, 0x60, 0x30, 0x60, 0xc, 0x30, 0xc, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x8}, {0x4, 0xa}, {0x2, 0x6}, {0x1, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x48, 0x9, 0x48, 0x30, 0xb, 0x30, 0x16, 0x4, 0x18, 0x24, 0x6, 0x60, 0x4, 0x6, 0x48, 0xc, 0x3, 0x9, 0x12, 0x1, 0x4, 0x6c, 0x1, 0x2, 0x4, 0xc, 0x1b, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0xa}, {0x4, 0x3}, {0x2, 0xa}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0x8, 0x6, 0x2, 0x81, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0x60, 0x12, 0x2, 0x85, 0x5, 0x5, 0x6, 0x6c, 0x5, 0x1b, 0x5, 0x6, 0x24, 0x1, 0x16, 0x1, 0x36, 0x6c, 0x16, 0x12, 0x6c, 0x5, 0x6]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x30, 0x6, 0x6c, 0x5, 0x3, 0x30, 0x50, 0xb, 0x1, 0x6]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x30, 0x16, 0x18, 0x5, 0x6, 0x1b, 0x36, 0x12, 0x60, 0x1, 0x1b, 0x16, 0x36]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0xa}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x7}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x4, 0x2}, {0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0x3}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {}, {0x7, 0x4}, {0x2, 0x2}, {0x2, 0x7}, {0x7, 0x9}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x1}, {0x4, 0x3}]}]}]}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x64, 0x0, 0x6, 0x81, 0x8, 0x0, 0x100, 0x50b]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x6, 0x6, 0x9, 0x3, 0x0, 0x5]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x3}, {0x5}, {0x5, 0x2}, {0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0xa}, {0x1}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0x9}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x3, 0x8}, {}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x7}, {0x6, 0x3}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x9}, {0x6, 0x1}, {0x6, 0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x7}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x7}, {0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0xa}, {0x2, 0x3}, {0x1, 0x9}, {0x5, 0x8}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x4, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x2, 0x24, 0x30, 0x1, 0x3, 0x3f, 0x4, 0x3, 0x12, 0x4, 0x7d, 0x9, 0x1b, 0xb, 0x1, 0xb, 0x6, 0x2, 0x1, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x260, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x610f, 0xddd, 0x8, 0x1, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x3, 0x0, 0x1, 0x48, 0x18, 0x5, 0x1, 0xb, 0x6c, 0x16, 0x4]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x8}, {0x2, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x7, 0x7}, {0x3, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x7, 0x3}, {0x4}, {0x0, 0x4}, {0x6, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x6, 0x1}, {0x7, 0x3}, {0x4, 0x7}, {0x5, 0x3}, {0x2, 0x7}, {0x2, 0xa}, {0x5, 0x4}, {0x2, 0x9}, {0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x5, 0x1}, {}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x3, 0x8}, {0x0, 0x5}, {}, {0x0, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x4, 0x1, 0x8, 0x4, 0x28a, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0xb, 0x24, 0x9, 0x1b, 0x3, 0x4, 0x9, 0x36, 0x0, 0x1b, 0xc6, 0x4e, 0x60, 0x16, 0x1, 0x36, 0x48, 0x6c, 0x24, 0xface6f581f9b3a51, 0xb, 0x6c, 0x2, 0x2, 0x18]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x31, 0x4, 0x3, 0x1, 0x0, 0x4, 0x9, 0xc, 0x36, 0x3, 0x31, 0xc, 0x3, 0x48, 0x24, 0x18, 0x48, 0x1, 0x5, 0x30, 0x3, 0x9, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x36, 0x24, 0x12, 0x60, 0x6, 0xb, 0x2, 0x6c, 0x1, 0x16, 0x9, 0x30, 0x0, 0x16, 0x3, 0x4, 0x9, 0x24, 0x2, 0x12, 0x52, 0x24, 0x1, 0x9, 0x60, 0x53, 0x1]}, @NL80211_TXRATE_HT={0x29, 0x2, [{}, {0x5, 0x7}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {}, {0x7, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x4, 0x7}, {0x7}, {0x2, 0x6}, {0x5, 0x5}, {0x3}, {0x0, 0x5}, {0x3, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x2, 0x3}, {0x7}, {0x2, 0xa}, {}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x1a, 0x30, 0x48, 0x48, 0x30, 0x16, 0x16, 0x6c, 0x6, 0x6c, 0xb, 0x2, 0x18, 0x5, 0xb, 0x6c, 0x30, 0x1b, 0x48, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x5, 0x6, 0x60, 0x6, 0x4, 0x48, 0x2, 0x16, 0x5, 0x18, 0x3, 0xb, 0x12, 0x6c, 0x36, 0x12, 0x6, 0x16, 0x9, 0x6c, 0x4e, 0x18, 0xc]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x6c, 0x12, 0xc, 0xc, 0x48, 0x6, 0x5, 0x5, 0x12, 0x16, 0x36, 0x30, 0x12, 0x2, 0x1b, 0x6c]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x16, 0xb]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x16]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x9, 0xc]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5a, 0x1, 0x24, 0x18, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x1ff, 0x38d0, 0x7, 0x5d5, 0x0, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xbb9, 0x6, 0x1, 0x3, 0x5000, 0x8000, 0x401]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x9, 0x6, 0x6, 0x6c, 0x60, 0x24, 0x36, 0x18, 0x24, 0x16, 0x2, 0x60, 0xc, 0x6, 0x16, 0x16, 0x2, 0x9, 0x36, 0x1b, 0x24, 0x18, 0x36, 0x16]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x1}, {0x6, 0x3}, {0x7, 0x9}, {}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xeb68, 0x3ff, 0x20, 0x3, 0x7fff, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x2, 0x10, 0x3, 0x5, 0x18, 0x5, 0x4, 0x1, 0x6c, 0x2, 0x36, 0x16, 0x1, 0x1b, 0x60, 0xc, 0xa, 0x30, 0x6c, 0x1, 0x18, 0xe90c490471fa44fb, 0x1b, 0x5, 0x12, 0xc, 0x6c, 0x6, 0xb, 0x36, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x23}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x1}, {0x5}, {0x5, 0x4}, {0x7, 0x3}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x8}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x6}, {0x2}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x4}, {0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x2, 0x6}, {0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x4}, {}, {0x5, 0x9}, {0x0, 0x5}, {0x7}, {0x2, 0x2}, {0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x12, 0xc, 0x18, 0x30, 0x24, 0x30, 0x30, 0x48, 0x5d, 0x4, 0x12, 0x9, 0x16]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x9}, {0x5, 0x5}, {0x7, 0x9}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x8}, {0x0, 0x9}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x2}, {0x6}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x7}, {0x7, 0x6}, {0x7, 0x6}, {0x2, 0x5}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x6}, {0x0, 0x4}, {0x3}, {}, {0x5, 0x4}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x6}, {0x6}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x2}, {0x3}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x8}, {0x4, 0x1f}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x7, 0x8}, {0x1, 0x2}, {0x5}, {0x3, 0x3}, {0x3, 0x8}, {0x3, 0x1}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}]}]}]}, 0x7a0}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) read(0xffffffffffffffff, &(0x7f0000000000)=""/95, 0x5f) 08:39:07 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:07 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 45) 08:39:07 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000080)={0x0, 0x0, "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", "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"}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000280)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000055c80)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001080)={r0, r2, "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", "e7d384750d981cb3e350328e644f4a22a15d296826266066b58aea28c2419f5ad32aa429af300442dd6dba67f77b0a9d095226335914408afe091e0da3d6d3e4c8cf30107d4a2be24a60536f6182a96a1305d91de7e23c80f48236dc629fbb753035aa4855dacad00c24db5f6a82de8358fb3a27ae131f623db4ab0a190dc5438a3ccb1669e0188709b3ad4401bf92c43914eb345cb84570579e10ec789a6701af473afb765ced6f41f3b288780bcf5b740ab047fff01c7f1c649af70973dae451c91464c407213eb80884f9a19c049d692beeaee5b4e1530862b27903a3fd1f486015842482e28f7a5566f3279a480da15c0907d3c094a9f018c04a7fda2a368a7dbe2e2fa0f46f6f1c74671d8a854393e49a8609b48e46b6f6f8369bf250b4606e40cf4688e90a77a58c67716d0d46b3b96642048f8ae9562d4e37a926c0097da004591a12fa76e4359bc1377c027af8a0b2ce97fcb96bc249f5deee5f3ac41dc1df5fe3bc49d859db0e0a7706f3282bf9227028ee55cbee5b336283fd86813074991349475481241e2313ae739d4f3e57e96ba9e6cc976da7286e40a0dbc1984792fce0f796892494844b8ee6d8dd867520534ee1812efbfc1083d2e3f126effc1c41f144d9b8657ca698064e4cc3ae705bed72b19e8305555030bde836d314ca051a62263580bdfb2a65d83633017cd2662011d833d6e0bcd4780d047907b9edf474699ba755e167e99b1f0bf0e89f4e048f5b188b67d35884adfb378f593f14c91c1398fbf574fd7ace3b34bc2f5b6882ffb24de2676beb916bfa63af9a2461b8cdc61c27228510943ffeaadbd8e07e82652e263241fca8024c530d86ea4e7d15c067b4af9dbbf4d75a2e3881dc22462905864323fe634404d04b1760c652cf23d2a12c303339a9c32add8d9a90d357a8f3278ad2538a422bc6e98158661f6f6766b5d5c816f8c11689f0e90aefc672657adf1c778b0c5a71e6eb495b081330bd752e18b18d52d75c7b06b06649222a23cb5411a6176d1086bfa6cb91d7007987c4cd8a39a736b29951ef4fac70e700ff62d3a7978d1fcee7a2ff3f38e348b6cddc7dfe4875c993444d83dd60ee126934f365861bc3b97c5ff30efaef41b1b3b2c8967d56447057512549ffd5f8852ec3afd1f5eb045827767d713854059070eca68294dd5cbcd1deb906427051f62d698b8e5ac5183a455b131928e165559eadb1062396a15e71101fd6d9501acee8041e74f6fa6594b42b734c7fede24b62166f8e704e9ba4f0ac753e595e1480b91227612c16866088e16c509e961730d7b0c3062101b78926046243ecfc5007d13dff636f408a5feda004e92aae28b1a5d2483628f5d1661b65e9ecde71870135a0e66383e49fe98639df788d3196bebb3d6d12a992cb3590243432431bd02ee9e530aa9a22a64e5e20d9f1cb1145b87afcdf596a31bb22a31a7688d71dbe5869091bbdfe2d4372da16173074034fea2faa26383f3f803f5f1566415bbe9eb20ca1257a34005b99c0870e0e80d3e9c28b4925d50676a8ff828c4eb4a539d0d7f690fe7fb66abd199149ecbd7f4a2a3feba2d32635b0a78024e07a1e091180b3592d08c9928a69fae31e0b576533902e980517b670eb6f630e8266a809ae484bcd62c8bd70d7b986355ca6d8edf382763886d844894f9b97f4c7df172b767796b23ddfe93863fe608b725870cad74ace1c91a4b3120cfc7f3748ce3d6a07d06fdbab588c5a2658166aebb1004da5c4572508421393b71e49acb0176c131d04ed66ae64f8e5fc1d0d61570db68aaa3b3f964f9b0573b11a6764e810c3fbbbd7b81df4dcfbd0f53d16948905bfe4e030ef16de37346e8c801bce551dc796bd267a0efafe37de56ac90c61fbb31d332be1739d16fafb3dc360e3311775ebbf0bbeac1ed1ccd6c949576e6258c8eec888286a4d20efdc72b34505edfccc91e6e5d9374df075941f86924df17ee750e4ac3346621c48520d6fbc04b09670a2c5db9bef247d60da2744397d98cf49ffc0e3fb83873e55d9acd948b65ef62e9493feab0dfc4143209a18ae1f208e008f890cb164363440280dac26f70ab4831c0e4a533d33b069aae78a1b0aaaa944e2a4c5232854b3ac8daf5cb49c2e02a0a5f61267d694c696e291a17a62a1901b5032b4ddc9e29b586fa9c864312c49afab2dbb10c7d95b20a45fe11080869d13b72246c7d8a652b04f0a25b587b7d76e3316be2668ffc42bb180e750654aeceaaf92d7be1b77c0da8caaa8c3cb5fb51ff4da460a7fd6a7b09d1592b952e0d02437000a835e7a14687fe28b639905cae64acabe1eb90c08f0c2a0a9e0e67750f41cd6e588c3e9a174798c238c93945594933acfccfd58b9cf9867b70bc485a17e7de16204407171ddd834b73c623274099d9cce5354936f29bc758e625d452ade234737fd552b3eb49e2b121aec16d27ea19784425434c2dd78de9d4a58d7b02ae6450133e38ebf276861edbb03311529efd72971f954e09aba0947c00a568b917fde1d85e034190f2bec5b20c6e09302c2b7ac1ff1a7e13edeaf8fc11b56a3465d1fdaace9e2249c517417e4850d7a63c4242934829e3f2852b49b8c6442c7ec489f5c3076ed20fd572365722b76b1ae2c7fe1be2901c74f2a4e7b8ed94c3b1dca989e4f6f7986fefbbecc1907e3fd0fefe48b9c629c39c177c3c3e4bc3961c9244dc9af8cac8f4fe99aa256c64843da6fef3e867863dd2f69d4553fee9f4772d7bf1c436a1443b4fd5bd89a3cdbfb9d2d89900e23124e58a7119c25aebafb62d215b538a085833b9c7fca84405a11bcb509107f3b55a0c2d424cd500c6b0e23535dcacab4708d24dad89aa1faef5862e0c1e0f06850ff894ebcab5b43c27b14fac3c2bcf937aaba378341fe1f008510257e891b72318749a9348a6a5154f1229bdf79005635e8194c8ad676cbdfe9bf54a77317d0aa4bcf73eb8f229f3e525d0889575189364accc7bf6927aa66e37dd26af722c54d74139f08add813bb8211e0d15dbba0c45a36e8e2b2bcab12fbd64b85b95618ca9a2b5edccf4c9f9507b42236bc5442c54c88db9d894b9c8397a4dfe27422af40c840d0c0eb17a1a332e37d47ad5a0e394e59ca0298208fa3bf4c4d1dc99c1a01d4e0da90152b8b0d00329d381cee78377ace3b2285252b7991362d80347e44a98645ec4650a0fba14e2e939a91d458dcca1a5ef7a160f451ff915e231ac8236e30158c91e45f27ac6dd64452c62171ea3ec7ce05f90d9dc7dc08a1b92727506851672fc5f5af3339dea8576d6bde46b0e62574cb5f667123c392ca1021dd45191350e7d9c52f5e8c0ac00465eb56968fc1b43151968253a4683234320b40a679c0f4d60f7f738e3608635bffe0e766ee5cafffea2974c8b6ce54d98cf15f53820338d678b3de134e6948f6162293483d56fbaf76c1545a09f8cbe85b6b3ef271edaf3d7719ed9e647fe0343c22fb1fc04e2f744643168e63516f635ef5c65bc58868a84581716cbac179d4db6d3905a100c0af96a91d1f881cf01718c47f8aa208e2820f07315e9d32c583f73fb11ac3f96fe08ead26f93f7bbe0dd2210a48260c23eea42790004bc4c7507a7684ec77232d71553c113b23398b5fe450f943c032d5e95a2b97b8893aae2e66f1c7acd393fde6fa4a35f944f683a177dca723e773ba4a422b5bd17f5726e094ead64dd24dee39827bc01eb6eeeb91f55643b796091060dcbcea54deb952f5f6eef4785124087817fd9e7403462de1d51b6318fe3805e47a448ac9b9e95a34529d47854b9b4fb3acff7fae0d0dbdf0692df33d840cdad72ea95082ac6701553facf4753d4ea55ea69ec45481e2524b2b5ef83893d3dd28221e66c200853230b10aa68ab60c615b5b022c8458810cff8e318603afdc6fad7ee348b2173c4f36c37d0744d73ae4801b5aa3c4f63212b80829df01d314ca30cb965eca3c22e905ab2c2f33868fc63686c4a733bf8811e52a069096b157fdbd9680b72e4b55c6c36cd2d930ce8e7df86e8f570159cf683e52d5367123298044379b45d747738a2e334c3573fdf1d2b1fbb31fbdc110a54a0b6d1e448df7ca701dd1a36c7c8d334e5826c82de65dc71669da4ab220d75b0c1d2e3f5cd9b853ce6dc720c852abad9b5db352140f13acd133e0c5ae9d5ca37a562fe26098ac831988dc4dfba8cd1213dbbfc4730f483e3c7db10cf4eade9b335070536e363214b4de1a2cfa5ce53e422c12c5d69533d3c751a6d72d80655ecf32006e288dfed2ea0f29157afda18723222179b36a9b7be66ec33d52aae314aa92026f892276685b99f8e91844d6764edaf339af4ff2890083e224c22b9b8647fb7187f4bbff281bb7f83151f5396cfd42630c319781f79466a3904f4b4b6cef97ec5d8b39b1007d0fafede4342f535f6e13f00a6a930a1ef16e94855305715c4f3d946b8021e086d98bb36b8298712fc090498577bb792fac3f1cc6a607ed179f516a9850bc372131f192d3fccf05c1fde4cb12f0c79f4e18a3c075cee65d1567f4e73997c96dfefc9fb244f5b43d38653c7db4ae86e6059548faf4ea945f077a1f775a8c1fa91ae96805dbbe4dc4922254f8a4824eaa3ca26c9e20408ad7136d9f2bb41e9b284e0bdc709106ea99a16c8995a9c3cda28fd98ec71278bb91e051155f0dc045629a8fbf55d9c9bc3844579677acc7d7d51efa5e5d6afa9721919dd33bcd832d2abb2eeaa435475ddc474291fc3df12d4a731de48c89e2f238eb3ec866bc1df72f6687bf55b78b9a72305caf2134b61e312bc7a374e41646e75b794d15d31f34c3d5b55028c0a84c0b2c786e712aeb5658675b80bf62e3947dab266126fadd65790fa0636d581c6cdb59ea68822916ceb4a5a088f2fca3550d58973455fe3c711bd6e95e8b17e9490490619d78e52b6a7b69a21c5d8365ab0e48957370fbbc790703e738b577821dd2b72e423d5db8533602e5341a36a31949e1b061b1c26cd61d17f3d334f0dbee1624c6bfa32ad7bb6c6c3ed18b0dedba54ffc14efa3e5646e73b6c278a7fef9acf6da015985e460e71d05b8cb440b854ef98c4ab04bddeec8cb3391758aa5028e95da463a9c10156e47c520608349a962d0e47b0ca7a3cc407599c235f8a3b6a155b1ca88bd14789dd9e39c51200aa90351442cc2853bb1e69db14b0cbb9ca8c85c25ea2ec65d5a83547b7da12545c3e8406ae00532d1a0362006f8ce2a49c4091c01e32a2be7cd509efb340b2b8a3894c633647e3cbda274bc4458e7d371bf6a46b6c973eb08146801d357de3ee2d6aa553ddf5f8f9071bf154e55577d01bd6caced8ef08f8a72598b342f40f5b8f6f25721898da9e19ff74780488081705b8db47c68b74a29a0c2425cbc458f3d729037e29bde"}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') [ 2253.833120] ? call_rcu+0x3e7/0x9e0 [ 2253.833154] __x64_sys_openat+0x13f/0x1f0 [ 2253.833178] ? __ia32_sys_open+0x1c0/0x1c0 [ 2253.833217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2253.833241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.833273] do_syscall_64+0x33/0x40 [ 2253.833297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.833316] RIP: 0033:0x7efd9561da04 [ 2253.833349] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2253.833365] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2253.833397] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2253.833416] RDX: 0000000000000000 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2253.833434] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2253.833447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2253.833460] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2253.839784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29735 comm=syz-executor.1 [ 2253.862569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29737 comm=syz-executor.1 [ 2253.883940] FAULT_INJECTION: forcing a failure. [ 2253.883940] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.883969] CPU: 0 PID: 29732 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2253.883987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.884001] Call Trace: [ 2253.884039] dump_stack+0x107/0x167 [ 2253.884089] should_fail.cold+0x5/0xa [ 2253.884131] ? xas_alloc+0x336/0x440 [ 2253.884170] should_failslab+0x5/0x20 [ 2253.884208] kmem_cache_alloc+0x5b/0x310 [ 2253.884277] xas_alloc+0x336/0x440 [ 2253.884332] xas_create+0x34a/0x10d0 [ 2253.884405] ? kernel_text_address+0xf2/0x120 [ 2253.884442] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2253.884497] xas_store+0x8c/0x1c40 [ 2253.884613] __xa_store+0x164/0x2d0 [ 2253.884666] ? xa_delete_node+0x280/0x280 [ 2253.884744] ? trace_hardirqs_on+0x5b/0x180 [ 2253.884823] xa_store+0x31/0x50 [ 2253.884870] __io_uring_add_tctx_node+0x1cf/0x520 [ 2253.884911] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2253.884935] ? alloc_fd+0x2e7/0x670 [ 2253.885030] io_uring_setup+0x1fbb/0x2980 [ 2253.885109] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2253.885134] ? wait_for_completion_io+0x270/0x270 [ 2253.885283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2253.885317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.885374] do_syscall_64+0x33/0x40 [ 2253.885407] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.885427] RIP: 0033:0x7f12dae86b19 [ 2253.885454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.885472] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2253.885508] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2253.885526] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2253.885545] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2253.885574] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2253.885593] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:39:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 29) 08:39:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x40}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000140)="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") read(r0, &(0x7f00000000c0)=""/96, 0x60) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)="d4083318911e9714403c64949c540a6a057b9971ac16ffd1a187bf7f673df8fdd4f7f6d9952bf1a838a9e4d6abe5daf7295e1b7c73e8e9617eb902993ed8b288747653059d5a398831723e36e7") ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000001140)="e8655fae8618977ec5716fa2385d2f90b82dbf60897281353f5b38dc1e3a230c93b5d0169755d331b6d99746a47f3136dab4231619bdf3b0001814c600fa256024c83ca2db012861163b9943c2b9371b61b0befe9167844942446af6d0c76490f5630b5bbb273d56f5bc58722e062068402b1c466484a551581f5a9b2c8b273c7eb53cdecf393d16c938441ab06119d9b858fb0dea31") 08:39:21 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 46) 08:39:21 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000780)={0x4, 0x80, 0xff, 0x24, 0x6, 0x1f, 0x0, 0xffff, 0x200, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000740), 0x7}, 0x41090, 0x1, 0x1, 0x0, 0x5f85, 0x1ef, 0x803, 0x0, 0x3, 0x0, 0x7ff}, r1, 0xa, 0xffffffffffffffff, 0x3) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/209, 0xd1}], 0x6) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f0000000400)=@ng={0x4, 0x7, "c46ecd017b86c3994f05"}, 0xc, 0x1) 08:39:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x9effffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x4000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:21 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @mcast2, 0x3548}, 0x1c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00 \x00', @ANYRES16=r3, @ANYBLOB="000826bd7000080000000a00000008000300", @ANYRES32=0x0, @ANYBLOB="050400ee3bc8a7e800b6f5335900"], 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x40080) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x814253}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000850) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0xb80, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x38}}}}, [@NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x2}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x4}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0x9}, {}, {0x4, 0x2}, {}, {0x2, 0x9}, {0x5}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x6, 0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x5, 0xa}, {0x2}, {0x7, 0x8}, {0x7, 0x7}, {0x4, 0x8}, {0x6, 0x4}, {0x5, 0x2}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x1}, {0x4, 0x2}, {0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0xa}, {0x4, 0x1}, {0x6, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x6, 0x5}, {0x7, 0xa}, {0x2, 0x3}, {0x2, 0x6}, {0x1}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0x4}, {0x5, 0x8}, {0x4, 0x1}, {0x6, 0x1}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x81, 0x9, 0xfff, 0x3, 0x5, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf000, 0x8, 0x5, 0x8, 0x988, 0x0, 0xfff8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x5}, {0x4, 0x3}, {}, {0x4, 0x1}, {0x5, 0x3}, {0x7, 0x1}, {0x4, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x3}, {0x7, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x0, 0x4}, {0x2}, {0x6}, {0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x9}, {0x4, 0x9}, {0x6, 0x1}, {0x5, 0x6}, {0x3, 0x6}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x7}, {0x6, 0x7}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x1}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x3, 0xa}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x7f, 0x800, 0x3, 0x1, 0x0, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd61, 0x2, 0x1000, 0x40, 0x7, 0x20, 0xe16, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x21f, 0x7, 0x2, 0x6, 0x59, 0x1ff, 0x800, 0x1]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x60, 0x500, 0x92, 0xf801, 0xffc1, 0x99e, 0x401, 0x371d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x5, 0x1ff, 0x9, 0x1000, 0x40, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x79, 0x0, 0x6, 0x101, 0xba, 0x9, 0x9]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x9}, {0x6}, {0x4, 0x8}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0x9}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x3}, {0x1}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x2}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x8}, {0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {0x3, 0x1}, {0x3}, {0x0, 0x2}, {0x2, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x1}, {0x6, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x3, 0x4}, {0x3, 0x6}, {0x7, 0x9}, {0x1}, {0x6}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x7}, {0x2}, {0x3, 0x8}, {0x2}, {0x3, 0x3}, {0x5, 0x5}, {0x3, 0x9}, {0x6}, {0x7}, {0x7, 0x2}, {0x4, 0x9}, {0x3, 0x4}, {}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x18, 0xb, 0x1e, 0x3, 0x1, 0x3, 0x6, 0x30]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x12, 0x65, 0x12, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0xb, 0x6, 0x60, 0x36, 0x16, 0x5aa225bbb8650499, 0x0, 0x18, 0x12, 0x48]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0xc6a7bd54d24f50b9, 0x4, 0x3, 0x3, 0x18, 0x6c, 0x2, 0x18, 0xb, 0x1d, 0x5, 0x24, 0x6, 0x30, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xabb, 0x8ec, 0x3f, 0x8, 0x9, 0x2, 0xa9c]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff7, 0x6, 0xcb, 0x4, 0x0, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x4, 0x1b, 0x24, 0x4, 0x4, 0x48, 0x9, 0x1, 0x5, 0x6c, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x5, 0x2}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x12, 0x1b, 0xc, 0x74, 0x24, 0x18, 0x6c, 0xc, 0x3, 0x12, 0x24, 0x1, 0x5, 0x1, 0x3, 0x6c, 0x6c, 0x6, 0x1, 0x3]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x1b, 0x12, 0x1, 0xc, 0x9, 0x36, 0x12, 0x9, 0xf, 0x12, 0x48, 0x12, 0x5, 0x4, 0x36, 0x4, 0x1, 0x6c, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x60, 0x4, 0x48, 0x2, 0x1, 0x16, 0x4, 0x1, 0x2, 0x0, 0x60, 0x12, 0x48, 0x18, 0x3, 0x24, 0xc, 0x9, 0x18, 0xc, 0x16, 0x18, 0xb, 0x6, 0xc, 0x36, 0x30, 0x60, 0x16, 0x9, 0x2]}]}]}, @NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x2, 0xa}, {0x5, 0x7}, {0x7, 0x7}, {0x4, 0x7}, {0x4, 0x4}, {}, {0x1, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x4}, {0x2, 0x2}, {0x7, 0x2}, {0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x3, 0x2}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x8}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x3, 0x9}, {0x7, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x8}, {0x1}, {0x0, 0x3}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x5, 0x4}, {0x3, 0x7}, {0x6, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x1}, {0x1, 0x8}, {0x7, 0x4}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x2}, {}, {0x6, 0x3}, {0x6, 0x9}, {0x2, 0x7}, {0x7, 0x3}, {0x1, 0x9}, {0x5, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x2, 0x5}, {0x5, 0x2}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x1}, {0x6, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x4, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x1b, 0x36, 0x36, 0x30, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x4ccf, 0x1ff, 0xd86a, 0x4, 0x4, 0x8]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0x3}, {0x4, 0x9}, {0x6, 0xa}, {0x5, 0x2}, {0x4, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0x1}, {0x7}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x8}, {0x1}, {0x4, 0x2}, {0x3, 0x7}, {0x7, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x6}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x8}, {0x7, 0x7}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x7}, {0x5, 0x8}, {0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x2, 0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x5, 0x7}, {0x5, 0x1}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x24, 