0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:21:27 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 9) 02:21:27 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 3) [ 952.207991] FAULT_INJECTION: forcing a failure. [ 952.207991] name failslab, interval 1, probability 0, space 0, times 0 [ 952.210595] CPU: 0 PID: 6921 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 952.212051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.213822] Call Trace: [ 952.214388] dump_stack+0x107/0x167 [ 952.215164] should_fail.cold+0x5/0xa [ 952.215974] ? create_object.isra.0+0x3a/0xa30 [ 952.216955] should_failslab+0x5/0x20 [ 952.217774] kmem_cache_alloc+0x5b/0x310 [ 952.218649] create_object.isra.0+0x3a/0xa30 [ 952.219579] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 952.220671] kmem_cache_alloc_trace+0x151/0x320 [ 952.221663] io_uring_setup+0x258/0x2980 [ 952.222533] ? __mutex_unlock_slowpath+0xe1/0x600 [ 952.223571] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 952.224658] ? wait_for_completion_io+0x270/0x270 [ 952.225714] do_syscall_64+0x33/0x40 [ 952.226504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.227596] RIP: 0033:0x7f2e49e79b19 [ 952.228394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.232321] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 952.233962] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 952.235470] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 952.237002] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 952.238519] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 952.240038] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 952.250009] FAULT_INJECTION: forcing a failure. [ 952.250009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.252931] CPU: 0 PID: 6922 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 952.254398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.256162] Call Trace: [ 952.256746] dump_stack+0x107/0x167 02:21:27 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:21:27 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 952.257525] should_fail.cold+0x5/0xa [ 952.258576] _copy_to_user+0x2e/0x180 [ 952.259407] simple_read_from_buffer+0xcc/0x160 [ 952.260430] proc_fail_nth_read+0x198/0x230 [ 952.261359] ? proc_sessionid_read+0x230/0x230 [ 952.262338] ? security_file_permission+0xb1/0xe0 [ 952.263382] ? proc_sessionid_read+0x230/0x230 [ 952.264371] vfs_read+0x228/0x620 [ 952.265132] ksys_read+0x12d/0x260 [ 952.265890] ? vfs_write+0xb10/0xb10 [ 952.266701] do_syscall_64+0x33/0x40 [ 952.267501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.268626] RIP: 0033:0x7f8a6d68c69c [ 952.269422] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 952.273375] RSP: 002b:00007f8a6ac4f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 952.275020] RAX: ffffffffffffffda RBX: 0000000020ffd000 RCX: 00007f8a6d68c69c [ 952.276565] RDX: 000000000000000f RSI: 00007f8a6ac4f1e0 RDI: 0000000000000004 [ 952.278108] RBP: 00007f8a6ac4f1d0 R08: 0000000000000000 R09: 0000000008000000 [ 952.279642] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 952.281200] R13: 00007fff60b1303f R14: 00007f8a6ac4f300 R15: 0000000000022000 02:21:27 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 02:21:27 executing program 7: r0 = syz_io_uring_setup(0x3872, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:21:27 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) (fail_nth: 7) [ 952.410176] FAULT_INJECTION: forcing a failure. [ 952.410176] name failslab, interval 1, probability 0, space 0, times 0 [ 952.412665] CPU: 0 PID: 6934 Comm: syz-executor.1 Not tainted 5.10.260 #1 [ 952.414136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.415925] Call Trace: [ 952.416507] dump_stack+0x107/0x167 [ 952.417286] should_fail.cold+0x5/0xa [ 952.418105] ? create_object.isra.0+0x3a/0xa30 [ 952.419089] should_failslab+0x5/0x20 [ 952.419912] kmem_cache_alloc+0x5b/0x310 [ 952.420799] create_object.isra.0+0x3a/0xa30 [ 952.421740] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 952.422837] kmem_cache_alloc+0x159/0x310 02:21:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 952.423738] vm_area_alloc+0x1c/0x110 [ 952.424792] mmap_region+0x982/0x1500 [ 952.425633] do_mmap+0x868/0x1370 [ 952.426394] vm_mmap_pgoff+0x198/0x1f0 [ 952.427239] ? randomize_page+0xb0/0xb0 [ 952.428115] ksys_mmap_pgoff+0x41c/0x560 [ 952.429003] ? find_mergeable_anon_vma+0x250/0x250 [ 952.430092] do_syscall_64+0x33/0x40 [ 952.430902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.432026] RIP: 0033:0x7f6f9ce84b19 [ 952.432843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.436874] RSP: 002b:00007f6f9a3fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 952.438527] RAX: ffffffffffffffda RBX: 00007f6f9cf97f60 RCX: 00007f6f9ce84b19 [ 952.440077] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020000000 [ 952.441655] RBP: 00007f6f9a3fa1d0 R08: 0000000000000004 R09: 0000000000000000 [ 952.443224] R10: 000000000001f012 R11: 0000000000000246 R12: 0000000000000001 [ 952.444792] R13: 00007ffd263945ff R14: 00007f6f9a3fa300 R15: 0000000000022000 02:21:28 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:21:28 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:21:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 4) 02:21:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 02:21:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 02:21:41 executing program 7: r0 = syz_io_uring_setup(0x3872, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:21:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:21:41 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) (fail_nth: 8) 02:21:41 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:21:41 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0xd, 0x13, r0, 0x8000000) [ 965.807115] FAULT_INJECTION: forcing a failure. [ 965.807115] name failslab, interval 1, probability 0, space 0, times 0 [ 965.808663] CPU: 1 PID: 6948 Comm: syz-executor.1 Not tainted 5.10.260 #1 [ 965.809614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 965.810767] Call Trace: [ 965.811076] dump_stack+0x107/0x167 [ 965.811499] should_fail.cold+0x5/0xa [ 965.811940] ? jbd2__journal_start+0x190/0x7e0 [ 965.812480] should_failslab+0x5/0x20 [ 965.812918] kmem_cache_alloc+0x5b/0x310 [ 965.813393] jbd2__journal_start+0x190/0x7e0 [ 965.813909] __ext4_journal_start_sb+0x214/0x390 [ 965.814462] ext4_dirty_inode+0xbc/0x130 [ 965.814932] ? ext4_setattr+0x22f0/0x22f0 [ 965.815417] __mark_inode_dirty+0x492/0xd30 [ 965.815921] touch_atime+0x5ea/0x6e0 [ 965.816354] ? atime_needs_update+0x600/0x600 [ 965.816890] ext4_file_mmap+0x1d5/0x250 [ 965.817349] mmap_file+0x5e/0xe0 [ 965.817744] mmap_region+0xc4d/0x1500 [ 965.818190] do_mmap+0x868/0x1370 [ 965.818596] vm_mmap_pgoff+0x198/0x1f0 [ 965.819045] ? randomize_page+0xb0/0xb0 [ 965.819517] ksys_mmap_pgoff+0x41c/0x560 [ 965.819983] ? find_mergeable_anon_vma+0x250/0x250 [ 965.820562] do_syscall_64+0x33/0x40 [ 965.820994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 965.821584] RIP: 0033:0x7f6f9ce84b19 [ 965.822012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.824127] RSP: 002b:00007f6f9a3fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 965.825012] RAX: ffffffffffffffda RBX: 00007f6f9cf97f60 RCX: 00007f6f9ce84b19 [ 965.825829] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020000000 [ 965.826651] RBP: 00007f6f9a3fa1d0 R08: 0000000000000004 R09: 0000000000000000 [ 965.827472] R10: 000000000001f012 R11: 0000000000000246 R12: 0000000000000001 [ 965.828290] R13: 00007ffd263945ff R14: 00007f6f9a3fa300 R15: 0000000000022000 [ 965.833465] FAULT_INJECTION: forcing a failure. [ 965.833465] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 965.836146] CPU: 0 PID: 6956 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 965.837623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 965.839337] Call Trace: [ 965.839890] dump_stack+0x107/0x167 [ 965.840663] should_fail.cold+0x5/0xa [ 965.841472] __alloc_pages_nodemask+0x182/0x600 [ 965.842435] ? lock_release+0x680/0x680 [ 965.843266] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 965.844559] ? lock_downgrade+0x6d0/0x6d0 [ 965.845456] alloc_pages_current+0x187/0x280 [ 965.846383] kmalloc_order+0x35/0x160 [ 965.847188] kmalloc_order_trace+0x14/0xa0 [ 965.848084] io_uring_setup+0x33c/0x2980 [ 965.848950] ? __mutex_unlock_slowpath+0xe1/0x600 [ 965.849978] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 965.851040] ? wait_for_completion_io+0x270/0x270 [ 965.852094] do_syscall_64+0x33/0x40 [ 965.852897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 965.853981] RIP: 0033:0x7f2e49e79b19 [ 965.854765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.858667] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 965.860288] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 965.861798] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 965.863301] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 965.864819] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 965.866328] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:21:41 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2003, 0xd, 0x13, r0, 0x8000000) 02:21:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 02:21:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 02:21:41 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) (fail_nth: 9) [ 965.938045] FAULT_INJECTION: forcing a failure. [ 965.938045] name failslab, interval 1, probability 0, space 0, times 0 [ 965.939434] CPU: 1 PID: 6968 Comm: syz-executor.1 Not tainted 5.10.260 #1 [ 965.940218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 965.941173] Call Trace: [ 965.941481] dump_stack+0x107/0x167 [ 965.941904] should_fail.cold+0x5/0xa [ 965.942347] ? create_object.isra.0+0x3a/0xa30 [ 965.942869] should_failslab+0x5/0x20 [ 965.943305] kmem_cache_alloc+0x5b/0x310 [ 965.943776] create_object.isra.0+0x3a/0xa30 [ 965.944276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 965.944864] kmem_cache_alloc+0x159/0x310 [ 965.945343] jbd2__journal_start+0x190/0x7e0 [ 965.945848] __ext4_journal_start_sb+0x214/0x390 [ 965.946388] ext4_dirty_inode+0xbc/0x130 [ 965.946847] ? ext4_setattr+0x22f0/0x22f0 [ 965.947321] __mark_inode_dirty+0x492/0xd30 [ 965.947816] touch_atime+0x5ea/0x6e0 [ 965.948237] ? atime_needs_update+0x600/0x600 [ 965.948771] ext4_file_mmap+0x1d5/0x250 [ 965.949221] mmap_file+0x5e/0xe0 [ 965.949608] mmap_region+0xc4d/0x1500 [ 965.950049] do_mmap+0x868/0x1370 [ 965.950446] vm_mmap_pgoff+0x198/0x1f0 [ 965.950896] ? randomize_page+0xb0/0xb0 [ 965.951357] ksys_mmap_pgoff+0x41c/0x560 [ 965.951822] ? find_mergeable_anon_vma+0x250/0x250 [ 965.952389] do_syscall_64+0x33/0x40 [ 965.952819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 965.953399] RIP: 0033:0x7f6f9ce84b19 [ 965.953824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.955907] RSP: 002b:00007f6f9a3fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 965.956783] RAX: ffffffffffffffda RBX: 00007f6f9cf97f60 RCX: 00007f6f9ce84b19 [ 965.957591] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020000000 [ 965.958405] RBP: 00007f6f9a3fa1d0 R08: 0000000000000004 R09: 0000000000000000 [ 965.959210] R10: 000000000001f012 R11: 0000000000000246 R12: 0000000000000001 [ 965.960016] R13: 00007ffd263945ff R14: 00007f6f9a3fa300 R15: 0000000000022000 02:21:41 executing program 7: r0 = syz_io_uring_setup(0x3872, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:21:56 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 5) 02:21:56 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:21:56 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:21:56 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2004, 0xd, 0x13, r0, 0x8000000) 02:21:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 02:21:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 02:21:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) (fail_nth: 10) 02:21:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 980.983777] FAULT_INJECTION: forcing a failure. [ 980.983777] name failslab, interval 1, probability 0, space 0, times 0 [ 980.986248] CPU: 1 PID: 6992 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 980.987679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 980.989415] Call Trace: [ 980.989965] dump_stack+0x107/0x167 [ 980.990740] should_fail.cold+0x5/0xa [ 980.991541] ? create_object.isra.0+0x3a/0xa30 [ 980.992491] should_failslab+0x5/0x20 [ 980.993308] kmem_cache_alloc+0x5b/0x310 [ 980.994159] create_object.isra.0+0x3a/0xa30 [ 980.995076] ? kasan_unpoison_shadow+0x33/0x50 [ 980.996026] kmalloc_order+0xfe/0x160 [ 980.996841] kmalloc_order_trace+0x14/0xa0 [ 980.997735] io_uring_setup+0x33c/0x2980 [ 980.998597] ? __mutex_unlock_slowpath+0xe1/0x600 [ 980.999607] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 981.000679] ? wait_for_completion_io+0x270/0x270 [ 981.001713] do_syscall_64+0x33/0x40 [ 981.002490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 981.003562] RIP: 0033:0x7f2e49e79b19 [ 981.004339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 981.008328] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 981.009931] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 981.011428] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 981.012934] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 981.014426] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 981.015914] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 981.032023] FAULT_INJECTION: forcing a failure. [ 981.032023] name failslab, interval 1, probability 0, space 0, times 0 [ 981.034653] CPU: 0 PID: 6991 Comm: syz-executor.1 Not tainted 5.10.260 #1 [ 981.036119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 981.037919] Call Trace: [ 981.038489] dump_stack+0x107/0x167 [ 981.039279] should_fail.cold+0x5/0xa [ 981.040099] ? perf_event_mmap+0x51a/0xd90 [ 981.041011] should_failslab+0x5/0x20 [ 981.041829] kmem_cache_alloc_trace+0x55/0x320 [ 981.042833] ? lock_downgrade+0x6d0/0x6d0 [ 981.043748] perf_event_mmap+0x51a/0xd90 [ 981.044656] ? perf_event_namespaces+0x50/0x50 [ 981.045659] ? vma_link+0x619/0x820 [ 981.046463] mmap_region+0x3a6/0x1500 [ 981.047312] do_mmap+0x868/0x1370 [ 981.048084] vm_mmap_pgoff+0x198/0x1f0 [ 981.048973] ? randomize_page+0xb0/0xb0 [ 981.049862] ksys_mmap_pgoff+0x41c/0x560 [ 981.050753] ? find_mergeable_anon_vma+0x250/0x250 [ 981.051847] do_syscall_64+0x33/0x40 [ 981.052673] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 981.053801] RIP: 0033:0x7f6f9ce84b19 [ 981.054613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 981.058658] RSP: 002b:00007f6f9a3fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 981.060326] RAX: ffffffffffffffda RBX: 00007f6f9cf97f60 RCX: 00007f6f9ce84b19 [ 981.061896] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020000000 [ 981.063459] RBP: 00007f6f9a3fa1d0 R08: 0000000000000004 R09: 0000000000000000 [ 981.065031] R10: 000000000001f012 R11: 0000000000000246 R12: 0000000000000002 [ 981.066591] R13: 00007ffd263945ff R14: 00007f6f9a3fa300 R15: 0000000000022000 02:21:56 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:21:56 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:21:56 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2005, 0xd, 0x13, r0, 0x8000000) 02:21:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 02:21:56 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 6) 02:21:56 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:21:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) 02:21:56 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 981.215474] FAULT_INJECTION: forcing a failure. [ 981.215474] name failslab, interval 1, probability 0, space 0, times 0 [ 981.217912] CPU: 1 PID: 7004 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 981.219347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 981.221085] Call Trace: [ 981.221644] dump_stack+0x107/0x167 [ 981.222414] should_fail.cold+0x5/0xa [ 981.223223] ? io_uring_setup+0x40b/0x2980 [ 981.224110] should_failslab+0x5/0x20 [ 981.224917] kmem_cache_alloc_trace+0x55/0x320 [ 981.225876] io_uring_setup+0x40b/0x2980 [ 981.226741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 981.227754] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 981.228826] ? wait_for_completion_io+0x270/0x270 [ 981.229862] do_syscall_64+0x33/0x40 [ 981.230642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 981.231717] RIP: 0033:0x7f2e49e79b19 [ 981.232500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 981.236359] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 981.237970] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 981.239468] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 981.240978] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 981.242486] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 981.243989] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:21:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 02:22:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) (fail_nth: 11) 02:22:11 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2006, 0xd, 0x13, r0, 0x8000000) 02:22:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 7) 02:22:11 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:22:11 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:22:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) 02:22:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) [ 996.310690] FAULT_INJECTION: forcing a failure. [ 996.310690] name failslab, interval 1, probability 0, space 0, times 0 [ 996.312279] CPU: 0 PID: 7029 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 996.313212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.314336] Call Trace: [ 996.314696] dump_stack+0x107/0x167 [ 996.315187] should_fail.cold+0x5/0xa [ 996.315699] ? create_object.isra.0+0x3a/0xa30 [ 996.316307] should_failslab+0x5/0x20 [ 996.316826] kmem_cache_alloc+0x5b/0x310 [ 996.317380] create_object.isra.0+0x3a/0xa30 [ 996.317972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 996.318657] kmem_cache_alloc_trace+0x151/0x320 [ 996.319304] io_uring_setup+0x40b/0x2980 [ 996.319854] ? __mutex_unlock_slowpath+0xe1/0x600 [ 996.320507] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 996.321020] FAULT_INJECTION: forcing a failure. [ 996.321020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.321207] ? wait_for_completion_io+0x270/0x270 [ 996.321249] do_syscall_64+0x33/0x40 [ 996.321262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.325734] RIP: 0033:0x7f2e49e79b19 [ 996.326232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.328703] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 996.329733] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 996.330692] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 996.331652] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 996.332598] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 996.333562] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 996.334544] CPU: 1 PID: 7031 Comm: syz-executor.1 Not tainted 5.10.260 #1 [ 996.336011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.337854] Call Trace: [ 996.338421] dump_stack+0x107/0x167 [ 996.339203] should_fail.cold+0x5/0xa [ 996.340021] _copy_from_user+0x2e/0x1b0 [ 996.340884] kstrtouint_from_user+0xbd/0x220 [ 996.341817] ? kstrtou8_from_user+0x210/0x210 [ 996.342784] ? lock_acquire+0x197/0x470 [ 996.343631] ? ksys_write+0x12d/0x260 [ 996.344457] proc_fail_nth_write+0x78/0x220 [ 996.345391] ? proc_task_getattr+0x1f0/0x1f0 [ 996.346349] ? proc_task_getattr+0x1f0/0x1f0 [ 996.346768] FAULT_INJECTION: forcing a failure. [ 996.346768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.347278] vfs_write+0x29a/0xb10 [ 996.347309] ksys_write+0x12d/0x260 [ 996.350360] ? __ia32_sys_read+0xb0/0xb0 [ 996.351248] do_syscall_64+0x33/0x40 [ 996.352046] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.353155] RIP: 0033:0x7f6f9ce375ff [ 996.353952] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 996.357863] RSP: 002b:00007f6f9a3fa170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 996.359486] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f9ce375ff [ 996.361016] RDX: 0000000000000001 RSI: 00007f6f9a3fa1e0 RDI: 0000000000000005 [ 996.362555] RBP: 00007f6f9a3fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.364080] R10: 000000000001f012 R11: 0000000000000293 R12: 0000000000000002 [ 996.365616] R13: 00007ffd263945ff R14: 00007f6f9a3fa300 R15: 0000000000022000 [ 996.367166] CPU: 0 PID: 7032 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 996.368208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.369327] Call Trace: [ 996.369682] dump_stack+0x107/0x167 [ 996.370170] should_fail.cold+0x5/0xa [ 996.370680] _copy_from_user+0x2e/0x1b0 [ 996.371240] copy_clone_args_from_user+0x147/0x790 [ 996.371911] ? lock_acquire+0x197/0x470 [ 996.372442] ? sighand_ctor+0x40/0x40 [ 996.372967] ? find_held_lock+0x2c/0x110 [ 996.373506] ? ksys_write+0x21a/0x260 [ 996.374005] ? lock_downgrade+0x6d0/0x6d0 [ 996.374549] __do_sys_clone3+0x9d/0x320 [ 996.375073] ? __do_sys_clone+0x110/0x110 [ 996.375622] ? __mutex_unlock_slowpath+0xe1/0x600 [ 996.376254] ? wait_for_completion_io+0x270/0x270 [ 996.376904] ? rcu_read_lock_any_held+0x75/0xa0 [ 996.377514] ? vfs_write+0x354/0xb10 [ 996.378000] ? fput_many+0x2f/0x1a0 [ 996.378482] ? ksys_write+0x1a9/0x260 [ 996.378984] ? __ia32_sys_read+0xb0/0xb0 [ 996.379534] do_syscall_64+0x33/0x40 [ 996.380034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.380717] RIP: 0033:0x7f458f3e1b19 [ 996.381220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.383660] RSP: 002b:00007f458c936188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 996.384666] RAX: ffffffffffffffda RBX: 00007f458f4f5020 RCX: 00007f458f3e1b19 [ 996.385623] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 996.386558] RBP: 00007f458c9361d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.387486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.388425] R13: 00007fffbf6ca4af R14: 00007f458c936300 R15: 0000000000022000 02:22:11 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2007, 0xd, 0x13, r0, 0x8000000) 02:22:12 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 8) 02:22:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 02:22:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) 02:22:12 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}], 0x2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) [ 996.490861] FAULT_INJECTION: forcing a failure. [ 996.490861] name failslab, interval 1, probability 0, space 0, times 0 [ 996.492375] CPU: 0 PID: 7041 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 996.493250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.494294] Call Trace: [ 996.494638] dump_stack+0x107/0x167 [ 996.495098] should_fail.cold+0x5/0xa [ 996.495593] ? copy_process+0x3305/0x78b0 [ 996.496113] should_failslab+0x5/0x20 [ 996.496595] kmem_cache_alloc_node+0x55/0x330 [ 996.497200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 996.497860] copy_process+0x3305/0x78b0 [ 996.498358] ? SOFTIRQ_verbose+0x10/0x10 [ 996.498869] ? mark_lock+0xf5/0x2df0 [ 996.499350] ? lock_acquire+0x197/0x470 [ 996.499852] ? find_held_lock+0x2c/0x110 [ 996.500375] ? __cleanup_sighand+0xb0/0xb0 [ 996.500933] ? _copy_from_user+0xfb/0x1b0 [ 996.501468] kernel_clone+0xe7/0x980 [ 996.501935] ? lock_acquire+0x197/0x470 [ 996.502431] ? create_io_thread+0xf0/0xf0 [ 996.502608] FAULT_INJECTION: forcing a failure. [ 996.502608] name failslab, interval 1, probability 0, space 0, times 0 [ 996.502958] ? ksys_write+0x21a/0x260 [ 996.505813] ? lock_downgrade+0x6d0/0x6d0 [ 996.506337] __do_sys_clone3+0x1e5/0x320 [ 996.506847] ? __do_sys_clone+0x110/0x110 [ 996.507374] ? rcu_read_lock_any_held+0x75/0xa0 [ 996.507945] ? vfs_write+0x354/0xb10 [ 996.508409] ? fput_many+0x2f/0x1a0 [ 996.508868] ? ksys_write+0x1a9/0x260 [ 996.509342] ? __ia32_sys_read+0xb0/0xb0 [ 996.509852] do_syscall_64+0x33/0x40 [ 996.510316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.510951] RIP: 0033:0x7f458f3e1b19 [ 996.511415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.513766] RSP: 002b:00007f458c957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 996.514713] RAX: ffffffffffffffda RBX: 00007f458f4f4f60 RCX: 00007f458f3e1b19 [ 996.515596] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 996.516490] RBP: 00007f458c9571d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.517382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.518268] R13: 00007fffbf6ca4af R14: 00007f458c957300 R15: 0000000000022000 [ 996.519196] CPU: 1 PID: 7036 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 996.520666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.522434] Call Trace: [ 996.522998] dump_stack+0x107/0x167 [ 996.523780] should_fail.cold+0x5/0xa [ 996.524597] ? create_object.isra.0+0x3a/0xa30 [ 996.525577] should_failslab+0x5/0x20 [ 996.526382] kmem_cache_alloc+0x5b/0x310 [ 996.527251] create_object.isra.0+0x3a/0xa30 02:22:12 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) [ 