0xb, 0x2c, 0x1b, 0xb, 0x6, 0x6c, 0x16, 0x1b, 0x5]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x5}, {0x2, 0x7}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x4}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2800, 0x9, 0x3, 0xfff, 0x3, 0x40, 0x81, 0xb268]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x48, 0x36, 0x18, 0xc, 0x3, 0x6c, 0x3, 0x60, 0x48, 0x82, 0x4, 0x5, 0x4, 0x4, 0x3, 0x1b, 0x9, 0x6, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x0, 0x3ff, 0x7ff, 0x75, 0x527, 0x6, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x6c, 0x24, 0x1, 0x0, 0x2, 0xb, 0x48, 0x16, 0x16, 0x36, 0x18, 0xb, 0x9, 0x5, 0x4, 0x44]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xfffe, 0x20, 0x8, 0x6, 0x3e, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0xc, 0x48, 0x2, 0x24, 0x12, 0x5, 0x36, 0x24, 0x2, 0x60, 0x2, 0x5, 0x36, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbad, 0x3f, 0x8c, 0x8175, 0x6, 0x3, 0x800, 0x8b0]}}]}, @NL80211_BAND_6GHZ={0x124, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x2}, {0x2, 0x1}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x7}, {0x6, 0x9}, {0x4, 0x7}, {0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0x9}, {0x4, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x6}, {0x1}, {}, {0x0, 0xa}, {0x2, 0x6}, {0x1}, {0x6, 0xa}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x6, 0x6}, {}, {0x2}, {0x2, 0x6}, {0x0, 0x7}, {}, {0x4, 0x6}, {0x6, 0x3}, {0x3, 0x7}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x1}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x6}, {0x5}, {0x2, 0x3}, {0x4, 0x3}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x4}, {0x5, 0xa}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0xa}, {0x4, 0x8}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0xa}, {0x3}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x5}, {0x4}, {0x1, 0x4}, {0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7, 0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x6, 0x4}, {0x5, 0x3}, {0x6, 0x5}, {0x3, 0x5}, {0x5, 0xa}, {0x6, 0x4}, {0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x9}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x8}, {0x6, 0x1}, {0x5}, {0x5, 0x2}, {0x3, 0xa}, {0x4, 0x8}, {0x3}, {0x1, 0x8}, {0x1}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {}, {0x4, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1ff, 0x2, 0x7, 0x7f, 0x8001, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0x4, 0x7, 0x0, 0x1, 0x8001, 0xc0f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x1, 0x81, 0x0, 0xed, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x3, 0x2}, {0x4, 0x1}, {0x5, 0xa}, {0x6, 0x8}, {0x2, 0x9}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x2, 0x4}, {0x5, 0x4}, {0x5, 0xa}, {0x4, 0x7}, {0x5, 0x7}, {0x3}, {0x1, 0x4}, {0x4, 0x5}, {0x5, 0x9}, {0x4, 0x3}, {0x4, 0x1}, {0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x7}, {0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x3, 0x7}, {}, {0x0, 0x1}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x3}, {0x7, 0x9}, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x5}, {0x2, 0x10}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x9}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x6}, {0x7, 0x8}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x35c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x2}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x3}, {0x1}, {0x5, 0x8}, {0x6, 0x5}, {0x4}, {0x5, 0x8}, {}, {0x6, 0xa}, {0x6, 0x5}, {0x3, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x2, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {}, {0x6, 0x8}, {0x0, 0x6}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0xc, 0x6, 0x4, 0x60, 0x0, 0x12, 0x4]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x8}, {0x5, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x6}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x6}, {0x5, 0x1}, {0x2, 0x8}, {0x5}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0x4}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x4, 0x6}, {0x6, 0x2}, {0x7}, {0x2, 0x2}, {0x2, 0x6}, {0x3, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x5}, {0x5}, {0x2, 0x3}, {0x7, 0x6}, {0x7, 0x8}, {0x7}, {0x1, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {0x3, 0x3}, {0x2, 0x9}, {0x4, 0x9}, {0x3, 0x6}, {0x4, 0xa}, {0x2, 0xa}, {0x3}, {0x4, 0x2}, {0x4, 0xa}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x9}, {0x3, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x7}, {0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x7}, {0x4, 0x1}, {0x5, 0x3}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0xa}, {0x2}, {0x0, 0xa}, {0x5, 0x3}, {0x3, 0x9}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x3ff, 0x0, 0xf4, 0xaf3c, 0x101, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xbf9d, 0x9, 0x401, 0x40, 0x91d2, 0x1, 0xdc12]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf712, 0x7ff, 0x3, 0x7fff, 0x5, 0x40, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x4, 0xb, 0x2, 0x36, 0x9, 0x1b, 0xb, 0x4, 0x2, 0xb, 0x1, 0x4, 0x18, 0xb, 0x4a, 0x9, 0x5, 0xd, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x3f, 0x5, 0x8000, 0xc121, 0x3f, 0x26f]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x30, 0x60, 0x1, 0x30, 0x3, 0x24, 0x0, 0x36, 0x12, 0x18, 0x4, 0x60, 0xc, 0x2, 0x0, 0x48, 0x16]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x18, 0x60, 0x3, 0x2, 0x6c, 0x12, 0x36, 0x6, 0x48, 0x3, 0xc, 0x5, 0x60, 0x18, 0x18, 0x18, 0x48, 0x4a]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x3, 0x45d, 0xfff, 0x6, 0x7, 0x6]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x2}, {0x1}, {0x1}, {0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0xa}, {0x5, 0x2}, {0x6, 0x6}, {0x7, 0x5}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x1}, {0x1}, {0x6}, {0x4}, {0x7, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x7, 0x3}, {0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x3}, {}, {}, {}, {0x4, 0x2}, {0x3}, {0x2, 0x1}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0xa}, {0x4, 0x2}, {0x2, 0x4}, {0x5, 0x3}, {0x6, 0x4}, {0x2, 0x7}, {0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0x9}, {0x1}, {0x4, 0x5}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x7f, 0x5273, 0x8da, 0x0, 0x7fff, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6, 0x1f, 0x8000, 0x1f, 0x6, 0x7fff]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x7}, {0x4, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x48, 0x6, 0xc, 0x6c, 0x6c, 0x18, 0x6c, 0x30]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x1, 0x24, 0x4, 0x0, 0x1, 0x6, 0x16, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x3}, {0x0, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x48, 0x48, 0x3, 0x50, 0x60, 0x1b, 0x18, 0x18, 0x2, 0x3, 0x48, 0x30, 0x2, 0x5, 0x30, 0x6, 0x3, 0x24, 0x2, 0x5, 0x1d]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x2, 0x1, 0x0, 0xa7, 0x80, 0x7fff, 0x5]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1f, 0x12, 0xb, 0x1b, 0x60, 0xc, 0x12, 0x1, 0x5, 0x24, 0xc, 0x0, 0x6, 0x70, 0x6c, 0x12, 0x2, 0x36, 0x36, 0x1, 0x0]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x1}, {0x2, 0x5}, {0x3, 0x8}, {0x5, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x6}, {0x3, 0x3}, {0x7, 0xa}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x8}, {0x2, 0x3}, {0x4}, {0x7, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x3}, {0x4, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x7}, {0x4, 0x7}, {0x3, 0x8}, {0x4, 0x8}, {0x0, 0x3}, {0x5, 0xa}, {0x3, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x5, 0x5}, {0x7, 0x6}, {0x1, 0x6}, {0x4, 0x6}, {0x4, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x4, 0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x50, 0xfffb, 0xdd6, 0x800, 0x7741, 0x3, 0x8, 0x3]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x1}, {0x5, 0x4}, {0x7, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x5, 0x7}, {0x7, 0xa}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x3, 0x7}, {0x2, 0xa}, {0x2, 0x2}, {0x2, 0x9}, {0x3, 0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0xa}, {0x1}, {0x7, 0x9}, {0x0, 0x9}, {0x1}, {0x3, 0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x4, 0xa}, {0x6, 0xa}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x9}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x6c, 0x3, 0xc, 0x2, 0x60, 0x30, 0xc, 0x6ca019e6a18b9962, 0x9, 0x3, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x19c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x0, 0x7}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x2}, {0x3}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x6}, {}, {0x2, 0x4}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x2}, {0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x6}, {0x2, 0x6}, {0x0, 0x8}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x7}, {0x6, 0x6}, {0x4, 0x5}, {0x7, 0x9}, {0x7, 0x4}, {0x3, 0x8}, {0x2}, {0x7, 0x8}, {0x6, 0x3}, {0x3, 0x3}, {0x5, 0x9}, {0x3, 0x5}, {0x1, 0xa}, {0x6, 0x8}, {0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x5, 0xa}, {0x6, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0x5, 0x4}, {0x3, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x7, 0x7}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0xa}, {0x4, 0x5}, {0x5, 0x2}, {0x5, 0x2}, {0x1}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0xe4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x1}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x4, 0x3}, {0x5, 0x7}, {0x2, 0x12}, {0x7, 0x5}, {0x6, 0x3}, {0x0, 0x8}, {0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x2, 0x4}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x5}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x2}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x4, 0x6}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x8}, {0x1}, {0x4, 0x9}, {0x3, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x1}, {0x1}, {0x2, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x3}, {0x3, 0x6}, {0x0, 0x4}, {0x7}, {0x6, 0x3}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x8}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{}, {0x7, 0x8}, {0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x6}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x7, 0x9}, {0x2, 0x4}, {0x4, 0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x6, 0x9}, {0x7, 0x3}, {0x3, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x9}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x4, 0x8}, {0x0, 0x7}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x3, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x5, 0x5}, {0x4}, {0x2, 0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x8}, {0x2, 0x4}, {0x7}, {0x6, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x4, 0xa}, {0x4}, {0x4, 0x7}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0x6}, {0x7, 0xa}, {0x1, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x2, 0x8}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x4}, {0x5}, {0x5, 0x6}, {0x6, 0x3}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x6, 0x1}, {0x6, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x5, 0x8}, {0x2, 0x2}, {0x0, 0x3}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x9}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x2}, {0x4, 0xa}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x1]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x30, 0x12, 0x30, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x428a2521e434cff7}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x49, 0x5, 0x1b, 0x24, 0x1, 0x60, 0xc, 0xc, 0xb, 0x6, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x2, 0x16, 0x12, 0xc, 0x1, 0x30, 0x1, 0x5, 0x9, 0x0, 0x48, 0x4, 0x4, 0x15, 0x24, 0x18, 0xeddf232d0078434, 0x6, 0x48, 0x18, 0x36, 0x6e, 0xc, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x9, 0x7, 0x3, 0x8, 0x800, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7f, 0x0, 0x4, 0x3, 0x0, 0xe6]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x47, 0x12, 0xf, 0x1b, 0x6c, 0x48, 0x10, 0x60, 0x1b, 0x60, 0xc7, 0xb, 0x78, 0x9, 0x9]}]}]}]}, 0xb80}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2268.003016] FAULT_INJECTION: forcing a failure. [ 2268.003016] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.005649] CPU: 1 PID: 29968 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2268.006989] FAULT_INJECTION: forcing a failure. [ 2268.006989] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.007119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2268.007137] Call Trace: [ 2268.011767] dump_stack+0x107/0x167 [ 2268.012539] should_fail.cold+0x5/0xa [ 2268.013355] ? proc_self_get_link+0x18b/0x200 [ 2268.014309] should_failslab+0x5/0x20 [ 2268.015116] kmem_cache_alloc_trace+0x55/0x320 [ 2268.016084] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2268.017036] proc_self_get_link+0x18b/0x200 [ 2268.017962] step_into+0x1595/0x1ce0 [ 2268.018762] ? lookup_fast+0x6e0/0x6e0 [ 2268.019588] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2268.020553] walk_component+0x171/0x6a0 [ 2268.021394] ? trace_hardirqs_on+0x5b/0x180 [ 2268.022316] ? handle_dots.part.0+0x15c0/0x15c0 [ 2268.023310] ? security_inode_permission+0xcb/0x100 [ 2268.024373] link_path_walk.part.0+0x699/0xbf0 [ 2268.025352] ? walk_component+0x6a0/0x6a0 [ 2268.026240] ? percpu_counter_add_batch+0x8b/0x140 [ 2268.027285] path_openat+0x25d/0x2770 [ 2268.028104] ? path_lookupat+0x860/0x860 [ 2268.028969] ? perf_trace_lock+0xac/0x490 [ 2268.029855] ? lock_acquire+0x197/0x470 [ 2268.030692] ? find_held_lock+0x2c/0x110 [ 2268.031557] ? __lockdep_reset_lock+0x180/0x180 [ 2268.032545] do_filp_open+0x190/0x3e0 [ 2268.033353] ? may_open_dev+0xf0/0xf0 [ 2268.034189] ? rwlock_bug.part.0+0x90/0x90 [ 2268.035100] ? _raw_spin_unlock+0x1a/0x30 [ 2268.035971] ? alloc_fd+0x2e7/0x670 [ 2268.036756] do_sys_openat2+0x171/0x4d0 [ 2268.037594] ? security_file_free+0xaa/0xd0 [ 2268.038520] ? build_open_flags+0x6f0/0x6f0 [ 2268.039449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.040545] ? call_rcu+0x3e7/0x9e0 [ 2268.041324] __x64_sys_openat+0x13f/0x1f0 [ 2268.042201] ? __ia32_sys_open+0x1c0/0x1c0 [ 2268.043112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.044236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.045328] do_syscall_64+0x33/0x40 [ 2268.046122] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.047204] RIP: 0033:0x7efd9561da04 [ 2268.047988] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2268.051891] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2268.053500] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2268.055003] RDX: 0000000000000000 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2268.056517] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2268.058042] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2268.059541] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 [ 2268.061073] CPU: 0 PID: 29971 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2268.062590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2268.064380] Call Trace: [ 2268.064975] dump_stack+0x107/0x167 [ 2268.065803] should_fail.cold+0x5/0xa [ 2268.066662] ? create_object.isra.0+0x3a/0xa30 [ 2268.067670] should_failslab+0x5/0x20 [ 2268.068509] kmem_cache_alloc+0x5b/0x310 [ 2268.069404] ? mark_held_locks+0x9e/0xe0 [ 2268.070334] create_object.isra.0+0x3a/0xa30 [ 2268.071286] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2268.072425] kmem_cache_alloc+0x159/0x310 [ 2268.073374] xas_alloc+0x336/0x440 [ 2268.074190] xas_create+0x34a/0x10d0 [ 2268.075048] ? kernel_text_address+0xf2/0x120 [ 2268.076032] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2268.077191] xas_store+0x8c/0x1c40 [ 2268.078062] __xa_store+0x164/0x2d0 [ 2268.078884] ? xa_delete_node+0x280/0x280 [ 2268.079835] ? trace_hardirqs_on+0x5b/0x180 [ 2268.080831] xa_store+0x31/0x50 [ 2268.081579] __io_uring_add_tctx_node+0x1cf/0x520 [ 2268.082650] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2268.083787] ? alloc_fd+0x2e7/0x670 [ 2268.084656] io_uring_setup+0x1fbb/0x2980 [ 2268.085613] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2268.086726] ? wait_for_completion_io+0x270/0x270 [ 2268.087890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.089078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.090235] do_syscall_64+0x33/0x40 [ 2268.091058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.092177] RIP: 0033:0x7f12dae86b19 [ 2268.092991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2268.096890] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2268.098554] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2268.100091] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2268.101627] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2268.103155] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2268.104691] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:39:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)="530de6cef5c00f8dde22b6b8807470d21015ebd9d44d095c5d3e33703c195e048de55badbc4be93fbdcba7f7af1d272c05c66021451cff0a3bb57c6838635d4fc4f768347e14b520b4963980852803e6156956e0937fbf5300aea8bd", 0x5c, 0x1}, {&(0x7f00000001c0)="8db30c", 0x3, 0x1}, {&(0x7f0000000200)="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", 0xfe, 0x5}], 0x49c, &(0x7f0000000380)={[{@shortname_win95}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, '\x1b,\\\x18@)'}}, {@appraise}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000d, 0x20010, r1, 0xe7dd3000) 08:39:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x40}, 0x6) pipe2(&(0x7f0000000040), 0x4000) r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x400000) openat(r2, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0000, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:39:21 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) 08:39:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x5000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 30) 08:39:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x98, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf0ffffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2268.401955] FAULT_INJECTION: forcing a failure. [ 2268.401955] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.404551] CPU: 0 PID: 30237 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2268.406062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2268.407859] Call Trace: [ 2268.408439] dump_stack+0x107/0x167 [ 2268.409242] should_fail.cold+0x5/0xa [ 2268.410084] ? find_held_lock+0x2c/0x110 [ 2268.410971] ? create_object.isra.0+0x3a/0xa30 [ 2268.411966] should_failslab+0x5/0x20 [ 2268.412792] kmem_cache_alloc+0x5b/0x310 [ 2268.413675] ? __task_pid_nr_ns+0x1b8/0x500 [ 2268.414636] create_object.isra.0+0x3a/0xa30 [ 2268.415590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2268.416706] kmem_cache_alloc_trace+0x151/0x320 [ 2268.417739] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 2268.418721] proc_self_get_link+0x18b/0x200 [ 2268.419675] step_into+0x1595/0x1ce0 [ 2268.420509] ? lookup_fast+0x6e0/0x6e0 [ 2268.421366] ? try_to_unlazy_next+0x4f0/0x4f0 [ 2268.422383] walk_component+0x171/0x6a0 [ 2268.423250] ? trace_hardirqs_on+0x5b/0x180 [ 2268.424196] ? handle_dots.part.0+0x15c0/0x15c0 [ 2268.425228] ? security_inode_permission+0xcb/0x100 [ 2268.426356] link_path_walk.part.0+0x699/0xbf0 [ 2268.427379] ? walk_component+0x6a0/0x6a0 [ 2268.428285] ? percpu_counter_add_batch+0x8b/0x140 [ 2268.429379] path_openat+0x25d/0x2770 [ 2268.430235] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2268.431338] ? path_lookupat+0x860/0x860 [ 2268.432227] ? perf_trace_lock+0x2bd/0x490 [ 2268.433161] ? lock_acquire+0x197/0x470 [ 2268.434039] ? find_held_lock+0x2c/0x110 [ 2268.434939] ? __lockdep_reset_lock+0x180/0x180 [ 2268.435976] do_filp_open+0x190/0x3e0 [ 2268.436813] ? may_open_dev+0xf0/0xf0 [ 2268.437674] ? rwlock_bug.part.0+0x90/0x90 [ 2268.438634] ? _raw_spin_unlock+0x1a/0x30 [ 2268.439542] ? alloc_fd+0x2e7/0x670 [ 2268.440367] do_sys_openat2+0x171/0x4d0 [ 2268.441238] ? security_file_free+0xaa/0xd0 [ 2268.442198] ? build_open_flags+0x6f0/0x6f0 [ 2268.443159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.444303] ? call_rcu+0x3e7/0x9e0 [ 2268.445118] __x64_sys_openat+0x13f/0x1f0 [ 2268.446030] ? __ia32_sys_open+0x1c0/0x1c0 [ 2268.446966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2268.448105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2268.449232] do_syscall_64+0x33/0x40 [ 2268.450051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2268.451163] RIP: 0033:0x7efd9561da04 [ 2268.451968] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2268.455946] RSP: 002b:00007efd92be0060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2268.457598] RAX: ffffffffffffffda RBX: 00007efd9577df60 RCX: 00007efd9561da04 [ 2268.459146] RDX: 0000000000000000 RSI: 00007efd92be00f0 RDI: 00000000ffffff9c [ 2268.460688] RBP: 00007efd92be00f0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2268.462237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2268.463777] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:39:40 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (fail_nth: 31) [ 2287.383526] FAULT_INJECTION: forcing a failure. [ 2287.383526] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.385347] CPU: 1 PID: 30319 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2287.386434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.387725] Call Trace: [ 2287.388116] dump_stack+0x107/0x167 [ 2287.388679] should_fail.cold+0x5/0xa [ 2287.389272] ? xas_alloc+0x336/0x440 [ 2287.389845] should_failslab+0x5/0x20 [ 2287.390445] kmem_cache_alloc+0x5b/0x310 [ 2287.391071] xas_alloc+0x336/0x440 [ 2287.391627] xas_create+0x34a/0x10d0 [ 2287.392214] ? kernel_text_address+0xf2/0x120 [ 2287.392908] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2287.393714] xas_store+0x8c/0x1c40 [ 2287.394285] __xa_store+0x164/0x2d0 [ 2287.394850] ? xa_delete_node+0x280/0x280 [ 2287.395498] ? trace_hardirqs_on+0x5b/0x180 [ 2287.396156] xa_store+0x31/0x50 [ 2287.396643] __io_uring_add_tctx_node+0x1cf/0x520 [ 2287.397372] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2287.398185] ? alloc_fd+0x2e7/0x670 [ 2287.398761] io_uring_setup+0x1fbb/0x2980 [ 2287.399408] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2287.400184] ? wait_for_completion_io+0x270/0x270 [ 2287.400946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.401761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2287.402566] do_syscall_64+0x33/0x40 [ 2287.403142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2287.403933] RIP: 0033:0x7f12dae86b19 [ 2287.404504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.407342] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2287.408481] FAULT_INJECTION: forcing a failure. [ 2287.408481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2287.408515] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2287.408533] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2287.413119] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2287.414179] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2287.415226] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2287.416310] CPU: 0 PID: 30323 Comm: syz-executor.5 Not tainted 5.10.259 #1 [ 2287.417787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.419581] Call Trace: [ 2287.420151] dump_stack+0x107/0x167 [ 2287.420940] should_fail.cold+0x5/0xa [ 2287.421765] _copy_to_user+0x2e/0x180 [ 2287.422879] simple_read_from_buffer+0xcc/0x160 [ 2287.423886] proc_fail_nth_read+0x198/0x230 [ 2287.424814] ? proc_sessionid_read+0x230/0x230 [ 2287.425788] ? security_file_permission+0xb1/0xe0 [ 2287.426836] ? proc_sessionid_read+0x230/0x230 [ 2287.427805] vfs_read+0x228/0x620 [ 2287.428557] ksys_read+0x12d/0x260 [ 2287.429307] ? vfs_write+0xb10/0xb10 [ 2287.430117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.431229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2287.432342] do_syscall_64+0x33/0x40 [ 2287.433158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2287.434282] RIP: 0033:0x7efd9561d69c [ 2287.435087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2287.438984] RSP: 002b:00007efd92be0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2287.440626] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007efd9561d69c [ 2287.442147] RDX: 000000000000000f RSI: 00007efd92be01e0 RDI: 0000000000000004 [ 2287.443645] RBP: 00007efd92be01d0 R08: 0000000000000000 R09: 00007efd92bdff70 [ 2287.445139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.446637] R13: 00007ffd1cc654df R14: 00007efd92be0300 R15: 0000000000022000 08:39:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0xb50, 0xffff, 0x7fffffff, 0x0, 0x59, 0x3}) 08:39:40 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="6aa0edde9aa459b14901b5502f26645c4e94122869ef189f8d0cc1334e735836cad8e7078ec0a5b3f69b1b409ed3ea8353b7679641ffa1c19047b991b13aab1f18b57843c75c939a5912f31a2ba5ed43c5", 0x51}], 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800002, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}], [{@uid_lt={'uid<', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, ']\x02&-'}}, {@uid_lt={'uid<', 0xee01}}, {@dont_appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x1050, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x1050}}, 0x800) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x2, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 08:39:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x6000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xfffff000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:40 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 47) 08:39:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000006400), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000020150000000004000000"], 0x14}}, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x72, 0x0, 0x0, 0x80, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x6800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x9, 0x7, 0x3, 0x0, 0xb1a6, 0x10880, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x14018, 0x2f3, 0x6861658a, 0x4, 