996.528203] kmemleak_alloc_percpu+0xa0/0x100 [ 996.529379] pcpu_alloc+0x4e2/0x1240 [ 996.530188] ? io_tctx_exit_cb+0xf0/0xf0 [ 996.531048] percpu_ref_init+0x31/0x3d0 [ 996.531901] io_uring_setup+0x47a/0x2980 [ 996.532768] ? __mutex_unlock_slowpath+0xe1/0x600 [ 996.533801] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 996.534868] ? wait_for_completion_io+0x270/0x270 [ 996.535928] do_syscall_64+0x33/0x40 [ 996.536722] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.537810] RIP: 0033:0x7f2e49e79b19 [ 996.538608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.542672] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 996.544676] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 996.546184] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 996.547988] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 996.549567] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 996.551067] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:22:12 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}], 0x2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00002, 0x0, 0x1f012, r0, 0x0) 02:22:12 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2f00, 0xd, 0x13, r0, 0x8000000) 02:22:12 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:22:12 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}], 0x2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:12 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x100000, 0xd, 0x13, r0, 0x8000000) 02:22:12 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) 02:22:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00004, 0x0, 0x1f012, r0, 0x0) 02:22:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) [ 996.741166] FAULT_INJECTION: forcing a failure. [ 996.741166] name failslab, interval 1, probability 0, space 0, times 0 [ 996.743648] CPU: 1 PID: 7064 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 996.745101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.746863] Call Trace: [ 996.747422] dump_stack+0x107/0x167 [ 996.748196] should_fail.cold+0x5/0xa [ 996.749022] ? create_object.isra.0+0x3a/0xa30 [ 996.749993] should_failslab+0x5/0x20 [ 996.750802] kmem_cache_alloc+0x5b/0x310 [ 996.751670] create_object.isra.0+0x3a/0xa30 [ 996.752598] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 996.753693] kmem_cache_alloc_node+0x169/0x330 [ 996.754658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 996.755771] copy_process+0x3305/0x78b0 [ 996.756617] ? SOFTIRQ_verbose+0x10/0x10 [ 996.757499] ? mark_lock+0xf5/0x2df0 [ 996.758292] ? lock_acquire+0x197/0x470 [ 996.759136] ? find_held_lock+0x2c/0x110 [ 996.760011] ? __cleanup_sighand+0xb0/0xb0 [ 996.760936] ? _copy_from_user+0xfb/0x1b0 [ 996.761828] kernel_clone+0xe7/0x980 [ 996.762616] ? lock_acquire+0x197/0x470 [ 996.763456] ? create_io_thread+0xf0/0xf0 [ 996.764343] ? ksys_write+0x21a/0x260 [ 996.765156] ? lock_downgrade+0x6d0/0x6d0 [ 996.766042] __do_sys_clone3+0x1e5/0x320 [ 996.766904] ? __do_sys_clone+0x110/0x110 [ 996.767800] ? rcu_read_lock_any_held+0x75/0xa0 [ 996.768787] ? vfs_write+0x354/0xb10 [ 996.769600] ? fput_many+0x2f/0x1a0 [ 996.770367] ? ksys_write+0x1a9/0x260 [ 996.771177] ? __ia32_sys_read+0xb0/0xb0 [ 996.772055] do_syscall_64+0x33/0x40 [ 996.772864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.773965] RIP: 0033:0x7f458f3e1b19 [ 996.774758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.779012] RSP: 002b:00007f458c957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 996.780899] RAX: ffffffffffffffda RBX: 00007f458f4f4f60 RCX: 00007f458f3e1b19 [ 996.782568] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 996.784189] RBP: 00007f458c9571d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.785719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.787271] R13: 00007fffbf6ca4af R14: 00007f458c957300 R15: 0000000000022000 02:22:24 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 9) 02:22:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 02:22:24 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x7fffdf002000, 0xd, 0x13, r0, 0x8000000) 02:22:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 02:22:24 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {0x0}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00008, 0x0, 0x1f012, r0, 0x0) 02:22:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 1) 02:22:24 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) [ 1009.430175] FAULT_INJECTION: forcing a failure. [ 1009.430175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.432689] CPU: 0 PID: 7082 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1009.434122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.435889] Call Trace: [ 1009.436465] dump_stack+0x107/0x167 [ 1009.437244] should_fail.cold+0x5/0xa [ 1009.438053] _copy_from_user+0x2e/0x1b0 [ 1009.438894] io_uring_setup+0x9b/0x2980 [ 1009.439757] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1009.440796] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1009.441879] ? wait_for_completion_io+0x270/0x270 [ 1009.442899] ? rcu_read_lock_any_held+0x75/0xa0 [ 1009.443885] ? vfs_write+0x354/0xb10 [ 1009.443910] FAULT_INJECTION: forcing a failure. [ 1009.443910] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.444668] ? fput_many+0x2f/0x1a0 [ 1009.444686] ? ksys_write+0x1a9/0x260 [ 1009.444701] ? __ia32_sys_read+0xb0/0xb0 [ 1009.444731] do_syscall_64+0x33/0x40 [ 1009.450657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1009.451727] RIP: 0033:0x7fbd4ba01b19 [ 1009.452502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.456358] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1009.457944] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1009.459438] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1009.460941] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1009.462438] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1009.463930] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1009.465462] CPU: 1 PID: 7088 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1009.467200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.469306] Call Trace: [ 1009.469982] dump_stack+0x107/0x167 [ 1009.470915] should_fail.cold+0x5/0xa [ 1009.471883] ? create_object.isra.0+0x3a/0xa30 [ 1009.471919] FAULT_INJECTION: forcing a failure. [ 1009.471919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.472858] should_failslab+0x5/0x20 [ 1009.472881] kmem_cache_alloc+0x5b/0x310 [ 1009.472908] create_object.isra.0+0x3a/0xa30 [ 1009.478418] kmemleak_alloc_percpu+0xa0/0x100 [ 1009.479553] pcpu_alloc+0x4e2/0x1240 [ 1009.480391] ? io_tctx_exit_cb+0xf0/0xf0 [ 1009.481469] percpu_ref_init+0x31/0x3d0 [ 1009.482301] io_uring_setup+0x47a/0x2980 [ 1009.483329] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1009.484343] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1009.485638] ? wait_for_completion_io+0x270/0x270 [ 1009.486750] do_syscall_64+0x33/0x40 [ 1009.487756] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1009.488810] RIP: 0033:0x7f2e49e79b19 [ 1009.489609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.493498] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1009.495287] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1009.497008] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1009.498712] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1009.500402] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1009.502130] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1009.503864] CPU: 0 PID: 7090 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1009.505044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.506455] Call Trace: [ 1009.506914] dump_stack+0x107/0x167 [ 1009.507534] should_fail.cold+0x5/0xa [ 1009.508195] _copy_from_user+0x2e/0x1b0 [ 1009.508864] copy_clone_args_from_user+0x147/0x790 [ 1009.509715] ? lock_acquire+0x197/0x470 [ 1009.510390] ? sighand_ctor+0x40/0x40 [ 1009.511050] ? find_held_lock+0x2c/0x110 [ 1009.511743] ? ksys_write+0x21a/0x260 [ 1009.512393] ? lock_downgrade+0x6d0/0x6d0 [ 1009.513104] __do_sys_clone3+0x9d/0x320 [ 1009.513787] ? __do_sys_clone+0x110/0x110 [ 1009.514494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1009.515323] ? wait_for_completion_io+0x270/0x270 [ 1009.516142] ? rcu_read_lock_any_held+0x75/0xa0 [ 1009.516943] ? vfs_write+0x354/0xb10 [ 1009.517579] ? fput_many+0x2f/0x1a0 [ 1009.518198] ? ksys_write+0x1a9/0x260 [ 1009.518852] ? __ia32_sys_read+0xb0/0xb0 [ 1009.519558] do_syscall_64+0x33/0x40 [ 1009.520188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1009.521124] RIP: 0033:0x7fd89e327b19 [ 1009.521840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.524837] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1009.526137] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1009.527347] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1009.528543] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1009.529765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.530976] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:22:25 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc0000a, 0x0, 0x1f012, r0, 0x0) 02:22:25 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 2) 02:22:25 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x7ffffffff000, 0xd, 0x13, r0, 0x8000000) 02:22:25 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {0x0}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:25 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) [ 1009.596263] FAULT_INJECTION: forcing a failure. [ 1009.596263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1009.598262] CPU: 0 PID: 7091 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 1009.599399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.600762] Call Trace: [ 1009.601205] dump_stack+0x107/0x167 [ 1009.601810] should_fail.cold+0x5/0xa [ 1009.602453] __alloc_pages_nodemask+0x182/0x600 [ 1009.603218] ? lock_downgrade+0x6d0/0x6d0 [ 1009.603899] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1009.604894] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1009.605763] ? kmem_cache_alloc_node+0x2bc/0x330 [ 1009.606547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1009.607419] copy_process+0x62b/0x78b0 [ 1009.608057] ? SOFTIRQ_verbose+0x10/0x10 [ 1009.608737] ? mark_lock+0xf5/0x2df0 [ 1009.609356] ? lock_acquire+0x197/0x470 [ 1009.609996] ? find_held_lock+0x2c/0x110 [ 1009.610672] ? __cleanup_sighand+0xb0/0xb0 [ 1009.611377] ? _copy_from_user+0xfb/0x1b0 [ 1009.612068] kernel_clone+0xe7/0x980 [ 1009.612682] ? lock_acquire+0x197/0x470 [ 1009.613262] FAULT_INJECTION: forcing a failure. [ 1009.613262] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.613343] ? create_io_thread+0xf0/0xf0 [ 1009.613368] ? ksys_write+0x21a/0x260 [ 1009.613383] ? lock_downgrade+0x6d0/0x6d0 [ 1009.613403] __do_sys_clone3+0x1e5/0x320 [ 1009.618625] ? __do_sys_clone+0x110/0x110 [ 1009.619334] ? rcu_read_lock_any_held+0x75/0xa0 [ 1009.620099] ? vfs_write+0x354/0xb10 [ 1009.620720] ? fput_many+0x2f/0x1a0 [ 1009.621334] ? ksys_write+0x1a9/0x260 [ 1009.621967] ? __ia32_sys_read+0xb0/0xb0 [ 1009.622646] do_syscall_64+0x33/0x40 [ 1009.623258] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1009.624101] RIP: 0033:0x7f458f3e1b19 [ 1009.624713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.627757] RSP: 002b:00007f458c936188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1009.629012] RAX: ffffffffffffffda RBX: 00007f458f4f5020 RCX: 00007f458f3e1b19 [ 1009.630185] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1009.631357] RBP: 00007f458c9361d0 R08: 0000000000000000 R09: 0000000000000000 [ 1009.632526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.633701] R13: 00007fffbf6ca4af R14: 00007f458c936300 R15: 0000000000022000 [ 1009.634902] CPU: 1 PID: 7093 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1009.636527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.638513] Call Trace: [ 1009.639174] dump_stack+0x107/0x167 [ 1009.640052] should_fail.cold+0x5/0xa [ 1009.640977] ? io_uring_setup+0x258/0x2980 [ 1009.642003] should_failslab+0x5/0x20 [ 1009.642920] kmem_cache_alloc_trace+0x55/0x320 [ 1009.644051] io_uring_setup+0x258/0x2980 [ 1009.645039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1009.646206] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1009.647405] ? wait_for_completion_io+0x270/0x270 [ 1009.648602] do_syscall_64+0x33/0x40 [ 1009.649513] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1009.650739] RIP: 0033:0x7fbd4ba01b19 [ 1009.651636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.656027] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1009.657871] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1009.659576] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1009.661248] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 02:22:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) [ 1009.662920] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1009.664761] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1009.712015] FAULT_INJECTION: forcing a failure. [ 1009.712015] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.714821] CPU: 1 PID: 7104 Comm: syz-executor.0 Not tainted 5.10.260 #1 02:22:25 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x10, r0, 0x8000000) [ 1009.716453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.718613] Call Trace: [ 1009.719262] dump_stack+0x107/0x167 [ 1009.720147] should_fail.cold+0x5/0xa [ 1009.721084] ? copy_process+0x3305/0x78b0 [ 1009.722083] should_failslab+0x5/0x20 [ 1009.722994] kmem_cache_alloc_node+0x55/0x330 [ 1009.724067] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1009.725333] copy_process+0x3305/0x78b0 [ 1009.726278] ? SOFTIRQ_verbose+0x10/0x10 [ 1009.727261] ? mark_lock+0xf5/0x2df0 [ 1009.728164] ? lock_acquire+0x197/0x470 [ 1009.729130] ? find_held_lock+0x2c/0x110 [ 1009.730130] ? __cleanup_sighand+0xb0/0xb0 [ 1009.731167] ? _copy_from_user+0xfb/0x1b0 02:22:25 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {0x0}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1009.732177] kernel_clone+0xe7/0x980 [ 1009.733242] ? lock_acquire+0x197/0x470 [ 1009.734184] ? create_io_thread+0xf0/0xf0 [ 1009.735191] ? ksys_write+0x21a/0x260 [ 1009.736095] ? lock_downgrade+0x6d0/0x6d0 [ 1009.737098] __do_sys_clone3+0x1e5/0x320 [ 1009.738064] ? __do_sys_clone+0x110/0x110 [ 1009.739076] ? rcu_read_lock_any_held+0x75/0xa0 [ 1009.740165] ? vfs_write+0x354/0xb10 [ 1009.741052] ? fput_many+0x2f/0x1a0 [ 1009.741922] ? ksys_write+0x1a9/0x260 [ 1009.742825] ? __ia32_sys_read+0xb0/0xb0 [ 1009.743804] do_syscall_64+0x33/0x40 [ 1009.744689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1009.745887] RIP: 0033:0x7fd89e327b19 [ 1009.746747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.750982] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1009.752755] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1009.754424] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1009.756070] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1009.757735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.759399] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:22:25 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 10) [ 1009.844146] FAULT_INJECTION: forcing a failure. [ 1009.844146] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.846148] CPU: 0 PID: 7110 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1009.847362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.848805] Call Trace: [ 1009.849288] dump_stack+0x107/0x167 [ 1009.849938] should_fail.cold+0x5/0xa [ 1009.850601] ? percpu_ref_init+0xd8/0x3d0 [ 1009.851313] should_failslab+0x5/0x20 [ 1009.851964] kmem_cache_alloc_trace+0x55/0x320 [ 1009.852762] ? io_tctx_exit_cb+0xf0/0xf0 [ 1009.853477] percpu_ref_init+0xd8/0x3d0 [ 1009.854170] io_uring_setup+0x47a/0x2980 [ 1009.854875] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1009.855730] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1009.856607] ? wait_for_completion_io+0x270/0x270 [ 1009.857494] do_syscall_64+0x33/0x40 [ 1009.858148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1009.859032] RIP: 0033:0x7f2e49e79b19 [ 1009.859685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.862900] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1009.864234] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1009.865413] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1009.866588] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1009.867763] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1009.868971] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:22:39 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) [ 1023.805553] FAULT_INJECTION: forcing a failure. [ 1023.805553] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.807846] CPU: 0 PID: 7122 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1023.809220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.810875] Call Trace: [ 1023.811403] dump_stack+0x107/0x167 [ 1023.812126] should_fail.cold+0x5/0xa [ 1023.812889] ? create_object.isra.0+0x3a/0xa30 [ 1023.813796] should_failslab+0x5/0x20 [ 1023.814550] kmem_cache_alloc+0x5b/0x310 [ 1023.815351] create_object.isra.0+0x3a/0xa30 [ 1023.816210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 02:22:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 02:22:39 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x10, r0, 0x8000000) 02:22:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc0000c, 0x0, 0x1f012, r0, 0x0) 02:22:39 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000000) 02:22:39 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 3) 02:22:39 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:39 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 11) [ 1023.817222] kmem_cache_alloc_trace+0x151/0x320 [ 1023.818380] ? io_tctx_exit_cb+0xf0/0xf0 [ 1023.819175] percpu_ref_init+0xd8/0x3d0 [ 1023.819953] io_uring_setup+0x47a/0x2980 [ 1023.820748] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1023.821710] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1023.822691] ? wait_for_completion_io+0x270/0x270 [ 1023.823658] do_syscall_64+0x33/0x40 [ 1023.824378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1023.825381] RIP: 0033:0x7f2e49e79b19 [ 1023.826102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.829653] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1023.831115] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1023.832491] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1023.833882] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1023.835253] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1023.835808] FAULT_INJECTION: forcing a failure. [ 1023.835808] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.836620] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1023.841176] CPU: 1 PID: 7127 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1023.842778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.844699] Call Trace: [ 1023.845324] dump_stack+0x107/0x167 [ 1023.845975] FAULT_INJECTION: forcing a failure. [ 1023.845975] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.846254] should_fail.cold+0x5/0xa [ 1023.846284] ? create_object.isra.0+0x3a/0xa30 [ 1023.850340] should_failslab+0x5/0x20 [ 1023.851212] kmem_cache_alloc+0x5b/0x310 [ 1023.852154] create_object.isra.0+0x3a/0xa30 [ 1023.853171] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1023.854371] kmem_cache_alloc_trace+0x151/0x320 [ 1023.855486] io_uring_setup+0x258/0x2980 [ 1023.856444] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1023.857604] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1023.858798] ? wait_for_completion_io+0x270/0x270 [ 1023.859956] do_syscall_64+0x33/0x40 [ 1023.860871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1023.862093] RIP: 0033:0x7fbd4ba01b19 [ 1023.862970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.867283] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1023.869055] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1023.870687] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1023.872302] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1023.873943] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1023.875564] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1023.877231] CPU: 0 PID: 7129 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1023.878533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.880064] Call Trace: [ 1023.880568] dump_stack+0x107/0x167 [ 1023.881263] should_fail.cold+0x5/0xa [ 1023.881972] ? create_object.isra.0+0x3a/0xa30 [ 1023.882872] should_failslab+0x5/0x20 [ 1023.883697] kmem_cache_alloc+0x5b/0x310 [ 1023.884464] create_object.isra.0+0x3a/0xa30 [ 1023.885295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1023.886242] kmem_cache_alloc_node+0x169/0x330 [ 1023.887094] copy_process+0x3305/0x78b0 [ 1023.887829] ? SOFTIRQ_verbose+0x10/0x10 [ 1023.888589] ? mark_lock+0xf5/0x2df0 [ 1023.889299] ? lock_acquire+0x197/0x470 [ 1023.890059] ? find_held_lock+0x2c/0x110 [ 1023.890822] ? __cleanup_sighand+0xb0/0xb0 [ 1023.891626] ? _copy_from_user+0xfb/0x1b0 [ 1023.892398] kernel_clone+0xe7/0x980 [ 1023.893101] ? lock_acquire+0x197/0x470 [ 1023.893838] ? create_io_thread+0xf0/0xf0 [ 1023.894617] ? ksys_write+0x21a/0x260 [ 1023.895326] ? lock_downgrade+0x6d0/0x6d0 [ 1023.896101] __do_sys_clone3+0x1e5/0x320 [ 1023.896843] ? __do_sys_clone+0x110/0x110 [ 1023.897635] ? rcu_read_lock_any_held+0x75/0xa0 [ 1023.898478] ? vfs_write+0x354/0xb10 [ 1023.899157] ? fput_many+0x2f/0x1a0 [ 1023.899822] ? ksys_write+0x1a9/0x260 [ 1023.900521] ? __ia32_sys_read+0xb0/0xb0 [ 1023.901282] do_syscall_64+0x33/0x40 [ 1023.901966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1023.902910] RIP: 0033:0x7fd89e327b19 02:22:39 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x10, r0, 0x8000000) [ 1023.903590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.907064] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1023.908468] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1023.909787] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1023.911103] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.912414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.913734] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1023.929641] FAULT_INJECTION: forcing a failure. [ 1023.929641] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.931744] CPU: 0 PID: 7132 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 1023.932988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.934500] Call Trace: [ 1023.934991] dump_stack+0x107/0x167 [ 1023.935651] should_fail.cold+0x5/0xa [ 1023.936343] ? prepare_creds+0x25/0x5e0 [ 1023.937067] should_failslab+0x5/0x20 [ 1023.937762] kmem_cache_alloc+0x5b/0x310 [ 1023.938492] ? lock_downgrade+0x6d0/0x6d0 [ 1023.939237] prepare_creds+0x25/0x5e0 [ 1023.939916] copy_creds+0x72/0x580 [ 1023.940557] copy_process+0xfef/0x78b0 [ 1023.941271] ? SOFTIRQ_verbose+0x10/0x10 [ 1023.942002] ? mark_lock+0xf5/0x2df0 [ 1023.942673] ? lock_acquire+0x197/0x470 [ 1023.943383] ? find_held_lock+0x2c/0x110 [ 1023.944118] ? __cleanup_sighand+0xb0/0xb0 [ 1023.944893] ? _copy_from_user+0xfb/0x1b0 [ 1023.945647] kernel_clone+0xe7/0x980 [ 1023.946315] ? lock_acquire+0x197/0x470 [ 1023.947036] ? create_io_thread+0xf0/0xf0 [ 1023.947791] ? ksys_write+0x21a/0x260 [ 1023.948478] ? lock_downgrade+0x6d0/0x6d0 [ 1023.949233] __do_sys_clone3+0x1e5/0x320 [ 1023.949955] ? __do_sys_clone+0x110/0x110 [ 1023.950715] ? rcu_read_lock_any_held+0x75/0xa0 [ 1023.951544] ? vfs_write+0x354/0xb10 [ 1023.952211] ? fput_many+0x2f/0x1a0 [ 1023.952860] ? ksys_write+0x1a9/0x260 [ 1023.953553] ? __ia32_sys_read+0xb0/0xb0 [ 1023.954297] do_syscall_64+0x33/0x40 [ 1023.954963] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1023.955875] RIP: 0033:0x7f458f3e1b19 [ 1023.956541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.959812] RSP: 002b:00007f458c936188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1023.961167] RAX: ffffffffffffffda RBX: 00007f458f4f5020 RCX: 00007f458f3e1b19 [ 1023.962426] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1023.963684] RBP: 00007f458c9361d0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.964943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.966213] R13: 00007fffbf6ca4af R14: 00007f458c936300 R15: 0000000000022000 02:22:39 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00010, 0x0, 0x1f012, r0, 0x0) 02:22:39 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x2000000) 02:22:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) 02:22:53 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:53 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000002) 02:22:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 02:22:53 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 12) 02:22:53 executing program 7: syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) 02:22:53 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00321, 0x0, 0x1f012, r0, 0x0) 02:22:53 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 4) [ 1038.464111] FAULT_INJECTION: forcing a failure. [ 1038.464111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1038.468888] CPU: 1 PID: 7159 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1038.470481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.472387] Call Trace: [ 1038.473006] dump_stack+0x107/0x167 [ 1038.473864] should_fail.cold+0x5/0xa [ 1038.474754] __alloc_pages_nodemask+0x182/0x600 [ 1038.475825] ? lock_downgrade+0x6d0/0x6d0 [ 1038.475904] FAULT_INJECTION: forcing a failure. [ 1038.475904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1038.476796] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1038.476821] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1038.476854] ? kmem_cache_alloc_node+0x2bc/0x330 [ 1038.483687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1038.484944] copy_process+0x62b/0x78b0 [ 1038.485882] ? SOFTIRQ_verbose+0x10/0x10 [ 1038.486857] ? mark_lock+0xf5/0x2df0 [ 1038.487759] ? lock_acquire+0x197/0x470 [ 1038.488700] ? find_held_lock+0x2c/0x110 [ 1038.489694] ? __cleanup_sighand+0xb0/0xb0 [ 1038.490723] ? _copy_from_user+0xfb/0x1b0 [ 1038.491717] kernel_clone+0xe7/0x980 [ 1038.492608] ? lock_acquire+0x197/0x470 [ 1038.493560] ? create_io_thread+0xf0/0xf0 [ 1038.494553] ? ksys_write+0x21a/0x260 [ 1038.495451] ? lock_downgrade+0x6d0/0x6d0 [ 1038.496437] __do_sys_clone3+0x1e5/0x320 [ 1038.497410] ? __do_sys_clone+0x110/0x110 [ 1038.498409] ? rcu_read_lock_any_held+0x75/0xa0 [ 1038.499504] ? vfs_write+0x354/0xb10 [ 1038.500379] ? fput_many+0x2f/0x1a0 [ 1038.501257] ? ksys_write+0x1a9/0x260 [ 1038.502149] ? __ia32_sys_read+0xb0/0xb0 [ 1038.503126] do_syscall_64+0x33/0x40 [ 1038.504001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.505231] RIP: 0033:0x7fd89e327b19 [ 1038.506130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.510550] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1038.512369] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1038.514096] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1038.515814] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.517543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.519279] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1038.521051] CPU: 0 PID: 7162 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1038.522201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.523571] Call Trace: [ 1038.524017] dump_stack+0x107/0x167 [ 1038.524284] FAULT_INJECTION: forcing a failure. [ 1038.524284] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.524619] should_fail.cold+0x5/0xa [ 1038.524641] __alloc_pages_nodemask+0x182/0x600 [ 1038.524660] ? lock_release+0x680/0x680 [ 1038.524684] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1038.530379] ? lock_downgrade+0x6d0/0x6d0 [ 1038.531068] alloc_pages_current+0x187/0x280 [ 1038.531798] kmalloc_order+0x35/0x160 [ 1038.532420] kmalloc_order_trace+0x14/0xa0 [ 1038.533117] io_uring_setup+0x33c/0x2980 [ 1038.533796] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1038.534597] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1038.535424] ? wait_for_completion_io+0x270/0x270 [ 1038.536248] do_syscall_64+0x33/0x40 [ 1038.536866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.537710] RIP: 0033:0x7fbd4ba01b19 [ 1038.538324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.541356] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1038.542563] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1038.543711] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1038.544883] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1038.546058] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1038.547230] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1038.548441] CPU: 1 PID: 7152 Comm: syz-executor.5 Not tainted 5.10.260 #1 [ 1038.549923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.551705] Call Trace: [ 1038.552269] dump_stack+0x107/0x167 [ 1038.553058] should_fail.cold+0x5/0xa [ 1038.553888] ? create_object.isra.0+0x3a/0xa30 [ 1038.554875] should_failslab+0x5/0x20 [ 1038.555714] kmem_cache_alloc+0x5b/0x310 [ 1038.556054] FAULT_INJECTION: forcing a failure. [ 1038.556054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1038.556597] create_object.isra.0+0x3a/0xa30 [ 1038.556620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1038.560563] kmem_cache_alloc+0x159/0x310 [ 1038.561473] prepare_creds+0x25/0x5e0 [ 1038.562294] copy_creds+0x72/0x580 [ 1038.563059] copy_process+0xfef/0x78b0 [ 1038.563900] ? SOFTIRQ_verbose+0x10/0x10 [ 1038.564792] ? mark_lock+0xf5/0x2df0 [ 1038.565623] ? lock_acquire+0x197/0x470 [ 1038.566489] ? find_held_lock+0x2c/0x110 [ 1038.567370] ? __cleanup_sighand+0xb0/0xb0 [ 1038.568315] ? _copy_from_user+0xfb/0x1b0 [ 1038.569226] kernel_clone+0xe7/0x980 [ 1038.570055] ? lock_acquire+0x197/0x470 [ 1038.570920] ? create_io_thread+0xf0/0xf0 [ 1038.571837] ? ksys_write+0x21a/0x260 [ 1038.572667] ? lock_downgrade+0x6d0/0x6d0 [ 1038.573602] __do_sys_clone3+0x1e5/0x320 [ 1038.574483] ? __do_sys_clone+0x110/0x110 [ 1038.575405] ? rcu_read_lock_any_held+0x75/0xa0 [ 1038.576410] ? vfs_write+0x354/0xb10 [ 1038.577220] ? fput_many+0x2f/0x1a0 [ 1038.578012] ? ksys_write+0x1a9/0x260 [ 1038.578834] ? __ia32_sys_read+0xb0/0xb0 [ 1038.579716] do_syscall_64+0x33/0x40 [ 1038.580524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.581635] RIP: 0033:0x7f458f3e1b19 [ 1038.582452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.586457] RSP: 002b:00007f458c957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1038.588087] RAX: ffffffffffffffda RBX: 00007f458f4f4f60 RCX: 00007f458f3e1b19 [ 1038.589625] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1038.591195] RBP: 00007f458c9571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.592765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.594340] R13: 00007fffbf6ca4af R14: 00007f458c957300 R15: 0000000000022000 [ 1038.595942] CPU: 0 PID: 7160 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1038.597104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.598488] Call Trace: [ 1038.598941] dump_stack+0x107/0x167 [ 1038.599542] should_fail.cold+0x5/0xa [ 1038.600173] __alloc_pages_nodemask+0x182/0x600 [ 1038.600942] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1038.601955] ? cap_capable+0x1cd/0x230 [ 1038.602606] alloc_pages_current+0x187/0x280 [ 1038.603330] __get_free_pages+0xc/0xa0 [ 1038.603972] io_uring_setup+0xe27/0x2980 [ 1038.604653] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1038.605500] ? wait_for_completion_io+0x270/0x270 [ 1038.606312] do_syscall_64+0x33/0x40 [ 1038.606928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.607784] RIP: 0033:0x7f2e49e79b19 [ 1038.608403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.611436] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1038.612691] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1038.613866] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1038.615044] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1038.616211] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1038.617392] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:22:54 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000003) 02:22:54 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001400)="17", 0x1}], 0x2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:22:54 executing program 7: syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) 02:22:54 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000004) 02:22:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00a00, 0x0, 0x1f012, r0, 0x0) 02:22:54 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 5) 02:22:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) [ 1038.808589] FAULT_INJECTION: forcing a failure. [ 1038.808589] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.811024] CPU: 1 PID: 7178 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1038.812478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.814220] Call Trace: [ 1038.814778] dump_stack+0x107/0x167 [ 1038.815547] should_fail.cold+0x5/0xa [ 1038.816361] ? create_object.isra.0+0x3a/0xa30 [ 1038.817339] should_failslab+0x5/0x20 [ 1038.818143] kmem_cache_alloc+0x5b/0x310 [ 1038.819003] create_object.isra.0+0x3a/0xa30 [ 1038.819923] ? kasan_unpoison_shadow+0x33/0x50 [ 1038.820886] kmalloc_order+0xfe/0x160 [ 1038.821701] kmalloc_order_trace+0x14/0xa0 [ 1038.822594] io_uring_setup+0x33c/0x2980 [ 1038.823456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1038.824477] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1038.825558] ? wait_for_completion_io+0x270/0x270 [ 1038.826613] do_syscall_64+0x33/0x40 [ 1038.827397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.828480] RIP: 0033:0x7fbd4ba01b19 [ 1038.829272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.833181] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1038.834805] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1038.836314] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1038.837831] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1038.839332] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1038.840850] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1038.847915] FAULT_INJECTION: forcing a failure. [ 1038.847915] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.850602] CPU: 1 PID: 7179 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1038.852050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.853793] Call Trace: [ 1038.854346] dump_stack+0x107/0x167 [ 1038.855117] should_fail.cold+0x5/0xa [ 1038.855920] ? prepare_creds+0x25/0x5e0 [ 1038.856755] should_failslab+0x5/0x20 [ 1038.857569] kmem_cache_alloc+0x5b/0x310 [ 1038.858431] ? lock_downgrade+0x6d0/0x6d0 [ 1038.859299] prepare_creds+0x25/0x5e0 [ 1038.860099] copy_creds+0x72/0x580 [ 1038.860849] copy_process+0xfef/0x78b0 [ 1038.861686] ? SOFTIRQ_verbose+0x10/0x10 [ 1038.862544] ? mark_lock+0xf5/0x2df0 [ 1038.863334] ? lock_acquire+0x197/0x470 [ 1038.864172] ? find_held_lock+0x2c/0x110 [ 1038.865043] ? __cleanup_sighand+0xb0/0xb0 [ 1038.865957] ? _copy_from_user+0xfb/0x1b0 [ 1038.866839] kernel_clone+0xe7/0x980 [ 1038.867615] ? lock_acquire+0x197/0x470 [ 1038.868445] ? create_io_thread+0xf0/0xf0 [ 1038.869332] ? ksys_write+0x21a/0x260 [ 1038.870143] ? lock_downgrade+0x6d0/0x6d0 [ 1038.871016] __do_sys_clone3+0x1e5/0x320 [ 1038.871852] ? __do_sys_clone+0x110/0x110 [ 1038.872728] ? rcu_read_lock_any_held+0x75/0xa0 [ 1038.873697] ? vfs_write+0x354/0xb10 [ 1038.874459] ? fput_many+0x2f/0x1a0 [ 1038.875206] ? ksys_write+0x1a9/0x260 [ 1038.875981] ? __ia32_sys_read+0xb0/0xb0 [ 1038.876821] do_syscall_64+0x33/0x40 [ 1038.877615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.878689] RIP: 0033:0x7fd89e327b19 [ 1038.879463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.883321] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1038.884903] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1038.886420] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1038.887919] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.889426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.890933] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:22:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00c00, 0x0, 0x1f012, r0, 0x0) 02:23:08 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 13) 02:23:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc02103, 0x0, 0x1f012, r0, 0x0) 02:23:08 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 6) 02:23:08 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001400)="17", 0x1}], 0x2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:23:08 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000005) 02:23:08 executing program 7: syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) 02:23:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:23:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) [ 1053.425597] FAULT_INJECTION: forcing a failure. [ 1053.425597] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.427823] CPU: 1 PID: 7194 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1053.429122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.430715] Call Trace: [ 1053.431218] dump_stack+0x107/0x167 [ 1053.431919] should_fail.cold+0x5/0xa [ 1053.432656] ? create_object.isra.0+0x3a/0xa30 [ 1053.433530] should_failslab+0x5/0x20 [ 1053.434262] kmem_cache_alloc+0x5b/0x310 [ 1053.435051] create_object.isra.0+0x3a/0xa30 [ 1053.435897] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1053.436880] kmem_cache_alloc+0x159/0x310 [ 1053.437692] prepare_creds+0x25/0x5e0 [ 1053.438423] copy_creds+0x72/0x580 [ 1053.439110] copy_process+0xfef/0x78b0 [ 1053.439861] ? SOFTIRQ_verbose+0x10/0x10 [ 1053.440629] ? mark_lock+0xf5/0x2df0 [ 1053.441338] ? lock_acquire+0x197/0x470 [ 1053.442105] ? find_held_lock+0x2c/0x110 [ 1053.442906] ? __cleanup_sighand+0xb0/0xb0 [ 1053.443733] ? _copy_from_user+0xfb/0x1b0 [ 1053.444522] kernel_clone+0xe7/0x980 [ 1053.445226] ? lock_acquire+0x197/0x470 [ 1053.445990] ? create_io_thread+0xf0/0xf0 [ 1053.446790] ? ksys_write+0x21a/0x260 [ 1053.447516] ? lock_downgrade+0x6d0/0x6d0 [ 1053.448321] __do_sys_clone3+0x1e5/0x320 [ 1053.449096] ? __do_sys_clone+0x110/0x110 [ 1053.449912] ? rcu_read_lock_any_held+0x75/0xa0 [ 1053.450787] ? vfs_write+0x354/0xb10 [ 1053.451508] ? fput_many+0x2f/0x1a0 [ 1053.452192] ? ksys_write+0x1a9/0x260 [ 1053.452917] ? __ia32_sys_read+0xb0/0xb0 [ 1053.453710] do_syscall_64+0x33/0x40 [ 1053.454422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1053.455386] RIP: 0033:0x7fd89e327b19 [ 1053.456095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.459592] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1053.461046] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1053.462426] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1053.463776] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.465117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.466462] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1053.482038] FAULT_INJECTION: forcing a failure. [ 1053.482038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1053.484312] CPU: 1 PID: 7201 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1053.485610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.487149] Call Trace: [ 1053.487636] dump_stack+0x107/0x167 [ 1053.488321] should_fail.cold+0x5/0xa [ 1053.489042] __alloc_pages_nodemask+0x182/0x600 [ 1053.489923] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1053.491048] ? cap_capable+0x1cd/0x230 [ 1053.491786] alloc_pages_current+0x187/0x280 [ 1053.492607] __get_free_pages+0xc/0xa0 [ 1053.493344] io_uring_setup+0xf9a/0x2980 [ 1053.494114] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1053.495052] ? wait_for_completion_io+0x270/0x270 [ 1053.495971] do_syscall_64+0x33/0x40 [ 1053.496676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1053.497635] RIP: 0033:0x7f2e49e79b19 [ 1053.498322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.501746] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1053.503169] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1053.504521] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1053.505842] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1053.507150] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1053.508481] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1053.512641] FAULT_INJECTION: forcing a failure. [ 1053.512641] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.516146] CPU: 0 PID: 7203 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1053.517825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.519761] Call Trace: [ 1053.520385] dump_stack+0x107/0x167 [ 1053.521237] should_fail.cold+0x5/0xa [ 1053.522133] ? io_uring_setup+0x40b/0x2980 [ 1053.523116] should_failslab+0x5/0x20 [ 1053.523990] kmem_cache_alloc_trace+0x55/0x320 [ 1053.525047] io_uring_setup+0x40b/0x2980 [ 1053.526003] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1053.527121] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1053.528289] ? wait_for_completion_io+0x270/0x270 [ 1053.529456] do_syscall_64+0x33/0x40 [ 1053.530319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1053.531519] RIP: 0033:0x7fbd4ba01b19 [ 1053.532374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.536632] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1053.538394] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1053.540054] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1053.541712] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1053.543357] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1053.545010] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:23:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 7) 02:23:22 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000006) 02:23:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 02:23:22 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001400)="17", 0x1}], 0x2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:23:22 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 1) 02:23:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc04000, 0x0, 0x1f012, r0, 0x0) 02:23:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x8, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:23:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 14) [ 1067.330887] FAULT_INJECTION: forcing a failure. [ 1067.330887] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.332487] CPU: 0 PID: 7221 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1067.333424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.334585] Call Trace: [ 1067.334954] dump_stack+0x107/0x167 [ 1067.335470] should_fail.cold+0x5/0xa [ 1067.336001] ? security_prepare_creds+0x112/0x190 [ 1067.336662] should_failslab+0x5/0x20 [ 1067.337189] __kmalloc+0x72/0x390 [ 1067.337682] security_prepare_creds+0x112/0x190 [ 1067.338330] prepare_creds+0x452/0x5e0 [ 1067.338867] copy_creds+0x72/0x580 [ 1067.338967] FAULT_INJECTION: forcing a failure. [ 1067.338967] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.339363] copy_process+0xfef/0x78b0 [ 1067.339377] ? SOFTIRQ_verbose+0x10/0x10 [ 1067.339392] ? mark_lock+0xf5/0x2df0 [ 1067.339411] ? lock_acquire+0x197/0x470 [ 1067.344117] ? find_held_lock+0x2c/0x110 [ 1067.344710] ? __cleanup_sighand+0xb0/0xb0 [ 1067.345306] ? _copy_from_user+0xfb/0x1b0 [ 1067.345890] kernel_clone+0xe7/0x980 [ 1067.346405] ? lock_acquire+0x197/0x470 [ 1067.346949] ? create_io_thread+0xf0/0xf0 [ 1067.347533] ? ksys_write+0x21a/0x260 [ 1067.348062] ? lock_downgrade+0x6d0/0x6d0 [ 1067.348633] __do_sys_clone3+0x1e5/0x320 [ 1067.349193] ? __do_sys_clone+0x110/0x110 [ 1067.349780] ? rcu_read_lock_any_held+0x75/0xa0 [ 1067.350423] ? vfs_write+0x354/0xb10 [ 1067.350940] ? fput_many+0x2f/0x1a0 [ 1067.351436] ? ksys_write+0x1a9/0x260 [ 1067.351953] ? __ia32_sys_read+0xb0/0xb0 [ 1067.352514] do_syscall_64+0x33/0x40 [ 1067.353029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.353735] RIP: 0033:0x7fd89e327b19 [ 1067.354244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.356748] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1067.357790] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1067.358758] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1067.359743] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.360719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.361710] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1067.362707] CPU: 1 PID: 7210 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1067.364331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.366289] Call Trace: [ 1067.366913] dump_stack+0x107/0x167 [ 1067.367782] should_fail.cold+0x5/0xa [ 1067.368681] ? vm_area_dup+0x78/0x290 [ 1067.369591] should_failslab+0x5/0x20 [ 1067.370485] kmem_cache_alloc+0x5b/0x310 [ 1067.371467] vm_area_dup+0x78/0x290 [ 1067.372329] ? mark_lock+0xf5/0x2df0 [ 1067.373221] ? mark_lock+0xf5/0x2df0 [ 1067.374109] ? lock_acquire+0x197/0x470 [ 1067.375059] ? lock_chain_count+0x20/0x20 [ 1067.376034] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1067.377119] ? lock_downgrade+0x6d0/0x6d0 [ 1067.378096] ? lock_chain_count+0x20/0x20 [ 1067.379086] ? vm_area_alloc+0x110/0x110 [ 1067.380041] ? __lock_acquire+0x1657/0x5b00 [ 1067.381076] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1067.382291] ? SOFTIRQ_verbose+0x10/0x10 [ 1067.383239] ? vmacache_find+0x55/0x2a0 [ 1067.384163] __split_vma+0xa8/0x4e0 [ 1067.385018] __do_munmap+0x365/0x1260 [ 1067.385912] ? arch_get_unmapped_area+0x450/0x450 [ 1067.387041] mmap_region+0x7cc/0x1500 [ 1067.387950] do_mmap+0x868/0x1370 [ 1067.388763] vm_mmap_pgoff+0x198/0x1f0 [ 1067.389690] ? randomize_page+0xb0/0xb0 [ 1067.390624] ksys_mmap_pgoff+0x41c/0x560 [ 1067.391569] ? find_mergeable_anon_vma+0x250/0x250 [ 1067.392719] do_syscall_64+0x33/0x40 [ 1067.393588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.394782] RIP: 0033:0x7fd0cc9f8b19 [ 1067.395640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:23:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) [ 1067.399938] RSP: 002b:00007fd0c9f6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1067.401914] RAX: ffffffffffffffda RBX: 00007fd0ccb0bf60 RCX: 00007fd0cc9f8b19 [ 1067.403570] RDX: 000000000000000d RSI: 0000000000002000 RDI: 0000000020ffd000 [ 1067.405228] RBP: 00007fd0c9f6e1d0 R08: 0000000000000003 R09: 0000000008000000 [ 1067.406894] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1067.408570] R13: 00007ffe5a99e05f R14: 00007fd0c9f6e300 R15: 0000000000022000 [ 1067.413010] FAULT_INJECTION: forcing a failure. [ 1067.413010] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.415632] CPU: 1 PID: 7219 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1067.417206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.419121] Call Trace: [ 1067.419727] dump_stack+0x107/0x167 [ 1067.420561] should_fail.cold+0x5/0xa [ 1067.421446] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1067.422742] should_failslab+0x5/0x20 [ 1067.423614] kmem_cache_alloc_trace+0x55/0x320 02:23:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1067.424673] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1067.426115] io_uring_setup+0x14f6/0x2980 [ 1067.427069] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1067.428221] ? wait_for_completion_io+0x270/0x270 [ 1067.429364] do_syscall_64+0x33/0x40 [ 1067.430233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.431411] RIP: 0033:0x7f2e49e79b19 [ 1067.432267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.436473] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1067.438232] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1067.439868] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1067.441509] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1067.443144] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1067.444455] FAULT_INJECTION: forcing a failure. [ 1067.444455] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.444770] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1067.447459] CPU: 0 PID: 7228 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1067.448386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.449484] Call Trace: [ 1067.449847] dump_stack+0x107/0x167 [ 1067.450330] should_fail.cold+0x5/0xa [ 1067.450858] ? create_object.isra.0+0x3a/0xa30 [ 1067.451469] should_failslab+0x5/0x20 [ 1067.451976] kmem_cache_alloc+0x5b/0x310 [ 1067.452516] create_object.isra.0+0x3a/0xa30 [ 1067.453095] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.453774] __kmalloc+0x16e/0x390 [ 1067.454249] security_prepare_creds+0x112/0x190 [ 1067.454871] prepare_creds+0x452/0x5e0 [ 1067.455386] copy_creds+0x72/0x580 [ 1067.455867] copy_process+0xfef/0x78b0 [ 1067.456389] ? SOFTIRQ_verbose+0x10/0x10 [ 1067.456933] ? mark_lock+0xf5/0x2df0 [ 1067.457427] ? lock_acquire+0x197/0x470 [ 1067.457962] ? find_held_lock+0x2c/0x110 [ 1067.458509] ? __cleanup_sighand+0xb0/0xb0 [ 1067.459080] ? _copy_from_user+0xfb/0x1b0 [ 1067.459634] kernel_clone+0xe7/0x980 [ 1067.460129] ? lock_acquire+0x197/0x470 [ 1067.460651] ? create_io_thread+0xf0/0xf0 [ 1067.461217] ? ksys_write+0x21a/0x260 [ 1067.461730] ? lock_downgrade+0x6d0/0x6d0 [ 1067.462279] __do_sys_clone3+0x1e5/0x320 [ 1067.462819] ? __do_sys_clone+0x110/0x110 [ 1067.463382] ? rcu_read_lock_any_held+0x75/0xa0 [ 1067.463990] ? vfs_write+0x354/0xb10 [ 1067.464488] ? fput_many+0x2f/0x1a0 [ 1067.464967] ? ksys_write+0x1a9/0x260 [ 1067.465479] ? __ia32_sys_read+0xb0/0xb0 [ 1067.466034] do_syscall_64+0x33/0x40 [ 1067.466523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.467195] RIP: 0033:0x7fd89e327b19 [ 1067.467683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.470101] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1067.471096] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1067.472040] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1067.472974] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.473930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.474858] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:23:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0x7fffdffff000, 