0x7, 0x1f, 0x100, 0x0, 0x7, 0x0, 0x100000000}, 0xffffffffffffffff, 0x3, r2, 0x1b) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:39:40 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 48) 08:39:40 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x7000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2287.632211] FAULT_INJECTION: forcing a failure. [ 2287.632211] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.634995] CPU: 0 PID: 30466 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2287.636466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.638224] Call Trace: [ 2287.638798] dump_stack+0x107/0x167 [ 2287.639635] should_fail.cold+0x5/0xa [ 2287.640484] ? create_object.isra.0+0x3a/0xa30 [ 2287.641474] should_failslab+0x5/0x20 [ 2287.642306] kmem_cache_alloc+0x5b/0x310 [ 2287.643198] ? mark_held_locks+0x9e/0xe0 [ 2287.644095] create_object.isra.0+0x3a/0xa30 [ 2287.645059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2287.646179] kmem_cache_alloc+0x159/0x310 [ 2287.647117] xas_alloc+0x336/0x440 [ 2287.647899] xas_create+0x34a/0x10d0 [ 2287.648745] ? kernel_text_address+0xf2/0x120 [ 2287.649728] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2287.650902] xas_store+0x8c/0x1c40 [ 2287.651754] __xa_store+0x164/0x2d0 [ 2287.652568] ? xa_delete_node+0x280/0x280 [ 2287.653523] ? trace_hardirqs_on+0x5b/0x180 [ 2287.654511] xa_store+0x31/0x50 [ 2287.655252] __io_uring_add_tctx_node+0x1cf/0x520 [ 2287.656303] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2287.657457] ? io_uring_setup+0x1fb3/0x2980 [ 2287.658436] io_uring_setup+0x1fbb/0x2980 [ 2287.659376] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2287.660475] ? wait_for_completion_io+0x270/0x270 [ 2287.661626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.662768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2287.663880] do_syscall_64+0x33/0x40 [ 2287.664693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2287.665818] RIP: 0033:0x7f12dae86b19 [ 2287.666630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.670529] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2287.672172] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2287.673695] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2287.675213] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2287.676726] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2287.678316] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:39:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/177, 0xb1) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r0, 0x2da) syncfs(r0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:39:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000001540)={0x1f, 0x3, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x501002, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000140)={0x0, "26edd2190496e33786d0f5a78133dbe3"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001140)={r3, 0x5, 0x40}) 08:39:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xffffff7f, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:41 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:39:41 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10044001}, 0x0) syz_io_uring_setup(0x78e6, &(0x7f0000000140)={0x0, 0x18fb, 0x0, 0x0, 0x359, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="2b9dcf5f3e683eb9c19874d7d7e9e722a409af5d30212551d2d21877a7d631222c036db0dfba87a57a2716e38d54c2ed9d10049309429bc974496c56143ea63a2c93fc6717fa0c80630656db364c0529b54519d5d4", 0x55, 0x24004004, 0x1}, 0xdd) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x105100) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0x8010, r1, 0x8000000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:39:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = fcntl$dupfd(r0, 0x406, r0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) 08:39:41 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x92, 0x10000, 0x5, 0x4, 0xfffffffd}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:39:41 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:41 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x3f, 0x81, 0x0, 0x9, 0x20000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0xd2a, 0x8000}, 0x1483, 0x3, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x80000001, 0x0, 0x6}, r1, 0x6, r2, 0xb) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x6, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x8001, 0x4, 0x9, 0x2}) 08:39:41 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:41 executing program 3: r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:39:41 executing program 5: times(&(0x7f0000000000)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10, 0x800) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:39:41 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 49) 08:39:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xffffff80, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x3ff, [0x10001, 0x2], 0x4}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000140)="78a200bb4a56505b5d7d25d5402ff9a8fb1e5251104298f9ef027e8841e3340acdba6ce78f774c1ddef9a4454d29578d0a6f87555b87815428a38c865e241cb7dd2334dc237a92b42eb198285da99037dfa6d9fe35009bda6b63e8ed8baba670963aae7fceeb2eb463f47ecf0f4768142bd0ef605039f807d647818d68543bbe36ab8e8af32572845717a2f0e1ab2588ea2c8e134ab56892e75e8b8a") [ 2288.035421] FAULT_INJECTION: forcing a failure. [ 2288.035421] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.036873] CPU: 1 PID: 30823 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2288.037687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2288.038671] Call Trace: [ 2288.038987] dump_stack+0x107/0x167 [ 2288.039417] should_fail.cold+0x5/0xa [ 2288.039858] ? xas_alloc+0x336/0x440 [ 2288.040286] should_failslab+0x5/0x20 [ 2288.040722] kmem_cache_alloc+0x5b/0x310 [ 2288.041200] xas_alloc+0x336/0x440 [ 2288.041619] xas_create+0x34a/0x10d0 [ 2288.042066] ? kernel_text_address+0xf2/0x120 [ 2288.042587] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2288.043199] xas_store+0x8c/0x1c40 [ 2288.043631] __xa_store+0x164/0x2d0 [ 2288.044072] ? xa_delete_node+0x280/0x280 [ 2288.044558] ? trace_hardirqs_on+0x5b/0x180 [ 2288.045057] xa_store+0x31/0x50 [ 2288.045442] __io_uring_add_tctx_node+0x1cf/0x520 [ 2288.046006] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2288.046619] ? alloc_fd+0x2e7/0x670 [ 2288.047044] io_uring_setup+0x1fbb/0x2980 [ 2288.047534] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2288.048121] ? wait_for_completion_io+0x270/0x270 [ 2288.048698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2288.049309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2288.049914] do_syscall_64+0x33/0x40 [ 2288.050354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2288.050949] RIP: 0033:0x7f12dae86b19 [ 2288.051380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2288.053520] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2288.054399] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2288.055237] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2288.056071] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2288.056898] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2288.057720] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:39:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xffffff9e, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 50) 08:39:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x9000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2301.307519] FAULT_INJECTION: forcing a failure. [ 2301.307519] name failslab, interval 1, probability 0, space 0, times 0 08:39:54 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = fork() r2 = fork() ptrace(0x10, r2) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x4002840}, 0x0) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000340)=""/4, 0x4}, {&(0x7f00000004c0)=""/237, 0xed}], 0x3}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/39, 0x27}, {&(0x7f0000000600)=""/34, 0x22}], 0x2, &(0x7f0000000680)=[@rights={{0x10}}], 0x10}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000740)=""/45, 0x2d}], 0x1}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000840)=""/181, 0xb5}], 0x1, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/9, 0x9}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000ef0996"], 0x60}}], 0x6, 0x1, &(0x7f0000000cc0)={0x77359400}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f00000016c0)={0x7a4, 0x27, 0x8, 0x70bd27, 0x2ddfdbfb, {0x1e}, [@typed={0x6, 0x6a, 0x0, 0x0, @str='\'\x00'}, @generic="b57078a8ce76ff586f21f24a8ced59731b77bd0a4762db75628e8137e4a4ad02e1f6b249a751b2c0072309cb92254cf3801784cfa53732f64bd9cc873d944cc1567bf027374ed3ee9e2ab855e46e5361806ea276401ea8b356e87c1a55c05a74bc57a7c71598cb5526cb32f2e558a6eb8a", @nested={0x2e8, 0x1f, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid=r0}, @generic="ce2ab9b9f3f0c8f6befa4a2805033d9714596bf2f7e6fa18e445881f67da05392b835862d62a5646e7ab5f227358bc1776827b21e6f08a41245b02d6fd13e87715f3b0ea9ef069cc0a71eba84bc6d60c0a52a2667319691629eb651e2c073dd91e6ad162b54ddfb3bde4b77ef461e2d77c6fbaab597cb7dd12db2c2f48e330a7db7e5b8a7a57a56f1cb03f110e87b31ffac29405b8b00f0ced55965bd030b0e0f276a8d7025fde29e7c05bb9bf79ea4fdbc716a9e8fc473406c2", @generic="4c5bb6f5bfb66327d3337b7ff24a4b525f051fc97cf0e44dc02d71805635ab131ae9b5ffc2b37618403bed6fb43c49703ba24288c711dbc08a13160ce805bd0ccddb17eab90c834a0e502ebb21c109c66233e6c310c6822e3d5c1e0afca085549900a5ae0f65eb56fe3dd54f314bb1d4acf4da0d001ffbe685ffed57addb3e0c5d1dd3fb476d16cd9286c20ff68817d5d09e6cc6aac169219e1ca679be911d25578e1227d8228b599347a31c79a2ebb5f5fb3cba329ab0c5e3bc9cebc3e318c4ece36c6437f33de475c6c57c042706847249cf9e49ce080acf3ecaec865ce21301a95c0894085d", @typed={0x8, 0x51, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x2d, 0x0, 0x0, @pid=r2}, @generic="345b2a14979cf990b1404ce50c443c8efb7cd2609a55fe03326df8958123eba87c5d93e6e8cf9b18443fe95a6106c1c704cfde7925cd716f6d2085c7b4b544a7864398df7a3422dfbef9ae45fb5d5a76873b95ddbf52b7b799d6eb7fe344e393093d18d01482d0d78f68231ac7ef89039c96240b6650", @generic="a798bdcfff75f5747a9430367b93dfa694346360c6eaecb828ec045688fd2b99e102ec108d2a2d03be8d9e4319e4f48fece7542d9464884ce3b282224cb0631112a0f207bb3d3692aede0dfa397d686d4790c52b0d37712797949ca1ca63fa3637624d6f8079dbd43519f94e8e92b57c7cfe5b93e260b06a873d642e6c3328bd33fbdfacdea4e62d3d19fd655a5b8d67959882cb636f1d0ba8b08cb300", @typed={0x8, 0x6b, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x19, 0x0, 0x0, @str='.&@\x00'}, @typed={0x8, 0x1f, 0x0, 0x0, @u32=0x41}]}, @nested={0x236, 0x6b, 0x0, 0x1, [@generic="365df9811e94204a2ab0635e7aa038351dab74111b3cd5e7297333bf8d9c00635ff0fa0e0c5616b064914a1c942a168f25cde162bc01ef0979300e3039e4d642a732bac096fb3642d81ed5f160ff723c5d0bc5d96916a3f93fd97f096bae", @generic="182872aa100d7480d483d9cdccf1df21b3c24e526544fa9497fdef162a76490df45c25e371e59be7eb3fe58c16ff3762c0f2ea7cc6f011e935a2213f3a859faf2ff2d91c3766159401f80775e4f046891b47172845f082e13d96b2c259abd8cfe0a28ee21b7978b05832273dc307c4561a3ca54406189bdbc031986c18897c2efe65137507a67b748e84b5b6380b4c8c3a3192bb8a00e1e8a25d56592073c22b634bee9fa8d8becea656d6868c8ddc5c4aa3a330fbb052c76016bcfdcad4d513a212ea18ace3c30f1a944c5cadcd", @typed={0x8, 0x3, 0x0, 0x0, @uid=r5}, @typed={0xc, 0x28, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x12, 0x0, 0x0, @str='}$$\x87,\x00'}, @generic="2408e2225999090b5ac83e0f38a30d0102d060f0f40e8278321c704782834fef9e4685c44fd5ea2b9daaa14fe0beef61df7c5a604457a1632f1e1ff92749cd8ecf31e93dfb763148573c5ade8cc1eba5d5894183835d56e93cdbe53425f539d0b2442cdfbfc0d56fb0a41d91ff3d470ae07af0bbc60740a1d77a2f1e5d09a4233fda6226a2b05e776f7116e5642b7d9323d0e9dd2a52baf76c84e422e547cad5423cd26207f15d0ab6a3c8264a080bdfa53be4d2118c06eadd28060534bfe1d41294ee75c71c95f86907d6addedae9dcc5ffc6f5d68c85edef93c670bb1525516688d9327e0e"]}, @generic="6742739e92ea67f428f70943c4128f0c1063aa36a05fe96602db83e07d83fb314e52f7de0c3b720695794f615dd5e2088bcb3913b2c67949f976cb8b25eb87c3764a2a60a0f34965080a0caebaec767d48aed718d4898c68d5c42c243cfdea11d848fc90dc21962e38900e2e386e66d0289ab547cab8fa261e6b4995cec9f2e46b87b62bba2e0b1cf0a8f67890f0de", @generic="6d39e4fcb157d05a0939a84c5e2064e725eb3b682052a984eef42a31cac2bd340b202106ec6355daaaed1ea948ebe63c62077a8643ebfde2b18fa222bc52a2790770f21a428b4d851b8a9f93611151c1fa1366cd1fee56afbff34ec32849700a3d34cb64a79fb4a433dcc37520544d1860c9f496848985456efdd676e80d647be48589aa964bb837129d8f20bf5cb14e824762058ed53933a9733d651861745997f9ba29be94c43cc0d09709e52310", @typed={0x8, 0x73, 0x0, 0x0, @u32}, @generic="172e1ea721cd378d8719b2e5ef2d817855fe138698b28b35a3a20e07932f2199bf44f0c7429b69f7767e9f74369bb7172ba8ef34a1e37bb23f117468bb7754723ff35af2dad49323323fbe6120104cb63e5df6ae71be3957c746856a3276f41c25a51bc9dacc463084105783a8d9e0aa63896fc0acc4e7c803dd6de1200c144ba66502abd3516233c0b4bc8fe983e7eae3d508938d26f204ceb2bf1bf5e439eec9f3c19fb527", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x4}, 0x15) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2301.311656] CPU: 0 PID: 31008 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2301.313411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.315542] Call Trace: [ 2301.316256] dump_stack+0x107/0x167 [ 2301.317237] should_fail.cold+0x5/0xa [ 2301.318266] ? create_object.isra.0+0x3a/0xa30 [ 2301.319467] should_failslab+0x5/0x20 [ 2301.320463] kmem_cache_alloc+0x5b/0x310 [ 2301.321527] ? mark_held_locks+0x9e/0xe0 [ 2301.322618] create_object.isra.0+0x3a/0xa30 [ 2301.323760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2301.325115] kmem_cache_alloc+0x159/0x310 [ 2301.326263] xas_alloc+0x336/0x440 [ 2301.327221] xas_create+0x34a/0x10d0 [ 2301.328240] ? kernel_text_address+0xf2/0x120 [ 2301.329435] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2301.330831] xas_store+0x8c/0x1c40 [ 2301.331859] __xa_store+0x164/0x2d0 [ 2301.332845] ? xa_delete_node+0x280/0x280 [ 2301.333981] ? trace_hardirqs_on+0x5b/0x180 [ 2301.335184] xa_store+0x31/0x50 [ 2301.336075] __io_uring_add_tctx_node+0x1cf/0x520 [ 2301.337357] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2301.338719] ? alloc_fd+0x2e7/0x670 [ 2301.339761] io_uring_setup+0x1fbb/0x2980 [ 2301.340905] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2301.342269] ? wait_for_completion_io+0x270/0x270 [ 2301.343668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.345038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.346402] do_syscall_64+0x33/0x40 [ 2301.347390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2301.348730] RIP: 0033:0x7f12dae86b19 [ 2301.349705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.354420] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2301.356401] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2301.358247] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2301.360109] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2301.361951] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2301.363631] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:39:54 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') fstat(r0, &(0x7f0000000080)) 08:39:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:54 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:39:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xfffffff0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/87, 0x57) r2 = dup(r0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xc8, 0x8001, 0x7, 0xff, 0x8, 0x81, 0x6}}}, 0x15) 08:39:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3fb, 0x400, 0x70bd27, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x143400, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000200)="95b917d722f5bd1a84fbc9d88f83f63bde16f9c0344c50718d1c0fd19d6116418906344e9a0921ddc33c33607983aba0c447440b452a7775bb11b3196b23dccba5e2268da2c01288aa6e84c8b2de3fe36c745c97d6f2ee1b1d0451f2243ac66b85d06bc3d1c435d5f3c4909454baecf669e3c5ae0a951da5610adfbd1a1fe0dd2a62de5b0625aa04b957b75e513e1c847d0f5dd4c0cc57a7730fb69000509554a951a58e152e253775ddbf6440f7568804b8b59b028e069ba00aadcb1247162f73dc71f43aa016be2409d37eca971561d552f4b1f6be377e1e281b37", 0xdc}, {&(0x7f0000000300)="dcc6fd9762bcf7a66d0a10589e6d18dd6f80e74136f61b03c90fbde0411f6c947f1bb7d51bfd92cda2cea8723196e4fff3233380700f46325010416894f7ac8da2efbffaf90ece35a9007201b466030506387fc0364ca53a3de1097783", 0x5d}, {&(0x7f0000000380)="af52616c782e2fb7c26d125a42815951e4ae26b6c48f96398cbc966998192b398b201148d9862a26af7fb7ef774f331abc189390a76bc099e1850f3cc902dbfb0adb38e6cfe850bc731b81d73e6abd20520b7196e4e320669b73da45e4597da18b605a5a45bf9f8cffe2eeb42c4eca63791d0b0b346b9844301de89291f1c004b8c6321a5b8b5bfce73c4afa0e202fe7925277503a041ded2f4502b61f27581d4a", 0xa1}, {&(0x7f0000000440)="983db3e1c137813c130a541ccf1f26aa6ca1aa", 0x13}, {&(0x7f0000000480)="f98f950079ee9fa5d13eb2846666a1f29199217e048924f86b774ca4c7d865e17f82f8f443e81f899cbb5beb0e94c8eaa34156e92141d5eccb62459ce568afb2a7be7a4ea21eb443d28002a6209a547fc10b0860698f38ee85fb93855166464d798b4a032b36e79ec6fdd9ba4cb0bd88866ef81c106718a219d27c26d69cb4cb8e898dd86575a4c34ce22bb08c9e5c", 0x8f}], 0x5, 0x8086, 0x1) 08:39:54 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x72, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f00000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x73, 0xff, 0x0, 0xeb, 0x0, 0x81, 0x103, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x22, 0x7, 0x3, 0x3, 0x5, 0x9, 0x8001, 0x0, 0x3ff, 0x0, 0x22}, 0xffffffffffffffff, 0x2, r0, 0x0) 08:39:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x400, 0xfffff800, 0x7c12f4c8}, 0xc) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x2, 0x7}, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = getpid() pipe2(&(0x7f0000000100), 0x84800) recvfrom$inet(r0, &(0x7f0000000200)=""/96, 0x60, 0x80010142, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00') r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x400000000, 0x420103) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) 08:39:54 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/uhci_hcd', 0x80000, 0x3) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x1f, 0x4, 0x4, 0x0, 0xe81, 0x80008, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x8, 0xffffffffffffc6ef}, 0x810, 0x5, 0xea5, 0x5, 0x0, 0x45, 0xde10, 0x0, 0xe785, 0x0, 0xa9d}, r0, 0x3, r1, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:39:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000040)="37f4ae6fe64bdeb66d9b8ce125f0a9005ef21c08152d010d12f431d35660ae21a734fd35085d43dc9b599744d465945a55d1ed123c63a0a9c521c5b5c09ac6e268304f5dcf8c5601f3575b6d40408a0106ab9f5dab689533fc016a60b1edba85fd6eb5fd4d9009a4bd717d4db2") read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:39:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xa000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xffffffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:39:55 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 51) 08:39:55 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2301.753439] FAULT_INJECTION: forcing a failure. [ 2301.753439] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.755893] CPU: 1 PID: 31316 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2301.757363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.759119] Call Trace: [ 2301.759692] dump_stack+0x107/0x167 [ 2301.760474] should_fail.cold+0x5/0xa [ 2301.761283] ? xas_alloc+0x336/0x440 [ 2301.762075] should_failslab+0x5/0x20 [ 2301.762895] kmem_cache_alloc+0x5b/0x310 [ 2301.763777] xas_alloc+0x336/0x440 [ 2301.764536] xas_create+0x34a/0x10d0 [ 2301.765334] ? kernel_text_address+0xf2/0x120 [ 2301.766293] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2301.767413] xas_store+0x8c/0x1c40 [ 2301.768193] __xa_store+0x164/0x2d0 [ 2301.768970] ? xa_delete_node+0x280/0x280 [ 2301.769858] ? trace_hardirqs_on+0x5b/0x180 [ 2301.770798] xa_store+0x31/0x50 [ 2301.771503] __io_uring_add_tctx_node+0x1cf/0x520 [ 2301.772518] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2301.773636] ? alloc_fd+0x2e7/0x670 [ 2301.774437] io_uring_setup+0x1fbb/0x2980 [ 2301.775323] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2301.776397] ? wait_for_completion_io+0x270/0x270 [ 2301.777445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.778579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.779680] do_syscall_64+0x33/0x40 [ 2301.780474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2301.781571] RIP: 0033:0x7f12dae86b19 [ 2301.782362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.786252] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2301.787868] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2301.789383] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2301.790911] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2301.792425] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2301.793938] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:40:09 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:09 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:40:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:40:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0xef9ddbb6fe218fc9}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008041}, 0x6004894) fallocate(0xffffffffffffffff, 0x5, 0x1, 0xfff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4048000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x811d}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfffc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x100}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x860) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x319, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0xfd, 0x9f, 0x3, 0x0, 0x100, 0x42000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x8}, 0x4640, 0x2, 0x3, 0x6, 0x2, 0x800, 0x1000, 0x0, 0x200, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000006c0)=0x1) 08:40:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/68, 0x44) 08:40:09 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:40:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xb000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:40:09 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 52) [ 2316.365117] FAULT_INJECTION: forcing a failure. [ 2316.365117] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.367571] CPU: 1 PID: 31370 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2316.369034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.370798] Call Trace: [ 2316.371366] dump_stack+0x107/0x167 [ 2316.372136] should_fail.cold+0x5/0xa [ 2316.372944] ? create_object.isra.0+0x3a/0xa30 [ 2316.373905] should_failslab+0x5/0x20 [ 2316.374719] kmem_cache_alloc+0x5b/0x310 [ 2316.375570] ? mark_held_locks+0x9e/0xe0 [ 2316.376426] create_object.isra.0+0x3a/0xa30 [ 2316.377345] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2316.378433] kmem_cache_alloc+0x159/0x310 [ 2316.379317] xas_alloc+0x336/0x440 [ 2316.380068] xas_create+0x34a/0x10d0 [ 2316.380864] ? kernel_text_address+0xf2/0x120 [ 2316.381814] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2316.382927] xas_store+0x8c/0x1c40 [ 2316.383692] __xa_store+0x164/0x2d0 [ 2316.384464] ? xa_delete_node+0x280/0x280 [ 2316.385349] ? trace_hardirqs_on+0x5b/0x180 [ 2316.386264] xa_store+0x31/0x50 [ 2316.386970] __io_uring_add_tctx_node+0x1cf/0x520 [ 2316.387981] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2316.389096] ? alloc_fd+0x2e7/0x670 [ 2316.389875] io_uring_setup+0x1fbb/0x2980 [ 2316.390762] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2316.391822] ? wait_for_completion_io+0x270/0x270 [ 2316.392860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.393957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.395052] do_syscall_64+0x33/0x40 [ 2316.395840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.396922] RIP: 0033:0x7f12dae86b19 [ 2316.397705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.401545] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2316.403148] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2316.404646] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2316.406140] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2316.407645] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2316.409138] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:40:09 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x72, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10044001}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x5}, 0x6e) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xbe, 0x3, 0x7, 0x2, 0x0, 0x1000, 0x2e00, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x7f}, 0x100, 0x6, 0x401, 0x0, 0x4, 0x6, 0x401, 0x0, 0x800, 0x0, 0x8}, 0x0, 0x7, r0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:40:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x40}, 0x6) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000080)="370d1fed9dc1fef11a65a5a9b256d79c12e04b5b809c26cd43ef90dd6cad") read(r0, &(0x7f00000000c0)=""/96, 0xfffffd7b) 08:40:09 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xfa, 0x9, 0x3, 0x6, 0x0, 0x7cd, 0x8a0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x1, 0x3, 0x8, 0xd, 0x2, 0x3, 0x7f, 0x0, 0xffff}, r1, 0x6, r0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000180)=""/201, 0xc9}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/125, 0x7d}], 0x3, 0x1000, 0x3) 08:40:09 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 53) [ 2316.725962] FAULT_INJECTION: forcing a failure. [ 2316.725962] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.728494] CPU: 1 PID: 31710 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2316.729961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.731727] Call Trace: [ 2316.732289] dump_stack+0x107/0x167 [ 2316.733063] should_fail.cold+0x5/0xa [ 2316.733877] ? xas_alloc+0x336/0x440 [ 2316.734673] should_failslab+0x5/0x20 [ 2316.735480] kmem_cache_alloc+0x5b/0x310 [ 2316.736345] xas_alloc+0x336/0x440 [ 2316.737104] xas_create+0x34a/0x10d0 [ 2316.737904] ? kernel_text_address+0xf2/0x120 [ 2316.738853] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2316.739969] xas_store+0x8c/0x1c40 [ 2316.740740] __xa_store+0x164/0x2d0 [ 