0x0, 0x1f012, r0, 0x0) 02:23:23 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000001400)="17", 0x1}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1067.538802] FAULT_INJECTION: forcing a failure. [ 1067.538802] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.540318] CPU: 0 PID: 7222 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1067.541193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.542256] Call Trace: [ 1067.542598] dump_stack+0x107/0x167 [ 1067.543063] should_fail.cold+0x5/0xa [ 1067.543553] ? create_object.isra.0+0x3a/0xa30 [ 1067.544139] should_failslab+0x5/0x20 [ 1067.544623] kmem_cache_alloc+0x5b/0x310 [ 1067.545143] create_object.isra.0+0x3a/0xa30 [ 1067.545712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.546361] kmem_cache_alloc_trace+0x151/0x320 [ 1067.546962] io_uring_setup+0x40b/0x2980 [ 1067.547481] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1067.548096] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1067.548738] ? wait_for_completion_io+0x270/0x270 [ 1067.549370] do_syscall_64+0x33/0x40 [ 1067.549854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.550508] RIP: 0033:0x7fbd4ba01b19 [ 1067.550983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.553311] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1067.554283] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1067.555204] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1067.556110] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1067.557012] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1067.557923] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:23:23 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000007) 02:23:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 02:23:23 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 15) 02:23:23 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 2) [ 1067.621883] FAULT_INJECTION: forcing a failure. [ 1067.621883] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.623371] CPU: 0 PID: 7240 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1067.624213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.625229] Call Trace: [ 1067.625578] dump_stack+0x107/0x167 [ 1067.626029] should_fail.cold+0x5/0xa [ 1067.626504] ? create_object.isra.0+0x3a/0xa30 [ 1067.627064] should_failslab+0x5/0x20 [ 1067.627532] kmem_cache_alloc+0x5b/0x310 [ 1067.628028] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1067.628763] create_object.isra.0+0x3a/0xa30 [ 1067.629306] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.629943] kmem_cache_alloc_trace+0x151/0x320 [ 1067.630518] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1067.631185] io_uring_setup+0x14f6/0x2980 [ 1067.631697] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1067.632313] ? wait_for_completion_io+0x270/0x270 [ 1067.632920] do_syscall_64+0x33/0x40 [ 1067.633377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.634012] RIP: 0033:0x7f2e49e79b19 [ 1067.634467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.636718] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1067.637664] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1067.638533] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1067.639413] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1067.640285] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1067.641151] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1067.649591] FAULT_INJECTION: forcing a failure. [ 1067.649591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1067.651165] CPU: 0 PID: 7245 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1067.651998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.652998] Call Trace: [ 1067.653321] dump_stack+0x107/0x167 [ 1067.653779] should_fail.cold+0x5/0xa [ 1067.654246] __alloc_pages_nodemask+0x182/0x600 [ 1067.654815] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1067.655556] alloc_pages_current+0x187/0x280 [ 1067.656091] allocate_slab+0x26f/0x380 [ 1067.656567] ___slab_alloc+0x470/0x700 [ 1067.657040] ? vm_area_dup+0x78/0x290 [ 1067.657503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.658146] ? trace_hardirqs_on+0x5b/0x180 [ 1067.658665] ? vm_area_dup+0x78/0x290 [ 1067.659129] ? kmem_cache_alloc+0x301/0x310 [ 1067.659651] kmem_cache_alloc+0x301/0x310 [ 1067.660153] vm_area_dup+0x78/0x290 [ 1067.660595] ? mark_lock+0xf5/0x2df0 [ 1067.661044] ? mark_lock+0xf5/0x2df0 [ 1067.661495] ? lock_acquire+0x197/0x470 [ 1067.661982] ? lock_chain_count+0x20/0x20 [ 1067.662484] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1067.663046] ? lock_downgrade+0x6d0/0x6d0 [ 1067.663549] ? lock_chain_count+0x20/0x20 [ 1067.664050] ? vm_area_alloc+0x110/0x110 [ 1067.664543] ? __lock_acquire+0x1657/0x5b00 [ 1067.665074] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1067.665710] ? SOFTIRQ_verbose+0x10/0x10 [ 1067.666196] ? vmacache_find+0x55/0x2a0 [ 1067.666676] __split_vma+0xa8/0x4e0 [ 1067.667119] __do_munmap+0x365/0x1260 [ 1067.667582] ? arch_get_unmapped_area+0x450/0x450 [ 1067.668165] mmap_region+0x7cc/0x1500 [ 1067.668634] do_mmap+0x868/0x1370 [ 1067.669061] vm_mmap_pgoff+0x198/0x1f0 [ 1067.669542] ? randomize_page+0xb0/0xb0 [ 1067.670035] ksys_mmap_pgoff+0x41c/0x560 [ 1067.670529] ? find_mergeable_anon_vma+0x250/0x250 [ 1067.671121] do_syscall_64+0x33/0x40 [ 1067.671570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.672182] RIP: 0033:0x7fd0cc9f8b19 [ 1067.672624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.674831] RSP: 002b:00007fd0c9f6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1067.675739] RAX: ffffffffffffffda RBX: 00007fd0ccb0bf60 RCX: 00007fd0cc9f8b19 [ 1067.676585] RDX: 000000000000000d RSI: 0000000000002000 RDI: 0000000020ffd000 [ 1067.677433] RBP: 00007fd0c9f6e1d0 R08: 0000000000000003 R09: 0000000008000000 [ 1067.678293] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1067.679152] R13: 00007ffe5a99e05f R14: 00007fd0c9f6e300 R15: 0000000000022000 [ 1067.684013] FAULT_INJECTION: forcing a failure. [ 1067.684013] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.685381] CPU: 0 PID: 7246 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1067.686203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.687190] Call Trace: [ 1067.687505] dump_stack+0x107/0x167 [ 1067.687935] should_fail.cold+0x5/0xa [ 1067.688384] ? __delayacct_tsk_init+0x1b/0x80 [ 1067.688912] should_failslab+0x5/0x20 [ 1067.689367] kmem_cache_alloc+0x5b/0x310 [ 1067.689854] ? prepare_creds+0x466/0x5e0 [ 1067.690355] __delayacct_tsk_init+0x1b/0x80 [ 1067.690867] copy_process+0x3399/0x78b0 [ 1067.691340] ? SOFTIRQ_verbose+0x10/0x10 [ 1067.691823] ? mark_lock+0xf5/0x2df0 [ 1067.692271] ? lock_acquire+0x197/0x470 [ 1067.692743] ? find_held_lock+0x2c/0x110 [ 1067.693232] ? __cleanup_sighand+0xb0/0xb0 [ 1067.693752] ? _copy_from_user+0xfb/0x1b0 [ 1067.694246] kernel_clone+0xe7/0x980 [ 1067.694690] ? lock_acquire+0x197/0x470 [ 1067.695164] ? create_io_thread+0xf0/0xf0 [ 1067.695665] ? ksys_write+0x21a/0x260 [ 1067.696114] ? lock_downgrade+0x6d0/0x6d0 [ 1067.696604] __do_sys_clone3+0x1e5/0x320 [ 1067.697085] ? __do_sys_clone+0x110/0x110 [ 1067.697592] ? rcu_read_lock_any_held+0x75/0xa0 [ 1067.698138] ? vfs_write+0x354/0xb10 [ 1067.698583] ? fput_many+0x2f/0x1a0 [ 1067.699014] ? ksys_write+0x1a9/0x260 [ 1067.699464] ? __ia32_sys_read+0xb0/0xb0 [ 1067.699949] do_syscall_64+0x33/0x40 [ 1067.700395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.701002] RIP: 0033:0x7fd89e327b19 [ 1067.701440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.703612] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1067.704507] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1067.705343] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1067.706188] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.707030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.707871] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:23:37 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 16) 02:23:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) 02:23:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:23:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0x7ffffffff000, 0x0, 0x1f012, r0, 0x0) 02:23:37 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000060) 02:23:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 8) 02:23:37 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000001400)="17", 0x1}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:23:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 3) [ 1081.684676] FAULT_INJECTION: forcing a failure. [ 1081.684676] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.686263] CPU: 1 PID: 7265 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1081.686707] FAULT_INJECTION: forcing a failure. [ 1081.686707] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.687187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.687192] Call Trace: [ 1081.687211] dump_stack+0x107/0x167 [ 1081.687232] should_fail.cold+0x5/0xa [ 1081.692280] ? create_object.isra.0+0x3a/0xa30 [ 1081.692909] should_failslab+0x5/0x20 [ 1081.693417] kmem_cache_alloc+0x5b/0x310 [ 1081.693986] create_object.isra.0+0x3a/0xa30 [ 1081.694589] kmemleak_alloc_percpu+0xa0/0x100 [ 1081.695205] pcpu_alloc+0x4e2/0x1240 [ 1081.695726] ? io_tctx_exit_cb+0xf0/0xf0 [ 1081.696280] percpu_ref_init+0x31/0x3d0 [ 1081.696826] io_uring_setup+0x47a/0x2980 [ 1081.697387] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1081.698056] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1081.698745] ? wait_for_completion_io+0x270/0x270 [ 1081.699427] do_syscall_64+0x33/0x40 [ 1081.699936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1081.700679] RIP: 0033:0x7fbd4ba01b19 [ 1081.701201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.703777] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1081.704827] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1081.705833] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1081.706836] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1081.707840] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1081.708834] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1081.709823] CPU: 0 PID: 7266 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1081.711459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.713568] Call Trace: [ 1081.714217] dump_stack+0x107/0x167 [ 1081.715090] should_fail.cold+0x5/0xa [ 1081.715999] ? create_object.isra.0+0x3a/0xa30 [ 1081.717085] should_failslab+0x5/0x20 [ 1081.718006] kmem_cache_alloc+0x5b/0x310 [ 1081.718973] create_object.isra.0+0x3a/0xa30 [ 1081.720015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1081.721220] kmem_cache_alloc+0x159/0x310 [ 1081.722205] ? prepare_creds+0x466/0x5e0 [ 1081.723174] __delayacct_tsk_init+0x1b/0x80 [ 1081.724193] copy_process+0x3399/0x78b0 [ 1081.725136] ? SOFTIRQ_verbose+0x10/0x10 [ 1081.726109] ? mark_lock+0xf5/0x2df0 [ 1081.727004] ? lock_acquire+0x197/0x470 [ 1081.727946] ? find_held_lock+0x2c/0x110 [ 1081.728917] ? __cleanup_sighand+0xb0/0xb0 [ 1081.729954] ? _copy_from_user+0xfb/0x1b0 [ 1081.730957] kernel_clone+0xe7/0x980 [ 1081.731843] ? lock_acquire+0x197/0x470 [ 1081.732788] ? create_io_thread+0xf0/0xf0 [ 1081.733786] ? ksys_write+0x21a/0x260 [ 1081.734688] ? lock_downgrade+0x6d0/0x6d0 [ 1081.735675] __do_sys_clone3+0x1e5/0x320 [ 1081.736638] ? __do_sys_clone+0x110/0x110 [ 1081.737639] ? rcu_read_lock_any_held+0x75/0xa0 [ 1081.738739] ? vfs_write+0x354/0xb10 [ 1081.739612] ? fput_many+0x2f/0x1a0 [ 1081.740469] ? ksys_write+0x1a9/0x260 [ 1081.741369] ? __ia32_sys_read+0xb0/0xb0 [ 1081.742367] do_syscall_64+0x33/0x40 [ 1081.743252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1081.744463] RIP: 0033:0x7fd89e327b19 [ 1081.745325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.749713] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1081.751502] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1081.753169] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1081.754846] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.756522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.758235] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1081.768846] FAULT_INJECTION: forcing a failure. [ 1081.768846] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.771649] CPU: 0 PID: 7263 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1081.773275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.775214] Call Trace: [ 1081.775826] dump_stack+0x107/0x167 [ 1081.776672] should_fail.cold+0x5/0xa [ 1081.777555] ? vm_area_dup+0x78/0x290 [ 1081.778459] should_failslab+0x5/0x20 [ 1081.779342] kmem_cache_alloc+0x5b/0x310 [ 1081.780290] vm_area_dup+0x78/0x290 [ 1081.781139] ? find_held_lock+0x2c/0x110 [ 1081.782092] ? __vma_adjust+0xf3f/0x2510 [ 1081.783037] ? lock_downgrade+0x6d0/0x6d0 [ 1081.784008] ? uprobe_mmap+0x122/0xfc0 [ 1081.784915] ? up_write+0x191/0x550 [ 1081.785786] ? uprobe_apply+0x150/0x150 [ 1081.786713] ? vma_interval_tree_remove+0x694/0xec0 [ 1081.787868] ? vm_area_alloc+0x110/0x110 [ 1081.788645] FAULT_INJECTION: forcing a failure. [ 1081.788645] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.788815] ? __vma_adjust+0xbb8/0x2510 [ 1081.788858] ? vmacache_find+0x55/0x2a0 [ 1081.792108] __split_vma+0xa8/0x4e0 [ 1081.792952] __do_munmap+0xf40/0x1260 [ 1081.793846] ? arch_get_unmapped_area+0x450/0x450 [ 1081.794964] mmap_region+0x7cc/0x1500 [ 1081.795856] do_mmap+0x868/0x1370 [ 1081.796666] vm_mmap_pgoff+0x198/0x1f0 [ 1081.797560] ? randomize_page+0xb0/0xb0 [ 1081.798499] ksys_mmap_pgoff+0x41c/0x560 [ 1081.799432] ? find_mergeable_anon_vma+0x250/0x250 [ 1081.800571] do_syscall_64+0x33/0x40 [ 1081.801429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1081.802613] RIP: 0033:0x7fd0cc9f8b19 [ 1081.803470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.807708] RSP: 002b:00007fd0c9f6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1081.809445] RAX: ffffffffffffffda RBX: 00007fd0ccb0bf60 RCX: 00007fd0cc9f8b19 [ 1081.811090] RDX: 000000000000000d RSI: 0000000000002000 RDI: 0000000020ffd000 [ 1081.812726] RBP: 00007fd0c9f6e1d0 R08: 0000000000000003 R09: 0000000008000000 [ 1081.814366] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1081.816003] R13: 00007ffe5a99e05f R14: 00007fd0c9f6e300 R15: 0000000000022000 [ 1081.817654] CPU: 1 PID: 7270 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1081.818541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.819595] Call Trace: [ 1081.819929] dump_stack+0x107/0x167 [ 1081.820392] should_fail.cold+0x5/0xa [ 1081.820878] ? create_object.isra.0+0x3a/0xa30 [ 1081.821460] should_failslab+0x5/0x20 [ 1081.821951] kmem_cache_alloc+0x5b/0x310 [ 1081.822469] create_object.isra.0+0x3a/0xa30 [ 1081.823028] kmemleak_alloc_percpu+0xa0/0x100 [ 1081.823601] pcpu_alloc+0x4e2/0x1240 [ 1081.824085] ? io_async_queue_proc+0x80/0x80 [ 1081.824657] percpu_ref_init+0x31/0x3d0 [ 1081.825165] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1081.825861] io_uring_setup+0x14f6/0x2980 [ 1081.826390] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1081.827034] ? wait_for_completion_io+0x270/0x270 [ 1081.827666] do_syscall_64+0x33/0x40 [ 1081.828138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1081.828784] RIP: 0033:0x7f2e49e79b19 [ 1081.829265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.831607] RSP: 002b:00007f2e473ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1081.832580] RAX: ffffffffffffffda RBX: 00007f2e49f8d020 RCX: 00007f2e49e79b19 [ 1081.833482] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1081.834399] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1081.835295] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1081.836183] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:23:37 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000300) 02:23:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:23:37 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000500) 02:23:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 9) [ 1081.879951] FAULT_INJECTION: forcing a failure. [ 1081.879951] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.881405] CPU: 1 PID: 7278 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1081.882258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.883287] Call Trace: [ 1081.883616] dump_stack+0x107/0x167 [ 1081.884068] should_fail.cold+0x5/0xa [ 1081.884541] ? create_object.isra.0+0x3a/0xa30 [ 1081.885103] should_failslab+0x5/0x20 [ 1081.885572] kmem_cache_alloc+0x5b/0x310 [ 1081.886085] create_object.isra.0+0x3a/0xa30 [ 1081.886638] kmemleak_alloc_percpu+0xa0/0x100 [ 1081.887193] pcpu_alloc+0x4e2/0x1240 [ 1081.887660] ? io_tctx_exit_cb+0xf0/0xf0 [ 1081.888165] percpu_ref_init+0x31/0x3d0 [ 1081.888659] io_uring_setup+0x47a/0x2980 [ 1081.889161] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1081.889764] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1081.890391] ? wait_for_completion_io+0x270/0x270 [ 1081.891006] do_syscall_64+0x33/0x40 [ 1081.891466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1081.892099] RIP: 0033:0x7fbd4ba01b19 [ 1081.892560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.894824] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1081.895752] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1081.896624] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1081.897492] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1081.898374] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1081.899244] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:23:37 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000001400)="17", 0x1}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:23:37 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000600) 02:23:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) 02:23:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x3f00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:23:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 17) 02:23:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 02:23:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4, 0x1f012, r0, 0x0) 02:23:51 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000700) 02:23:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 10) 02:23:51 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)}, {&(0x7f0000001400)="17", 0x1}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:23:51 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 4) 02:23:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1095.756709] FAULT_INJECTION: forcing a failure. [ 1095.756709] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.759223] CPU: 0 PID: 7299 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1095.760726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.762555] Call Trace: [ 1095.763136] dump_stack+0x107/0x167 [ 1095.763940] should_fail.cold+0x5/0xa [ 1095.764776] ? create_object.isra.0+0x3a/0xa30 [ 1095.765776] should_failslab+0x5/0x20 [ 1095.766616] kmem_cache_alloc+0x5b/0x310 [ 1095.767512] create_object.isra.0+0x3a/0xa30 [ 1095.768471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1095.769582] kmem_cache_alloc+0x159/0x310 [ 1095.770504] vm_area_dup+0x78/0x290 [ 1095.771300] ? find_held_lock+0x2c/0x110 [ 1095.772191] ? __vma_adjust+0xf3f/0x2510 [ 1095.773079] ? lock_downgrade+0x6d0/0x6d0 [ 1095.774005] ? uprobe_mmap+0x122/0xfc0 [ 1095.774857] ? up_write+0x191/0x550 [ 1095.775652] ? vma_interval_tree_augment_rotate+0x17b/0x1e0 [ 1095.776886] ? uprobe_apply+0x150/0x150 [ 1095.777753] ? vma_interval_tree_remove+0x676/0xec0 [ 1095.778859] ? vm_area_alloc+0x110/0x110 [ 1095.779750] ? __vma_adjust+0xbb8/0x2510 [ 1095.780655] ? vmacache_find+0x55/0x2a0 [ 1095.781521] __split_vma+0xa8/0x4e0 [ 1095.782325] __do_munmap+0xf40/0x1260 [ 1095.783164] ? arch_get_unmapped_area+0x450/0x450 [ 1095.784224] mmap_region+0x7cc/0x1500 [ 1095.785070] do_mmap+0x868/0x1370 [ 1095.785839] vm_mmap_pgoff+0x198/0x1f0 [ 1095.786704] ? randomize_page+0xb0/0xb0 [ 1095.787587] ksys_mmap_pgoff+0x41c/0x560 [ 1095.788474] ? find_mergeable_anon_vma+0x250/0x250 [ 1095.789556] do_syscall_64+0x33/0x40 [ 1095.790378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.791494] RIP: 0033:0x7fd0cc9f8b19 [ 1095.792116] FAULT_INJECTION: forcing a failure. [ 1095.792116] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.792303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.792323] RSP: 002b:00007fd0c9f6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1095.800458] RAX: ffffffffffffffda RBX: 00007fd0ccb0bf60 RCX: 00007fd0cc9f8b19 [ 1095.802021] RDX: 000000000000000d RSI: 0000000000002000 RDI: 0000000020ffd000 [ 1095.803572] RBP: 00007fd0c9f6e1d0 R08: 0000000000000003 R09: 0000000008000000 [ 1095.805121] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1095.806685] R13: 00007ffe5a99e05f R14: 00007fd0c9f6e300 R15: 0000000000022000 [ 1095.808267] CPU: 1 PID: 7307 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1095.809768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.811608] Call Trace: [ 1095.812190] dump_stack+0x107/0x167 [ 1095.812994] should_fail.cold+0x5/0xa [ 1095.813834] ? create_object.isra.0+0x3a/0xa30 [ 1095.814195] FAULT_INJECTION: forcing a failure. [ 1095.814195] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.814828] should_failslab+0x5/0x20 [ 1095.814848] kmem_cache_alloc+0x5b/0x310 [ 1095.814873] create_object.isra.0+0x3a/0xa30 [ 1095.814899] kmemleak_alloc_percpu+0xa0/0x100 [ 1095.820882] pcpu_alloc+0x4e2/0x1240 [ 1095.821708] ? io_async_queue_proc+0x80/0x80 [ 1095.822688] percpu_ref_init+0x31/0x3d0 [ 1095.823561] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1095.824747] io_uring_setup+0x14f6/0x2980 [ 1095.825661] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1095.826777] ? wait_for_completion_io+0x270/0x270 [ 1095.827858] do_syscall_64+0x33/0x40 [ 1095.828669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.829789] RIP: 0033:0x7f2e49e79b19 [ 1095.830609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.834631] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1095.836290] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1095.837853] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1095.839409] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1095.840984] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1095.842562] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1095.844155] CPU: 0 PID: 7308 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1095.845677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.847504] Call Trace: [ 1095.848080] dump_stack+0x107/0x167 [ 1095.848889] should_fail.cold+0x5/0xa [ 1095.849747] ? percpu_ref_init+0xd8/0x3d0 [ 1095.850674] should_failslab+0x5/0x20 [ 1095.851523] kmem_cache_alloc_trace+0x55/0x320 [ 1095.852541] ? io_tctx_exit_cb+0xf0/0xf0 [ 1095.853442] percpu_ref_init+0xd8/0x3d0 [ 1095.854330] io_uring_setup+0x47a/0x2980 [ 1095.855234] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1095.856309] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1095.857432] ? wait_for_completion_io+0x270/0x270 [ 1095.858527] do_syscall_64+0x33/0x40 [ 1095.859349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.860480] RIP: 0033:0x7fbd4ba01b19 [ 1095.861303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.865339] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1095.867026] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1095.868602] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1095.870180] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1095.871757] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1095.873329] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1095.890842] FAULT_INJECTION: forcing a failure. [ 1095.890842] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.893371] CPU: 0 PID: 7296 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1095.894885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.896719] Call Trace: [ 1095.897298] dump_stack+0x107/0x167 [ 1095.898120] should_fail.cold+0x5/0xa [ 1095.898964] ? dup_fd+0x89/0xe40 [ 1095.899712] should_failslab+0x5/0x20 [ 1095.900560] kmem_cache_alloc+0x5b/0x310 [ 1095.901472] dup_fd+0x89/0xe40 [ 1095.902193] ? audit_filter_inodes+0x40/0x40 [ 1095.903170] ? security_task_alloc+0xe6/0x260 [ 1095.904171] copy_process+0x197c/0x78b0 [ 1095.905055] ? SOFTIRQ_verbose+0x10/0x10 [ 1095.905971] ? mark_lock+0xf5/0x2df0 [ 1095.906826] ? __cleanup_sighand+0xb0/0xb0 [ 1095.907788] ? _copy_from_user+0xfb/0x1b0 [ 1095.908731] kernel_clone+0xe7/0x980 [ 1095.909564] ? lock_acquire+0x197/0x470 [ 1095.910452] ? create_io_thread+0xf0/0xf0 [ 1095.911391] ? ksys_write+0x21a/0x260 [ 1095.912241] ? lock_downgrade+0x6d0/0x6d0 [ 1095.913170] __do_sys_clone3+0x1e5/0x320 [ 1095.914081] ? __do_sys_clone+0x110/0x110 [ 1095.915024] ? rcu_read_lock_any_held+0x75/0xa0 [ 1095.916053] ? vfs_write+0x354/0xb10 [ 1095.916885] ? fput_many+0x2f/0x1a0 [ 1095.917694] ? ksys_write+0x1a9/0x260 [ 1095.918540] ? __ia32_sys_read+0xb0/0xb0 [ 1095.919458] do_syscall_64+0x33/0x40 [ 1095.920288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.921430] RIP: 0033:0x7fd89e327b19 [ 1095.922262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.926365] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1095.928045] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1095.929621] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1095.931202] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.932775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1095.934355] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:23:51 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8002000) 02:23:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8, 0x1f012, r0, 0x0) 02:23:51 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 5) 02:23:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 11) 02:23:51 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)}, {&(0x7f0000001400)="17", 0x1}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1096.026524] FAULT_INJECTION: forcing a failure. [ 1096.026524] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.029025] CPU: 0 PID: 7318 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1096.030509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.032284] Call Trace: [ 1096.032852] dump_stack+0x107/0x167 [ 1096.033640] should_fail.cold+0x5/0xa [ 1096.034470] ? vm_area_alloc+0x1c/0x110 [ 1096.035328] should_failslab+0x5/0x20 [ 1096.036149] kmem_cache_alloc+0x5b/0x310 [ 1096.037031] vm_area_alloc+0x1c/0x110 [ 1096.037884] mmap_region+0x982/0x1500 [ 1096.038720] do_mmap+0x868/0x1370 [ 1096.039500] vm_mmap_pgoff+0x198/0x1f0 [ 1096.040367] ? randomize_page+0xb0/0xb0 [ 1096.041265] ksys_mmap_pgoff+0x41c/0x560 [ 1096.042178] ? find_mergeable_anon_vma+0x250/0x250 [ 1096.043277] do_syscall_64+0x33/0x40 [ 1096.044104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.045242] RIP: 0033:0x7fd0cc9f8b19 [ 1096.046076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.050245] RSP: 002b:00007fd0c9f6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1096.052067] RAX: ffffffffffffffda RBX: 00007fd0ccb0bf60 RCX: 00007fd0cc9f8b19 [ 1096.053657] RDX: 000000000000000d RSI: 0000000000002000 RDI: 0000000020ffd000 [ 1096.055250] RBP: 00007fd0c9f6e1d0 R08: 0000000000000003 R09: 0000000008000000 [ 1096.056836] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1096.058426] R13: 00007ffe5a99e05f R14: 00007fd0c9f6e300 R15: 0000000000022000 02:23:51 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8004000) [ 1096.093433] FAULT_INJECTION: forcing a failure. [ 1096.093433] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.095985] CPU: 0 PID: 7322 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1096.097514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.099375] Call Trace: [ 1096.099959] dump_stack+0x107/0x167 [ 1096.100774] should_fail.cold+0x5/0xa [ 1096.101626] ? create_object.isra.0+0x3a/0xa30 [ 1096.102649] should_failslab+0x5/0x20 [ 1096.103500] kmem_cache_alloc+0x5b/0x310 [ 1096.104418] create_object.isra.0+0x3a/0xa30 [ 1096.105397] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.106546] kmem_cache_alloc_trace+0x151/0x320 [ 1096.107587] ? io_tctx_exit_cb+0xf0/0xf0 [ 1096.108494] percpu_ref_init+0xd8/0x3d0 [ 1096.109388] io_uring_setup+0x47a/0x2980 [ 1096.110304] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1096.111369] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1096.112480] ? wait_for_completion_io+0x270/0x270 [ 1096.113573] do_syscall_64+0x33/0x40 [ 1096.114405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.115536] RIP: 0033:0x7fbd4ba01b19 [ 1096.116356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.120424] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1096.122127] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1096.123705] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1096.125280] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1096.126862] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1096.128438] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:23:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 18) 02:23:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1f012, r0, 0x0) 02:23:51 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 6) 02:23:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) [ 1096.201888] FAULT_INJECTION: forcing a failure. [ 1096.201888] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.204285] CPU: 0 PID: 7329 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1096.205725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.207460] Call Trace: [ 1096.208015] dump_stack+0x107/0x167 [ 1096.208773] should_fail.cold+0x5/0xa [ 1096.209566] ? create_object.isra.0+0x3a/0xa30 [ 1096.210526] should_failslab+0x5/0x20 [ 1096.211320] kmem_cache_alloc+0x5b/0x310 [ 1096.212166] create_object.isra.0+0x3a/0xa30 [ 1096.213078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.214143] kmem_cache_alloc+0x159/0x310 [ 1096.215016] vm_area_alloc+0x1c/0x110 [ 1096.215804] mmap_region+0x982/0x1500 [ 1096.215944] FAULT_INJECTION: forcing a failure. [ 1096.215944] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.216628] do_mmap+0x868/0x1370 [ 1096.216665] vm_mmap_pgoff+0x198/0x1f0 [ 1096.220705] ? randomize_page+0xb0/0xb0 [ 1096.221534] ksys_mmap_pgoff+0x41c/0x560 [ 1096.222381] ? find_mergeable_anon_vma+0x250/0x250 [ 1096.223399] do_syscall_64+0x33/0x40 [ 1096.224162] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.225216] RIP: 0033:0x7fd0cc9f8b19 [ 1096.225990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.229787] RSP: 002b:00007fd0c9f6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1096.231369] RAX: ffffffffffffffda RBX: 00007fd0ccb0bf60 RCX: 00007fd0cc9f8b19 [ 1096.232841] RDX: 000000000000000d RSI: 0000000000002000 RDI: 0000000020ffd000 [ 1096.234314] RBP: 00007fd0c9f6e1d0 R08: 0000000000000003 R09: 0000000008000000 [ 1096.235786] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1096.237250] R13: 00007ffe5a99e05f R14: 00007fd0c9f6e300 R15: 0000000000022000 [ 1096.238755] CPU: 1 PID: 7330 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1096.240332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.242241] Call Trace: [ 1096.242846] dump_stack+0x107/0x167 [ 1096.243677] should_fail.cold+0x5/0xa [ 1096.244546] ? percpu_ref_init+0xd8/0x3d0 [ 1096.245485] should_failslab+0x5/0x20 [ 1096.246360] kmem_cache_alloc_trace+0x55/0x320 [ 1096.247404] ? io_async_queue_proc+0x80/0x80 [ 1096.248410] percpu_ref_init+0xd8/0x3d0 [ 1096.249319] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1096.250560] io_uring_setup+0x14f6/0x2980 [ 1096.251514] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1096.252659] ? wait_for_completion_io+0x270/0x270 [ 1096.253787] do_syscall_64+0x33/0x40 [ 1096.254641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.255807] RIP: 0033:0x7f2e49e79b19 [ 1096.256652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.260848] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1096.262585] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1096.264206] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1096.265826] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1096.267460] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1096.269079] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1096.276905] FAULT_INJECTION: forcing a failure. [ 1096.276905] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.279617] CPU: 1 PID: 7332 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1096.281179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.283073] Call Trace: [ 1096.283672] dump_stack+0x107/0x167 [ 1096.284504] should_fail.cold+0x5/0xa [ 1096.285374] ? create_object.isra.0+0x3a/0xa30 [ 1096.286421] should_failslab+0x5/0x20 [ 1096.287285] kmem_cache_alloc+0x5b/0x310 [ 1096.288211] create_object.isra.0+0x3a/0xa30 [ 1096.289207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.290375] kmem_cache_alloc+0x159/0x310 [ 1096.291324] dup_fd+0x89/0xe40 [ 1096.292055] ? audit_filter_inodes+0x40/0x40 [ 1096.293060] ? security_task_alloc+0xe6/0x260 [ 1096.294094] copy_process+0x197c/0x78b0 [ 1096.294997] ? SOFTIRQ_verbose+0x10/0x10 [ 1096.295927] ? mark_lock+0xf5/0x2df0 [ 1096.296797] ? __cleanup_sighand+0xb0/0xb0 [ 1096.297780] ? _copy_from_user+0xfb/0x1b0 [ 1096.298739] kernel_clone+0xe7/0x980 [ 1096.299585] ? lock_acquire+0x197/0x470 [ 1096.300488] ? create_io_thread+0xf0/0xf0 [ 1096.301441] ? ksys_write+0x21a/0x260 [ 1096.302325] ? lock_downgrade+0x6d0/0x6d0 [ 1096.303271] __do_sys_clone3+0x1e5/0x320 [ 1096.304192] ? __do_sys_clone+0x110/0x110 [ 1096.305155] ? rcu_read_lock_any_held+0x75/0xa0 [ 1096.306220] ? vfs_write+0x354/0xb10 [ 1096.307065] ? fput_many+0x2f/0x1a0 [ 1096.307890] ? ksys_write+0x1a9/0x260 [ 1096.308757] ? __ia32_sys_read+0xb0/0xb0 [ 1096.309693] do_syscall_64+0x33/0x40 [ 1096.310552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.311720] RIP: 0033:0x7fd89e327b19 [ 1096.312565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.316751] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1096.318498] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1096.320116] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1096.321738] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.323369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.324994] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:24:04 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)}, {&(0x7f0000001400)="17", 0x1}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:24:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 02:24:04 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8006000) 02:24:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x20010, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1109.454153] FAULT_INJECTION: forcing a failure. [ 1109.454153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1109.455809] CPU: 0 PID: 7350 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1109.456742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.457879] Call Trace: [ 1109.458251] dump_stack+0x107/0x167 [ 1109.458762] should_fail.cold+0x5/0xa [ 1109.459278] __alloc_pages_nodemask+0x182/0x600 [ 1109.459918] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1109.460746] ? cap_capable+0x1cd/0x230 [ 1109.461286] alloc_pages_current+0x187/0x280 [ 1109.461889] __get_free_pages+0xc/0xa0 [ 1109.462424] io_uring_setup+0xe27/0x2980 [ 1109.462984] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1109.463676] ? wait_for_completion_io+0x270/0x270 [ 1109.464350] do_syscall_64+0x33/0x40 [ 1109.464859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1109.465565] RIP: 0033:0x7fbd4ba01b19 [ 1109.466081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.468576] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1109.469624] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1109.470594] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1109.471551] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1109.472511] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1109.473478] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1109.477556] FAULT_INJECTION: forcing a failure. [ 1109.477556] name failslab, interval 1, probability 0, space 0, times 0 02:24:05 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 12) 02:24:05 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 7) 02:24:05 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 19) 02:24:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x1f012, r0, 0x0) [ 1109.480316] CPU: 1 PID: 7346 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1109.481826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.483665] Call Trace: [ 1109.484265] dump_stack+0x107/0x167 [ 1109.485133] should_fail.cold+0x5/0xa [ 1109.486002] ? create_object.isra.0+0x3a/0xa30 [ 1109.486999] should_failslab+0x5/0x20 [ 1109.487818] kmem_cache_alloc+0x5b/0x310 02:24:05 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0xa000000) [ 1109.488696] create_object.isra.0+0x3a/0xa30 [ 1109.489735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1109.490856] kmem_cache_alloc+0x159/0x310 [ 1109.491737] FAULT_INJECTION: forcing a failure. [ 1109.491737] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.494103] vm_area_dup+0x78/0x290 [ 1109.494917] ? find_held_lock+0x2c/0x110 [ 1109.495792] ? __vma_adjust+0xf3f/0x2510 [ 1109.496666] ? lock_downgrade+0x6d0/0x6d0 [ 1109.497574] ? uprobe_mmap+0x122/0xfc0 [ 1109.498414] ? up_write+0x191/0x550 [ 1109.499217] ? uprobe_apply+0x150/0x150 [ 1109.500068] ? vma_interval_tree_remove+0x694/0xec0 [ 1109.501102] ? vm_area_alloc+0x110/0x110 [ 1109.501967] ? __vma_adjust+0xbb8/0x2510 [ 1109.502862] ? vmacache_find+0x55/0x2a0 [ 1109.503736] __split_vma+0xa8/0x4e0 [ 1109.504511] __do_munmap+0xf40/0x1260 [ 1109.505312] ? arch_get_unmapped_area+0x450/0x450 [ 1109.506356] mmap_region+0x7cc/0x1500 [ 1109.507182] do_mmap+0x868/0x1370 [ 1109.507937] vm_mmap_pgoff+0x198/0x1f0 [ 1109.508791] ? randomize_page+0xb0/0xb0 [ 1109.509687] ksys_mmap_pgoff+0x41c/0x560 [ 1109.510579] ? find_mergeable_anon_vma+0x250/0x250 [ 1109.511632] do_syscall_64+0x33/0x40 [ 1109.512403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1109.513456] RIP: 0033:0x7fd0cc9f8b19 [ 1109.514231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.518019] RSP: 002b:00007fd0c9f6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1109.519573] RAX: ffffffffffffffda RBX: 00007fd0ccb0bf60 RCX: 00007fd0cc9f8b19 [ 1109.521087] RDX: 000000000000000d RSI: 0000000000002000 RDI: 0000000020ffd000 [ 1109.522576] RBP: 00007fd0c9f6e1d0 R08: 0000000000000003 R09: 0000000008000000 [ 1109.524088] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1109.525577] R13: 00007ffe5a99e05f R14: 00007fd0c9f6e300 R15: 0000000000022000 [ 1109.527126] CPU: 0 PID: 7355 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1109.528093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.529209] Call Trace: [ 1109.529247] FAULT_INJECTION: forcing a failure. [ 1109.529247] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.529564] dump_stack+0x107/0x167 [ 1109.529585] should_fail.cold+0x5/0xa [ 1109.532872] ? alloc_fdtable+0x9e/0x2c0 [ 1109.533394] should_failslab+0x5/0x20 [ 1109.533910] kmem_cache_alloc_trace+0x55/0x320 [ 1109.534532] ? rwlock_bug.part.0+0x90/0x90 [ 1109.535092] alloc_fdtable+0x9e/0x2c0 [ 1109.535597] dup_fd+0x92d/0xe40 [ 1109.536057] copy_process+0x197c/0x78b0 [ 1109.536578] ? SOFTIRQ_verbose+0x10/0x10 [ 1109.537129] ? mark_lock+0xf5/0x2df0 [ 1109.537632] ? __cleanup_sighand+0xb0/0xb0 [ 1109.538209] ? _copy_from_user+0xfb/0x1b0 [ 1109.538769] kernel_clone+0xe7/0x980 [ 1109.539267] ? lock_acquire+0x197/0x470 [ 1109.539794] ? create_io_thread+0xf0/0xf0 [ 1109.540351] ? ksys_write+0x21a/0x260 [ 1109.540856] ? lock_downgrade+0x6d0/0x6d0 [ 1109.541417] __do_sys_clone3+0x1e5/0x320 [ 1109.541966] ? __do_sys_clone+0x110/0x110 [ 1109.542530] ? rcu_read_lock_any_held+0x75/0xa0 [ 1109.543134] ? vfs_write+0x354/0xb10 [ 1109.543624] ? fput_many+0x2f/0x1a0 [ 1109.544107] ? ksys_write+0x1a9/0x260 [ 1109.544611] ? __ia32_sys_read+0xb0/0xb0 [ 1109.545157] do_syscall_64+0x33/0x40 [ 1109.545657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1109.546345] RIP: 0033:0x7fd89e327b19 [ 1109.546834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.549248] RSP: 002b:00007fd89b87c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1109.550267] RAX: ffffffffffffffda RBX: 00007fd89e43b020 RCX: 00007fd89e327b19 [ 1109.551203] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1109.552146] RBP: 00007fd89b87c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.553089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1109.554031] R13: 00007ffdf34b7aef R14: 00007fd89b87c300 R15: 0000000000022000 [ 1109.554992] CPU: 1 PID: 7352 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1109.556439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.558183] Call Trace: [ 1109.558739] dump_stack+0x107/0x167 [ 1109.559514] should_fail.cold+0x5/0xa [ 1109.560312] ? create_object.isra.0+0x3a/0xa30 [ 1109.561262] should_failslab+0x5/0x20 [ 1109.562053] kmem_cache_alloc+0x5b/0x310 [ 1109.562915] create_object.isra.0+0x3a/0xa30 [ 1109.563826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1109.564902] kmem_cache_alloc_trace+0x151/0x320 [ 1109.565876] ? io_async_queue_proc+0x80/0x80 [ 1109.566799] percpu_ref_init+0xd8/0x3d0 02:24:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x20200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1109.567648] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1109.568964] io_uring_setup+0x14f6/0x2980 [ 1109.569852] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1109.570918] ? wait_for_completion_io+0x270/0x270 [ 1109.571953] do_syscall_64+0x33/0x40 [ 1109.572769] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1109.573849] RIP: 0033:0x7f2e49e79b19 [ 1109.574651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.578509] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1109.580115] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1109.581607] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1109.583099] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1109.584607] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1109.586103] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:24:05 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x1}], 0x2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:24:05 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 13) 02:24:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x80000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:24:05 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x10000000) 02:24:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) 02:24:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10, 0x1f012, r0, 0x0) [ 1109.694523] FAULT_INJECTION: forcing a failure. [ 1109.694523] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1109.695781] FAULT_INJECTION: forcing a failure. [ 1109.695781] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.696037] CPU: 0 PID: 7369 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1109.699231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.700250] Call Trace: [ 1109.700589] dump_stack+0x107/0x167 [ 1109.701034] should_fail.cold+0x5/0xa [ 1109.701503] __alloc_pages_nodemask+0x182/0x600 [ 1109.702085] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1109.702846] ? cap_capable+0x1cd/0x230 [ 1109.703326] alloc_pages_current+0x187/0x280 [ 1109.703861] __get_free_pages+0xc/0xa0 [ 1109.704334] io_uring_setup+0xf9a/0x2980 [ 1109.704846] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1109.705478] ? wait_for_completion_io+0x270/0x270 [ 1109.706104] do_syscall_64+0x33/0x40 [ 1109.706570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1109.707210] RIP: 0033:0x7fbd4ba01b19 [ 1109.707674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.709945] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1109.710896] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1109.711771] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1109.712649] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1109.713528] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1109.714412] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1109.715328] CPU: 1 PID: 7370 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1109.716774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.718527] Call Trace: [ 1109.719087] dump_stack+0x107/0x167 [ 1109.719866] should_fail.cold+0x5/0xa [ 1109.720666] ? create_object.isra.0+0x3a/0xa30 [ 1109.721650] should_failslab+0x5/0x20 [ 1109.722469] kmem_cache_alloc+0x5b/0x310 [ 1109.723330] create_object.isra.0+0x3a/0xa30 [ 1109.724244] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1109.725322] kmem_cache_alloc_trace+0x151/0x320 [ 1109.726309] ? rwlock_bug.part.0+0x90/0x90 [ 1109.727213] alloc_fdtable+0x9e/0x2c0 [ 1109.728011] dup_fd+0x92d/0xe40 [ 1109.728726] copy_process+0x197c/0x78b0 [ 1109.729615] ? SOFTIRQ_verbose+0x10/0x10 [ 1109.730540] ? mark_lock+0xf5/0x2df0 [ 1109.731361] ? __cleanup_sighand+0xb0/0xb0 [ 1109.732267] ? _copy_from_user+0xfb/0x1b0 [ 1109.733148] kernel_clone+0xe7/0x980 [ 1109.733933] ? lock_acquire+0x197/0x470 [ 1109.734787] ? create_io_thread+0xf0/0xf0 [ 1109.735672] ? ksys_write+0x21a/0x260 [ 1109.736478] ? lock_downgrade+0x6d0/0x6d0 [ 1109.737367] __do_sys_clone3+0x1e5/0x320 [ 1109.738227] ? __do_sys_clone+0x110/0x110 [ 1109.739121] ? rcu_read_lock_any_held+0x75/0xa0 [ 1109.740115] ? vfs_write+0x354/0xb10 [ 1109.740900] ? fput_many+0x2f/0x1a0 [ 1109.741662] ? ksys_write+0x1a9/0x260 [ 1109.742470] ? __ia32_sys_read+0xb0/0xb0 [ 1109.743336] do_syscall_64+0x33/0x40 [ 1109.744119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1109.745209] RIP: 0033:0x7fd89e327b19 [ 1109.746007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.749881] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1109.751488] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1109.752987] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1109.754495] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.755998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1109.757499] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:24:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 14) 02:24:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 02:24:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:24:19 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x3) 02:24:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x321, 0x1f012, r0, 0x0) 02:24:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 20) 02:24:19 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x1}], 0x2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:24:19 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 8) [ 1123.625989] FAULT_INJECTION: forcing a failure. [ 1123.625989] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.628944] CPU: 0 PID: 7386 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1123.630712] FAULT_INJECTION: forcing a failure. [ 1123.630712] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.630729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.630741] Call Trace: [ 1123.635278] dump_stack+0x107/0x167 [ 1123.636209] should_fail.cold+0x5/0xa [ 1123.637186] ? kvmalloc_node+0x119/0x170 [ 1123.638247] should_failslab+0x5/0x20 [ 1123.639223] __kmalloc_node+0x76/0x420 [ 1123.640234] kvmalloc_node+0x119/0x170 [ 1123.641230] alloc_fdtable+0xed/0x2c0 [ 1123.642212] dup_fd+0x92d/0xe40 [ 1123.643080] copy_process+0x197c/0x78b0 [ 1123.644108] ? SOFTIRQ_verbose+0x10/0x10 [ 1123.645174] ? mark_lock+0xf5/0x2df0 [ 1123.646165] ? __cleanup_sighand+0xb0/0xb0 [ 1123.647294] ? _copy_from_user+0xfb/0x1b0 [ 1123.648386] kernel_clone+0xe7/0x980 [ 1123.649354] ? lock_acquire+0x197/0x470 [ 1123.650400] ? create_io_thread+0xf0/0xf0 [ 1123.651490] ? ksys_write+0x21a/0x260 [ 1123.652484] ? lock_downgrade+0x6d0/0x6d0 [ 1123.653564] __do_sys_clone3+0x1e5/0x320 [ 1123.654631] ? __do_sys_clone+0x110/0x110 [ 1123.655726] ? rcu_read_lock_any_held+0x75/0xa0 [ 1123.656920] ? vfs_write+0x354/0xb10 [ 1123.657890] ? fput_many+0x2f/0x1a0 [ 1123.658836] ? ksys_write+0x1a9/0x260 [ 1123.659813] ? __ia32_sys_read+0xb0/0xb0 [ 1123.660882] do_syscall_64+0x33/0x40 [ 1123.661850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.663196] RIP: 0033:0x7fd89e327b19 [ 1123.664162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.668582] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1123.670215] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1123.671738] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1123.673256] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1123.674782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1123.676302] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1123.677850] CPU: 1 PID: 7393 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1123.678985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.680320] Call Trace: [ 1123.680754] dump_stack+0x107/0x167 [ 1123.681354] should_fail.cold+0x5/0xa [ 1123.681974] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1123.682883] should_failslab+0x5/0x20 [ 1123.683501] kmem_cache_alloc_trace+0x55/0x320 [ 1123.684239] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1123.685128] io_uring_setup+0x14f6/0x2980 [ 1123.685799] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1123.686647] ? wait_for_completion_io+0x270/0x270 [ 1123.686874] FAULT_INJECTION: forcing a failure. [ 1123.686874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.687449] do_syscall_64+0x33/0x40 [ 1123.687473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.691318] RIP: 0033:0x7fbd4ba01b19 [ 1123.691918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.694884] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1123.696082] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1123.697252] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1123.698400] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1123.699554] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1123.700707] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1123.701885] CPU: 