2316.741517] ? xa_delete_node+0x280/0x280 [ 2316.742411] ? trace_hardirqs_on+0x5b/0x180 [ 2316.743333] xa_store+0x31/0x50 [ 2316.744036] __io_uring_add_tctx_node+0x1cf/0x520 [ 2316.745057] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2316.746161] ? alloc_fd+0x2e7/0x670 [ 2316.746959] io_uring_setup+0x1fbb/0x2980 [ 2316.747848] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2316.748919] ? wait_for_completion_io+0x270/0x270 [ 2316.749969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.751088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.752183] do_syscall_64+0x33/0x40 [ 2316.752972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.754057] RIP: 0033:0x7f12dae86b19 [ 2316.754857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.758745] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2316.760350] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2316.761855] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2316.763368] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2316.764871] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2316.766386] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:40:23 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x2, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:40:23 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 54) 08:40:23 executing program 4: perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xe0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0xfffbfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') 08:40:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000040)="aad8ec6f697d28105a6ea4a16cc6a874f6ae1f893bcdc8eea15e4878996c17e8cd82d97c8fb5ca37a38cfb777a92d8828521f9510f176aaa020ad8f0ab0d655913652dae7b6a") 08:40:23 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x18000, 0x1000000000000000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:40:23 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x4, 0x1, 0x6, 0x1, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd6000000, 0x1, @perf_config_ext={0x2, 0x9}, 0x18d41, 0x1ff, 0x4, 0x7, 0x295, 0xaccd, 0x9e1, 0x0, 0x7fffffff, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r1, 0x3) 08:40:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2330.574905] FAULT_INJECTION: forcing a failure. [ 2330.574905] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.576579] CPU: 1 PID: 31816 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2330.577528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2330.578669] Call Trace: [ 2330.579034] dump_stack+0x107/0x167 [ 2330.579535] should_fail.cold+0x5/0xa [ 2330.580055] ? ___slab_alloc+0x155/0x700 [ 2330.580619] ? create_object.isra.0+0x3a/0xa30 [ 2330.581243] should_failslab+0x5/0x20 [ 2330.581765] kmem_cache_alloc+0x5b/0x310 [ 2330.582325] create_object.isra.0+0x3a/0xa30 [ 2330.582938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2330.583628] kmem_cache_alloc+0x159/0x310 [ 2330.584199] xas_alloc+0x336/0x440 [ 2330.584685] xas_create+0x34a/0x10d0 [ 2330.585198] ? kernel_text_address+0xf2/0x120 [ 2330.585810] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2330.586534] xas_store+0x8c/0x1c40 [ 2330.587030] __xa_store+0x164/0x2d0 [ 2330.587526] ? xa_delete_node+0x280/0x280 [ 2330.588098] ? trace_hardirqs_on+0x5b/0x180 [ 2330.588689] xa_store+0x31/0x50 [ 2330.589141] __io_uring_add_tctx_node+0x1cf/0x520 [ 2330.589797] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2330.590515] ? alloc_fd+0x2e7/0x670 [ 2330.591026] io_uring_setup+0x1fbb/0x2980 [ 2330.591594] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2330.592284] ? wait_for_completion_io+0x270/0x270 [ 2330.592954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2330.593665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.594368] do_syscall_64+0x33/0x40 [ 2330.594892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2330.595588] RIP: 0033:0x7f12dae86b19 [ 2330.596093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.598596] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2330.599626] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2330.600589] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2330.601554] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2330.602537] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2330.603503] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:40:24 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x908a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x8001}, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:40:24 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x3, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:40:24 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 55) [ 2330.777650] FAULT_INJECTION: forcing a failure. [ 2330.777650] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.779155] CPU: 1 PID: 32038 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2330.780023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2330.781059] Call Trace: [ 2330.781396] dump_stack+0x107/0x167 [ 2330.781855] should_fail.cold+0x5/0xa [ 2330.782340] ? xas_alloc+0x336/0x440 [ 2330.782827] should_failslab+0x5/0x20 [ 2330.783315] kmem_cache_alloc+0x5b/0x310 [ 2330.783839] xas_alloc+0x336/0x440 [ 2330.784297] xas_create+0x34a/0x10d0 [ 2330.784770] ? kernel_text_address+0xf2/0x120 [ 2330.785343] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2330.786007] xas_store+0x8c/0x1c40 [ 2330.786472] __xa_store+0x164/0x2d0 [ 2330.786930] ? xa_delete_node+0x280/0x280 [ 2330.787475] ? trace_hardirqs_on+0x5b/0x180 [ 2330.788029] xa_store+0x31/0x50 [ 2330.788443] __io_uring_add_tctx_node+0x1cf/0x520 [ 2330.789052] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2330.789703] ? alloc_fd+0x2e7/0x670 [ 2330.790172] io_uring_setup+0x1fbb/0x2980 [ 2330.790708] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2330.791350] ? wait_for_completion_io+0x270/0x270 [ 2330.791969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2330.792623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.793284] do_syscall_64+0x33/0x40 [ 2330.793749] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2330.794397] RIP: 0033:0x7f12dae86b19 [ 2330.794869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.797178] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2330.798127] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2330.799033] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2330.799930] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2330.800826] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2330.801718] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:40:37 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x1) 08:40:37 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 56) 08:40:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 08:40:37 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:40:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x3, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:40:37 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x10000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:40:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000154c3a7b2628a2b24f1f00"/27]) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0, 0x0, r3}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', r3, 0x700, 0x40, 0x400, 0x1, {{0x17, 0x4, 0x3, 0x39, 0x5c, 0x64, 0x0, 0x6e, 0x29, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x20, 0x3, [{0x2, 0xa, "68bb67fed81604d5"}, {0x2, 0x2}, {0x1, 0x3, 'A'}, {0x1, 0x4, "8381"}, {0x7, 0x7, "e37b73f7f5"}]}, @timestamp_addr={0x44, 0x24, 0x9b, 0x1, 0x2, [{@loopback, 0xfdc2}, {@private=0xa010101, 0x3ff}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x6}]}, @noop]}}}}}) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x4e22, 0x0, 0x4e23, 0x6, 0x2, 0x20, 0x80, 0x11, r4, r5}, {0x2, 0xffffffffffff8001, 0xffffffffffffffe6, 0xd6b, 0x9, 0x3f, 0x6}, {0x1, 0x9, 0x6, 0x7}, 0x7f0d, 0x6e6bb3, 0x1, 0x1, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x32}, 0x2, @in6=@mcast2, 0x3502, 0x0, 0x1, 0x2, 0x717, 0x5, 0xb658}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', r3, 0x2f, 0x4d, 0x6, 0x3ff, 0x5b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x1000}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r6, &(0x7f00000000c0)=""/96, 0x60) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="3e2a2abf2002000000000000002f6669"]) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x40, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)={0x1, @read_stored_link_key={{0xc0d, 0x7}, {@any, 0x6}}}, 0xb) 08:40:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x9c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0x1000, 0x9}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}, @register_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/248, 0xf8, 0x1, 0x35}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/204, 0xcc, 0x0, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/140, 0x8c, 0x2, 0x2}}, &(0x7f0000000580)={0x0, 0x28, 0x50}}, 0x40}], 0x2b, 0x0, &(0x7f0000000680)="0a6bd8ff7e7313fdbee107c6496559eb4415656d47ba661bc7e89dc5ac7427a0fff0d21be06e9775e4135f"}) flistxattr(r0, &(0x7f0000000080)=""/85, 0x55) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2344.110565] FAULT_INJECTION: forcing a failure. [ 2344.110565] name failslab, interval 1, probability 0, space 0, times 0 [ 2344.112214] CPU: 1 PID: 32065 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2344.113119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2344.114162] Call Trace: [ 2344.114512] dump_stack+0x107/0x167 [ 2344.115002] should_fail.cold+0x5/0xa [ 2344.115498] ? create_object.isra.0+0x3a/0xa30 [ 2344.116094] should_failslab+0x5/0x20 [ 2344.116596] kmem_cache_alloc+0x5b/0x310 [ 2344.117125] ? mark_held_locks+0x9e/0xe0 [ 2344.117657] create_object.isra.0+0x3a/0xa30 [ 2344.118226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2344.118899] kmem_cache_alloc+0x159/0x310 [ 2344.119447] xas_alloc+0x336/0x440 [ 2344.119910] xas_create+0x34a/0x10d0 [ 2344.120397] ? kernel_text_address+0xf2/0x120 [ 2344.120986] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2344.121667] xas_store+0x8c/0x1c40 [ 2344.122143] __xa_store+0x164/0x2d0 [ 2344.122635] ? xa_delete_node+0x280/0x280 [ 2344.123182] ? trace_hardirqs_on+0x5b/0x180 [ 2344.123751] xa_store+0x31/0x50 [ 2344.124186] __io_uring_add_tctx_node+0x1cf/0x520 [ 2344.124811] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2344.125497] ? alloc_fd+0x2e7/0x670 [ 2344.125983] io_uring_setup+0x1fbb/0x2980 [ 2344.126529] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2344.127197] ? wait_for_completion_io+0x270/0x270 [ 2344.127819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2344.128495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2344.129148] do_syscall_64+0x33/0x40 [ 2344.129630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2344.130290] RIP: 0033:0x7f12dae86b19 [ 2344.130786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2344.133069] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2344.134054] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2344.134953] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2344.135871] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2344.136761] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2344.137684] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:40:37 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) read(r1, &(0x7f0000000040)=""/101, 0x32) 08:40:37 executing program 5: fallocate(0xffffffffffffffff, 0x56, 0x58c, 0xfff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:40:37 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:40:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x11000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:40:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:40:49 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x13000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:40:49 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(0xffffffffffffffff, &(0x7f00000000c0)=""/96, 0x60) ioctl$sock_bt_hci(0xffffffffffffffff, 0xcfd00f40391e4afa, &(0x7f0000000140)="f0374335ee135cd2cf78d7d0540a5d92beb69342851ec30833a2039e5f773b5fbaabc53867abd97c8c7d11532e70c72e2e7161f1a934a24d8a7262090720c96ba8782df891714c245c0e85749c7dc72e49b09a409920105b8128e082e4a581b0cfe4743db793c08423acd45b3241bb047599f5fb710315d96906663671e1168676592e2a35c074acf3443341f03843f27232747352be86e1de53dcad8e7838644177ffe681e06e47ac35873690dc31dfa8bc33311e42dda233033e56cb88a489302791e6d0ddd93c9e11b4f9305a9b1419a40471") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x5d05, 0x12) 08:40:49 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/177, 0xb1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:40:49 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 57) 08:40:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:40:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x4, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:40:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/178, 0xb2}, {&(0x7f0000001500)=""/54, 0x36}], 0x7) [ 2356.412943] FAULT_INJECTION: forcing a failure. [ 2356.412943] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.414513] CPU: 1 PID: 32413 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2356.415453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2356.416561] Call Trace: [ 2356.416929] dump_stack+0x107/0x167 [ 2356.417409] should_fail.cold+0x5/0xa [ 2356.417918] ? xas_alloc+0x336/0x440 [ 2356.418417] should_failslab+0x5/0x20 [ 2356.418931] kmem_cache_alloc+0x5b/0x310 [ 2356.419461] xas_alloc+0x336/0x440 [ 2356.419928] xas_create+0x34a/0x10d0 [ 2356.420442] ? kernel_text_address+0xf2/0x120 [ 2356.421037] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2356.421731] xas_store+0x8c/0x1c40 [ 2356.422218] __xa_store+0x164/0x2d0 [ 2356.422711] ? xa_delete_node+0x280/0x280 [ 2356.423276] ? trace_hardirqs_on+0x5b/0x180 [ 2356.423848] xa_store+0x31/0x50 [ 2356.424278] __io_uring_add_tctx_node+0x1cf/0x520 [ 2356.424911] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2356.425596] ? alloc_fd+0x2e7/0x670 [ 2356.426075] io_uring_setup+0x1fbb/0x2980 [ 2356.426639] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2356.427331] ? wait_for_completion_io+0x270/0x270 [ 2356.427990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2356.428684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2356.429355] do_syscall_64+0x33/0x40 [ 2356.429856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2356.430536] RIP: 0033:0x7f12dae86b19 [ 2356.431043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.433473] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2356.434474] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2356.435437] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2356.436377] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2356.437298] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2356.438226] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:40:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_io_uring_setup(0x40e5, &(0x7f0000000080)={0x0, 0xce9, 0x2, 0x1, 0x17f}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10044001}, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd_index=0x4, 0x7fff, &(0x7f0000000140)="bf9886338e6f791bda7ee469c18f4b32291b9c2221d6af7ada8daedc0347787b", 0x20, 0x15, 0x1}, 0x8) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10044001}, 0x0) syz_io_uring_complete(r4) 08:40:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10044001}, 0x0) fsetxattr$security_evm(r5, &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x3, 0x0, 0x14, 0xaf, 0xb2, "bc7679784f2e66f49c923ca99ad93702f2f0e2daeb2049e4ed9898dcdf4df4a4ef30be24a3815b929fad5cc8feb6a2fcf9c971deece224532ccf66b5361894cd30f601b0e64b8f7c3bc69ffb03563191e6ff8c2e7559e66281e841dedc701db0ae62a03eab908b4ff4b85304ac362c8ec4a9f24a13044826d04a5d956259a34733dba270064c3a4687017a6ad60a801071db842ebb78a9cdc53f5240a2539e1422b83ce4140b2b8612537afc3498d85bd6b7"}, 0xbb, 0x2) read$snapshot(r2, &(0x7f00000004c0)=""/177, 0xb1) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r6}], 0x1, 0x0) read$snapshot(r6, &(0x7f0000000080)=""/177, 0xb1) r7 = fork() ptrace(0x10, r7) syz_open_procfs$namespace(r7, &(0x7f0000000040)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r1, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048895}, 0x40d5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r8, &(0x7f0000000080)='ns/net\x00') 08:40:49 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000240)="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") read(r0, &(0x7f00000000c0)=""/96, 0x60) 08:40:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x3f000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:40:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xfffffff0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:41:04 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x40000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:04 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:41:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x5, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:04 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3, 0x0, 0xff, 0xd5, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x5, 0x7ff, 0x44d, 0x0, 0x4, 0x3, 0xcedf, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x3, r0, 0x9) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x80, 0x0, 0x32, 0x7, 0x0, 0x7ff, 0x1008, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x240, 0x80000000, 0x6, 0x2, 0x9, 0x1f, 0xffff, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) 08:41:04 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 58) 08:41:04 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/177, 0xb1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') [ 2371.519580] FAULT_INJECTION: forcing a failure. [ 2371.519580] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.522101] CPU: 1 PID: 32758 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2371.523567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.525319] Call Trace: [ 2371.525883] dump_stack+0x107/0x167 [ 2371.526650] should_fail.cold+0x5/0xa [ 2371.527462] ? create_object.isra.0+0x3a/0xa30 [ 2371.528426] should_failslab+0x5/0x20 [ 2371.529229] kmem_cache_alloc+0x5b/0x310 [ 2371.530081] ? mark_held_locks+0x9e/0xe0 [ 2371.530947] create_object.isra.0+0x3a/0xa30 [ 2371.531879] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2371.532949] kmem_cache_alloc+0x159/0x310 [ 2371.533829] xas_alloc+0x336/0x440 [ 2371.534592] xas_create+0x34a/0x10d0 [ 2371.535393] ? kernel_text_address+0xf2/0x120 [ 2371.536349] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2371.537450] xas_store+0x8c/0x1c40 [ 2371.538215] __xa_store+0x164/0x2d0 [ 2371.538992] ? xa_delete_node+0x280/0x280 [ 2371.539870] ? trace_hardirqs_on+0x5b/0x180 [ 2371.540794] xa_store+0x31/0x50 [ 2371.541496] __io_uring_add_tctx_node+0x1cf/0x520 [ 2371.542517] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2371.543620] ? alloc_fd+0x2e7/0x670 [ 2371.544396] io_uring_setup+0x1fbb/0x2980 [ 2371.545280] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2371.546345] ? wait_for_completion_io+0x270/0x270 [ 2371.547396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.548512] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.549598] do_syscall_64+0x33/0x40 [ 2371.550385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2371.551464] RIP: 0033:0x7f12dae86b19 [ 2371.552246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.556117] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2371.557729] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2371.559233] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2371.560724] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2371.562228] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2371.563740] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:41:05 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/177, 0xb1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:05 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10044001}, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10044001}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x6000, @fd=r0, 0xfffffffffffffff9, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x33) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:41:05 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:05 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x2, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:41:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x6, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x5b010000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:05 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 59) 08:41:05 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000080)='net/icmp6\x00') 08:41:05 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/177, 0xb1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:05 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2371.915745] FAULT_INJECTION: forcing a failure. [ 2371.915745] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.918243] CPU: 1 PID: 33073 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2371.919722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.921484] Call Trace: [ 2371.922044] dump_stack+0x107/0x167 [ 2371.922821] should_fail.cold+0x5/0xa [ 2371.923637] ? create_object.isra.0+0x3a/0xa30 [ 2371.924608] should_failslab+0x5/0x20 [ 2371.925413] kmem_cache_alloc+0x5b/0x310 [ 2371.926268] ? mark_held_locks+0x9e/0xe0 [ 2371.927149] create_object.isra.0+0x3a/0xa30 [ 2371.928072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2371.929139] kmem_cache_alloc+0x159/0x310 [ 2371.930030] xas_alloc+0x336/0x440 [ 2371.930790] xas_create+0x34a/0x10d0 [ 2371.931593] ? kernel_text_address+0xf2/0x120 [ 2371.932546] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2371.933658] xas_store+0x8c/0x1c40 [ 2371.934439] __xa_store+0x164/0x2d0 [ 2371.935230] ? xa_delete_node+0x280/0x280 [ 2371.936118] ? trace_hardirqs_on+0x5b/0x180 [ 2371.937033] xa_store+0x31/0x50 [ 2371.937739] __io_uring_add_tctx_node+0x1cf/0x520 [ 2371.938762] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2371.939890] ? alloc_fd+0x2e7/0x670 [ 2371.940678] io_uring_setup+0x1fbb/0x2980 [ 2371.941578] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2371.942665] ? wait_for_completion_io+0x270/0x270 [ 2371.943724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.944838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.945939] do_syscall_64+0x33/0x40 [ 2371.946728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2371.947819] RIP: 0033:0x7f12dae86b19 [ 2371.948609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.952504] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2371.954120] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2371.955643] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2371.957164] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2371.958684] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2371.960214] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:41:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x72, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000003, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x2280, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/177, 0xb1) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 08:41:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:05 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:05 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 60) 08:41:05 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 08:41:05 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x2b0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:41:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x80ffffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = geteuid() sendmsg$netlink(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0, r2}}}], 0x20, 0x4002840}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') [ 2372.254948] FAULT_INJECTION: forcing a failure. [ 2372.254948] name failslab, interval 1, probability 0, space 0, times 0 [ 2372.257349] CPU: 1 PID: 33320 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2372.258779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2372.260528] Call Trace: [ 2372.261085] dump_stack+0x107/0x167 [ 2372.261844] should_fail.cold+0x5/0xa [ 2372.262639] ? xas_alloc+0x336/0x440 [ 2372.263425] should_failslab+0x5/0x20 [ 2372.264208] kmem_cache_alloc+0x5b/0x310 [ 2372.265053] xas_alloc+0x336/0x440 [ 2372.265800] xas_create+0x34a/0x10d0 [ 2372.266583] ? kernel_text_address+0xf2/0x120 [ 2372.267518] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.268594] xas_store+0x8c/0x1c40 [ 2372.269338] __xa_store+0x164/0x2d0 [ 2372.270087] ? xa_delete_node+0x280/0x280 [ 2372.270955] ? trace_hardirqs_on+0x5b/0x180 [ 2372.271851] xa_store+0x31/0x50 [ 2372.272534] __io_uring_add_tctx_node+0x1cf/0x520 [ 2372.273525] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2372.274598] ? alloc_fd+0x2e7/0x670 [ 2372.275365] io_uring_setup+0x1fbb/0x2980 [ 2372.276224] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2372.277260] ? wait_for_completion_io+0x270/0x270 [ 2372.278270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.279367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2372.280417] do_syscall_64+0x33/0x40 [ 2372.281175] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2372.282218] RIP: 0033:0x7f12dae86b19 [ 2372.282998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2372.286759] RSP: 002b:00007f12d83fc108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2372.288326] RAX: ffffffffffffffda RBX: 00007f12daf99f60 RCX: 00007f12dae86b19 [ 2372.289783] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4b [ 2372.291252] RBP: 00000000200002c0 R08: 00000000200001c0 R09: 00000000200001c0 [ 2372.292731] R10: 00000000200000c0 R11: 0000000000000202 R12: 00000000200001c0 [ 