0 PID: 7388 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1123.703372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.705151] Call Trace: [ 1123.705730] dump_stack+0x107/0x167 [ 1123.706527] should_fail.cold+0x5/0xa [ 1123.707358] _copy_to_user+0x2e/0x180 [ 1123.708180] io_uring_setup+0x11b5/0x2980 [ 1123.709079] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1123.710176] ? wait_for_completion_io+0x270/0x270 [ 1123.711244] do_syscall_64+0x33/0x40 [ 1123.712045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.713143] RIP: 0033:0x7f2e49e79b19 [ 1123.713942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.717890] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1123.719533] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1123.721061] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1123.722600] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1123.724130] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1123.725658] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:24:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa00, 0x1f012, r0, 0x0) [ 1123.746094] FAULT_INJECTION: forcing a failure. [ 1123.746094] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.748597] CPU: 0 PID: 7396 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1123.750060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.751840] Call Trace: [ 1123.752417] dump_stack+0x107/0x167 [ 1123.753193] should_fail.cold+0x5/0xa [ 1123.754011] ? create_object.isra.0+0x3a/0xa30 [ 1123.754992] should_failslab+0x5/0x20 [ 1123.755802] kmem_cache_alloc+0x5b/0x310 [ 1123.756678] create_object.isra.0+0x3a/0xa30 [ 1123.757620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1123.758718] kmem_cache_alloc_trace+0x151/0x320 [ 1123.759721] perf_event_mmap+0x51a/0xd90 [ 1123.760598] ? perf_event_namespaces+0x50/0x50 [ 1123.761596] ? vma_link+0x619/0x820 [ 1123.762384] mmap_region+0x3a6/0x1500 [ 1123.763216] do_mmap+0x868/0x1370 [ 1123.763965] vm_mmap_pgoff+0x198/0x1f0 [ 1123.764804] ? randomize_page+0xb0/0xb0 [ 1123.765676] ksys_mmap_pgoff+0x41c/0x560 [ 1123.766558] ? find_mergeable_anon_vma+0x250/0x250 [ 1123.767626] do_syscall_64+0x33/0x40 [ 1123.768423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.769517] RIP: 0033:0x7fd0cc9f8b19 [ 1123.770322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.774247] RSP: 002b:00007fd0c9f6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1123.775872] RAX: ffffffffffffffda RBX: 00007fd0ccb0bf60 RCX: 00007fd0cc9f8b19 [ 1123.777404] RDX: 000000000000000d RSI: 0000000000002000 RDI: 0000000020ffd000 [ 1123.778928] RBP: 00007fd0c9f6e1d0 R08: 0000000000000003 R09: 0000000008000000 [ 1123.780448] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1123.781972] R13: 00007ffe5a99e05f R14: 00007fd0c9f6e300 R15: 0000000000022000 02:24:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) 02:24:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0xf0ff1f, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:24:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc00, 0x1f012, r0, 0x0) 02:24:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 21) 02:24:19 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) (fail_nth: 9) 02:24:19 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x1}], 0x2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:24:19 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x40010, r0, 0x10000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000640)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f0000000580)="d17d80d2c40db1f9a5c8aab0d145b0a2a9998afb0a084380dd3b06030fb74fd1c7f3e0c2e0eddb2174e92534ecfcf0d954bc3283b47c632a81f5d642314fb17fd60907a67589bee19cf646bea156bbc0c71d26c654fd915ff9506b7188b4074fb7395e32afffcd289508f61a03c027b242ada9470e796e2810e96c6093847180e2f314", 0x83, 0x20, 0x1}, 0x7f) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) [ 1123.894889] FAULT_INJECTION: forcing a failure. [ 1123.894889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.896833] CPU: 1 PID: 7406 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1123.897945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.899299] Call Trace: [ 1123.899733] dump_stack+0x107/0x167 [ 1123.900337] should_fail.cold+0x5/0xa [ 1123.900974] _copy_to_user+0x2e/0x180 [ 1123.901594] simple_read_from_buffer+0xcc/0x160 [ 1123.902343] proc_fail_nth_read+0x198/0x230 [ 1123.903043] ? proc_sessionid_read+0x230/0x230 [ 1123.903790] ? security_file_permission+0xb1/0xe0 [ 1123.904596] ? proc_sessionid_read+0x230/0x230 [ 1123.905332] vfs_read+0x228/0x620 [ 1123.905898] ksys_read+0x12d/0x260 [ 1123.906485] ? vfs_write+0xb10/0xb10 [ 1123.907090] do_syscall_64+0x33/0x40 [ 1123.907696] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.908501] RIP: 0033:0x7fd0cc9ab69c [ 1123.909103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1123.912063] RSP: 002b:00007fd0c9f6e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1123.913303] RAX: ffffffffffffffda RBX: 0000000020ffd000 RCX: 00007fd0cc9ab69c [ 1123.914461] RDX: 000000000000000f RSI: 00007fd0c9f6e1e0 RDI: 0000000000000004 [ 1123.915601] RBP: 00007fd0c9f6e1d0 R08: 0000000000000000 R09: 0000000008000000 [ 1123.916753] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1123.917906] R13: 00007ffe5a99e05f R14: 00007fd0c9f6e300 R15: 0000000000022000 [ 1123.921575] FAULT_INJECTION: forcing a failure. [ 1123.921575] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.923495] CPU: 1 PID: 7409 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1123.924615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.925962] Call Trace: [ 1123.926396] dump_stack+0x107/0x167 [ 1123.926984] should_fail.cold+0x5/0xa [ 1123.927620] ? create_object.isra.0+0x3a/0xa30 [ 1123.928371] should_failslab+0x5/0x20 [ 1123.928987] kmem_cache_alloc+0x5b/0x310 [ 1123.929640] create_object.isra.0+0x3a/0xa30 [ 1123.930367] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1123.931194] __kmalloc_node+0x1ae/0x420 [ 1123.931837] kvmalloc_node+0x119/0x170 [ 1123.932481] alloc_fdtable+0xed/0x2c0 [ 1123.933091] dup_fd+0x92d/0xe40 [ 1123.933636] copy_process+0x197c/0x78b0 [ 1123.934294] ? SOFTIRQ_verbose+0x10/0x10 [ 1123.934937] FAULT_INJECTION: forcing a failure. [ 1123.934937] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.934969] ? mark_lock+0xf5/0x2df0 [ 1123.937976] ? __cleanup_sighand+0xb0/0xb0 [ 1123.938676] ? _copy_from_user+0xfb/0x1b0 [ 1123.939351] kernel_clone+0xe7/0x980 [ 1123.939953] ? lock_acquire+0x197/0x470 [ 1123.940598] ? create_io_thread+0xf0/0xf0 [ 1123.941281] ? ksys_write+0x21a/0x260 [ 1123.941886] ? lock_downgrade+0x6d0/0x6d0 [ 1123.942566] __do_sys_clone3+0x1e5/0x320 [ 1123.943203] ? __do_sys_clone+0x110/0x110 [ 1123.943888] ? rcu_read_lock_any_held+0x75/0xa0 [ 1123.944647] ? vfs_write+0x354/0xb10 [ 1123.945248] ? fput_many+0x2f/0x1a0 [ 1123.945834] ? ksys_write+0x1a9/0x260 [ 1123.946461] ? __ia32_sys_read+0xb0/0xb0 [ 1123.947133] do_syscall_64+0x33/0x40 [ 1123.947738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.948565] RIP: 0033:0x7fd89e327b19 [ 1123.949153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.952140] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1123.953384] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1123.954538] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1123.955686] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1123.956838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1123.957989] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1123.959157] CPU: 0 PID: 7410 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1123.960917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.963073] Call Trace: [ 1123.963760] dump_stack+0x107/0x167 [ 1123.964704] should_fail.cold+0x5/0xa [ 1123.965693] ? __d_alloc+0x2a/0x990 [ 1123.966649] should_failslab+0x5/0x20 [ 1123.967637] kmem_cache_alloc+0x5b/0x310 [ 1123.968689] __d_alloc+0x2a/0x990 [ 1123.969584] ? find_held_lock+0x2c/0x110 [ 1123.970663] d_alloc_pseudo+0x19/0x70 [ 1123.971642] alloc_file_pseudo+0xce/0x250 [ 1123.972703] ? trace_hardirqs_on+0x5b/0x180 [ 1123.973808] ? alloc_file+0x5a0/0x5a0 [ 1123.974836] anon_inode_getfile+0xc8/0x1f0 [ 1123.975944] io_uring_setup+0x138b/0x2980 [ 1123.977016] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1123.978325] ? wait_for_completion_io+0x270/0x270 [ 1123.979600] do_syscall_64+0x33/0x40 [ 1123.980556] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1123.981873] RIP: 0033:0x7f2e49e79b19 [ 1123.982836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.987565] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1123.989520] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1123.991367] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1123.993197] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1123.995015] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1123.996813] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:24:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) 02:24:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 15) 02:24:37 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 22) 02:24:37 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:24:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:24:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2103, 0x1f012, r0, 0x0) 02:24:37 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3f) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000180)={'netpci0\x00'}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x1, @random="e70d830e2f71"}, 0xc, {0x2, 0x4e22, @loopback}, 'netpci0\x00'}) 02:24:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1141.673302] FAULT_INJECTION: forcing a failure. [ 1141.673302] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.674752] CPU: 1 PID: 7433 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1141.675531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.676536] Call Trace: [ 1141.676856] dump_stack+0x107/0x167 [ 1141.677300] should_fail.cold+0x5/0xa [ 1141.677766] ? create_object.isra.0+0x3a/0xa30 [ 1141.678316] should_failslab+0x5/0x20 [ 1141.678785] kmem_cache_alloc+0x5b/0x310 [ 1141.679286] create_object.isra.0+0x3a/0xa30 [ 1141.679820] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.680413] kmem_cache_alloc+0x159/0x310 [ 1141.680922] __d_alloc+0x2a/0x990 [ 1141.681345] ? find_held_lock+0x2c/0x110 [ 1141.681818] d_alloc_pseudo+0x19/0x70 [ 1141.682281] alloc_file_pseudo+0xce/0x250 [ 1141.682793] ? trace_hardirqs_on+0x5b/0x180 [ 1141.683314] ? alloc_file+0x5a0/0x5a0 [ 1141.683767] anon_inode_getfile+0xc8/0x1f0 [ 1141.684285] io_uring_setup+0x138b/0x2980 [ 1141.684795] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1141.685419] ? wait_for_completion_io+0x270/0x270 [ 1141.686020] do_syscall_64+0x33/0x40 [ 1141.686485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.687109] RIP: 0033:0x7f2e49e79b19 [ 1141.687544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.689783] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1141.690715] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1141.691585] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1141.692408] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1141.692962] FAULT_INJECTION: forcing a failure. [ 1141.692962] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.693267] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1141.693275] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1141.698963] CPU: 0 PID: 7437 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1141.699706] FAULT_INJECTION: forcing a failure. [ 1141.699706] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.700535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.700542] Call Trace: [ 1141.700572] dump_stack+0x107/0x167 [ 1141.705209] should_fail.cold+0x5/0xa [ 1141.706101] ? create_object.isra.0+0x3a/0xa30 [ 1141.707155] should_failslab+0x5/0x20 [ 1141.708011] kmem_cache_alloc+0x5b/0x310 [ 1141.708960] create_object.isra.0+0x3a/0xa30 [ 1141.709981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.711192] __kmalloc_node+0x1ae/0x420 [ 1141.712130] kvmalloc_node+0x119/0x170 [ 1141.713043] alloc_fdtable+0xed/0x2c0 [ 1141.713913] dup_fd+0x92d/0xe40 [ 1141.714694] copy_process+0x197c/0x78b0 [ 1141.715617] ? SOFTIRQ_verbose+0x10/0x10 [ 1141.716562] ? mark_lock+0xf5/0x2df0 [ 1141.717445] ? __cleanup_sighand+0xb0/0xb0 [ 1141.718478] ? _copy_from_user+0xfb/0x1b0 [ 1141.719457] kernel_clone+0xe7/0x980 [ 1141.720323] ? lock_acquire+0x197/0x470 [ 1141.721247] ? create_io_thread+0xf0/0xf0 [ 1141.722233] ? ksys_write+0x21a/0x260 [ 1141.723113] ? lock_downgrade+0x6d0/0x6d0 [ 1141.724072] __do_sys_clone3+0x1e5/0x320 [ 1141.725022] ? __do_sys_clone+0x110/0x110 [ 1141.726016] ? rcu_read_lock_any_held+0x75/0xa0 [ 1141.727112] ? vfs_write+0x354/0xb10 [ 1141.727980] ? fput_many+0x2f/0x1a0 [ 1141.728800] ? ksys_write+0x1a9/0x260 [ 1141.729695] ? __ia32_sys_read+0xb0/0xb0 [ 1141.730656] do_syscall_64+0x33/0x40 [ 1141.731536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.732706] RIP: 0033:0x7fd89e327b19 [ 1141.733574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.737823] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1141.739615] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1141.741290] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1141.742982] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.744621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.746260] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1141.747950] CPU: 1 PID: 7438 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1141.748772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.749701] Call Trace: [ 1141.750015] dump_stack+0x107/0x167 [ 1141.750438] should_fail.cold+0x5/0xa [ 1141.750883] ? create_object.isra.0+0x3a/0xa30 [ 1141.751416] should_failslab+0x5/0x20 [ 1141.751870] kmem_cache_alloc+0x5b/0x310 [ 1141.752355] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1141.753071] create_object.isra.0+0x3a/0xa30 [ 1141.753582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.754179] kmem_cache_alloc_trace+0x151/0x320 [ 1141.754732] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 1141.755367] io_uring_setup+0x14f6/0x2980 [ 1141.755838] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1141.756430] ? wait_for_completion_io+0x270/0x270 [ 1141.757012] do_syscall_64+0x33/0x40 [ 1141.757448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.758042] RIP: 0033:0x7fbd4ba01b19 [ 1141.758466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.760612] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1141.761462] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1141.762298] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1141.763095] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1141.763878] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1141.764664] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:24:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:24:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0xd, 0x13, r0, 0x8000000) 02:24:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x1f012, r0, 0x0) 02:24:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x10000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:24:37 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:24:37 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 23) 02:24:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2003, 0xd, 0x13, r0, 0x8000000) [ 1141.933551] FAULT_INJECTION: forcing a failure. [ 1141.933551] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.934908] CPU: 1 PID: 7459 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1141.935702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.936655] Call Trace: [ 1141.936963] dump_stack+0x107/0x167 [ 1141.937383] should_fail.cold+0x5/0xa [ 1141.937825] ? __alloc_file+0x21/0x320 [ 1141.938274] should_failslab+0x5/0x20 [ 1141.938730] kmem_cache_alloc+0x5b/0x310 [ 1141.939198] __alloc_file+0x21/0x320 [ 1141.939628] alloc_empty_file+0x6d/0x170 [ 1141.940097] alloc_file+0x5e/0x5a0 [ 1141.940484] alloc_file_pseudo+0x16a/0x250 [ 1141.940970] ? alloc_file+0x5a0/0x5a0 [ 1141.941400] anon_inode_getfile+0xc8/0x1f0 [ 1141.941893] io_uring_setup+0x138b/0x2980 [ 1141.942388] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1141.942969] ? wait_for_completion_io+0x270/0x270 [ 1141.943543] do_syscall_64+0x33/0x40 [ 1141.943970] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.944557] RIP: 0033:0x7f2e49e79b19 [ 1141.944963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.947086] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1141.947966] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1141.948785] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1141.950018] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1141.951626] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1141.953111] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:24:37 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:24:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) 02:24:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x80000, 0x1f012, r0, 0x0) 02:24:52 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2004, 0xd, 0x13, r0, 0x8000000) 02:24:52 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:24:52 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000f, 0x40010, r0, 0x10000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x1, 0x0, r3, &(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x10, 0x0, 0x0, {0x0, r7}}, 0xaa2e) syz_io_uring_setup(0x3b07, &(0x7f0000000080)={0x0, 0x923e, 0x2, 0x0, 0x1c9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r8 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) syz_io_uring_submit(r13, r10, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r12, r10, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r11, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_submit(0x0, r10, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x81, 0x3, &(0x7f0000000380)="0ddfd02abe08c5a81ffef1ff380594da82fc0cbd875533ad31701c8a3444ce54d51eaca1eb9c47a03f94e7187a991aeefa5195d93cd47f0a3d4c005df99579094bc4fd6ae6f58a2afb10e8e00b5da8fdfe1e13a10612c6138107acb388648c194e718ede140d8a7a1505aeaa9bc7fe77e04f0abe592bc2571714b9cc00cdd4d4fdd278818b9b6ee54051d3d2bb396db930d1becabc3562f9e74b98ed06a66fb005346426f41df2ba59", 0x7, 0x0, 0x1, {0x1, r7}}, 0xbc7a) 02:24:52 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 16) [ 1156.788204] FAULT_INJECTION: forcing a failure. [ 1156.788204] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.789904] CPU: 1 PID: 7476 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1156.790925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1156.792148] Call Trace: [ 1156.792514] dump_stack+0x107/0x167 [ 1156.793059] should_fail.cold+0x5/0xa [ 1156.793623] ? create_object.isra.0+0x3a/0xa30 [ 1156.794297] should_failslab+0x5/0x20 [ 1156.794873] kmem_cache_alloc+0x5b/0x310 [ 1156.795479] create_object.isra.0+0x3a/0xa30 [ 1156.796136] kmemleak_alloc_percpu+0xa0/0x100 [ 1156.796806] pcpu_alloc+0x4e2/0x1240 [ 1156.797364] ? io_async_queue_proc+0x80/0x80 [ 1156.798010] percpu_ref_init+0x31/0x3d0 [ 1156.798624] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1156.798640] io_uring_setup+0x14f6/0x2980 [ 1156.798661] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1156.798673] ? wait_for_completion_io+0x270/0x270 [ 1156.798713] do_syscall_64+0x33/0x40 [ 1156.802508] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1156.802566] FAULT_INJECTION: forcing a failure. [ 1156.802566] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.803257] RIP: 0033:0x7fbd4ba01b19 [ 1156.803276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.809206] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1156.810315] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1156.811369] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1156.812415] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1156.813454] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1156.814507] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1156.815578] CPU: 0 PID: 7482 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1156.817292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1156.819412] Call Trace: [ 1156.820081] dump_stack+0x107/0x167 [ 1156.820998] should_fail.cold+0x5/0xa [ 1156.821954] ? create_object.isra.0+0x3a/0xa30 [ 1156.823099] should_failslab+0x5/0x20 [ 1156.824054] kmem_cache_alloc+0x5b/0x310 [ 1156.825076] create_object.isra.0+0x3a/0xa30 [ 1156.826164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.827461] kmem_cache_alloc+0x159/0x310 [ 1156.828495] __alloc_file+0x21/0x320 [ 1156.829417] alloc_empty_file+0x6d/0x170 [ 1156.830422] alloc_file+0x5e/0x5a0 [ 1156.831320] alloc_file_pseudo+0x16a/0x250 02:24:52 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 24) 02:24:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x11000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1156.832367] ? alloc_file+0x5a0/0x5a0 [ 1156.833509] anon_inode_getfile+0xc8/0x1f0 [ 1156.834583] io_uring_setup+0x138b/0x2980 [ 1156.835615] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1156.836856] ? wait_for_completion_io+0x270/0x270 [ 1156.838090] do_syscall_64+0x33/0x40 [ 1156.839018] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1156.840276] RIP: 0033:0x7f2e49e79b19 [ 1156.841200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.845701] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1156.847571] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1156.849322] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1156.851097] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1156.852863] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1156.854623] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1156.865496] FAULT_INJECTION: forcing a failure. [ 1156.865496] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.868269] CPU: 0 PID: 7486 Comm: syz-executor.0 Not tainted 5.10.260 #1 02:24:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x1ffff000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1156.869937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1156.872090] Call Trace: [ 1156.872745] dump_stack+0x107/0x167 [ 1156.873644] should_fail.cold+0x5/0xa [ 1156.874597] ? create_object.isra.0+0x3a/0xa30 [ 1156.875721] should_failslab+0x5/0x20 [ 1156.876657] kmem_cache_alloc+0x5b/0x310 [ 1156.877661] create_object.isra.0+0x3a/0xa30 [ 1156.878744] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.879987] __kmalloc_node+0x1ae/0x420 [ 1156.880966] kvmalloc_node+0x119/0x170 [ 1156.881919] alloc_fdtable+0x159/0x2c0 [ 1156.882881] dup_fd+0x92d/0xe40 [ 1156.883710] copy_process+0x197c/0x78b0 [ 1156.884681] ? SOFTIRQ_verbose+0x10/0x10 [ 1156.885662] ? mark_lock+0xf5/0x2df0 [ 1156.886733] ? __cleanup_sighand+0xb0/0xb0 [ 1156.887786] ? _copy_from_user+0xfb/0x1b0 [ 1156.888812] kernel_clone+0xe7/0x980 [ 1156.889709] ? lock_acquire+0x197/0x470 [ 1156.890692] ? create_io_thread+0xf0/0xf0 [ 1156.891708] ? ksys_write+0x21a/0x260 [ 1156.892636] ? lock_downgrade+0x6d0/0x6d0 [ 1156.893646] __do_sys_clone3+0x1e5/0x320 [ 1156.894641] ? __do_sys_clone+0x110/0x110 [ 1156.895673] ? rcu_read_lock_any_held+0x75/0xa0 [ 1156.896788] ? vfs_write+0x354/0xb10 [ 1156.897697] ? fput_many+0x2f/0x1a0 [ 1156.898640] ? ksys_write+0x1a9/0x260 [ 1156.899566] ? __ia32_sys_read+0xb0/0xb0 [ 1156.900559] do_syscall_64+0x33/0x40 [ 1156.901447] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1156.902684] RIP: 0033:0x7fd89e327b19 [ 1156.903560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.907880] RSP: 002b:00007fd89b87c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1156.909679] RAX: ffffffffffffffda RBX: 00007fd89e43b020 RCX: 00007fd89e327b19 [ 1156.911363] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1156.913029] RBP: 00007fd89b87c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1156.914724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1156.916404] R13: 00007ffdf34b7aef R14: 00007fd89b87c300 R15: 0000000000022000 02:24:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc0000, 0x1f012, r0, 0x0) 02:24:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:24:52 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 17) [ 1156.992961] FAULT_INJECTION: forcing a failure. [ 1156.992961] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.994591] CPU: 1 PID: 7500 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1156.995495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1156.996582] Call Trace: [ 1156.996929] dump_stack+0x107/0x167 [ 1156.997408] should_fail.cold+0x5/0xa [ 1156.997908] ? create_object.isra.0+0x3a/0xa30 [ 1156.998515] should_failslab+0x5/0x20 [ 1156.999616] kmem_cache_alloc+0x5b/0x310 [ 1157.000664] create_object.isra.0+0x3a/0xa30 [ 1157.001778] kmemleak_alloc_percpu+0xa0/0x100 [ 1157.002914] pcpu_alloc+0x4e2/0x1240 [ 1157.003715] ? io_async_queue_proc+0x80/0x80 [ 1157.004638] percpu_ref_init+0x31/0x3d0 [ 1157.005474] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1157.006631] io_uring_setup+0x14f6/0x2980 [ 1157.007509] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1157.008574] ? wait_for_completion_io+0x270/0x270 [ 1157.009613] do_syscall_64+0x33/0x40 [ 1157.010400] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.011489] RIP: 0033:0x7fbd4ba01b19 [ 1157.012265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.016124] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1157.017714] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1157.019208] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1157.020694] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1157.022201] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1157.023704] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:24:52 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:24:52 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2005, 0xd, 0x13, r0, 0x8000000) 02:24:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000000, 0x1f012, r0, 0x0) 02:25:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x3f000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) 02:25:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000000, 0x1f012, r0, 0x0) 02:25:08 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 18) 02:25:08 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 25) 02:25:08 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x8010, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x800, 0x800, 0x1, {0x0, r3}}, 0xff) 02:25:08 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2006, 0xd, 0x13, r0, 0x8000000) 02:25:08 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1172.643687] FAULT_INJECTION: forcing a failure. [ 1172.643687] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.646097] CPU: 1 PID: 7526 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1172.647515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.649207] Call Trace: [ 1172.649752] dump_stack+0x107/0x167 [ 1172.650509] should_fail.cold+0x5/0xa [ 1172.651298] ? copy_fs_struct+0x45/0x340 [ 1172.652130] should_failslab+0x5/0x20 [ 1172.652925] kmem_cache_alloc+0x5b/0x310 [ 1172.653763] copy_fs_struct+0x45/0x340 [ 1172.654581] copy_process+0x34b5/0x78b0 [ 1172.655428] ? SOFTIRQ_verbose+0x10/0x10 [ 1172.656261] ? mark_lock+0xf5/0x2df0 [ 1172.657051] ? __cleanup_sighand+0xb0/0xb0 [ 1172.657942] ? _copy_from_user+0xfb/0x1b0 [ 1172.658812] kernel_clone+0xe7/0x980 [ 1172.659571] ? lock_acquire+0x197/0x470 [ 1172.660386] ? create_io_thread+0xf0/0xf0 [ 1172.661251] ? ksys_write+0x21a/0x260 [ 1172.662039] ? lock_downgrade+0x6d0/0x6d0 [ 1172.662911] __do_sys_clone3+0x1e5/0x320 [ 1172.663748] ? __do_sys_clone+0x110/0x110 [ 1172.664623] ? rcu_read_lock_any_held+0x75/0xa0 [ 1172.665572] ? vfs_write+0x354/0xb10 [ 1172.666337] ? fput_many+0x2f/0x1a0 [ 1172.667107] ? ksys_write+0x1a9/0x260 [ 1172.667891] ? __ia32_sys_read+0xb0/0xb0 [ 1172.668737] do_syscall_64+0x33/0x40 [ 1172.669508] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.670555] RIP: 0033:0x7fd89e327b19 [ 1172.671334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.675111] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1172.676669] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1172.678146] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1172.679620] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.681084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.682540] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1172.685791] FAULT_INJECTION: forcing a failure. [ 1172.685791] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.688133] CPU: 1 PID: 7518 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1172.689519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.691223] Call Trace: [ 1172.691767] dump_stack+0x107/0x167 [ 1172.692520] should_fail.cold+0x5/0xa [ 1172.693309] ? percpu_ref_init+0xd8/0x3d0 [ 1172.694162] should_failslab+0x5/0x20 [ 1172.694963] kmem_cache_alloc_trace+0x55/0x320 [ 1172.695897] ? io_async_queue_proc+0x80/0x80 [ 1172.696821] percpu_ref_init+0xd8/0x3d0 [ 1172.697647] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1172.698767] io_uring_setup+0x14f6/0x2980 [ 1172.699639] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1172.700691] ? wait_for_completion_io+0x270/0x270 [ 1172.701713] do_syscall_64+0x33/0x40 [ 1172.702484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.703532] RIP: 0033:0x7fbd4ba01b19 [ 1172.704314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.708102] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1172.709674] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1172.711146] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1172.712610] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1172.714066] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1172.715534] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1172.723140] FAULT_INJECTION: forcing a failure. [ 1172.723140] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.725455] CPU: 1 PID: 7528 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1172.726877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.728600] Call Trace: [ 1172.729140] dump_stack+0x107/0x167 [ 1172.729890] should_fail.cold+0x5/0xa [ 1172.730677] ? security_file_alloc+0x34/0x170 [ 1172.731611] should_failslab+0x5/0x20 [ 1172.732395] kmem_cache_alloc+0x5b/0x310 [ 1172.733240] security_file_alloc+0x34/0x170 [ 1172.734134] __alloc_file+0xb7/0x320 [ 1172.734924] alloc_empty_file+0x6d/0x170 [ 1172.735764] alloc_file+0x5e/0x5a0 [ 1172.736505] alloc_file_pseudo+0x16a/0x250 [ 1172.737390] ? alloc_file+0x5a0/0x5a0 [ 1172.738187] anon_inode_getfile+0xc8/0x1f0 [ 1172.739068] io_uring_setup+0x138b/0x2980 [ 1172.739940] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1172.740991] ? wait_for_completion_io+0x270/0x270 [ 1172.742017] do_syscall_64+0x33/0x40 [ 1172.742792] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.743851] RIP: 0033:0x7f2e49e79b19 [ 1172.744624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.748429] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1172.750000] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1172.751472] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e 02:25:08 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2007, 0xd, 0x13, r0, 0x8000000) [ 1172.752927] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1172.754702] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1172.756170] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:25:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000000, 0x1f012, r0, 0x0) 02:25:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0x14, 0x52, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x124, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40040}, 0x20008000) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x8, r3) r4 = fork() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x8, r4) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)={0x1674, 0x1a, 0x403, 0x70bd26, 0x25dfdbfb, {0x20}, [@typed={0x8, 0x95, 0x0, 0x0, @fd=r1}, @nested={0x35c, 0x7e, 0x0, 0x1, [@typed={0x4c, 0x65, 0x0, 0x0, @binary="26354bb8f03b7c98f5260d34fa6008f8b1177444ef7f1d110b3cde56b6c5d3adb6e27b4a2ca9378514264d92f0bd9af4a3d0f7e8480f6b6a8d9dd5085cf991dd284cd9fced5bf091"}, @typed={0x84, 0x91, 0x0, 0x0, @binary="469765fb80cfba1f41130cba516f3936e13780a809623d36f8505a24a5efa741cfaafee4b88b874de006f1866c22dfb0a3b0dc4bcbb6d6faa1c5af7a02762f4bbbcf443f815f431c4d6342484f02760d5972fd2215f4f390a4d859ac9aba9b3dcc63bcaced3d2bfc81c03bbf897506a621cb83c976c919a0a1d3e84657fe4513"}, @typed={0xc, 0x42, 0x0, 0x0, @u64}, @generic="b81ce98585def5b9762b3ecbb5947dffd32b6d8675942dd6b91eaee488739702290f1066e756cf0bee37de7afa9ad90770048bdd3007a83ddc3cc0f0f6737558bc03a5a850e73577a43e94606fa34cf5d4f95c3e6afd3f97706f0e72d2df319f98af5311d577349b3c189ef0a0c8b582b3eeaa15b06f76d0caa4937de846108c54a79efeaa0767d858e4b469dfcb6f30c0314d310f2e10f91e91f8e45c5fa58af47c5ade42b68d69ed037e798562655f7a74f5a22e9f920a58f1a4abea517c8d708917278ff4ff273dfe62e292c7141225b9b078d08a500cfc8004bec80643993a7881d8af40c3d1d06a065822113c759b", @generic="c21cd398e24ab3d5fd95987f9cdf8b44f05237ad7a0a12504432268392e07ce4353c83dbca9af42f53978c8d0cf3785a96f38fa82540c5f3a9d6ec3dbc06a13020b93cf4459eb40c0f1f628a383bbe9c2be9871537a3c4faef98c49236d1529fe9701c8af2736037b09d053f34b399fa873f7c426e125f339542c3284a53c9d25afbac7f542d541b8895eec2b7ad4fb30d6287eb14b923b08ff482eee30a6d72ac61eae322858eebee", @typed={0x8, 0x69, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x70, 0x0, 0x0, @uid=r2}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x84, 0x0, 0x0, @u32=0xfffffffa}, @generic="ce21875887ca36ace5b0800eb7356edcf34b965023593c1e4ac82d06821a3d16f7c3b92def8739a239238864854d67481b772284543ee1d73d76086658eb0084cab809743995567c04afcb619077724db6575da8751866113a3a5836fbc49524e861c61fc411f135b52c22a16f62bb8a7caf1f56d77edf2a93b6313e16cc2e9cd96aa2390f8fb41635611df7e8a72c45ec385abab0292a079ab733a74eb5619d5fc7428b80bab69f6328d4aa1a24054d3ff288b2be59e1d88e22b7e6fd8f"]}, @nested={0xdd, 0x20, 0x0, 0x1, [@generic="7342808a962ae5624b63ef063f7f04caff37c020f40d5096a0f4051a0e26cb562083227226f3e68e75329c239f5215dcc065d26b91a89d8dc130e2ee4ed1ac22ad0f6138b34b7b659b3d589f9ae82ffa93199acd566741387ec2ec47773b6dd9f0d496ca8681dae0bde38660df37856af64d627a6ed5289a54df8eedd3be7bc72f5e2e99be423ae2237a59284d6fb62383a1b3e8e965b5066b91ecfff385ed2e33915d14c0c7ed0b0f17489fafc03f73e5a2893f1c5d2b048b1301baf52daa6092ad58bba9cce3fccf021e5d3b762610a0bf936a01f3d98ada"]}, @nested={0x68, 0x6, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @pid=r3}, @generic="49424b1e658553d8600d38e538947ba4940fe726273c499b43dcb3ee31af353123ed618778e7571559416d76f515bc4b3d24e3b6996afe9d", @typed={0x8, 0x92, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x3}, @typed={0x14, 0x1d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x43}}]}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, @nested={0x1004, 0x6c, 0x0, 0x1, [@generic="e1d6a705268188701a3e1eebb137810986c5c6194c0fc3fd829d51d751c8cb63def4e8a3ec728e71734e42372414b2bf867b432d0eaf7716c419d97b175943ffe4ae56d2a54c29b7cbd86390bce0931816c9ce7be4911a2f8132da598a57753ce5c24128ca393c84eb22171e4f10164d72a05cbc94e484b831f1319b7704ebfb0869e8f941a651d00db2db483c0e785c05cb8eb1c40f578e70ab913cf7d258d486cb2bb84667492f9b3a25ae3fe5a3ee349f3fd8c07c8b7bea2834ce6a6c6b67c421a1f8a5b57790f96ca0e3e9108322db8c7ecb6678afbf591c531d7d9249341b87ebfc7666ad96b105115b2b8cd637887151c56b37d551ba500d3bcb6eb82edfb489ccb186f7b3f0e5723b4ea82f85e13d7bfb05e3ce735b3552ede39cfb0a2ba6a719aa7b7b411740409c2f3cbc800e4508a508ee265bd8b756c41c054a6d3c51e04cf21899122fcfd185c99b218ac966a62b473207ce91e93eb9da8d0e82e1c42abf05507e47744537502016374387e66397a12d1e08a636d59e7409e68d8d2139c3410afb20dd8e06bf12b2f9f390c35939eb77875449b78943f42104818bd567012a6fa60f257624c6293112c6f00c6e2090b6ac795db24e2e79cc55bc207372148c5eb5d5bd35479a53be45cc74fd07d98c20590b9fe092c82032abc6fe8e7baf7a9ba9d2adbaa4cb05d5a7a37589fee01132b1eabb95bcabc62a2adb857bce37052eccbf2564d574a6a5dfcc59debf1e5dd441ba9d34c75eabc2b81dfbedf3b377babd2af11dba0f428cac6eafb6fc761fc39a0fac80d327daa113cf700a235f73956f81d1df513d97e8784c3884a6eafa715cef573ec4eeead1be0361706bccacd0a2210dafd5eff05b979447a8de76cfc94d00e5c51c8818ec7915376f89500a309f9257e96ef9b326c96c08d04f4872b920bf3ab60a1d1856b2dda1e696ff85152e532cad47462487391a4a59514c93459e284100cfaf1e9f6df88831353859cd3a979c74d19e3f8f1ac75c7c3007f91116e7c6efd1be9e3fb94d355df64880def167be7b28cfd7998fb1918d3f3fbed12a1a7e3ef69b9d5da92e6fa14144475b624d24e044fb9169185e7ac4548fb491a9b6e759323fe1110da3edfad764d3d4643a273e18b16e2ee493aa79b9592c27791646443a37a28bc0c7f59bb273dccc594b15bddbfeb3b0d99b40c1cf8e9649e729d2de1a1dac4f165801c2505771f1254cd4c97913961a569f40dc6b71b07b43fe575f9cb98beb65c23aeec289f24a0a654026614cc5d56c885b4014923e308c7749aead8afefd9405bde81d41600ccc4f8f0c3cd3b93ae07b444812dd318ce3bf3c6b6622d3320a1bdf7519579c118d126d7851f0c655e2f5deebc8d76678d6e1ce711345a7251ca7e996407111f432f475cdaee37097324a118f96e1c007323a1e48be1cf1db1a1a87f88f6aae65e15090a30520cdb023993bddc1d2faf4d5c000730fbdc7e62638d2edd9e0ed6a6767ec2ef386fe26dd81a0f4d464852de0031bba0638e41af5e322252833f5d6fa27d1eb103f0c4a2f3650f47bc4a58eb714e0d168a128de8c5f170ff9d5bc62080c8da753c0c38b1c6f36c0e0ad2bb2acc2819c2825d54f38518d3390e32b6ea5351b116fdf45375915793665e24c8c5ab6e6134d3ceed8a4dc927e9f8827adb25d569bec44737749cc8963d217b3bdfb238d54fa27a5773d41ebb015bfadd4aef16f115a567d6ac651c3bdebe920ea1273d88a016adc406b1a65673bd208050a2eca3c6ac66c7191247839deb22b31b46cab7febc7392375d431a78e1cf7ee5a5fe7658ee3a42af56574d94522b04c8d2251605223bf3aa8abca71161ba0358b7134d1114e4ce1ae83b502f4d2f204522d56bded92c6b87313df973d544276949f7e438addd273cc87716164e70520f07865c787ad9cb5789ed79238c32008dcdcf524cdfa0b413c07246b9eae676619f066c0e734d2d02f096a0e24b4828fecd400994d9754bae2e2cb468cbd0ba585ec795549126a06ff4fb02caa42afa6d76f74c11201edc874e59e620c36d10fd7853b71b9989489cf4a8fdabb4309d90ad0ed06679041fb167d1e5722c63bf1d205510ccae641e32d00408646dd332a50529939d6c64048c8c65a7af97a03947c53dc77c769c300774f0d957b3fbef7804479e753a4011a9eb91d4484bfa9daae97cb4d876215af45d5da8e30e1343e5ffb9ba3501878a230879793487c9476165ae24817b87369889719f57406c624f9c8fb05a15e2af90285a27679fd5c75b0b2e73d607bb8ed8e538000cc124ce670811b6ae8545ebf4fb47b996533b7f5c8dc4f05e194e0317a0ef5fd4c8c19cece061f5a47e65bb052d0fe3e72a9e16393078f07d131b1499e0507f47a829305cc56d88a95555c993c4f432cf04fd067bbb840dd633bdf79278cf49737c999da1c652d8f327d24b0f9060b6f87e6f6b69b8b6c162c3ddf794da3b0af3b4e34e126ed17c1eb101e9bf9a637a568936a8ee13666e676c49fe4255a44fa022128b6f2d3efc9bc3ae10dcd01b3e0ad2ffdba1b0e98730ef91c3e5c89693204329457cc1ea925a405cddc000993c67751cc46b137869c0d2c58e3bc95eed36651819ea4e0964d0f832a058e01d1f8a89f377b91a448e6ccdb819fce332c319270ecb7d59818752005a5ae52032cc5237d5fda09c2e16e8ea78f076b1a2591b505684267fcad60532e768eb53011e9cf3e916bfc24c40ced0d9ecfc332673c93b5207502114b19e4a4a57dd110676cdb7fa2847d321e5f38310bd53714e27cef1158ac43b1dc0dd76f7c1c814bf793469f30b2cb832515c4044d53ba641530230a76e28b9c24baad80f8c25c18ea3d6c46f3bacea04360d356161debaad3e1e7173941fd55f878e8638c14cac3bc5130d431ff3c2e45a86151c4b1585cdb6e24b708078b0915ff0450f432bb7ae18cf83f23665d1d2a740ce5e9fadc418fd9a4ab7b1c994a705c634d7521aa170fe84d6ae6fef281585eb7d384a1549c964c386797b8bf0a8c9c8acef51f59eb77b0f13c4b9b4ea0e69fd836b4eb842c915da758bbbed5a46532860749bf8e02ad6e0d497b7e9d4a45c419c797ff26ce2685f096638a33f72a656a1706a05466a8e03aef2bd127e94fac959d9133d15110337f28661305999d06b396f15b89b3ae47afa706208993b6bea2b7a0f62a7648441f5f6efeb9ebdd6dfb1fb5a024b9a287da046d09ea1aa3f6eb5fc997c7640c64bf004bc010a62ad8b52fef536d2fd7c431b87ef4fa3e325bb3c7ddb4a0be5bf41bc9af4d6469bd77258602beb764cc62551a6da493f820413de4ca41d66c2a1dda2d20495474de15842a81e3a114e6f76d0e395c53ff31e72102329a7bef11120a7521d8d2e14a159999e152a2087c437b3521b3c7577e9a95a70c51a9c31e7be2859417b9f8c68aa5a512b5f417f308ae739f6cf55b41735edfea06547dd514bf8fe7205f3397554844cc2600f7c7ce252711f52e7bdef740ebb7d4d480973b5126a60169405f70b13b4ce336fd1634b0de026fd5e7072bae429e5d75af44634c17e96e1d36f40aec194655263c5f1883b0ca6a237df7cb7a99ef78d28bf5353dfa7a6f1b3634889b90dc9aa72ed0e8e46184c9f32f06620ac10527684fabc7d58964c2a5d64c0aca2fe35eff9751a1944c7c7ad18a7f817c73dabc22cc94f06ccbfdf840b7b2cdc135a7265ac1a99763cde7efe997d4b16b9b476c8d74f6cd0fa65036b24b77194aae16fd5d374141e63b755d07178aac665e4a39af7d76a1fa833dadbddc5783eb89d9c8cc8a4f17bb06ebf134e36cd3708ea0eff683f197b4299038b766b8a4c1d300951d6466237ea58ddaa1b8924f28cde521c297440035bde0d100ba1769c5360b10c04b3188779cc2f5a150e037a76626d010c75abd8c6c9dd8143a198e32f8012d5f221d51acc89687b862fb0ed184196c244cc150afe63bfd624de262e2813a43df7b6c2f2568cba2596ae2c9262cc4adecb8624f104a748a629036b9f8fb1c8fdb16965a6edcaaee565c95efc16b260ed447dc7100024a3565aef77aa13114fe75c5546ef5dad4e812e4ae9e2c8bcc6f8a66256897af8ef89513708ae15beeb49b653828858e9b4a75e5a72be12762b6bbb82c5c0b9589d9c7c48faf32681c029d7be0ccbc6827d0a5de1e9467b5cbb034f7a82944db4f3f6513f9f0fdf2714204dd7b5ea6ed86e338e84dd9a6f46e7c842e7670989f7d5fbbebcd2be8092088293edac0355771a7287e55ac10d287b4d3dec7140d0bb37ced68db85dcb91c1ae703d008312bd9933355ad776e1dfe56aa3537dce094e8f6ba50b744529daa1964ec1be677c0dc6a794045234e99560ec476b7bd56cb6935e2b8db94047210faab03ec132e13ba4a7169bce4fc9758913e1f79e372584ac7244a66820807c14d4a34605f22ca6d6db25d7a721490aae68a6bfb91686f4af01f476d492f0926739e5b4e09ca1c7881289b757a4be7835604472c0eb1ea504121c1ef715bc585614e0d59c0a887105a6446460b220c253fcf326b4d97ba61688858abe0ca0fdc2571de8e0cf72ccb39d73ac5648b455fffb6faab8a05f624392eaf029888bdf1ccb4c5705dac0dfd8477459733893243cf06a0e0d54472052e8480024136e99a543f23f5821af9fde860593b4c147ca9139ed99b8432c26490faecf96e4b6fb21cbb1058b5816e6e89ae4d9fe01238bf6cb0a8ec50a45892dc2590a90a5959a9165af5ff2f5918c10b85c2f082fb2b4221c206c1797fcbecce858af7efddfec4b8b45c7126ab09df022a205937062174e6990c840f465dc8cfbb95c05cf34fd48962f79a20fa3411a35a01109376f3b7132b00ab5f543fa6db125e556e7668765e6d9ba19aea5bd9a69db6b0b1dd81d459a92a7e5ac2f3bd76095cc1e83c360b9b0423a060276ca2744d36f6d86c967e678c974726bb8525604d48c4a6c07afafa65ef223118a141991ed5dbe4bfea74ac84e0227bf235e7c44906f5ca9ba634e14ae66c9c3e6b42aa0ca21469f6029acf4ce74d3a5e6a3962fc594a393e86beadf11a374172b9a59c7948c6a062baeb364b3181f155ffce2a757b7988e932c0e8ab8b6822a815ffbb5b7a3dbadde10e7df422090d3b0d95ae746048cc3c17452a24930ef2a5585f1f233302650cdb546eeeeb3852bb93ff9a52e265abd5b13bd8d3b4f3fcd022c7411000b80ef54a5e980019b4f0ec6469f45c3696140586ee63161814d9730e8a1744ce435106cff9b57de67e14f23423fef10438b8b99fce1f8e098aa02430606fd383ced678e71d9506ffb509d0725cc1bbba8026e2920a1cc2dba1114234074dfcc3c3108e43d1fe4191fdd41c69e2625b0d4736a9454cc3b9dea1ca03038f4b0b901218d6c1e50413b63304569fd4cb03b882df79d3280caedaf3446729a3119cc1bed57e9d8675a89ca43d3797f2d44c7ce04e5e54869ffcbb8e2dff528445700caf03ba2d02c7898b61ac94ad44833b5dbb74a478364da1eaa5240638f6f508b0ac5c49e52be403c01741b509e9590c1ca24ed4bff70f7f47a1bac02a1caee7f1c278e4941eec81bf05975462feecd2ba0b12689f60b98d00490e09ad70eeb64db8913f48a8b169d79194a55fdc0fa23cbd204fca87ae11ef0d291dd1364d1e4a3b3fda2d85682b1218d0fded001c0594dfc2254d70808ca01fb03ee216b7c3cb4df71a99a6361d6d3bf551e90f19ac5132397804a13e99e32be830f50f80190bbe25b87d9ff6ed38"]}, @generic="a8cc784e4fe15cea27b4175b71f9132101f991ee76f73ab4a4f501afca8c8af05961687e4f7998eb65cacdbdde793011aa2860a039d2000b801e378162e617ce4c65d64ba9ef0e4cadf6289f18d758502550c7b2763e488235ee24038e409bf24e52e9eae208931cfe3b018afa5aa562a2d2bd0508c0f643410038f6ba8f559129607aacaaa57dc978eae1aeac531d59671074e9f3761d55db", @nested={0x24, 0x82, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x36, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x31, 0x0, 0x0, @pid}, @typed={0x5, 0x34, 0x0, 0x0, @str='\x00'}]}, @nested={0x10, 0x7e, 0x0, 0x1, [@typed={0xc, 0x38, 0x0, 0x0, @u64=0x4}]}, @generic="b05d86645a99d15219acd16d8f4de0154914c2fbb73ef9dfdd5da909f59874f9545afd4fc3693c323f9b67799440a94b16bc88b441d1ead5c3e931032674aa776ce8ef2f7d3cac5c13c3aa99bf9fed21a08020bcddaf1044e7ad972b3be62ed2567355b746a19981eae62f14016a9ea8503757516f965467e59bdd87b05d3f8ab4e486983a0afabd64ca1f103c30d55146f9e15762b4bd3f9596d950fc611084efe230fc014f66f16cbb709b09c8c08b7ae9136db6b3332581260b12c0060da2dffb84e52ff64ac8b72d5a89ff"]}, 0x1674}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) 02:25:08 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1172.836777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7541 comm=syz-executor.4 02:25:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:08 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 19) 02:25:08 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2f00, 0xd, 0x13, r0, 0x8000000) 02:25:08 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 26) 02:25:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa000000, 0x1f012, r0, 0x0) [ 1172.941639] FAULT_INJECTION: forcing a failure. [ 1172.941639] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.943139] CPU: 0 PID: 7553 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1172.943971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.944979] Call Trace: [ 1172.945307] dump_stack+0x107/0x167 [ 1172.945749] should_fail.cold+0x5/0xa [ 1172.946216] ? create_object.isra.0+0x3a/0xa30 [ 1172.946788] should_failslab+0x5/0x20 [ 1172.947249] kmem_cache_alloc+0x5b/0x310 [ 1172.947742] create_object.isra.0+0x3a/0xa30 [ 1172.948282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1172.948897] kmem_cache_alloc_trace+0x151/0x320 [ 1172.949462] ? io_async_queue_proc+0x80/0x80 [ 1172.949990] percpu_ref_init+0xd8/0x3d0 [ 1172.950477] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 1172.951143] io_uring_setup+0x14f6/0x2980 [ 1172.951650] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1172.952261] ? wait_for_completion_io+0x270/0x270 [ 1172.952865] do_syscall_64+0x33/0x40 [ 1172.953318] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.953946] RIP: 0033:0x7fbd4ba01b19 [ 1172.954391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.956630] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1172.957564] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1172.958430] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1172.959306] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1172.960179] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1172.961050] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1172.961680] FAULT_INJECTION: forcing a failure. [ 1172.961680] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.964496] CPU: 1 PID: 7557 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1172.965904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.967609] Call Trace: [ 1172.968160] dump_stack+0x107/0x167 [ 1172.968913] should_fail.cold+0x5/0xa [ 1172.969712] ? create_object.isra.0+0x3a/0xa30 [ 1172.970652] should_failslab+0x5/0x20 [ 1172.971453] kmem_cache_alloc+0x5b/0x310 [ 1172.972289] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1172.973428] create_object.isra.0+0x3a/0xa30 [ 1172.974324] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1172.975390] kmem_cache_alloc+0x159/0x310 [ 1172.976238] security_file_alloc+0x34/0x170 [ 1172.977118] __alloc_file+0xb7/0x320 [ 1172.977884] alloc_empty_file+0x6d/0x170 [ 1172.978723] alloc_file+0x5e/0x5a0 [ 1172.979447] alloc_file_pseudo+0x16a/0x250 [ 1172.980302] ? alloc_file+0x5a0/0x5a0 [ 1172.981091] anon_inode_getfile+0xc8/0x1f0 [ 1172.981972] io_uring_setup+0x138b/0x2980 [ 1172.982846] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1172.983897] ? wait_for_completion_io+0x270/0x270 [ 1172.984929] do_syscall_64+0x33/0x40 [ 1172.985698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.986762] RIP: 0033:0x7f2e49e79b19 [ 1172.987522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.991307] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1172.992864] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1172.994345] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1172.995806] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1172.997258] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1172.998715] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1173.003130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7549 comm=syz-executor.4 02:25:21 executing program 4: syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000002}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 02:25:21 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 27) 02:25:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) 02:25:21 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x100000, 0xd, 0x13, r0, 0x8000000) 02:25:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x100000800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:21 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 20) 02:25:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000, 0x1f012, r0, 0x0) [ 1186.367726] FAULT_INJECTION: forcing a failure. [ 1186.367726] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.369197] CPU: 1 PID: 7571 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1186.369931] FAULT_INJECTION: forcing a failure. [ 1186.369931] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.370061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.370075] Call Trace: [ 1186.373892] dump_stack+0x107/0x167 [ 1186.374356] should_fail.cold+0x5/0xa [ 1186.374877] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1186.375539] should_failslab+0x5/0x20 [ 1186.376039] kmem_cache_alloc_trace+0x55/0x320 [ 1186.376624] io_uring_alloc_task_context+0x99/0x6a0 [ 1186.377264] ? io_import_iovec+0x1120/0x1120 [ 1186.377833] ? lock_downgrade+0x6d0/0x6d0 [ 1186.378357] ? do_raw_spin_lock+0x121/0x260 [ 1186.378964] ? rwlock_bug.part.0+0x90/0x90 [ 1186.379503] __io_uring_add_tctx_node+0x2c6/0x520 [ 1186.380124] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1186.380789] ? alloc_fd+0x2e7/0x670 [ 1186.381266] io_uring_setup+0x1fbb/0x2980 [ 1186.381804] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1186.382457] ? wait_for_completion_io+0x270/0x270 [ 