2372.294176] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:41:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:18 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, &(0x7f0000000000)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001680)=[{&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000280)=""/159, 0x9f}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/58, 0x3a}, {&(0x7f0000001500)=""/50, 0x32}, {&(0x7f0000001540)=""/250, 0xfa}, {&(0x7f0000001640)=""/45, 0x2d}], 0xa, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000001840), 0x0, &(0x7f0000001880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x118}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000019c0)=""/201, 0xc9}, {&(0x7f0000001ac0)=""/206, 0xce}, {&(0x7f0000001bc0)=""/127, 0x7f}, {&(0x7f0000001c40)=""/74, 0x4a}, {&(0x7f0000001cc0)=""/253, 0xfd}, {&(0x7f0000001dc0)=""/20, 0x14}, {&(0x7f0000001e00)=""/254, 0xfe}], 0x7, &(0x7f0000001f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x3, 0x40010000, &(0x7f0000002080)={0x0, 0x3938700}) ptrace$setopts(0x8b3d70b4698cc334, r0, 0x5, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:41:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x7, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:18 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:18 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1900) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"48b8caee4a1aacee3e02e59eb06fe5bb", 0x0, 0x0, {0x3, 0x100}, {0xfffffffffffffffa, 0x4}, 0x8, [0x7, 0x5b3d, 0x7, 0x2, 0x0, 0xb1b, 0x9, 0x3, 0x30, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0xed, 0x8, 0x9]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000004c0)={{r1}, r2, 0x18, @unused=[0x0, 0x1f, 0x3, 0x8000], @name="b261562e82ad30f98c3be852ffa78b4755ecf7f86c78d79b0cd6cc99e620c0612357dc3a78be3a38da50c0080f13824217074187be47603c54dd3f8ed4c9b44dfec0d5c31da1736fe1983e8f29584199cd89b393fb144aad188c177e65c54a564080265cff9819156cc08e842f54fa2e776bd9b7afb5f6cd4431d07be46d7d2381216d10f66eea2620be7af2d7ab45964655b2c0e81d1430e6737880918ce77768fee3c88172599b955cf0490558c9f924efe1bf6be794f47b6950321abaa546999ddeb51664b2bed053fe0138062fa4d348d52559fcf85b3b5425a7ce013aa1c3cad25e53de6a80a57ee091f5cd0bb8dd322f814a8e8e7b98e5e23695c646f443e62a672366c02443402fffb55f7ef5c511f1ff66203f7254a8b68dc7a44707d5aa944dbb300a684f2803bde221dad8fb7d00592226590df8d8d99a788fd41aecc62a18787ec71a09df25df76af09dc4baea15c59d6eb37513b73d790af04c460c5e8b23ba56dad0ce87a74d74bbc4ef1a543bd131b5a202e0b9b5ba0d0b66e88230e0aeac997292f062fa422ed1920279e704090f36d0f7704c914121833b2a3ac47f2fd402331bbb6210ab9016f2aed65b11640a8ba116583a60bf5f396cbdec39f51a426ac90bf972d46ef16be26057f3bfebbe15afc88c1fa21f952a5630d590bd2489d5fd47e314ec075ebe5eaeaccf50f69be16ce56f31a66cc154a3bf1de44b1d976a5aba97e561c2f13a9e938a26e435b5d04aee4250202e28b9f22c1d4d14b773ec404f49feb7b066a7fc78c827b3383d8738444c12306058ce890023cb4c71f42f32c670b8fd23cbc72d3282b28830e3d490c8de82b3195ebaabb3ea2dd230a89d07873398d727e1cf759b157be552b13407a83d982619497ade0a6cde0bb7c4e533471ee13aa6e2212cd76c9abcc524a05eb066e94046dd73a17e0fd618ee204624fa8b593f26c53b2003c5740420647ee3bbed33487cf0457afaa13c2b0af5abd27d2f408d560ef220d37b87a4f079bf4f0c28f1212b46c393f487290326ca6077bbb02b4d2cd3fe8ecb8bf19f4f05dcd4648f6b2df4c5c624de8ce947682c259ac2b473c1fbe960f6f2ad39daf986d6b2114fab071d7d45a4387165785a70d1bd501e3273a09112f726b97f92b487099ff581946ba7d410c43925fe0cf12ee591902255218d31044c5c231beff55aebe8b124942259982b0b5ba53934be9cf628d4dbce8e19113e16fcc30a2434449fc252029c65516c623cd0445a47a85367b8fa3879764826f70a85ea62703e2d65c4c0d4b898c3a433cfe94a0e1234b1a650fcb2b4e0bb377b486c6825aba65ce3cb48a1b8c24a1711812c624097ce874f5fb2439470bd28c524855edd1d6cb097aec326d50a8a6165eaa3146c364189ec423f7f23435ffcd8d60deb8b32025dab57f7f8417c6eb00f18c9900b11735138e88fc69016be1bb8650b39ae4d41f3dd3bf30d15332135462ee32ca2542d645fe2ab94241a08795fb60c3c3141366020aa396fc04208caf753ccb766a42c8a7441731a7dabba5622bf60f876e498d28bdaf0d1c8b1f2e1e4b36a307e39776fb5a670968667139436ce8582896efa8ee7d46b250bfcb6c3036a2449e7b1981084df0c40ca4cdbf968db04f80792752f9bac051c78d9cf16b0072e5126e4646d502c3579c1ec548ac16652abc23f0619527f3f7f65de4f65e33f228a3a664443546afee188d0a4098cbc9698579358f28ef78d4a69adca37f6df91536a94d251f3eecda4617becbb8e4d474dc1315af1e8aca928bf6a20d3ae56d5d4046952588295e341376831a9d002ee3d943b85f234f4c5c30f0d170386b3163754b932edd64a5b438a7b32235629aa6ac192dddca36c1bacc54f60dc0d543d253f581ba6e7ec5a64bced160759b2efce56a5a9f96ee8c0ee387261808b014c4a4fef10ce7d4e8f74a3b4ab63d8d760941b77c04e11d6e62bada3d469386f3ffb0ae3efcc4c37f29d98bc9dd9ca3a1393ecac3891a08a60a0ac7210ecbd920102f4f8b15ac12bce6a4df60ad3630c3a4a311c3f50461140d99c2b748f862d0b8be070dbfc32374b0e0d7eff7d7ce0022cae7eaae405a66d8b56da4d16466cf0f0effff6b0ab892ff6c0b1d4b1328cb9f3c398b23816c4c3764d2520108b7787555005e2f152d55f6e097aa19c1c0acf0b7fbab63613db479c13718f433afc753ed552b2d541e7486a33cc25dc381c11f344c179da9c9971304e14dca80e094e0691132cba2ed2db3ee0254c39a21b3fb86741b5b70edfe4abd11b9d15102352eaefd9f6e2d1feaf60f4f68e29f5863afa9791d2ee0a704b94a7c4f9e182bc0402f838ec2030bd6b1a45a62d341f44ab614c3154007685a7b2efa187852d96f17a480936bcd32394ee4c66d8439c2e8a77f79dcb4d25c1fd972c40d7ff86cd3ca873a87bf4f6c6b7d730bfbfab4e1baf94fadb0fb3d09d5c570ab43202d7a129e9ee368f3fc301e737d822c3a5e15b550893652f926cb0a598d08fc884c850ddd0d837f612645c4e9552a1bff186ee135984661f45608254b54c48d084cb4e84f961c3fe1aa102bcc07cc78b1bffd184ccd22e4541ccdf31b217fdf42cabc96f7c9827137dc96a4de2ac3ad06ae555471f37fc151566c80b9a9900f8ea8087ef4421c99a485ce2211c1412c56d280e50f71675cc3bd7a7b1ae6e0bfa04ed0bcd8fa3da7fa93865b3d61fd9e8401b3d26d5a5c6158f8c4c5a2069a6823a884c79dac957d84becd0ea549005a8e1380d55582fe1f295959401dd50bde75344e868ca57085c389bb536915bc7a4b0d6f761482033f68dcbece2558b1518f81a8e06ba88daa74bfbc33af503988dfc3cfb45069626c83fca33a293a9f90f8137e25e59f144bfe0be3b1ae39eeb532b90f2ab1eed17884c23a525eab0d721361e827a03ca6062417cbb8052343bc65d64cd7b33681ca7f3c11e9e039ab9ddc178f0c274bcc8eef0cafcd5f263fcbf26a965bd33154a5f2a329ce08b17cc5b6bd27caaa7152aed67fab63605053aad14e55f836efee80fae13948e349d9365f0599d3d2649c94b1e131011e56a93e82220ff0f12412db51c42b99601fafc81f6595933c7f8c2803462678b4a45a5d02445c804d12c7f1ee71bc17ccb703d1ac9049ae8352226c4d48444f4f6c3dee7ecd97fd3005c29f666a8e749ee6645b9376cdafa59810c64374b26f7380ba849383cb5ff52fbdceb1dc1a3762aa68b1dab832e658d1fcce39b636f11fefa723cabafc26a45e7bc91e5a2bbc2472476dae9f8ddab1eb7691c8f02db8c669a60727f41ce2764deca1432eed9028b16663eae0e8eb76969f74c7af5b84666266e5fcf1ccdf955d9dc5b4bb17095a6823c7177877736956b1b6cb3767122432cc7cdd249f5c63f0d34605dfa4f7b725de5cf78537a48f522ed02a0a0c064fafc28bf65d1ee6a0f549f0b17ed54c229e36ec093fb807b9739649b7e86809c424ccb57774b90786bb40dd7e70c6e02245b3e9060bc350c369ab6b76bc94ced80de459a42c75581feaafe52ac8c35f36302cde3c4e8970f86dadbd33ecc6ccd69b84e95c46493b0a01fa69be083955750de9de2c174a690b8aad418d7feac0816205f6c45a8e876957f0252793f653c62ace1d58184189cb15e43f52d9ad95d1e0ed927a1d15a25db52bdf6d86bf531177bb3588d0d5888a04f76160ff629de061394627b9943954d80323706aea84bf06f35ff97b17b27faaa99cd1976dc543481d568127a228623acf3579068ac5bd31a5dfddc64c3f9909f6f85ed097aa1afbe24432445deadb101dad0d3bf4ed40fb4d9ea3866a45326d8439fd614c3473616a29569f9b8c390e1888ede1b671ba41e983729e3f6379d96a175c2ad3273175f084385b04fa3fb2eaa54cb0047818b244445f3eff48bdbc7f61c75bc9e2b5e06eaf014c3f7a950b48ff815e8527eb8564a44ef2d985ba9629fdafe580eef9d06bec228998977bd37c9bb34a96b7778434b2860e0912da8bc33e6e6ce346c004184ceaf016718f8eb44aaae04e4b7b353b800948cdba3a6d7b6f5320f532d4ccfb4eb8532fcab748d2a83d7b37c547491213ff59a0ec0a51a63cd9a75b0974672abd1af6a1bb10fb73c7f6fd5391388ab5ccf50e015414d9cc9826a7bf502f6438cdd4faa8c28c86aa39264c61bf5c815ecc241b2fd3817b84e55d68bf5a4fa6e149906f6600a2cf3338f4146ba69c972981a1ce1204e3eac4e3c055f3daa487bdc6a712fba2544c206ff601218b4d0fd2e70a7000934c6e8214b059b65428da3e3ba17d24a03e06ad31e09ca8ec80eccc77eeb953f8ee2b5500e7ea68494bb83adb1807fa6040fb74a76e76c6a233adb971f7e6d95c01263ef25748186fc55cded8defc6629fd8a71ed0632cb1a77ece3549b74600fdf3d4ce73671ac24e7001f98c65283d7bb34d63a778c756a3fbdaa286602bc3b5564895f28283bb8274d3fd76e8ee10944fb77ced0cffa2233428482d65b806dd0f53ac5a1a4922571251d30ea0ab05e0a40b8391ee5fad0c7ea99c19daa8233c784e70b3989e9412195c88586b85584ac849ef55048ed7f614306dbc4a722e5ab4b6b04d061daaeefbaedaaa944f7753fb3203dea4a1bb10b49679a8df45295ab4a447e3f8eac3c862f54052b675adca36a1c8f4fa546f64f7579e1c10cc3560dc23fab922cd11c4dea15231689468c0606b442e19e5b238a353bad7a576b7339aa13d1d2419df7182332f1cdfbe0190eebcc8ba25cc0312209a03d16de4423e57ceb3949d01481fbe59ce4a1daeff61a273dce46bc9898aa4ca46d8b9fd73e6ee5328620f87b6f3baba9cdb1fe9a370ed1003daabfdfb33d5bffc6e577a0bc950739e53ab416bb274b8e6f72edcd0ffc8540e4a6f0f00d5bada52679b7c5ebcc85af0b5a1318cf9dc2395214cd75397b992d2486704e318b33a9c7df26a55fd552c1779cac5162e68b0120d1666332e01e13620224f21339a586e2b8ab980c4e0b4b46e4a99a4a1544163b9535b7df1b56846bcba04d08bee5fb78205b3bdc57285079f80fff969d31be0a51280c662640fa34c0fdd36eb3776cb7f1298e2977caea7598d578ffaa47fce3bf76fabfbf591909d3f3cdea07ea0b3c61ce8f2d8791007de459b0e80b604542bb3b7f832993adcbd6f2bc956dc85d8a9ef4d2dd226f2825b8af05e450e427bd7585001739e28da0fce69aae1df41ca1b38a5b9b5e4dc45785c22ea50f1c34dec34ba19d4606f5401705ce8da70ba02ae3d3fcac4d486d77565315d80e7a466c78fc8e811fa3c02797d07e588d47eb9f55d109ca9e04f9554dc229767fcb0a1855c12fe95b4d21914797ce85a46a0dd87c51d334281be4b5069449643956d571ed690aa24c0645692cdf7a6235af05b4e617687e630262bef5b5e26e9e866b813176e0e760f51ea0c1e68f61d9a40c83b1730db7b29245ca959aacc228a02116fbe89fcddd9808d5c0b386844811e289d7110ba60a04d859987f3053195bef37a4bcaa3298a32050222b50005d8541064e7f928c45693e40f7a70e0a7f82eb7414e581d8e4d6b109c313d290198c92a115e0f839c24cb45fe29addb3d24fe6ea9d94a469872ad967b445f451afaf5a4bbc086e871a31403f112c87ca7344ef4104d3ca16d48a16b433efebbf24b2e8d10b4f3afc665229e01f1340ba"}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:41:18 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:18 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 61) 08:41:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x9effffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:18 executing program 5: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000900)={@remote, @broadcast, 0x0}, &(0x7f0000000940)=0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="34b93b", 0x3}, {&(0x7f0000000380)="5d901223605f3f897dd1352628fb6ed01b7ef0e09a42b9b47123c5b79b0e6deaf01dc81b2948965b52c13df7cd88", 0x2e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000004c0)="2f9a96c280c301a361502d600b6b1d04064c0b519df1fba3d24f04e809c43e3ae777d0a22b045e20267b7aa5139af33a463d8600d44b0f3f96961a182d83eea0daf3ba413873e1ef1726ab3591edf6689b5183062971056def7e4a79f62aab8ccef304b706b589c1aa5088d4606ff181caeb1fa049de92239e9eca5d2a2395", 0x7f}, {&(0x7f0000000540)="7748283442b1d0e193e24ab3a3dd12711fc653847db04e6370fe79d588a4fde0deb7ee6a7ca5fd049183d28c62e6ecbed57851914cd5dcfe", 0x38}, {&(0x7f0000000580)="a6f4bb747ebae22ecb3ef4c1ef1db99773769fd94f1af942e808bba61543f7502127999e2c2ef1d1849e576fcf9df662910577761ba55ef4ff608dbc2768c3b1c79ed982d4eafddc", 0x48}, {&(0x7f0000000600)="959550c4d26c91ab3eeff8d9da9f9fdb65e00f0c8b27eccd686ec62308cd59d4305fc27eaf8b1be3020a8cb5da7ef3bd1782ac435c6734c97de404fc87d074ee47112a33452c25", 0x47}, {&(0x7f0000000680)="85adb6f6ab8b6389f46342fd699580b8671a09727af5a7f106c00328bdbcbc9df43aa5a25499789424fe4c6689ede0e1570fd73393db75baf94b5c8e0e2da38d7368e27f1ed1bcfa7e7b725826a14dc1f2b1459584bcc62f8deb3afb7594cac4423ad4d0ada3347fad2965c8665e0691ebd60029755caf44d8e0738903364d4f8cded0c880a73300b073fb465b2aa3f9a6c749dfbdafe2b3c2a5bc8adacdfa8b2f798e2c86ad0224", 0xa8}, {&(0x7f0000000740)="fb8eb20815788f7b61eba092b1515056cfe7ae87b245584914b5b0cf4529c1b341e73a1c3b18fc0d93db67b7943da01faf874c0cf1ec97592ef65543007b406f90265d9cb77baf7a9119022a0173ca0b78917c60d836c5397e9efd1e81d526b785ac55d8cd6a0571b8990cdc90ea00ce5f0270e18b09040c04164d44acd90f854162a5348d3f1f3f04c27a15f23938993fa0cf2b66e12c5be7732a718fd227ce4b2fe9215ecfabdbc36e35f7672f106968c0c1f3d0c7", 0xb6}, {&(0x7f0000000800)="02733b10a98415e5884487cf7b48f05e9157f3bd530e9956493149253234b5924c13fa79a1030308a2d86fc598b41313795188c6e2fa279e246d9cc3bff94cc7900c1253b23b7a442ed7ad", 0x4b}], 0x7, &(0x7f0000000c40)=ANY=[@ANYBLOB="60000000000000000000000007000000860d000000030207c921c737c8860e000000020508880976a0ecff018631000000030609fa8b8ec246482501076624e1f7de060770afdb1ed6040f38c534926e45a8934831ea44d10205ec9d750000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000010a010100000000001c0000000000000000000000080000007aedbe869a8a925f40c7139052b4e8e990d403cf190377430e4c8114b393f1f86b20660f41c4f706dd76539fda35bb8a1e5f38bc1bb47920c326c46383a78a004d7a2ea5bd6e4159f5e5013df0e7111cd4553ffda4e751a29ed5e92a75ecb6343724238ee4eb25009d6e5d5f538568574bcdfe1f46200be11cbe5afb323ce2c25ace10", @ANYRES32=r0, @ANYBLOB="ac1e0001e000000100000000110000000000000000000000010000001f0000000000000060000000000000000000000007000000443c19010a01010200000004ac141410000000810a010101000000c064010101fffffffce0000001000000090a010101000000010a010101fffffffe070ff0ac1e00017f0000010a0101009404010000"], 0x118}}], 0x2, 0x2005) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') r2 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) r4 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@generic, &(0x7f0000000140)=0x80) fstat(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000002c0)='./file0\x00', 0x0, r5) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r2], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1, r3, r5}}}], 0x20, 0x4002840}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_crash_loaded', 0x40400, 0x1) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x63, 0x5, 0x7, 0x1, 0x0, 0xffffffffffffffbb, 0x2000, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4b5, 0x2, @perf_config_ext={0x4, 0x1}, 0x2, 0xfffffffffffff801, 0x6, 0x0, 0x3f, 0xf24, 0x9, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x4, r6, 0xa) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/mnt\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20, 0x4002840}, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c00)={&(0x7f0000000980)=""/27, 0x1b}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7f, 0x9, 0xf8, 0x7f, 0x0, 0x1, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x0, @perf_config_ext={0x6, 0x5}, 0x44009, 0x3f, 0xa1, 0x7, 0x80, 0x5afb, 0x9, 0x0, 0x7fff, 0x0, 0xcd}, r7, 0x6, r2, 0xa) [ 2385.406760] FAULT_INJECTION: forcing a failure. [ 2385.406760] name failslab, interval 1, probability 0, space 0, times 0 [ 2385.409891] CPU: 0 PID: 33572 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2385.411420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2385.413238] Call Trace: [ 2385.413841] dump_stack+0x107/0x167 [ 2385.414675] should_fail.cold+0x5/0xa [ 2385.415544] ? vm_area_dup+0x78/0x290 [ 2385.416400] should_failslab+0x5/0x20 [ 2385.417247] kmem_cache_alloc+0x5b/0x310 [ 2385.418153] ? tracing_generic_entry_update+0x1ed/0x270 [ 2385.419362] vm_area_dup+0x78/0x290 [ 2385.420181] ? __perf_event_overflow+0x1e7/0x370 [ 2385.421266] ? mark_lock+0xf5/0x2df0 [ 2385.422140] ? lock_chain_count+0x20/0x20 [ 2385.423054] ? perf_tp_event+0x5ce/0xc00 [ 2385.424029] ? perf_event_switch_output+0x7d0/0x7d0 [ 2385.425131] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2385.426258] ? mark_lock+0xf5/0x2df0 [ 2385.427117] ? vm_area_alloc+0x110/0x110 [ 2385.428050] ? __lock_acquire+0x1657/0x5b00 [ 2385.429102] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2385.430258] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2385.431378] ? vmacache_find+0x55/0x2a0 [ 2385.432283] __split_vma+0xa8/0x4e0 [ 2385.433137] __do_munmap+0x365/0x1260 [ 2385.434001] ? arch_get_unmapped_area+0x450/0x450 [ 2385.435127] mmap_region+0x7cc/0x1500 [ 2385.436062] do_mmap+0x868/0x1370 [ 2385.436901] vm_mmap_pgoff+0x198/0x1f0 [ 2385.437801] ? randomize_page+0xb0/0xb0 [ 2385.438773] ksys_mmap_pgoff+0x41c/0x560 [ 2385.439708] ? find_mergeable_anon_vma+0x250/0x250 [ 2385.440815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2385.441976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2385.443155] do_syscall_64+0x33/0x40 [ 2385.443994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2385.445121] RIP: 0033:0x7f12dae86b62 [ 2385.445952] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2385.449895] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2385.451544] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2385.453072] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2385.454598] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2385.456129] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2385.457657] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:41:18 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:18 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xf0ffffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x8, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:19 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:19 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:19 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 62) [ 2385.794058] FAULT_INJECTION: forcing a failure. [ 2385.794058] name failslab, interval 1, probability 0, space 0, times 0 [ 2385.796588] CPU: 0 PID: 33883 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2385.798063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2385.799842] Call Trace: [ 2385.800426] dump_stack+0x107/0x167 [ 2385.801232] should_fail.cold+0x5/0xa [ 2385.802070] ? create_object.isra.0+0x3a/0xa30 [ 2385.803062] should_failslab+0x5/0x20 [ 2385.803895] kmem_cache_alloc+0x5b/0x310 [ 2385.804810] create_object.isra.0+0x3a/0xa30 [ 2385.805756] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2385.806891] kmem_cache_alloc+0x159/0x310 [ 2385.807839] vm_area_dup+0x78/0x290 [ 2385.808680] ? mark_lock+0xf5/0x2df0 [ 2385.809507] ? tracing_generic_entry_update+0x1ed/0x270 [ 2385.810672] ? lock_chain_count+0x20/0x20 [ 2385.811574] ? perf_tp_event+0x5ce/0xc00 [ 2385.812515] ? perf_event_switch_output+0x7d0/0x7d0 [ 2385.813587] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2385.814684] ? mark_lock+0xf5/0x2df0 [ 2385.815524] ? vm_area_alloc+0x110/0x110 [ 2385.816418] ? __lock_acquire+0x1657/0x5b00 [ 2385.817440] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2385.818553] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2385.819639] ? vmacache_find+0x55/0x2a0 [ 2385.820515] __split_vma+0xa8/0x4e0 [ 2385.821334] __do_munmap+0x365/0x1260 [ 2385.822176] ? arch_get_unmapped_area+0x450/0x450 [ 2385.823278] mmap_region+0x7cc/0x1500 [ 2385.824189] do_mmap+0x868/0x1370 [ 2385.824996] vm_mmap_pgoff+0x198/0x1f0 [ 2385.825869] ? randomize_page+0xb0/0xb0 [ 2385.826811] ksys_mmap_pgoff+0x41c/0x560 [ 2385.827712] ? find_mergeable_anon_vma+0x250/0x250 [ 2385.828782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2385.829915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2385.831041] do_syscall_64+0x33/0x40 [ 2385.831870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2385.832971] RIP: 0033:0x7f12dae86b62 [ 2385.833776] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2385.837678] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2385.839322] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2385.840841] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2385.842352] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2385.843882] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2385.845400] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:41:34 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 63) 08:41:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xfffff000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2401.049588] FAULT_INJECTION: forcing a failure. [ 2401.049588] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.051246] CPU: 1 PID: 33896 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2401.052202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2401.053332] Call Trace: [ 2401.053694] dump_stack+0x107/0x167 [ 2401.054189] should_fail.cold+0x5/0xa [ 2401.054703] ? create_object.isra.0+0x3a/0xa30 [ 2401.055323] should_failslab+0x5/0x20 [ 2401.055842] kmem_cache_alloc+0x5b/0x310 [ 2401.056401] create_object.isra.0+0x3a/0xa30 [ 2401.057004] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2401.057700] kmem_cache_alloc+0x159/0x310 [ 2401.058475] vm_area_dup+0x78/0x290 [ 2401.059026] ? lock_release+0x680/0x680 [ 2401.059785] ? mark_lock+0xf5/0x2df0 [ 2401.060295] ? lock_chain_count+0x20/0x20 [ 2401.060855] ? mark_lock+0xf5/0x2df0 [ 2401.061374] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2401.062090] ? lock_chain_count+0x20/0x20 [ 2401.062663] ? mark_lock+0xf5/0x2df0 [ 2401.063168] ? vm_area_alloc+0x110/0x110 [ 2401.063740] ? __lock_acquire+0x1657/0x5b00 [ 2401.064348] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 08:41:34 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x72, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x2a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x2}, 0x848, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4002840}, 0x0) r2 = getpgid(r0) syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/user\x00') r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0) read$snapshot(r3, &(0x7f0000000080)=""/177, 0xb1) r4 = syz_io_uring_setup(0x4d50, &(0x7f0000000440)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000380)) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x78ed, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500), &(0x7f00000001c0)) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f00000004c0)={{r5}, "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"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000340)={&(0x7f0000000200)=""/171, 0xab}) 08:41:34 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:34 executing program 4: r0 = fork() ptrace(0x10, r0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4002840}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xffff}, 0x8008}, r0, 0x0, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10044001}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4b62ed8f69e2eae, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12346, 0x0, 0x0, 0x1}, 0x7f) 08:41:34 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:34 executing program 3: sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf251600020005000300000000000599336bf97a67d043000200000000000001000000050002000100000005000a000000000005f8030001000000000000"], 0x4c}}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x6, 0x40, 0x10, @loopback, @mcast1, 0x80, 0x7800, 0x7, 0x1000}}) accept4(0xffffffffffffffff, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0xb7, 0x0, 0x80, 0x20, @remote, @loopback, 0x1, 0x700, 0x80000000, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x29, 0x38, 0x1, 0x1, 0x34, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @rand_addr=' \x01\x00', 0x8000, 0x7, 0x4, 0xf}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x3, 0x0, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x1a, 0x0, 0x0, @loopback, @loopback}}}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0, 0x0, r6}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x9b, 0x101, 0x0, @remote, @mcast2, 0x7, 0x80, 0x7}}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78, r9}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0, 0x0, r9}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x9, 0x1f, 0x44, @empty, @private2, 0x18, 0x0, 0x31e, 0x6}}) [ 2401.065223] ? vmacache_find+0x55/0x2a0 [ 2401.065930] __split_vma+0xa8/0x4e0 [ 2401.066477] __do_munmap+0x365/0x1260 [ 2401.067001] ? arch_get_unmapped_area+0x450/0x450 [ 2401.067668] mmap_region+0x7cc/0x1500 [ 2401.068193] do_mmap+0x868/0x1370 [ 2401.068679] vm_mmap_pgoff+0x198/0x1f0 [ 2401.069205] ? randomize_page+0xb0/0xb0 [ 2401.069752] ksys_mmap_pgoff+0x41c/0x560 [ 2401.070308] ? find_mergeable_anon_vma+0x250/0x250 [ 2401.070973] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2401.071680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2401.072370] do_syscall_64+0x33/0x40 [ 2401.072877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2401.073567] RIP: 0033:0x7f12dae86b62 [ 2401.074076] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2401.076532] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2401.077574] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2401.078530] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2401.079496] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2401.080436] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2401.081393] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000a80)={0x928, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8e2}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfffa, 0x5, 0x2, 0x7}, {0x0, 0x9, 0x5f, 0x9}, {0x3b9, 0xd6, 0xfa}, {0x4, 0x95, 0x8, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5eaf}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf5}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x81, 0x7f, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x928}, 0x1, 0x0, 0x0, 0x20000c00}, 0x4048810) 08:41:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x9, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:34 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:34 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000a9d000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xde5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000200), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x160) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0x40000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000000c0)={0x2, 0x80, 0x1, 0xff, 0x0, 0x80, 0x0, 0x1f, 0x102600, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x100000000}, 0x102, 0x9, 0x2b6f8542, 0x8, 0xfffffffffffffffa, 0x7fffffff, 0x7, 0x0, 0x8, 0x0, 0x7386}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:41:34 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:48 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xffffff7f, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:48 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 64) 08:41:48 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:41:48 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xae, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:48 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 08:41:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0xa, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10044001}, 0x0) r3 = syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="6aa0edde9aa459b14901b5502f26645c4e94122869ef189f8d0cc1334e735836cad8e7078ec0a5b3f69b1b409ed3ea8353b7679641ffa1c19047b991b13aab1f18b57843c75c939a5912f31a2ba5ed43c5", 0x51}], 0x0, 0x0) r4 = dup3(r3, r3, 0x80000) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800002, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}], [{@uid_lt={'uid<', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, ']\x02&-'}}, {@uid_lt={'uid<', 0xee01}}, {@dont_appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x1050, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x1050}}, 0x800) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r8}], 0x1, 0x0) read$snapshot(r8, &(0x7f0000000080)=""/177, 0xb1) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xfecc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r7, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x0, 0x8a, r8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x248e31e7ec950dc6}, 0x4008080) [ 2415.314926] FAULT_INJECTION: forcing a failure. [ 2415.314926] name failslab, interval 1, probability 0, space 0, times 0 [ 2415.317888] CPU: 0 PID: 34341 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2415.319629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2415.321704] Call Trace: [ 2415.322398] dump_stack+0x107/0x167 [ 2415.323370] should_fail.cold+0x5/0xa [ 2415.324370] ? anon_vma_clone+0xdc/0x590 [ 2415.325410] should_failslab+0x5/0x20 [ 2415.326374] kmem_cache_alloc+0x5b/0x310 [ 2415.327466] anon_vma_clone+0xdc/0x590 [ 2415.328542] __split_vma+0x17c/0x4e0 [ 2415.329547] __do_munmap+0x365/0x1260 [ 2415.330516] ? arch_get_unmapped_area+0x450/0x450 [ 2415.331780] mmap_region+0x7cc/0x1500 [ 2415.332850] do_mmap+0x868/0x1370 [ 2415.333808] vm_mmap_pgoff+0x198/0x1f0 [ 2415.334837] ? randomize_page+0xb0/0xb0 [ 2415.335969] ksys_mmap_pgoff+0x41c/0x560 [ 2415.337023] ? find_mergeable_anon_vma+0x250/0x250 [ 2415.338296] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2415.339625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.340949] do_syscall_64+0x33/0x40 [ 2415.341904] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2415.343183] RIP: 0033:0x7f12dae86b62 [ 2415.344126] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2415.348776] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2415.350663] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2415.352454] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2415.354296] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2415.356078] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2415.357825] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:41:48 executing program 3: mount(&(0x7f0000000100)=ANY=[@ANYBLOB="080000000000000000d3464b9fbe0c66d4cc6058c7eadd1e6192c2dbdc6f0fb2cfc3a0ae2965bc204f70ae65a94a33cbe9a7ede1f3138dbfebb8b2b80768226fec9fcd678ad3874323fc66c7ffb4b44a19d0a44f6c5c950d07a4aea1e4abb4a7b39bea1e178610239d76a6b37077d011907d682496232fa02f162c2424b8f5a102614e1ed49f622114fec1a965e2b0cbb32dc9d43a380200ea9a6fb082e02c11220ad912e4d61a9b387437d234403732c0d1bcb6d2030000000000000064284395"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ncpfs\x00', 0x2000000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x4, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:udev_tbl_t:s0\x00', 0x20, 0x1) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x40, 0x5, 0x3f, 0x3, 0x0, 0x4, 0x2044, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000002c0), 0x8}, 0x800, 0x7, 0x3, 0x2, 0x3, 0xbe, 0x8, 0x0, 0xfffffffb, 0x0, 0xffffffffffffff01}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 08:41:48 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:48 executing program 3: clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f00000008c0)=""/93, 0x5d}, {&(0x7f0000000940)=""/247, 0xf7}, {&(0x7f0000000a40)=""/87, 0x57}], 0x6}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000bc0)=""/157, 0x9d}, {&(0x7f0000000c80)=""/199, 0xc7}, {&(0x7f0000000000)=""/60, 0x3c}], 0x3, &(0x7f0000000d80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000e00), 0x6e, &(0x7f0000001280)=[{&(0x7f0000000e80)=""/196, 0xc4}, {&(0x7f0000000f80)=""/209, 0xd1}, {&(0x7f0000001080)=""/172, 0xac}, {&(0x7f0000001140)=""/46, 0x2e}, {&(0x7f0000001180)=""/234, 0xea}], 0x5, &(0x7f0000001300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001480)=""/32, 0x20}, {&(0x7f00000014c0)=""/216, 0xd8}, {&(0x7f00000015c0)=""/33, 0x21}, {&(0x7f0000001600)=""/130, 0x82}, {&(0x7f00000016c0)=""/110, 0x6e}], 0x5, &(0x7f00000017c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000001940)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f00000019c0)=""/135, 0x87}, {&(0x7f0000001a80)=""/9, 0x9}, {&(0x7f0000001ac0)=""/25, 0x19}, {&(0x7f0000001b00)=""/228, 0xe4}, {&(0x7f0000001c00)=""/126, 0x7e}, {&(0x7f0000001c80)=""/202, 0xca}, {&(0x7f0000001d80)=""/148, 0x94}], 0x7, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000002000)=@abs, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002080)=""/124, 0x7c}], 0x1}}], 0x6, 0x20, &(0x7f0000002300)={r0, r1+10000000}) rt_sigqueueinfo(r3, 0x7, &(0x7f0000002340)={0x24, 0x5, 0x4}) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f00000023c0)={0xd, 0x98}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000280)={"db8c460f993f46aa16e81afdd2908a89", r6, r7, {0x1, 0x1}, {0x5, 0x9}, 0x4, [0x8, 0x9, 0x10000, 0x9, 0x8000, 0x0, 0xff, 0x5, 0x100, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x9, 0x2c2]}) 08:41:48 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:41:48 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:41:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xffffff80, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:41:48 executing program 5: getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xffffff9e, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:02 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10044001}, 0x0) fallocate(r0, 0x10, 0xffffffff, 0xe0) r5 = open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x80001) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10044001}, 0x0) r9 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r9, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r3, &(0x7f00000004c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x40000003}, r9, 0x1, 0x0, 0x1}, 0x401) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000200)="8c4cd277d3fb43cc63f948d829539b38afd945b398c1c64435b328771512f11a467d81326b1106658192a708002ab635acf7f33662b1dc208ef5b7e438e036f4faff53b74c03660e2fa5deba16f08775da17da1af7aed2d532cea86829e069d803fc700672cba02ec01cb78577cc43876217864ee4c4ae89e4d9e00e2bae03ba22083bfa7f6dbb2ed6e9be11a0", 0x8d}, {&(0x7f0000000100)="bbdb46f5b96213cbd9cf8bf9a23720d91d3957bb6986c24d688e6b4a0421ec84d032c377090aa3e5186c51e5ca4afb2f7b98649ebd50e83aa367abdd4b516a053d305979e6", 0x45}, {&(0x7f0000000340)="22268099553a47db87af0b8e0a7f463dde8198da6b081adc65584caf7f0bf91ff6305e3c341f9846d5e29644a04d79a549de58e6eb25136fde789b27078dd2ea3f664875f67e9a7b7d6f33f0b5a57e4314592a40c3b23d3e6323a9", 0x5b}, {&(0x7f0000000080)="70659b8447da56e0fdb8582d35b740d04408ddfa760d3929", 0x18}], 0x4) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000024380)=ANY=[@ANYBLOB="f00b000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edc56c923ae8547500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a37000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3e91b16d01ed180a968b8ce4b90151a266daf59baab2091bbc4c885022f8fc7a50be9e66d9ee6d6c3622d57df27195fddec980adc8bb503891c8d783f6fb1dfffd7fbf61445878bd90ea8e80052ebd7bdd97a9df3a451814da0c416893d0e92ff7e751a46c71741f3298eee60d85831675ffbb51fa345b06706fdf0f772eb85e71213b765de7716dbf2f772730fa57724be3b48e2decd0127b507c1b87ca6a0b4ff79911d4b8b48daadc6faa52b89f109240ce37a4c00e14569a14495997159cae86b28e673a1ab9a275efc1a121b74d8d964c4e6b6ddd1ee7b22c7ee5e0d71838ca427bb807cca8ac2c70d6210e0e179dd5267f1889774fd3e8fbaa1e34c98e53a"]) 08:42:02 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0xfffffffe, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x80, 0xc7, 0x0, 0x0, 0xff, 0x8000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x4020, 0x8, 0x5, 0x3, 0x81, 0x8, 0x2, 0x0, 0xa1, 0x0, 0x7}, 0xffffffffffffffff, 0x7, r0, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:02 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x2, 0x2, 0x6c, 0x5}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/177, 0xb1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x40) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:42:02 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0xb, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:02 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 65) 08:42:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') [ 2429.123184] FAULT_INJECTION: forcing a failure. [ 2429.123184] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.125962] CPU: 1 PID: 34898 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2429.127615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.129589] Call Trace: [ 2429.130229] dump_stack+0x107/0x167 [ 2429.131103] should_fail.cold+0x5/0xa [ 2429.132033] ? vm_area_dup+0x78/0x290 [ 2429.132926] should_failslab+0x5/0x20 [ 2429.133842] kmem_cache_alloc+0x5b/0x310 [ 2429.134815] ? __lockdep_reset_lock+0x180/0x180 [ 2429.135926] vm_area_dup+0x78/0x290 [ 2429.136781] ? find_held_lock+0x2c/0x110 [ 2429.137737] ? __vma_adjust+0x66e/0x2510 [ 2429.138700] ? lock_downgrade+0x6d0/0x6d0 [ 2429.139720] ? up_write+0x191/0x550 [ 2429.140586] ? downgrade_write+0x3a0/0x3a0 [ 2429.141575] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2429.142834] ? vm_area_alloc+0x110/0x110 [ 2429.143831] ? __vma_adjust+0xbb8/0x2510 [ 2429.144807] ? vmacache_find+0x55/0x2a0 [ 2429.145740] __split_vma+0xa8/0x4e0 [ 2429.146595] __do_munmap+0xf40/0x1260 [ 2429.147499] ? arch_get_unmapped_area+0x450/0x450 [ 2429.148677] mmap_region+0x7cc/0x1500 [ 2429.149581] do_mmap+0x868/0x1370 [ 2429.150400] vm_mmap_pgoff+0x198/0x1f0 [ 2429.151303] ? randomize_page+0xb0/0xb0 [ 2429.152269] ksys_mmap_pgoff+0x41c/0x560 [ 2429.153216] ? find_mergeable_anon_vma+0x250/0x250 [ 2429.154350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2429.155557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2429.156773] do_syscall_64+0x33/0x40 [ 2429.157636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2429.158819] RIP: 0033:0x7f12dae86b62 [ 2429.159712] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2429.163989] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2429.165745] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2429.167385] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2429.169071] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2429.170710] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2429.172378] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:42:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:02 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:42:02 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:02 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x9, 0x40, 0x2, 0x3, 0x0, 0xffffffffffffffc0, 0x108, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x200, 0x8, 0x3, 0x1, 0x16, 0x400, 0x6, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xd, r0, 0x1) 08:42:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:42:16 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000005, 0x4000010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x4}, 0x4) 08:42:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0xf, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:16 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:42:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:42:16 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:16 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 66) 08:42:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xfffffff0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2443.086915] FAULT_INJECTION: forcing a failure. [ 2443.086915] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.089331] CPU: 1 PID: 35338 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2443.090770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.092493] Call Trace: [ 2443.093057] dump_stack+0x107/0x167 [ 2443.093817] should_fail.cold+0x5/0xa [ 2443.094615] ? create_object.isra.0+0x3a/0xa30 [ 2443.095574] should_failslab+0x5/0x20 [ 2443.096387] kmem_cache_alloc+0x5b/0x310 [ 2443.097250] create_object.isra.0+0x3a/0xa30 [ 2443.098168] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2443.099469] kmem_cache_alloc+0x159/0x310 [ 2443.100484] anon_vma_clone+0xdc/0x590 [ 2443.101352] __split_vma+0x17c/0x4e0 [ 2443.102155] __do_munmap+0x365/0x1260 [ 2443.102944] ? arch_get_unmapped_area+0x450/0x450 [ 2443.103988] mmap_region+0x7cc/0x1500 [ 2443.104788] do_mmap+0x868/0x1370 [ 2443.105525] vm_mmap_pgoff+0x198/0x1f0 [ 2443.106336] ? randomize_page+0xb0/0xb0 [ 2443.107183] ksys_mmap_pgoff+0x41c/0x560 [ 2443.108029] ? find_mergeable_anon_vma+0x250/0x250 [ 2443.109053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2443.110143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.111211] do_syscall_64+0x33/0x40 [ 2443.111987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2443.113039] RIP: 0033:0x7f12dae86b62 [ 2443.113822] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2443.117595] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2443.119159] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2443.120623] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2443.122092] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2443.123555] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2443.125034] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:42:16 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 08:42:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4002840}, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') 08:42:16 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:16 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = fork() ptrace(0x10, r0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4002840}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = accept4(r1, &(0x7f0000000140)=@phonet, &(0x7f0000000000)=0x80, 0x140000) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000001c0)={0x8, {{0x2, 0x4e23, @remote}}}, 0x88) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) read$snapshot(r2, &(0x7f0000000080)=""/177, 0xb1) 08:42:34 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x3}, 0x41202}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1000, 0x2, &(0x7f0000000280)=[{&(0x7f00000004c0)="43e18de29b9588f1c1c8ca8d58516702c392045c5fb523647d81bc5c05a8207c336ebe6b0fd028f24db0edb91b0bae9ccc20eeac79fc84e9baf4038e17ba2f622c5f19652a6db32e4361af522938b75bf15d5f88351b9f4e20ce942650e7c2da5ec65359161b202a7c899a908659a65670ef798cfb938adde1030f026c03a6d634e7e373c9f5fefee32d47c97919985ccde4e243f78ed7d06b4b7d26f0d7b0b1956eed40e2d6105142fdaf2a79dc1affcccc315ea881c7f91028ac901f048cf94d918818d0e1f20fa325ebadde365a6161511a1de52a72b8e063debee190bbeace563f86017e112a2eefb94cab3d565af48eb2c67290692c9308eee14f49c0c0e96b718b9602e2a92d8eba0b6943938832b7c8a8e21da956cf9d5e705da12c5f2d76909ce58a934ef3a60cb160aadb5faea633a95c3284b921649e4ab57f7999b6b01cbac558ac2cdb387cd062d90e3a2f3030adb21351662af8c440c7d96b4f846b759ad2ae34462edfcfa7f9305b14315e0ff99f2911115bd8ec4106e2ee80c97f72deedb813c42e658985fb3299c759f561fb089f83b9c771738f6e213382b663ff27d85ed92e5187cd91e0af6ec99abaa7e893ea16a9021ea92149088c08b1f1fddb81f2275ded53b449d1c0657956f9b8e5e3ee674d4b16f9d8031d212d90dd5b128623ac5750820a989012b5731d761d93fff18a5d04cb342a71986a6fa501476a5730abfe2adf1b365a47bd20b9e3e7f41c93eeb1fc5c07089d9ead5e9c530d2c8cb60468e67488e56b15a3ca0f01cb1b022590e60525a44845acfe4fc3114cf2a7d577b91b5abb1cca202713d36984343fa7cf81a8a5aefec92257511cbd12cc433a04132ff4851d922edb2ee288c7d550f513b1c7ea3cd4501aac8e83f0c91ecac71b5fc14892074db57ebba0b82cecda71a2cdb931f3a13f2b94c527735a8c69bccdc71b77c49cc7267c25e015eb344378adf9fce6ad1e79a389cd8fed14bd03b41493329dae307bf05efdf72b7df86e0cd00961fd56214d78969a60396d82dbe1ed4a7b93e073f19c7aef12722052a15ef317a3cda9fa6f40c44ae20bb7006a1042cc5bb4f5ae078b97373bd760efeb1e2abb26d76f3b3be7400ab142fbb7d50fa292d7e709e53ef8000eafb671f356fe6ee5cbc5336a75270072204e88cd9a134fbfd5be724f869b07f3de75d8be8311020bc10a3c0a668ae1107e44f41a362151fd1062b117425daa8a09e465f4e9ec91d3b08d65e3bebe8e08a57225ad60e3440758d49c9d7f2c7a5a35b79926504f813dc35f924787c74e356cbd72f144869e7d053501567a4e66c4f558200d9fba22f7bfdfb88b763376009055b0bde377bfdbd9cc8ea74ed4b7bb2c9fe7b3e615c56f6c1fdeb5126971287c6a0a6bb181d1fe6eea835253e63ff08fc23575215e9ab5bcee224e94241e3052119af9b17b8c459e715f8aa9de0a5e0589f34bea80b945eb05d53fb79494482839b2e1e2137c180fdb2141fba06197046a28dea63d5ceea8d1bf0c03602590eb0ac9f8160356be67d55dc47c2b9b1de83ee287be2471538a0ae9e4e7f00bacf525e02fef2e0f2deadd40975223ab9af3653911ad24d34e59176b4eb5efbb47dd1610f1abee5478483872d0f961889d0a718d27d2f1c9492cfc1de14a7e7b3d6c81a941fcc8089c977e7c5d68aeda229ef0f1b19914084723b433ca79d19f828107246348a4cd52eb45fc4ab951625889582a00b3f62986c616a1dfc1fb633aabf6bdb17a027587b8fe272b6a912511e0a856e5dc534f8a2f628bc37ee8ac6663ea4e9e31ee26b62c808bea74114afe453e45dd715e75892b4c8fd82d33ac9a4c1947f7ffff14ece29935503015928b74a63121eeb21ddd1566fd6eb9923bc2d171ec03bf9488d8818944b0a97d4f38030c5c6b560a1afa8c11d0cd0541757d289f3e4c9701f1cd0780b8f1707f2747845614cb4e1aea36045a187b7e922e5cddee1d0f2150b7aa3563fdaa46b6fd6afe4e0967f019d31f3d7ca2e8f8f9d3a9ec923e273b21b09f089f4ba37d517159b344402d53ffd4caa7d389e2e849be5967930b27d2ea1218a9d4cb7527245ba866e7fc0e50da787edf5129ba08475a07cbae058ae3f7fd815b62b4210b3c5698f1451d0e00fb3f38e74a46aef3b9c792cf539a9b6b7bd155c031b80511e4ada2bf83f8ed5954e5e695e40c011eeb12da54f6fb295530394e55b9f3ddade5eed83933cc2e0cc56f810bc04f48baa13e0ff57e11e3a3bfb08bc798b85155f982ca8406e70d625a4945c6a4d7d9d5c7aea2499e060ee6e24fb96beb9b7aab0f9f7b071ceb29cd5146dcd2dcbf708604c850803737f7dfca32fa12259b131cdf2a33c605cdc44c7e3e607cf570000a6c47e975c8461f6a47d83bf59b401f139317bce7ce1afc4cac753aaaf283339389fe677f93732f5b632cbfa7e76adb0693e4b2bea0a5b84ca5396b3015238165e36b39bf77d8a8fca452c0b65221221c91e5657858d5d87bad412a7d7844fe9f8779c2199b861ad70998d6b763a7af5ccddb6682c00433af74c3f409f4fc32d7b0662eaae3e7409226a6d12b922fc65280439b337ef7af1f7eb70065f798b5d9101f99cff6e54730814c278033ecb9dae0b31fb84c63ee36f249e0ee535b373a0160e5b5d2a519fc881076c5528f4cea1fc6f4e08f7c786c5b6b7b05fac4c9ad58a9ec954f13ea29e23d2876072df085188f3cf6b15826a9fca747600f9455a557a1fba4b3088d58d556c0e9c0a6197e5aa44bf6d2349c2a8542644cc66845608911405c261bb1fd3d797cba63e4f4b2bbd082bd945fc1494599301abf63e96e35f0c1a1dcafc60904506ece2dbf6937624e6a87c8dfc9c1d0c4903d593b1a1cef3ad1f7b68010fa2b4c4ac9c91bc25011e12d065ac8da19acd33faa414690f81b2642fa8de8d71ec18d6cc9d46a23563359cd15a7f1371a0aa58622554d380dad880e4a3909daa61dff13621919a4f12fa911dfec05e6436fba3471c6e1df72a172827252e7cf6a08470a11a7596c1be7a31f69adc0ff6de26ea65bd253ad38fcfa1aeadcb8d1a9a6aac135f9d871ae9b30e220627d1fb0986349e9c550e791c42785ba0795fce55a886fe01960e94f282225028bc16ae8a21a1d64c1997be02cfceee9fce01a7f793ead50e84014550005185c4750e902431a4b597ad36bf87a0c50baf58b3f8b7b40ac56b5d380c89868b6c66ea0fc444764cc633e2ec9d67f4bc333cee84a119a0bb92b7e794ead33ab219f11b3cdbd6f66f73d4dfcaf4b4e7960c07a89243d456b7b27151d4d23ddcde5e39f46357c572dbd82ec55cf07c26c1845ee4feedc6dca5cd9447869c9f212006720118588e8477d8ca718b82b6bf1c3ad6606dcefdb46729719753ead4e07f443768597432dfd51fe0dd9311d82154d0351ed522614b39a398a98a62d7b972e99e18bd84f61a610b9ceafb182ce3500d905aaaea1fcbfe37cd67f2ac745e3e0d11df6ccef2f3a76c23b509aebaf0dd7f8a8a4bdf2f918e06ff40e839ba720dc7d66744c76eaf544a814b1ee6cffec9a686f3179cb406c9153866a588487b70202131b353c33c3a0bbeb0b79d76a940c6acffcf9d29b084e8c0a58ac237bca4195676b12cf53ff587f93c4dad7bf740748bbc3b00b36ec205a2241af6b1bd136f4203cd36ad776853b8afe8b82139f6ec293664f39ccc6fceb41568d31552cf4e124b810bea0fd08b5145e945904c40ab7e8300cb1d5321146a76968ca0c98f81d75402089c31bf1b4dea96e59d49101812b4da459d19ac62568312f64774f2bf4f588085ccb9bd6ef86c3a654b58ae267a3bc32f54f74092ad272a1e12bdf15eddfebed1e5c3131aa5db6f2cb39c85532b9ec60d437394c1d1ca86c818ecf7785b9a7129f61a074b2c2a1468096c10bb836371df221ac2a3e81865f8a9de20cfde68fe1112f895657a46efc1cac0d710a970f008fc4a2a3ba1cd55aa1fa8f96982b39e49becb86c10268638d91f69b43e7582ea8c0e004f40c0a819dbdcd8d04f98a4c6f42582459a2d8d3a2a776c8b2c7f5fc84faa83cd3b0f0ac724eaca66dd6290aa979e992a3b190a2d0c7d1860c3ca6ec9abca5928862f630cc80525631c6ab5ee7b17cc705f4357b5b6436d5972a79a7e65f43f4207d12bcd4c27b974a1c861cafb878f1cb37a3838f1d18f941943e365752727741b67ef8c9966b6f1027928441a3dcc00b0428b9e0cd2ee8d7bf4bbdbc965cec94a209b6341d32e0bccb851308dd188385af74dc6ee97dcd2c8720bcd2653fbd9ff4b69cfc218c55bec440e877e993165f9ed33082ebf9dbb12a79430ded013052cd6ce3641008cde8f0063ff2fca3b65df0bb6c00aafd1883e3de92cdeb3cd27611eaa21dffafce71ab2c2f8d58153a964f1ae1419c877403f8011700661b7d6cc048611c2e1796f9e47b49bfb134b3eb84788e231b9f73435da5b62469fed263493c62ea8d6bfaec72edc3e1caa22d9bc4a0a3acc3c0d6d1fdf1bc12567382692a1f2c3d1887a6179ae7a0455db7a7acd065daee0eb957c0807179b97c1837a5d0907698e1ec671b9d154a2057230dd897afc48915d716eda3385da194d4e12a819aa55aba4cb0b03bc14459fe55682a7f48ff438d2d5b0371a5caa022798ada18c26b23d3ec2d1c7517b6898c229eb5fc2f1bd854cfa2cfea97603d6f2a25b376b8e14330ed58a9afe94b38c0f02bd62e2c99a6f0a55be987b603836691659818878384fda275741e54f898d7e2880ea02652ab8a105b51d51cfb51a81ac912bea5138b1fbd57426cf62239f8fb70e7a3a01a2bdcf528407ae4844609eb6055b8da22adcc14f90606ebef64efe0cfd4cbacc9f4e128bfd234919694c1df962996464e517a40d5c06c3a610e6a8add25320db1d3a3d13a6e1d976caaed9a9b689d8cd8299aa5273de98b2af3930ebbf94683714e7a67f893b289aff6c5e9bb60cec86c44eb7c18dd9902101f1e6bead5600ce619918fe3eb29d3a7939de285e54d3c1db1bf247767898e4583191434c28d9c51883cdd3dc15abb6f190c03645524f4f8a233c3efca627ee9140a3f3529ec20a9be7219b507f56d95e185bd84dddfe460a6e9e152277e9acee0abea17150cf4e66d02cadf0c94db376dc885727cb53d227427dfcf2f92cd94d4e4be7a57f5ef380f84fb6e71cbbff41f3b294e4e5497143a349aee1846aad780e9c039611124eadd9ae498dcd499b9daa1c256d1bf7dcab994bf9a5b0e642eeeb9fc65e5447797dad8fe44ddc1733ac729e7e79d7d9319dfeb4adb2ee957572ddf91861fd12bbff3b90df874d3afaf84e265720525a96dfeaa65446b81766b7aa8e375701162753015b25e06df55146682a0c504f49c3a0e9137977ec2da19055b459f564b181a2c7b16e4f7e90337c1ab50ca055304353374a3e8dae6a4dbc64c09dbfbf4e98e0e895aa182f2b0107df8fb69b6c4918b53fb22c9e0d939b79436fde80416cf37fdd434e4d3cd394ae15a26c42fd77818ba592fd744245b64c380673b7e9bc1058733daafa9b702fb040f1a71f110d73268ecdda51e5b06e8c50f66ff7c7aee4e04df908465de5a3e3e125f5851e894a9d8701058b731cd2281bd29c10708022944d9f0017f77f9c5c709731f249a6802a7882040b1c3f3ad23b2aacf9b4d97cef6c5138b46036d9d61094ff73efa03c97c08a203ff60c3149f65a23a3da1ffae5f275a47890d181b3d4a3f0d1bc65fc3ef70eb72ba3130638ee15fc60712a66fdddfdba5a", 0x1000, 0x5}, {&(0x7f0000000200)="e2ce32331a4d19254de7303f6dad0675a0098d442afab6d379b5496aba1aff77aaac4513e697a92284a9502cf3ee9d3d0c9b3baab2cd3df0df3b470dd5576bcd325303480e7124bac6e6212cc54059ef941bc2900559786f1320f936460c6f4bc60639473494b239502189", 0x6b, 0x80}], 0x31000, &(0x7f0000000340)={[{@utf8}, {@nonumtail}, {@shortname_lower}, {@nonumtail}, {@shortname_mixed}, {@shortname_mixed}], [{@fowner_gt}]}) dup3(r2, r3, 0x0) fcntl$setpipe(r1, 0x407, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:34 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x4002840}, 0x0) fcntl$getown(r0, 0x9) r3 = fork() ptrace(0x10, r3) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/mnt\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x4002840}, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/cgroup\x00') 08:42:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0xff, 0x0, 0x0, 0x81108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x8, 0x0, 0xfc36}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x8, 0x1, 0x81, 0x0, 0x5, 0x404, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x5184, 0x0, 0x1, 0x2, 0x9, 0x4, 0x0, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0xd, r0, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xffffffff, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x10, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:34 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 67) 08:42:34 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:34 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') [ 2460.849378] FAULT_INJECTION: forcing a failure. [ 2460.849378] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.851912] CPU: 0 PID: 35769 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2460.853418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2460.855215] Call Trace: [ 2460.855812] dump_stack+0x107/0x167 [ 2460.856648] should_fail.cold+0x5/0xa [ 2460.857500] ? anon_vma_clone+0xdc/0x590 [ 2460.858394] should_failslab+0x5/0x20 [ 2460.859222] kmem_cache_alloc+0x5b/0x310 [ 2460.860162] anon_vma_clone+0xdc/0x590 [ 2460.861065] __split_vma+0x17c/0x4e0 [ 2460.861906] __do_munmap+0xf40/0x1260 [ 2460.862756] ? arch_get_unmapped_area+0x450/0x450 [ 2460.863861] mmap_region+0x7cc/0x1500 [ 2460.864791] do_mmap+0x868/0x1370 [ 2460.865613] vm_mmap_pgoff+0x198/0x1f0 [ 2460.866513] ? randomize_page+0xb0/0xb0 [ 2460.867468] ksys_mmap_pgoff+0x41c/0x560 [ 2460.868387] ? find_mergeable_anon_vma+0x250/0x250 [ 2460.869470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2460.870611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2460.871767] do_syscall_64+0x33/0x40 [ 2460.872598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2460.873705] RIP: 0033:0x7f12dae86b62 [ 2460.874530] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2460.878460] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2460.880122] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2460.881669] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2460.883217] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2460.884805] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2460.886344] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2460.935498] loop5: detected capacity change from 0 to 4096 08:42:34 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 08:42:34 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:34 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 68) 08:42:34 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 08:42:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 2461.122027] FAULT_INJECTION: forcing a failure. [ 2461.122027] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.125658] CPU: 0 PID: 36085 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2461.127036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2461.128680] Call Trace: [ 2461.129231] dump_stack+0x107/0x167 [ 2461.129996] should_fail.cold+0x5/0xa [ 2461.130786] ? create_object.isra.0+0x3a/0xa30 [ 2461.131708] should_failslab+0x5/0x20 [ 2461.132504] kmem_cache_alloc+0x5b/0x310 [ 2461.133362] create_object.isra.0+0x3a/0xa30 [ 2461.134248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2461.135297] kmem_cache_alloc+0x159/0x310 [ 2461.136186] anon_vma_clone+0xdc/0x590 [ 2461.137026] __split_vma+0x17c/0x4e0 [ 2461.137803] __do_munmap+0xf40/0x1260 [ 2461.138599] ? arch_get_unmapped_area+0x450/0x450 [ 2461.139612] mmap_region+0x7cc/0x1500 [ 2461.140478] do_mmap+0x868/0x1370 [ 2461.141235] vm_mmap_pgoff+0x198/0x1f0 [ 2461.142051] ? randomize_page+0xb0/0xb0 [ 2461.142932] ksys_mmap_pgoff+0x41c/0x560 [ 2461.143758] ? find_mergeable_anon_vma+0x250/0x250 [ 2461.144763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2461.145807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2461.146862] do_syscall_64+0x33/0x40 [ 2461.147608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2461.148633] RIP: 0033:0x7f12dae86b62 [ 2461.149378] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2461.152972] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2461.154480] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2461.155889] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2461.157311] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2461.158719] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2461.160124] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:42:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x11, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:34 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:34 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x37, 0x3, 0x3, 0xf3, 0x0, 0x1, 0xc4005, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2, 0x200000000000000, 0x8, 0x4, 0x8, 0x9, 0x7, 0x0, 0x9, 0x0, 0x58d5}, 0xffffffffffffffff, 0x10, r2, 0x3) sendfile(r0, r1, &(0x7f0000000080)=0x9, 0xb3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') 08:42:34 executing program 3: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000140), 0x6e, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/136, 0x88}, {&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)=""/134, 0x86}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000640)=""/179, 0xb3}, {&(0x7f0000000400)=""/25, 0x19}], 0x9, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x40000001) recvfrom$inet6(r0, &(0x7f0000000840)=""/116, 0x74, 0x40000040, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:34 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 08:42:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x800, 0x2, 0x4, 0x8, 0x2, [0x6, 0x800, 0xfffffff9, 0x9]}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x13, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0xffffff9e, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 08:42:49 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:49 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 69) 08:42:49 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) 08:42:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x2, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2476.284875] FAULT_INJECTION: forcing a failure. [ 2476.284875] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.287595] CPU: 0 PID: 36433 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2476.289114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2476.290920] Call Trace: [ 2476.291519] dump_stack+0x107/0x167 [ 2476.292357] should_fail.cold+0x5/0xa [ 2476.293210] ? vm_area_alloc+0x1c/0x110 [ 2476.294099] should_failslab+0x5/0x20 [ 2476.294942] kmem_cache_alloc+0x5b/0x310 [ 2476.295875] vm_area_alloc+0x1c/0x110 [ 2476.296729] mmap_region+0x982/0x1500 [ 2476.297655] do_mmap+0x868/0x1370 [ 2476.298478] vm_mmap_pgoff+0x198/0x1f0 [ 2476.299372] ? randomize_page+0xb0/0xb0 [ 2476.300341] ksys_mmap_pgoff+0x41c/0x560 [ 2476.301256] ? find_mergeable_anon_vma+0x250/0x250 [ 2476.302352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2476.303497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2476.304665] do_syscall_64+0x33/0x40 [ 2476.305488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2476.306608] RIP: 0033:0x7f12dae86b62 [ 2476.307421] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2476.311388] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2476.313070] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2476.314619] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2476.316178] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2476.317729] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2476.319277] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:42:49 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:49 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b80)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)="95d50506b850d9e95916f3777f018582791c5edeb2335b3c36aba1552cbfeb6b8f9969682bf76a737dad1a1d376ccc32b0f6deadf2fb34aa3c06e8fe4b0bcee178e2c29cbc84ff720c5015cdbe2de842d552a609221059efa485668d0ca8f3be3f2758821f960ca6b0016ad8b0809697a4c791b139a47e94a35efab378eb92932ccfefe000f3f67bb5756ec97f7ea0e0222383d6de7c8eae05f7ff23faa1e079e4c4daad80daab6cd19c802bd4d241774ac252ba3684b503084c6ffcd6cb600278c8acd854447a3914cffa9b86b8c211cce4393172bf803757f629cd3ffaad10c947e929a5b847d13d2d67b97d9302", 0xef}, {&(0x7f0000000200)="c17d1974269fa47d9bce0b9bf87f80ee982e2c0241b15b8c54972bd1ee6966054c671b15cc88a4155f8fa89801229cb46732c76ddf38f4639ff1d5b72fd17213b3ce02e1ffd417f444398bc0b2fa58dd00042467c47645c7e92a42599adada7a609d5a57144f5ff2fee676acbaeec899bf4651afd6dc69a76f4e47d07f881c2264531d4df0a7de74c44951adac81bec1a86c", 0x92}, {&(0x7f00000002c0)="543247c4d1ae6634ab0be2edad351076d3d7321bb1753cc0ff891788dfc8d96ed1d32ee5575a6e731e601fa8b26e1362dc0cbb73f638611189b6006cd3e0bce07f3f335e23b551e5ae30ade1cd6d2b1e5ab2be98639006980185ea195b25d405e3400eae4c3b63cc10d6a3aad8fc0a54ecc4e5b4e5ef8c6ebc9f01c66074eac4d047a4b502a8620a3c2d29fac7786e446bfd619dc75545fc5d013d3199aafb1b6ec4a6bbe385ae8ce8f45cf42ae5364d758ea39a0e8dfd4dc89f9fdd5ae05754ea9da05d1b45c8b1264a77afab6ca2623cfc9aa8dbfa8e4830afe08019ee33416d65", 0xe2}, {&(0x7f00000003c0)="e7fb2f340a27787279acec0c870bfc9c0d323b0e22858b904b88c16d54f992fcb51ddf5c789d6f9a684c371e5a1a460fdd7d47ac8dce7fa93235828224ed00dadf5e7f95513021abf021c913573abbf2004e2db346b8a2c8487bb912dd77942377cff9b55148b2a6775e5084dd3ae7d60f47e4127d208ee2c063a6d3cf", 0x7d}, {&(0x7f0000000000)="e131e6ba2408c1f8d8b4830adb4031a8ed1cddb1d5b1502a", 0x18}, {&(0x7f00000004c0)="2589441189b73104b87ff1bbfce529eecd1cb6a18bcd08658305d9014e0cf2a7593bf8fd23801756c8413a6ea3592a327364ee74fade33bf562fde859ae22d078ba3f55c18a28f4d7a5b601df7ce06f6f867386f68b73d483115e3a6dbadae54bdc95131d3ade8f8ae35fc479b2ebabce683c4e21215", 0x76}], 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x550}, 0x0, 0x8001, 0x0, {0x0, r0}}, 0xfffffffb) 08:42:49 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88805, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x487) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:42:49 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/user\x00') 08:42:49 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 70) 08:42:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x3, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x11, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:42:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0xf0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2476.666001] FAULT_INJECTION: forcing a failure. [ 2476.666001] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.668851] CPU: 0 PID: 36784 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2476.670353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2476.672150] Call Trace: [ 2476.672751] dump_stack+0x107/0x167 [ 2476.673579] should_fail.cold+0x5/0xa [ 2476.674435] ? create_object.isra.0+0x3a/0xa30 [ 2476.675445] should_failslab+0x5/0x20 [ 2476.676306] kmem_cache_alloc+0x5b/0x310 [ 2476.677256] create_object.isra.0+0x3a/0xa30 [ 2476.678213] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2476.679363] kmem_cache_alloc+0x159/0x310 [ 2476.680326] vm_area_alloc+0x1c/0x110 [ 2476.681172] mmap_region+0x982/0x1500 [ 2476.682105] do_mmap+0x868/0x1370 [ 2476.682932] vm_mmap_pgoff+0x198/0x1f0 [ 2476.683829] ? randomize_page+0xb0/0xb0 [ 2476.684799] ksys_mmap_pgoff+0x41c/0x560 [ 2476.685716] ? find_mergeable_anon_vma+0x250/0x250 [ 2476.686812] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2476.687979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2476.689151] do_syscall_64+0x33/0x40 [ 2476.689974] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2476.691091] RIP: 0033:0x7f12dae86b62 [ 2476.691911] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2476.695920] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2476.697558] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2476.699081] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 2476.700620] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 2476.702119] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2476.703618] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:43:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) read(r0, &(0x7f00000000c0)=""/96, 0x60) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0xb50, 0xffff, 0x7fffffff, 0x0, 0x59, 0x3}) 08:43:07 executing program 3: syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10044001}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000004c0)={{}, "7e823f73a97bc685a69f75b21e7dd306834ca470515f8b79004be811be9128bf2acc9b6451cd17b74b18b280dee62d1bad2fe1cd21a57b28cf5ea0cc7d613aa12dfa62e9559e0c59f50c9566e6f38c61744a40f18c167a02fbee44e9330f0578f3fec417a6058c304d6d1b69049dcdc6b4925729bf2943f9b4d08440d271e5eecacc8959c313bfac297e1eb0dcf9ec297ade914c6b5cbfcc2a9a1e2196d16a1bbf9b739e027ae8b7f20b4832d330e79e54e2e9c37b8c80bb87c23a898d6610afe226a80d8ffe8cd9ad3786eb23d556e0622680ba5071f1bfe7c005c7c5335746e8461fa4c5beee0fa1df4b2fc0405d45b80a81c1401ea3fd745d4ef5a916319ed3b1bb026987be24e7a88f255218923a33c7ed21426f5a463bb441f81347872efa89d23d84e950665242d42621d9019b5d3049c3fae2097d9a9ab84eb4ccf23d32c7244881a82acd020346302fe1797ed8a18252c4ba87f6f7eefc6849c3933d43a20ba92b822d06655627a213538d0e4772b62379d5f73d6d92b8361b750d2cea2be5f5f27cdd96aec4fc3769331bc06138f3ee392eeac7ffca084d4a2dfcae43ba4e58e7abbec3cfa500e5f97bf133e0bcac1b1460d238c53dee3bb745a2cd3f93126881a5f5aecad1b65e7d62a0eb629483d0b60274151281845e9619d0dfecc8dd208022b9de7c1ba034bb977c7ff20fddb7ff6924b1e9e9f88f8307f074c16211ab9c2e8c5b1b61fdba9ddd2382cd7817a63d8c54c7179d3f3ccd7e7650f4272ca08c4973fabb0b445ebbc82c4429ec103727092e21374b98c5cd81da913bdccb8f500b9cb5989d5c1b72abffb3de4dece3dbcf23b38a62c669f42671f70018142bcd8b402e956da01be61dca178ae7125d09b6fb2e514e67e5333b13b8dbe2d708f1918c42551f13971d4891bb5bccf9079a6da5acf44e917a99a3d549bac321488d4687e0d49530ee41d78e70f983abdb6f62adb9b2138f33f4fef4e531a5d45320a0911fa6e1a7f3d9850b576096bdd192c59faa7f4e1189d062516ab7ecee47e475ae9d943032605883424abd7e15497c40eee4789b3c360625b23b1a66aedf31e82017bc311cccc06ba54456aa268c371dea141d56ea8a21ad8c05a97685a7a5ca6601ff9e896212235fd87674e27d127e095abac1d20a91130f158a4991d5f61618cf01837b58052bc7939cbc9e0badf4081013e6920632a449d265994f566a99f30b5b1a8819818760a5beee39569a27d27be2d765b3636d4bc4a05c2596475a1c4e70267489be35d770e824a6d1eafa0e27dd0d6dc7631086c4827f157bafc53ba7b03b7fc05b1222aeea3c16e603153c7fcfd1fd7ab2d514d213042dd65d9c681310d9b5a286810c3c57e8c94d2918ddfeb25f17c269e7b1f682458caf4e6f5b4d6e7c867bbcec23b2a3aada2775cf3dae679c7e7d8e543185040cd6fcf53b04be89788036b2f75993f8c781c2400420e655ab6dd4116339e5d76913a8322dcbb4e5d4b468edc198ee9a2c463ca919e0788383fc207be2024ba15495639fcc5c86755af58ea10d9202246800913e1bc701b9f913ff60f5a088f6ad683a3a3a50247110a130e35626174b7c408de3be600ba99a575697f7d754cceb8ec6a00d218d862735217c8fb275b1b1934ca0757c549909eb420a99c7124db3b4f6dd87b0a7c43a29e07363c365116f63f04ad378c60976a574e6cd0922c6ff67e3724343d2ec6fece3977cec9eb92561378d59cbb96177bfe9dd9939e71e2ff0badeb65a331dc5f6350bfaa30cc27c4d261df31c509cfff61f1f9235dd76c4f3686efdaf1243988bbf541dc52b09b0e8465fa3f5b7d119ac7534a7dc8b39cc1ba262d124c7c7fc9e47591cba997c943ba56dd1d74b03f75d84cb3f2c50da88742bb257b774a9b5e454a3be2cc0cab69e12a38eb0d522b291fbb45449ad68d34732795f328433d5c5d36b0639f7331c399f57254e6e7a5c9ac2dd705cd08dd123e55749bf60a932fd6979f7d04ec9af69a145aa68dc4f5931c6348ba43cbf43868963b9457dd81562f16ed12c63cfebbf62ebe597c38d57405c84bd3628fe61c6ce893eded4e0928f27fb4772c8100056020b45be26a952234f51e3408dfadfbca891aaa73ce0d6007e1fb50a220cc501dbb5eddd38418a8d5a4592be268cd8f7fcec599acd8c1cc05231414020198cabf67daa7d7ee341123d9569efd82f368645e3c7b6059087bb32f641e33473021a44ba40cfd626dfbf082f0a133cdf08448915c91f46c789721a70eef1cffbb5b0e9faef051e11273273a9d54430cca1b3934da84c394da2e843f30de74275ea9588369a45872fa1aad636a4ec116046c46bcc23d934432ec58884765ef7fcd40dccfe37c243e3a652794b7c4372a35e12086da131de3744e7d2d4c78dc9a4c0d5c5a42abaff76ec14c3e70e5a23113725f99c3c0909d42e8824b2abd482a53eefa98dea49886e37e8271fd39b3fb49fc7f7102dd2454dde739fdf0359f23e8d2c5c1e0dff4145cc190b17e6c757d6c0bbde626594a2726b6b00be08f7d096f0c841cf641fa4443190a71f3a63071f81701d3ac07c6aeed024aab98107a9fe916d149fae81187c507199cc3028026363bcf8fa1574ec9b1d14ca03d217d6b92c2f617d321abb46bda991ada6cb6894ee1d1fe7aa0249b69ce787916f004de1b4e71236425f1e53f9181debcf99200e908cf8595b610d83cee803f3f13e68a69bec323da46edd2ca0b390c7b0c6398071ffbf24b5ac6bf8c7fbf637773c0d294170b6971d775390c8409c271e75f69cecf24f24d7aeeed53cc07fc920068e3f4ad77d1febaa83666ff165940f7b6253c82447f34d4af3ba6ca0621eef2265ee1d400ca17809229e7ea5a82b84401836c5178f15638ad756a8bd88dd444a97439623a7c3fa2922fab3c7efbdf431f6325cbe527fae380037d3588bee9103740876847c62f9e626bc1120768efa0e0289bb39febe46ea62ef7dce904ed75335c7653f71e6d84db57728775a5dc1f8a3aeb0291bba18ffa6d7060fdad2eec6e5f53fe59bca6428e68ac9da7cf080482f8467facadaec47f0a60f2c0f5ece030d2229d44739283188ec43d6170d062e1d71ea2502fb5ceb36679ebb237eb980c1ee315bfaaf29d4bd922b3ba5cb7ca809aedcd4be5ee457c5f6790c33aa0e61eae0327429e96a5ede8f7f13f724b53266d504b6a4a1f820eeb22bf776dcf30678366095227fb5902d990de5ecde6262c5c40126aeaed356416786517a70b94de5d80b8abcb9d06201c46b6ba49738675bce6990bfe3cd03fd5182d77a9b9276d63522054b3cc837a7381ffb775f8ad0b714d06d94a9353e330430b1ff79e7ed4d90b517570cbd88302e0889e677162f2af68344a1d77b7bc021e329356254928e9376f2f880dabd43d768ad2e1536f5e667665d1f5b46ce17b6af7493fdf82a46c1f27c99785b05c44017a8f94087d16771df22cf5dad15cda5010ed9e924dce74aa14ca334161831f3103068c94a2215b00c5042a4b1738b5a7ab3cc14cbc989bd96ef0b00bd02aabf0e97f702432f707a6d2bce844b77e2ac788206e8621ed802c136f34810d64c8e65bbbf27a22c86e93620b9d82b2188f595031d631b6f8b0635b8bdcb2526e709a7227899e5afe9d1ca5bae9368bf373d85eb35c59dc6a7a6a5e6afab8e51696c42e86c8a16f4ca9f5969f99886bcf214d8811a6781efbfd554dc0e0cb357ddb2aad9dc83b9ff2312a7452dbb9695dfd9eb91662ac1ad72c0192a079b019d7673e8d2e72a944ac5ea52c971a7b8daf4172ff39cc018aafe5cebe2c018426d8b29d625028e0cfab301faf13ae063bdf4420fa8f7d093bd98cdb05008a8aa638df61c5b6b9be2c88b9873bc06bb33bcf03703eb03569030175596a71aa7cc97fe5534f6a44c5cfb4ef1b860c9f848ada9b9eb1df5c6065051994fb564f7b6d36425838f8f0d167f90c227c3325033463eea4a893a78a7641bb74431cfe3ade8b4b4303acf990c241e68dbf316a223ea1d6016dacc87fad0901c46f44519f2464eb7517c0febf7049bab5c4987a8cb7c039464b9c460908f2b2a347ce8ae28b455fffac5607cc946b3c1fb038be163f4be6303254a96d19ed82f9c63fffe1e975a4a448f289f921d7cdb50d90ed59fffeff84b636e79a06b7fe7f09d053adf60121412a7532691d0bececa7f8bf6577671bcdad69fe97b5a8b691952fdf86893ecfdcbf5200effbdb31b11522884236b84701f52bebf2e705c028a6c3ce179769358e53200394c77987eb2b5036176e44eadc9c7f49c77a3bc406d51d924fd0deec162e55d7d986ec131bb1e12120c837866335d79b4e9feca310ecaf84868653a4f1bb253859abd15280887d5815739422e67fc4e9a6395e2b457e6f4d4a5cda92cf70edd10b66a4afd4715789090d4f3c7395765720ad0065de25092987e170b695023e0678c1778624aee5414d0b1a9ea0317287bec554de979b9cfb0084afe66867bbe3045ba70a38a4bf767bd55d5df367a55c56539c422c1ff849d26096c31e1b7ed846d6a0ad851e9368bf6d174eb962d0ed41650a513abd88c3f4e34281c96b75a58e99e6c32ae460e938d476cd78e3220e2bc727dcd4618ee292199de6d43077c530af45baecbfc14f5bb6e8dc34c82f219e44ad4836073ce45ce020d25d3cc5601972ba4b731a8313ce2f24ffd6a5ab6f13a303b7281c4c6bc769a7995c19ff95b7d74963dee15862b05589c3e3a1e09e3b6b212abd0222fa219558e77240b49ab96b1879a1420de3c814e87954aedd5e46108039ab2ab0c2e64f5fa7756c9647bf29b932d2114a0c6debd0256f28b9b87cba8cfbd931ad202fc8465da25d2b134a00abd28dc8f5cf29b26ab14415302b900d6d7b797cf64e9ae0c0d265b46664cc901e5206c49a74f1a299ed0eba6177e1399953f543a985f404cd06eb0f7aad81aca12a11736baef330c982b42e04d2bf7c1cd0996ae442c2be792b167b6d2b3ff384dcea655ee8d2910922ad0b1801dbe89dc4b4cd037f356ce82a06b9fa884e9a3199e03ec6926bb40bee7fb72b5d15b2294be0a2ea09ad0ceef1bf38a68b6afee4c4cc4aa48ea28fa0a99e7805e28ccd97720a92bf7ffa199b182703a58555b4e30c561d384a5866702583f18a8c04e53f2f4ebed45db497010ea7aa86b6d522339bfb9c4be19b2dd5b2ed4d07e4e79bccda2f8195d092b180c1d0845103644e0d0d745689c293b3fb2cdd6746d15ca82be150fd06301c04452a2231f63b9244bd41ecc1060f5bea2d3467ec1b8701dd05fc771fee126672593eef3cb0da4968cfbe02da94e6810e937d486d973962e68b38b5be6e7c33931731fa7011093e6686458548e15018101c6c82cbc7c37edc35a0fcd2af21496954274e2be36ee87c8622d35825c2ec4cbb919cd7a73bfd48fb7c4778f2bb75be35d549f56cb9f6fc855430418c22ee23ca67e4e136c24282dbb9365b2d4698307684ea063d3681c2788421dbd21b26d2e5dfd0463543da030d19138301952a7938cd524951940ecf30b239d1d2a28ce996e7a443099a59e8e95bb83808134b32c721dcdce2bfbc310f9bbb87e446261c857463c1229c6e8578ca0fa740ab57ecab6d7d9201f03c7511cd335ed0de54f47d99d90f803c4c127e586cad93fc4eab9192910e33caa0cb0fe81dc11c5c0e3697b857a8f53d94d65498efbffac4bed76c45ca6380e13a0ec918f1ab7d882e9e446b472a9ba1169bd20fb27b977c40e8f28"}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:07 executing program 5: ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000100)=""/103, 0x67, 0x0, 0x9}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x7, 0x8, 0x0, 0x50e7, 0x2, 0x6, 0x7fff80, 0x154, 0x40, 0xf0, 0x2, 0x1, 0x38, 0x2, 0x2, 0x3, 0x20}, [{0x7, 0x2d6d, 0x5, 0x8001, 0x0, 0x81, 0xffffffffffffff06, 0x80000001}], "f27551a274009b714a61e7150795df4fa30048b78fbc9e032cb7457d697dd2a5a6c37e94abf9ad48539f290bab049e38f2e3bf57fb59c098a3bade36f5a3a0ce1e38674f6c4d4cf50124d14318c290a732662881977d360b3568d0ff50645e4f28eefafa662022602b841395b6410869d6c3dade8e7be785a82aa5048cb253dd2c4c9f04e865216203c3a0e17399117cf9dc17319ebf014283902181890204f7eebecb3b2b5267dfea9e9b4d6c2a32c8ae6e2984509738a1e7e24a819485b4aaca243c69cfff4734c6a41c1cb33542824f81f95d09ec7a5d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x950) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4c6e80ed}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xc100, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r1, 0x141000) r2 = dup3(r1, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) fcntl$addseals(r3, 0x409, 0xc) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xb4, 0x35, 0x9, 0xfa, 0x0, 0x2, 0x40402, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x4041, 0x10000, 0x7, 0x5, 0x1200000000000, 0x4, 0xfff, 0x0, 0x10000, 0x0, 0x1f}, 0xffffffffffffffff, 0x10, r0, 0xa) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000240)=0x1) 08:43:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x24e, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x4, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:07 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x3b, 0x20, 0x8, 0xd0, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x54, 0x4, @perf_config_ext={0xb000000000000000, 0x1}, 0x4000, 0x85, 0x5, 0x6, 0x8dfc, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x10, r0, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:07 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 71) 08:43:07 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xba, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2494.117049] FAULT_INJECTION: forcing a failure. [ 2494.117049] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.119553] CPU: 0 PID: 37007 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2494.121015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.122754] Call Trace: [ 2494.123332] dump_stack+0x107/0x167 [ 2494.124132] should_fail.cold+0x5/0xa [ 2494.124965] ? vm_area_dup+0x78/0x290 [ 2494.125785] should_failslab+0x5/0x20 [ 2494.126602] kmem_cache_alloc+0x5b/0x310 [ 2494.127499] vm_area_dup+0x78/0x290 [ 2494.128320] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2494.129411] ? mark_lock+0xf5/0x2df0 [ 2494.130223] ? tracing_generic_entry_update+0x1ed/0x270 [ 2494.131374] ? lock_chain_count+0x20/0x20 [ 2494.132252] ? perf_tp_event+0x5ce/0xc00 [ 2494.133128] ? perf_trace_lock+0x2bd/0x490 [ 2494.134082] ? perf_event_switch_output+0x7d0/0x7d0 [ 2494.135152] ? mark_lock+0xf5/0x2df0 [ 2494.135960] ? vm_area_alloc+0x110/0x110 [ 2494.136879] ? __lock_acquire+0x1657/0x5b00 [ 2494.137864] ? lock_acquire+0x197/0x470 [ 2494.138730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2494.139844] ? vmacache_find+0x55/0x2a0 [ 2494.140722] __split_vma+0xa8/0x4e0 [ 2494.141508] __do_munmap+0x365/0x1260 [ 2494.142337] ? arch_get_unmapped_area+0x450/0x450 [ 2494.143379] ? lock_release+0x680/0x680 [ 2494.144242] mmap_region+0x7cc/0x1500 [ 2494.145136] do_mmap+0x868/0x1370 [ 2494.145928] vm_mmap_pgoff+0x198/0x1f0 [ 2494.146786] ? randomize_page+0xb0/0xb0 [ 2494.147717] ksys_mmap_pgoff+0x41c/0x560 [ 2494.148599] ? find_mergeable_anon_vma+0x250/0x250 [ 2494.149650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2494.150746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2494.151852] do_syscall_64+0x33/0x40 [ 2494.152654] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2494.153725] RIP: 0033:0x7f12dae86b62 [ 2494.154509] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2494.158291] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2494.159868] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2494.161359] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2494.162842] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2494.164318] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2494.165806] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:43:07 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:43:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x40}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000140)="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") read(r0, &(0x7f00000000c0)=""/96, 0x60) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)="d4083318911e9714403c64949c540a6a057b9971ac16ffd1a187bf7f673df8fdd4f7f6d9952bf1a838a9e4d6abe5daf7295e1b7c73e8e9617eb902993ed8b288747653059d5a398831723e36e7") ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000001140)="e8655fae8618977ec5716fa2385d2f90b82dbf60897281353f5b38dc1e3a230c93b5d0169755d331b6d99746a47f3136dab4231619bdf3b0001814c600fa256024c83ca2db012861163b9943c2b9371b61b0befe9167844942446af6d0c76490f5630b5bbb273d56f5bc58722e062068402b1c466484a551581f5a9b2c8b273c7eb53cdecf393d16c938441ab06119d9b858fb0dea31") 08:43:07 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 72) 08:43:07 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x8, 0x0, 0x7ff, 0x0, 0x1, {0x0, r0}}, 0xd1f8) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:07 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:07 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2494.359689] FAULT_INJECTION: forcing a failure. [ 2494.359689] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.362057] CPU: 0 PID: 37314 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2494.363376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.364965] Call Trace: [ 2494.365492] dump_stack+0x107/0x167 [ 2494.366215] should_fail.cold+0x5/0xa [ 2494.366969] ? create_object.isra.0+0x3a/0xa30 [ 2494.367854] should_failslab+0x5/0x20 [ 2494.368601] kmem_cache_alloc+0x5b/0x310 [ 2494.369420] create_object.isra.0+0x3a/0xa30 [ 2494.370271] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2494.371274] kmem_cache_alloc+0x159/0x310 [ 2494.372117] vm_area_dup+0x78/0x290 [ 2494.372849] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2494.373820] ? mark_lock+0xf5/0x2df0 [ 2494.374547] ? tracing_generic_entry_update+0x1ed/0x270 [ 2494.375584] ? lock_chain_count+0x20/0x20 [ 2494.376384] ? perf_tp_event+0x5ce/0xc00 [ 2494.377164] ? perf_trace_lock+0x2bd/0x490 [ 2494.378024] ? perf_event_switch_output+0x7d0/0x7d0 [ 2494.379009] ? mark_lock+0xf5/0x2df0 [ 2494.379744] ? vm_area_alloc+0x110/0x110 [ 2494.380558] ? __lock_acquire+0x1657/0x5b00 [ 2494.381448] ? lock_acquire+0x197/0x470 [ 2494.382232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2494.383237] ? vmacache_find+0x55/0x2a0 [ 2494.384030] __split_vma+0xa8/0x4e0 [ 2494.384758] __do_munmap+0x365/0x1260 [ 2494.385510] ? arch_get_unmapped_area+0x450/0x450 [ 2494.386459] ? lock_release+0x680/0x680 [ 2494.387241] mmap_region+0x7cc/0x1500 [ 2494.388053] do_mmap+0x868/0x1370 [ 2494.388781] vm_mmap_pgoff+0x198/0x1f0 [ 2494.389576] ? randomize_page+0xb0/0xb0 [ 2494.390410] ksys_mmap_pgoff+0x41c/0x560 [ 2494.391202] ? find_mergeable_anon_vma+0x250/0x250 [ 2494.392159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2494.393173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2494.394177] do_syscall_64+0x33/0x40 [ 2494.394891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2494.395874] RIP: 0033:0x7f12dae86b62 [ 2494.396607] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2494.400056] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2494.401533] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2494.402891] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2494.404222] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2494.405559] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2494.406883] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:43:23 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x8, 0x8, 0xfe, 0x0, 0x3, 0x84000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x5, 0x7}, 0x482a, 0xb87, 0x8001, 0x8, 0xff, 0xa3d, 0xff, 0x0, 0x5, 0x0, 0x7fffffff}, 0x0, 0x3, r0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x300, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:23 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:43:23 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 73) 08:43:23 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10044001}, 0x0) syncfs(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10044001}, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000000)={0x8c, 0x1b32, 0x41f}) 08:43:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x5, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:23 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:23 executing program 3: removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00') r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2510.148889] FAULT_INJECTION: forcing a failure. [ 2510.148889] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.151868] CPU: 0 PID: 37445 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2510.153658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2510.155802] Call Trace: [ 2510.156529] dump_stack+0x107/0x167 [ 2510.157521] should_fail.cold+0x5/0xa [ 2510.158532] ? anon_vma_clone+0xdc/0x590 [ 2510.159604] should_failslab+0x5/0x20 [ 2510.160630] kmem_cache_alloc+0x5b/0x310 [ 2510.161661] anon_vma_clone+0xdc/0x590 [ 2510.162572] __split_vma+0x17c/0x4e0 [ 2510.163422] __do_munmap+0x365/0x1260 [ 2510.164272] ? arch_get_unmapped_area+0x450/0x450 [ 2510.165346] ? lock_release+0x680/0x680 [ 2510.166241] mmap_region+0x7cc/0x1500 [ 2510.167153] do_mmap+0x868/0x1370 [ 2510.167983] vm_mmap_pgoff+0x198/0x1f0 [ 2510.168884] ? randomize_page+0xb0/0xb0 [ 2510.169838] ksys_mmap_pgoff+0x41c/0x560 [ 2510.170747] ? find_mergeable_anon_vma+0x250/0x250 [ 2510.171839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2510.172988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2510.174149] do_syscall_64+0x33/0x40 [ 2510.174968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2510.176086] RIP: 0033:0x7f12dae86b62 [ 2510.176919] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2510.180887] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2510.182552] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2510.184096] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2510.185653] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2510.187196] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2510.188748] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:43:23 executing program 5: r0 = fork() ptrace(0x10, r0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4002840}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe59495c9bc02ffe2, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:23 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:43:23 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:43:23 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10044001}, 0x0) r6 = dup2(r2, r2) r7 = dup(r0) r8 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0xa76d, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x10044001}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=[@rights={{0x20, 0x1, 0x1, [r6, r2, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xffffffffffffffff}}}], 0x40, 0x4002840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x80, 0x40, 0x4, 0x20, 0x0, 0xfffffffffffffff7, 0x182, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x81, 0x0, @perf_config_ext={0x7, 0x738}, 0x42840, 0x1, 0x101, 0x5, 0xb369, 0x8, 0x8, 0x0, 0x6, 0x0, 0x1}, r1, 0x7, r13, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:23 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="8e44c5ac"]) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'nr0\x00', 0x4}) 08:43:23 executing program 5: r0 = fork() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4002840}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18001}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:39 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:43:39 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:43:39 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) fcntl$dupfd(r0, 0x406, r0) r1 = getpgid(0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x0) syz_io_uring_setup(0x41f9, &(0x7f0000000200)={0x0, 0x35c, 0x10, 0x0, 0xd4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040, 0x0, {0x0, r4}}, 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r4}}, 0x80) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0) read$snapshot(r5, &(0x7f0000000080)=""/177, 0xb1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x20, 0x3, 0x8, 0x0, 0x200, 0x8042, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x6270149306ee7d5c}, 0x40000, 0x7fffffff, 0xfffffbff, 0x5, 0x1, 0x0, 0x4334, 0x0, 0x1, 0x0, 0xffffffffffffffe1}, r1, 0x2, r5, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:39 executing program 3: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0x97b1, 0x5, 0x2}}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="6659b57ef75b0ad499cd8dba51e55b60807bb04d4138acf9f25fecd2be275ffda810f412985fc810d3e4b2dd056b366bc7862aec74c328ffc76b85ffc114ec5ddcd7cfd417fb54d4e108589b9d7ad1") perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') setns(r0, 0x0) 08:43:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x500, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:39 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 74) 08:43:39 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0xfffffffffffffeb8, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1f, 0x7, 0x81, 0x5, 0x0, 0x3f, 0x80080, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0x3010, 0x2, 0x1, 0x8, 0x8, 0x1f, 0x1f, 0x0, 0x6, 0x0, 0x80}, 0xffffffffffffffff, 0x7, r0, 0x1) 08:43:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x6, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2525.809098] FAULT_INJECTION: forcing a failure. [ 2525.809098] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.810483] CPU: 1 PID: 38100 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2525.811301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2525.812285] Call Trace: [ 2525.812612] dump_stack+0x107/0x167 [ 2525.813069] should_fail.cold+0x5/0xa [ 2525.813521] ? create_object.isra.0+0x3a/0xa30 [ 2525.814058] should_failslab+0x5/0x20 [ 2525.814511] kmem_cache_alloc+0x5b/0x310 [ 2525.815002] create_object.isra.0+0x3a/0xa30 [ 2525.815517] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2525.816123] kmem_cache_alloc+0x159/0x310 [ 2525.816614] anon_vma_clone+0xdc/0x590 [ 2525.817092] __split_vma+0x17c/0x4e0 [ 2525.817527] __do_munmap+0x365/0x1260 [ 2525.817976] ? arch_get_unmapped_area+0x450/0x450 [ 2525.818536] ? lock_release+0x680/0x680 [ 2525.819001] mmap_region+0x7cc/0x1500 [ 2525.819455] do_mmap+0x868/0x1370 [ 2525.819855] vm_mmap_pgoff+0x198/0x1f0 [ 2525.820309] ? randomize_page+0xb0/0xb0 [ 2525.820789] ksys_mmap_pgoff+0x41c/0x560 [ 2525.821265] ? find_mergeable_anon_vma+0x250/0x250 [ 2525.821849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2525.822472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2525.823072] do_syscall_64+0x33/0x40 [ 2525.823507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2525.824105] RIP: 0033:0x7f12dae86b62 [ 2525.824547] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2525.826733] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2525.826844] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2525.826851] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2525.826858] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2525.826864] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2525.826871] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:43:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x7, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:39 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/177, 0xb1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000100)={0x81, 0x3, 0x1, 0xe426, 0xc9}) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r2 = fork() ptrace(0x10, r2) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x4002840}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x81, 0x2, 0x1e, 0x1, 0x0, 0x6b6, 0x80021, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x5c0, 0xed1, 0x7, 0x3, 0x4, 0x675844cd, 0x421, 0x0, 0x80000001, 0x0, 0x8e}, r2, 0xffffffffffffffff, r1, 0x0) 08:43:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x600, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:39 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:43:39 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 75) 08:43:39 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:43:39 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82482, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r1) [ 2526.016054] FAULT_INJECTION: forcing a failure. [ 2526.016054] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.017446] CPU: 1 PID: 38412 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2526.018241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.019193] Call Trace: [ 2526.019504] dump_stack+0x107/0x167 [ 2526.019926] should_fail.cold+0x5/0xa [ 2526.020374] ? anon_vma_clone+0xdc/0x590 [ 2526.020851] should_failslab+0x5/0x20 [ 2526.021293] kmem_cache_alloc+0x5b/0x310 [ 2526.021775] anon_vma_clone+0xdc/0x590 [ 2526.022229] __split_vma+0x17c/0x4e0 [ 2526.022659] __do_munmap+0x365/0x1260 [ 2526.023101] ? arch_get_unmapped_area+0x450/0x450 [ 2526.023664] ? lock_release+0x680/0x680 [ 2526.024124] mmap_region+0x7cc/0x1500 [ 2526.024575] do_mmap+0x868/0x1370 [ 2526.024997] vm_mmap_pgoff+0x198/0x1f0 [ 2526.025452] ? randomize_page+0xb0/0xb0 [ 2526.025920] ksys_mmap_pgoff+0x41c/0x560 [ 2526.026390] ? find_mergeable_anon_vma+0x250/0x250 [ 2526.026958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.027564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.028164] do_syscall_64+0x33/0x40 [ 2526.028595] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2526.029194] RIP: 0033:0x7f12dae86b62 [ 2526.029623] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2526.031753] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2526.032630] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2526.033458] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2526.034278] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2526.035106] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2526.035931] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:43:39 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40400, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/net\x00') 08:43:39 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:43:39 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:43:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 76) 08:43:54 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x72, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x185, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x5, 0x101, 0x0, 0x6}, 0x7ff) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0) read$snapshot(r5, &(0x7f0000000080)=""/177, 0xb1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x5, 0xfc, 0x0, 0x6, 0x0, 0xa8d, 0x480, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x401, 0x8}, 0x6b2a84cf09f99fbb, 0x5, 0xfff, 0x0, 0x4, 0x800, 0x5, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r5, 0xb) r6 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10044001}, 0x0) dup2(r0, r6) 08:43:54 executing program 3: syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10044001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x700, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:43:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x8, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:54 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 08:43:54 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@generic, &(0x7f0000000140)=0x80) fstat(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x20010, 0xffffffffffffffff, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r6, &(0x7f0000000280)=0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x0, 0x800}, 0x5) chown(&(0x7f00000002c0)='./file0\x00', 0x0, r3) sendmsg$netlink(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000014c0)=ANY=[@ANYRESOCT], 0x10}, {&(0x7f0000003800)={0x1360, 0x33, 0x800, 0x70bd29, 0x25dfdbff, "", [@generic="0e7e024ba3524628a5e10f3048ef865ff71266cdcbb92c746827faed302e59c9de73138ce63ea92fe3aa3848d53c0d78993f913e5c3b403b6d241628df2253358b924de9bea4ed85a90751e4daf907c868a8fb7f680b7b73fa69aa62a1da993d14964f85491afa64c9c04c5bdfcbe72a93c9b7fa3aa150804709a3434344913456486db95df90a559f25f552b690be2b2d9e49afedd0efdcb0540ab7803edc3bd5103c24195c0918f99b90d588be13f91b4969534a12ae391c7b85a73d8ad87717e0648ae0ab176a5a6369ef9fbc1c5db841dbc1c702568083352205cae180cb5640a5d7a0d73e6dcdf7", @nested={0x125c, 0x21, 0x0, 0x1, [@generic="27a54223519bdb57c31f7a135494a0ec2cd464bc2d642b4bd57190661a27d5c25b3a665e546f0b04cf503ebf8c2d60549fbd11689ce412dd0232a4a3f7dc241a292c14925b977193ff0c0fbd1d7fabdb7956e786c70942d7abfa019692c01163043c7b08a33f7103369c830f2333b2854daa68d739a875218535e2c0e7bbf36b8efa601bf95be5b0ed0614fee4650f32fc0f6c3fc7b26987b428e96e354c2257c5b4e972936d49dabb7012447b1d07930cb18541be2e92cc0f866a44a3eb3e2915d640940ca5860e186b03e7ee5f8bf4c27f08e80328ba8414e94d5b7288e99e42", @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@loopback}, @generic="3efd36f519fdacec27e165b4c9bc711f4d8c65df5f3dc3da34eebf378cee9db4c4cb7e848785bdd5b72ba907e9417d8874c28389fa309566442b36ae5b3cf5cea6e024", @generic="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", @typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@empty}, @generic="346ad409e8f6dd2a578bdf0fbecd0e7d0e6d88590732120f87d241a06588312b0c1a466a0b3d6038f8d319310f073fa8d3f7ea531e2b6523ae67687b1b174fedc9119195e971c0bc1edacda2199bb279aa31d18491a6df14267043718e189414e47a455d2628c7b91139d9cf8a640d143ff9dc7e7607589c88733d603e2b38d9c160093b4c6a74872e06e8eb9e029c82e96d2c3e30040ca5ab7eae399b9adb91dd4324fe5f6501aecd905bb6b294cbb670e74be4ba962ebe4d940f48b3d7ca6593cf2e784da7ebdfdc1a758b6540a6", @generic="11186960d6d24bfbac0aedbff3025f53a71a6e2f280a43e82f020d2436db27376f5619f8f5afad6ea19435fae0951f3e07beddb04b3fd86bfbcd05039e6172d5d5d24bd325d4672d5b"]}, @nested={0x4, 0x1a, 0x0, 0x1, [@generic]}, @typed={0x4, 0x56}]}, 0x1360}], 0x2, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, r3}}}], 0x40, 0x4002840}, 0x20000001) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) read$snapshot(r7, &(0x7f0000000080)=""/177, 0xb1) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1f, 0x1, 0x0, 0x7b, 0x0, 0x97f, 0x100, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x444, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x1060, 0xa299, 0xd, 0x0, 0xcec3, 0x2a, 0x81, 0x0, 0x9}, r0, 0x9, r7, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2541.120938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38741 comm=syz-executor.3 [ 2541.129161] FAULT_INJECTION: forcing a failure. [ 2541.129161] name failslab, interval 1, probability 0, space 0, times 0 [ 2541.131845] CPU: 0 PID: 38747 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2541.133338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.135111] Call Trace: [ 2541.135703] dump_stack+0x107/0x167 [ 2541.136521] should_fail.cold+0x5/0xa [ 2541.137380] ? create_object.isra.0+0x3a/0xa30 [ 2541.138388] should_failslab+0x5/0x20 [ 2541.139223] kmem_cache_alloc+0x5b/0x310 [ 2541.140151] create_object.isra.0+0x3a/0xa30 [ 2541.141121] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2541.142281] kmem_cache_alloc+0x159/0x310 [ 2541.143270] vm_area_alloc+0x1c/0x110 [ 2541.143304] mmap_region+0x982/0x1500 [ 2541.143426] do_mmap+0x868/0x1370 [ 2541.143515] vm_mmap_pgoff+0x198/0x1f0 [ 2541.143585] ? randomize_page+0xb0/0xb0 [ 2541.143708] ksys_mmap_pgoff+0x41c/0x560 [ 2541.143757] ? find_mergeable_anon_vma+0x250/0x250 [ 2541.143814] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2541.143846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2541.143908] do_syscall_64+0x33/0x40 [ 2541.143942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2541.143963] RIP: 0033:0x7f12dae86b62 [ 2541.143990] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2541.144008] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 08:43:54 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) [ 2541.144042] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 08:43:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2541.144060] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 08:43:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (fail_nth: 77) [ 2541.144078] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2541.144096] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2541.144114] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 08:43:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x900, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 2541.378076] FAULT_INJECTION: forcing a failure. [ 2541.378076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2541.380823] CPU: 1 PID: 39000 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2541.382300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.384065] Call Trace: [ 2541.384627] dump_stack+0x107/0x167 [ 2541.385414] should_fail.cold+0x5/0xa [ 2541.386237] __alloc_pages_nodemask+0x182/0x600 [ 2541.387233] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2541.388515] ? walk_mem_res+0x170/0x170 [ 2541.389380] alloc_pages_current+0x187/0x280 [ 2541.390312] pte_alloc_one+0x16/0x1a0 [ 2541.391119] __pte_alloc+0x1d/0x330 [ 2541.391894] remap_pfn_range_internal+0x9a3/0xf60 [ 2541.392937] ? lookup_memtype+0x5b/0x200 [ 2541.393813] ? apply_to_existing_page_range+0x40/0x40 [ 2541.394919] remap_pfn_range+0xcd/0x160 [ 2541.395760] ? remap_pfn_range_notrack+0x70/0x70 [ 2541.396773] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2541.397881] io_uring_mmap+0x398/0x530 [ 2541.398708] mmap_file+0x5e/0xe0 [ 2541.399428] mmap_region+0xc4d/0x1500 [ 2541.400254] do_mmap+0x868/0x1370 [ 2541.401005] vm_mmap_pgoff+0x198/0x1f0 [ 2541.401875] ? randomize_page+0xb0/0xb0 [ 2541.402728] ksys_mmap_pgoff+0x41c/0x560 [ 2541.403602] ? find_mergeable_anon_vma+0x250/0x250 [ 2541.404644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2541.405763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2541.406851] do_syscall_64+0x33/0x40 [ 2541.407635] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2541.408723] RIP: 0033:0x7f12dae86b62 [ 2541.409513] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2541.413381] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2541.414977] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2541.416479] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2541.417998] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2541.419499] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2541.421004] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2541.445556] ------------[ cut here ]------------ [ 2541.447073] WARNING: CPU: 0 PID: 39000 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2541.449267] Modules linked in: [ 2541.450086] CPU: 0 PID: 39000 Comm: syz-executor.7 Not tainted 5.10.259 #1 [ 2541.451822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.453938] RIP: 0010:get_pat_info+0x216/0x270 [ 2541.455133] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 e1 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 ca 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 75 b0 5a 00 e9 [ 2541.459647] RSP: 0018:ffff888051ca7890 EFLAGS: 00010212 [ 2541.461041] RAX: 000000000001504d RBX: ffff888051fcd000 RCX: ffffc900025a2000 [ 2541.462844] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 2541.464651] RBP: ffff888051ca7948 R08: 0000000000000000 R09: ffff888051ca7818 [ 2541.472065] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2541.473882] R13: 1ffff1100a394f12 R14: 0000000000000000 R15: ffff888051fcd050 [ 2541.475674] FS: 00007f12d83fc700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2541.477724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2541.479255] CR2: 00007fc3136c26f4 CR3: 00000000158fe000 CR4: 0000000000350ef0 [ 2541.481052] Call Trace: [ 2541.481793] ? pgprot_writethrough+0xc0/0xc0 [ 2541.482950] ? finish_task_switch+0x126/0x5d0 [ 2541.484122] ? finish_task_switch+0xef/0x5d0 [ 2541.485341] untrack_pfn+0xdc/0x240 [ 2541.486326] ? track_pfn_insert+0x150/0x150 [ 2541.487474] ? lock_downgrade+0x6d0/0x6d0 [ 2541.488556] ? uprobe_munmap+0x1c/0x670 [ 2541.489670] unmap_single_vma+0x1bc/0x300 [ 2541.490802] zap_page_range_single+0x2ce/0x450 [ 2541.492002] ? unmap_single_vma+0x300/0x300 [ 2541.493132] ? remap_pfn_range_internal+0xc56/0xf60 [ 2541.494465] ? lookup_memtype+0x5b/0x200 [ 2541.495656] ? apply_to_existing_page_range+0x40/0x40 [ 2541.497075] remap_pfn_range+0x139/0x160 08:43:54 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') [ 2541.498162] ? remap_pfn_range_notrack+0x70/0x70 [ 2541.499707] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2541.501109] io_uring_mmap+0x398/0x530 [ 2541.502178] mmap_file+0x5e/0xe0 [ 2541.503078] mmap_region+0xc4d/0x1500 [ 2541.504181] do_mmap+0x868/0x1370 [ 2541.505182] vm_mmap_pgoff+0x198/0x1f0 [ 2541.506299] ? randomize_page+0xb0/0xb0 [ 2541.507434] ksys_mmap_pgoff+0x41c/0x560 [ 2541.508519] ? find_mergeable_anon_vma+0x250/0x250 [ 2541.509830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2541.511176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2541.512576] do_syscall_64+0x33/0x40 [ 2541.513571] entry_SYSCALL_64_after_hwframe+0x67/0xd1 08:43:54 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) [ 2541.514886] RIP: 0033:0x7f12dae86b62 [ 2541.515997] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2541.520440] RSP: 002b:00007f12d83fc0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2541.522354] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f12dae86b62 [ 2541.524149] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 2541.525949] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 2541.527761] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 2541.529596] R13: 0000000020ffc000 R14: 00000000200000c0 R15: 00000000200a0000 [ 2541.531505] irq event stamp: 1413 [ 2541.532463] hardirqs last enabled at (1423): [] console_unlock+0x92d/0xb40 [ 2541.534520] hardirqs last disabled at (1432): [] console_unlock+0x839/0xb40 [ 2541.536445] softirqs last enabled at (864): [] asm_call_irq_on_stack+0x12/0x20 [ 2541.538431] softirqs last disabled at (813): [] asm_call_irq_on_stack+0x12/0x20 [ 2541.540415] ---[ end trace 324ca3a04a324d6a ]--- 08:43:54 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x280000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xc, 0x9b, 0xff, 0x0, 0x7, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x40008, 0x6, 0x1fd574a1, 0x8, 0x4, 0x6, 0x4, 0x0, 0x0, 0x0, 0x8}, r2, 0xd, r3, 0xa) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/177, 0xb1) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 08:43:54 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:43:54 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40010, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 08:43:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x9, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:55 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:43:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0xa00, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}]}, 0x13c}}, 0x0) 08:43:55 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10044001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f0000000200)=""/172, 0xac}, {&(0x7f00000002c0)=""/113, 0xd3}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000340)=""/81, 0x51}, {&(0x7f0000000600)=""/61, 0x3d}], 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002800210000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32], 0x48}, 0x2102) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) syz_open_procfs$namespace(r7, &(0x7f00000006c0)='ns/uts\x00') io_uring_enter(r1, 0x4c83, 0x2b2f, 0x1, &(0x7f00000003c0), 0x8) syz_open_procfs$namespace(r6, &(0x7f00000005c0)='ns/cgroup\x00') 08:43:55 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) VM DIAGNOSIS: 08:43:54 Registers: info registers vcpu 0 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e9ea1 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff888051ca72a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000063 R13=0000000000000063 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e9ef8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f12d83fc700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc3136c26f4 CR3=00000000158fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000004 RCX=1ffffffff0d13d8a RDX=0000000000000002 RSI=ffff88800bf8d8a8 RDI=ffff88800bf8d8ca RBP=ffff88800bf8cec0 RSP=ffff88803f52f670 R8 =0000000000000000 R9 =ffffffff86873717 R10=fffffbfff0d0e6e2 R11=0000000000000001 R12=0000000000000002 R13=dffffc0000000000 R14=ffff88800bf8d808 R15=00000000fffffd78 RIP=ffffffff8126f4c8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556c7fb400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f04f7e693a4 CR3=000000003f5ae000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000