1186.383115] do_syscall_64+0x33/0x40 [ 1186.383591] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.384242] RIP: 0033:0x7f2e49e79b19 [ 1186.384719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.387128] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1186.388096] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1186.389016] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1186.389923] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1186.390872] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1186.391774] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1186.392711] CPU: 0 PID: 7576 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1186.393401] FAULT_INJECTION: forcing a failure. [ 1186.393401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.394225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.394233] Call Trace: [ 1186.394264] dump_stack+0x107/0x167 [ 1186.398806] should_fail.cold+0x5/0xa [ 1186.399640] ? create_object.isra.0+0x3a/0xa30 [ 1186.400626] should_failslab+0x5/0x20 [ 1186.401446] kmem_cache_alloc+0x5b/0x310 [ 1186.402325] create_object.isra.0+0x3a/0xa30 [ 1186.403310] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1186.404437] kmem_cache_alloc+0x159/0x310 [ 1186.405337] copy_fs_struct+0x45/0x340 [ 1186.406173] copy_process+0x34b5/0x78b0 [ 1186.407028] ? SOFTIRQ_verbose+0x10/0x10 [ 1186.407899] ? mark_lock+0xf5/0x2df0 [ 1186.408698] ? __cleanup_sighand+0xb0/0xb0 [ 1186.409631] ? _copy_from_user+0xfb/0x1b0 [ 1186.410539] kernel_clone+0xe7/0x980 [ 1186.411343] ? lock_acquire+0x197/0x470 [ 1186.412195] ? create_io_thread+0xf0/0xf0 [ 1186.413099] ? ksys_write+0x21a/0x260 [ 1186.413902] ? lock_downgrade+0x6d0/0x6d0 [ 1186.414888] __do_sys_clone3+0x1e5/0x320 [ 1186.415774] ? __do_sys_clone+0x110/0x110 [ 1186.416688] ? rcu_read_lock_any_held+0x75/0xa0 [ 1186.417691] ? vfs_write+0x354/0xb10 [ 1186.418502] ? fput_many+0x2f/0x1a0 [ 1186.419294] ? ksys_write+0x1a9/0x260 [ 1186.420115] ? __ia32_sys_read+0xb0/0xb0 [ 1186.421009] do_syscall_64+0x33/0x40 [ 1186.421821] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.422940] RIP: 0033:0x7fd89e327b19 [ 1186.423753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.427725] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1186.429371] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1186.430916] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1186.432451] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.433990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.435550] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1186.437112] CPU: 1 PID: 7570 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1186.437978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.439040] Call Trace: [ 1186.439376] dump_stack+0x107/0x167 [ 1186.439833] should_fail.cold+0x5/0xa [ 1186.440317] _copy_to_user+0x2e/0x180 [ 1186.440788] io_uring_setup+0x11b5/0x2980 [ 1186.441309] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1186.441936] ? wait_for_completion_io+0x270/0x270 [ 1186.442547] do_syscall_64+0x33/0x40 [ 1186.443025] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.443657] RIP: 0033:0x7fbd4ba01b19 [ 1186.444118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:25:21 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1186.446378] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1186.447630] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1186.448513] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1186.449401] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1186.450279] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1186.451173] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:25:22 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x7fffdf002000, 0xd, 0x13, r0, 0x8000000) 02:25:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 28) 02:25:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 21) [ 1186.530530] FAULT_INJECTION: forcing a failure. [ 1186.530530] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.531968] CPU: 1 PID: 7588 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1186.532802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.533796] Call Trace: [ 1186.534118] dump_stack+0x107/0x167 [ 1186.534560] should_fail.cold+0x5/0xa [ 1186.535039] ? create_object.isra.0+0x3a/0xa30 [ 1186.535588] should_failslab+0x5/0x20 [ 1186.536042] kmem_cache_alloc+0x5b/0x310 [ 1186.536538] create_object.isra.0+0x3a/0xa30 [ 1186.537069] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1186.537682] kmem_cache_alloc_trace+0x151/0x320 [ 1186.538246] io_uring_alloc_task_context+0x99/0x6a0 [ 1186.538861] ? io_import_iovec+0x1120/0x1120 [ 1186.539446] ? lock_downgrade+0x6d0/0x6d0 [ 1186.539946] ? do_raw_spin_lock+0x121/0x260 [ 1186.540470] ? rwlock_bug.part.0+0x90/0x90 [ 1186.540985] __io_uring_add_tctx_node+0x2c6/0x520 [ 1186.541567] ? io_uring_alloc_task_context+0x6a0/0x6a0 02:25:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x1b0c31f000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1186.542192] ? alloc_fd+0x2e7/0x670 [ 1186.542866] io_uring_setup+0x1fbb/0x2980 [ 1186.543371] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1186.543974] ? wait_for_completion_io+0x270/0x270 [ 1186.544569] do_syscall_64+0x33/0x40 [ 1186.545014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.545624] RIP: 0033:0x7f2e49e79b19 [ 1186.546068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.548282] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1186.549192] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1186.550038] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1186.550901] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1186.551750] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1186.552596] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1186.571375] FAULT_INJECTION: forcing a failure. [ 1186.571375] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.573932] CPU: 0 PID: 7590 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1186.575413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.577192] Call Trace: [ 1186.577765] dump_stack+0x107/0x167 [ 1186.578559] should_fail.cold+0x5/0xa [ 1186.579394] ? __d_alloc+0x2a/0x990 [ 1186.580176] should_failslab+0x5/0x20 [ 1186.580991] kmem_cache_alloc+0x5b/0x310 [ 1186.581873] __d_alloc+0x2a/0x990 [ 1186.582616] ? find_held_lock+0x2c/0x110 [ 1186.583506] d_alloc_pseudo+0x19/0x70 [ 1186.584322] alloc_file_pseudo+0xce/0x250 [ 1186.585215] ? trace_hardirqs_on+0x5b/0x180 [ 1186.586143] ? alloc_file+0x5a0/0x5a0 [ 1186.586998] anon_inode_getfile+0xc8/0x1f0 [ 1186.587916] io_uring_setup+0x138b/0x2980 [ 1186.588823] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1186.589916] ? wait_for_completion_io+0x270/0x270 [ 1186.590991] do_syscall_64+0x33/0x40 [ 1186.591796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.592903] RIP: 0033:0x7fbd4ba01b19 [ 1186.593702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.597672] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1186.599324] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1186.600856] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1186.602378] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1186.603917] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1186.605445] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:25:22 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x7ffffffff000, 0xd, 0x13, r0, 0x8000000) 02:25:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) 02:25:22 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:25:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x20000000, 0x1f012, r0, 0x0) [ 1186.630782] FAULT_INJECTION: forcing a failure. [ 1186.630782] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.632200] CPU: 1 PID: 7598 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1186.632985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.633939] Call Trace: [ 1186.634251] dump_stack+0x107/0x167 [ 1186.634680] should_fail.cold+0x5/0xa [ 1186.635152] ? copy_process+0x1ae7/0x78b0 [ 1186.635630] should_failslab+0x5/0x20 [ 1186.636068] kmem_cache_alloc+0x5b/0x310 [ 1186.636544] ? _raw_spin_unlock+0x1a/0x30 [ 1186.637027] copy_process+0x1ae7/0x78b0 [ 1186.637487] ? SOFTIRQ_verbose+0x10/0x10 [ 1186.637959] ? mark_lock+0xf5/0x2df0 [ 1186.638402] ? __cleanup_sighand+0xb0/0xb0 [ 1186.638919] ? _copy_from_user+0xfb/0x1b0 [ 1186.639405] kernel_clone+0xe7/0x980 [ 1186.639835] ? lock_acquire+0x197/0x470 [ 1186.640293] ? create_io_thread+0xf0/0xf0 [ 1186.640781] ? ksys_write+0x21a/0x260 [ 1186.641220] ? lock_downgrade+0x6d0/0x6d0 [ 1186.641702] __do_sys_clone3+0x1e5/0x320 [ 1186.642169] ? __do_sys_clone+0x110/0x110 [ 1186.642659] ? rcu_read_lock_any_held+0x75/0xa0 [ 1186.643211] ? vfs_write+0x354/0xb10 [ 1186.643643] ? fput_many+0x2f/0x1a0 [ 1186.644060] ? ksys_write+0x1a9/0x260 [ 1186.644495] ? __ia32_sys_read+0xb0/0xb0 [ 1186.644966] do_syscall_64+0x33/0x40 [ 1186.645393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.645980] RIP: 0033:0x7fd89e327b19 [ 1186.646404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.648525] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1186.649399] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1186.650211] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1186.651043] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.651861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.652678] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:25:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 29) [ 1186.684133] FAULT_INJECTION: forcing a failure. [ 1186.684133] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.685516] CPU: 1 PID: 7603 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1186.686297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.687280] Call Trace: [ 1186.687588] dump_stack+0x107/0x167 [ 1186.688007] should_fail.cold+0x5/0xa [ 1186.688447] ? create_object.isra.0+0x3a/0xa30 02:25:22 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:25:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x10000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1186.688970] should_failslab+0x5/0x20 [ 1186.689667] kmem_cache_alloc+0x5b/0x310 [ 1186.690132] create_object.isra.0+0x3a/0xa30 [ 1186.690637] kmemleak_alloc_percpu+0xa0/0x100 [ 1186.691186] pcpu_alloc+0x4e2/0x1240 [ 1186.691625] __percpu_counter_init+0x10d/0x2d0 [ 1186.692155] io_uring_alloc_task_context+0xcc/0x6a0 [ 1186.692724] ? io_import_iovec+0x1120/0x1120 [ 1186.693224] ? lock_downgrade+0x6d0/0x6d0 [ 1186.693698] ? do_raw_spin_lock+0x121/0x260 [ 1186.694196] ? rwlock_bug.part.0+0x90/0x90 [ 1186.694683] __io_uring_add_tctx_node+0x2c6/0x520 [ 1186.695251] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1186.695850] ? alloc_fd+0x2e7/0x670 [ 1186.696272] io_uring_setup+0x1fbb/0x2980 [ 1186.696753] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1186.697338] ? wait_for_completion_io+0x270/0x270 [ 1186.697903] do_syscall_64+0x33/0x40 [ 1186.698333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.698940] RIP: 0033:0x7f2e49e79b19 [ 1186.699368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.701477] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1186.702349] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1186.703180] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1186.703996] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1186.704813] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1186.705628] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:25:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x21030000, 0x1f012, r0, 0x0) 02:25:22 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000000) 02:25:22 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:25:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) [ 1186.801894] FAULT_INJECTION: forcing a failure. [ 1186.801894] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.803321] CPU: 1 PID: 7617 Comm: syz-executor.0 Not tainted 5.10.260 #1 02:25:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x40000000, 0x1f012, r0, 0x0) [ 1186.804092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1186.805284] Call Trace: [ 1186.805589] dump_stack+0x107/0x167 [ 1186.806004] should_fail.cold+0x5/0xa [ 1186.806451] ? create_object.isra.0+0x3a/0xa30 [ 1186.807006] should_failslab+0x5/0x20 [ 1186.807442] kmem_cache_alloc+0x5b/0x310 [ 1186.807912] create_object.isra.0+0x3a/0xa30 [ 1186.808410] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1186.808992] kmem_cache_alloc+0x159/0x310 02:25:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x29f01019d000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1186.809470] copy_process+0x1ae7/0x78b0 [ 1186.810062] ? SOFTIRQ_verbose+0x10/0x10 [ 1186.810538] ? mark_lock+0xf5/0x2df0 [ 1186.811002] ? __cleanup_sighand+0xb0/0xb0 [ 1186.811499] ? _copy_from_user+0xfb/0x1b0 [ 1186.811973] kernel_clone+0xe7/0x980 [ 1186.812417] ? lock_acquire+0x197/0x470 [ 1186.812870] ? create_io_thread+0xf0/0xf0 [ 1186.813345] ? ksys_write+0x21a/0x260 [ 1186.813776] ? lock_downgrade+0x6d0/0x6d0 [ 1186.814252] __do_sys_clone3+0x1e5/0x320 [ 1186.814722] ? __do_sys_clone+0x110/0x110 [ 1186.815228] ? rcu_read_lock_any_held+0x75/0xa0 [ 1186.815760] ? vfs_write+0x354/0xb10 [ 1186.816195] ? fput_many+0x2f/0x1a0 [ 1186.816606] ? ksys_write+0x1a9/0x260 [ 1186.817045] ? __ia32_sys_read+0xb0/0xb0 [ 1186.817516] do_syscall_64+0x33/0x40 [ 1186.817941] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1186.818539] RIP: 0033:0x7fd89e327b19 [ 1186.818994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1186.821113] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1186.821989] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1186.822797] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1186.823626] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.824452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1186.825275] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:25:35 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 22) 02:25:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x553a4e458000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) 02:25:35 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:25:35 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 30) 02:25:35 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x2000000) 02:25:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xfbffffff, 0x1f012, r0, 0x0) 02:25:35 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x100, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r6 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r6, 0x8000000) syz_io_uring_setup(0x426a, &(0x7f0000000080)={0x0, 0xd883, 0x1, 0x1, 0x36, 0x0, r6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x1) [ 1199.964586] FAULT_INJECTION: forcing a failure. [ 1199.964586] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.966124] CPU: 0 PID: 7633 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1199.967043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1199.968131] Call Trace: [ 1199.968484] dump_stack+0x107/0x167 [ 1199.968971] should_fail.cold+0x5/0xa [ 1199.969480] ? copy_process+0x1c65/0x78b0 [ 1199.970034] should_failslab+0x5/0x20 [ 1199.970538] kmem_cache_alloc+0x5b/0x310 [ 1199.971083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1199.971771] copy_process+0x1c65/0x78b0 [ 1199.972294] ? SOFTIRQ_verbose+0x10/0x10 [ 1199.972832] ? mark_lock+0xf5/0x2df0 [ 1199.973345] ? __cleanup_sighand+0xb0/0xb0 [ 1199.973913] ? _copy_from_user+0xfb/0x1b0 [ 1199.974473] kernel_clone+0xe7/0x980 [ 1199.974980] ? lock_acquire+0x197/0x470 [ 1199.975505] ? create_io_thread+0xf0/0xf0 [ 1199.976056] ? ksys_write+0x21a/0x260 [ 1199.976557] ? lock_downgrade+0x6d0/0x6d0 [ 1199.977111] __do_sys_clone3+0x1e5/0x320 [ 1199.977649] ? __do_sys_clone+0x110/0x110 [ 1199.978206] ? rcu_read_lock_any_held+0x75/0xa0 [ 1199.978820] ? vfs_write+0x354/0xb10 [ 1199.979314] ? fput_many+0x2f/0x1a0 [ 1199.979786] ? ksys_write+0x1a9/0x260 [ 1199.980282] ? __ia32_sys_read+0xb0/0xb0 [ 1199.980820] do_syscall_64+0x33/0x40 [ 1199.981305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1199.981981] RIP: 0033:0x7fd89e327b19 [ 1199.982463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1199.984877] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1199.985862] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1199.986790] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1199.987760] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1199.988686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1199.989622] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1200.009292] FAULT_INJECTION: forcing a failure. [ 1200.009292] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.010822] CPU: 0 PID: 7641 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1200.011726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1200.012805] Call Trace: [ 1200.013157] dump_stack+0x107/0x167 [ 1200.013628] should_fail.cold+0x5/0xa [ 1200.014121] ? create_object.isra.0+0x3a/0xa30 [ 1200.014709] should_failslab+0x5/0x20 [ 1200.015213] kmem_cache_alloc+0x5b/0x310 [ 1200.015739] create_object.isra.0+0x3a/0xa30 [ 1200.016307] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1200.016957] kmem_cache_alloc+0x159/0x310 [ 1200.017497] __d_alloc+0x2a/0x990 [ 1200.017943] ? find_held_lock+0x2c/0x110 [ 1200.018466] d_alloc_pseudo+0x19/0x70 [ 1200.018965] alloc_file_pseudo+0xce/0x250 [ 1200.019496] ? trace_hardirqs_on+0x5b/0x180 [ 1200.020054] ? alloc_file+0x5a0/0x5a0 [ 1200.020559] anon_inode_getfile+0xc8/0x1f0 [ 1200.021121] io_uring_setup+0x138b/0x2980 [ 1200.021673] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1200.022324] ? wait_for_completion_io+0x270/0x270 [ 1200.022980] do_syscall_64+0x33/0x40 [ 1200.023473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1200.024132] RIP: 0033:0x7fbd4ba01b19 [ 1200.024610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1200.026967] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1200.027275] FAULT_INJECTION: forcing a failure. [ 1200.027275] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.027943] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1200.027951] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1200.027957] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1200.027964] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1200.027970] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1200.038083] CPU: 1 PID: 7644 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1200.039534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1200.041237] Call Trace: [ 1200.041795] dump_stack+0x107/0x167 [ 1200.042539] should_fail.cold+0x5/0xa [ 1200.043329] ? create_object.isra.0+0x3a/0xa30 [ 1200.044264] should_failslab+0x5/0x20 [ 1200.045055] kmem_cache_alloc+0x5b/0x310 [ 1200.045897] create_object.isra.0+0x3a/0xa30 [ 1200.046807] kmemleak_alloc_percpu+0xa0/0x100 [ 1200.047746] pcpu_alloc+0x4e2/0x1240 [ 1200.048522] __percpu_counter_init+0x10d/0x2d0 [ 1200.049494] io_uring_alloc_task_context+0xcc/0x6a0 [ 1200.050518] ? io_import_iovec+0x1120/0x1120 [ 1200.051436] ? lock_downgrade+0x6d0/0x6d0 [ 1200.052291] ? do_raw_spin_lock+0x121/0x260 [ 1200.053163] ? rwlock_bug.part.0+0x90/0x90 [ 1200.054037] __io_uring_add_tctx_node+0x2c6/0x520 [ 1200.055037] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1200.056103] ? alloc_fd+0x2e7/0x670 [ 1200.056863] io_uring_setup+0x1fbb/0x2980 [ 1200.057725] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1200.058767] ? wait_for_completion_io+0x270/0x270 [ 1200.059799] do_syscall_64+0x33/0x40 [ 1200.060568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1200.061613] RIP: 0033:0x7f2e49e79b19 [ 1200.062381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1200.066128] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1200.067699] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1200.069155] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1200.070627] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1200.072102] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1200.073568] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1200.089969] FAULT_INJECTION: forcing a failure. [ 1200.089969] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.091537] CPU: 0 PID: 7646 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1200.092395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1200.093453] Call Trace: [ 1200.093783] dump_stack+0x107/0x167 [ 1200.094245] should_fail.cold+0x5/0xa [ 1200.094727] ? create_object.isra.0+0x3a/0xa30 [ 1200.095316] should_failslab+0x5/0x20 [ 1200.095792] kmem_cache_alloc+0x5b/0x310 [ 1200.096302] create_object.isra.0+0x3a/0xa30 [ 1200.096850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1200.097484] kmem_cache_alloc+0x159/0x310 [ 1200.097997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1200.098662] copy_process+0x1c65/0x78b0 [ 1200.099159] ? SOFTIRQ_verbose+0x10/0x10 [ 1200.099671] ? mark_lock+0xf5/0x2df0 [ 1200.100144] ? __cleanup_sighand+0xb0/0xb0 [ 1200.100683] ? _copy_from_user+0xfb/0x1b0 [ 1200.101201] kernel_clone+0xe7/0x980 [ 1200.101668] ? lock_acquire+0x197/0x470 [ 1200.102161] ? create_io_thread+0xf0/0xf0 [ 1200.102679] ? ksys_write+0x21a/0x260 [ 1200.103158] ? lock_downgrade+0x6d0/0x6d0 [ 1200.103676] __do_sys_clone3+0x1e5/0x320 [ 1200.104177] ? __do_sys_clone+0x110/0x110 [ 1200.104699] ? rcu_read_lock_any_held+0x75/0xa0 [ 1200.105271] ? vfs_write+0x354/0xb10 [ 1200.105729] ? fput_many+0x2f/0x1a0 [ 1200.106176] ? ksys_write+0x1a9/0x260 [ 1200.106646] ? __ia32_sys_read+0xb0/0xb0 [ 1200.107166] do_syscall_64+0x33/0x40 [ 1200.107627] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1200.108258] RIP: 0033:0x7fd89e327b19 [ 1200.108719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1200.111016] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1200.111954] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1200.112844] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1200.113728] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1200.114611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:25:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) [ 1200.115492] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:25:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x2001000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:35 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000002) 02:25:35 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0x14, 0x52, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, {0xa, 0x4e24, 0x5434, @private2, 0xfffffffc}}}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x5c) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:25:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 23) 02:25:51 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_setup(0x1529, &(0x7f0000000b80)={0x0, 0x294f, 0x1, 0x0, 0x1d1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000c00), &(0x7f0000000c40)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r0, {0xfffffeff}}, './file0\x00'}) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000cc0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r3, 0x8, 0x0, 0x8, 0x3, 0x0, {0x0, r7}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000007, 0x30, r0, 0x10000000) r9 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x24000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000b40)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r9, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="64c9359fca7ca09686e7c17994834a6c6fc967523622ef8cd34b27d0c734d85ff0fe0e4536ecaa00b21d87ba9469fb3f8b26a7ca8c0dc519506700c4cb82f9f973f82fb1e92e110aedecf23e14f3f2e05f937ac2b1ab9a4edad88e6251ce5f22cc08ce9dc088059fec08d78ec34c3df9626006b98dccff10cef5807566aa51c62f925de1207a3874dea7ef49a6d30770d12e885a61b307d3bce0b8592b92c6af8ef99a3f046618adbcf0bd49efe6332bca47db7e1441bf6473b456a24e56a89487b42b89", 0xc4}, {&(0x7f0000000340)="dc4cec5c3b0a6512e2b84119595e44fd18ae4476169746f5895fbc082535cd30f0b8ecc835ea763a9d711520844cf518d7763d183a3fd38e8beff28869244a5bd83e9a7fa29d5bfc225ae8959ff21b27e954a6e4a37f4a0e6ac6f4ccb6533ff03b2d4b56059e2556a434618b2da16a6abe9549d713d3bf8e11858f9fa374b848b8752afebc6ec18deb0a5b6f8f46bb124306918779dd57f0dc03a00d1068bead6ce73844690f18434d114d002a5398d55803dd02db9fc2f0afa272aaf9fa0b00a296e3d67087", 0xc6}, {&(0x7f0000000140)="242732d3ebc4cf501d612a9479b4c8e6707e9bd74702", 0x16}, {&(0x7f0000000180)="4bdde241a9846a16c1d97d921f06236f37b6", 0x12}, {&(0x7f0000000440)="33b025cebf2cbad25e25a0af98450bdbae96d7e24ec3bc0846a087c07e21c4dd8db1e659d35a9ef9e359b3b11e9b600e2c55cbc84a62958b4629b57b22647fee3a6d16538cfade56cb34ba8dbebd6dfca48d81bc4235c4bab6890494787a93ddbb2197719799a29be27e047edf4765eaa7ad1dbfae251120340fb663121f125fa40ab59fb84bf600429606b3df7ce4d893cd0ba35648b8746efeeb3875b59c9d85f1b53f", 0xa4}, {&(0x7f0000000500)="e652992bc80a1bfc28c360a5", 0xc}, {&(0x7f0000000540)="33574a81b70f080b9de877344b1f933616fd9888758b9897459a017cd64a3c3707bf24510996a7a1f3819f5c0f53d91b02fccfbc3d0f9f3e886c95277aea414d82e2515d", 0x44}, {&(0x7f00000005c0)="2fb1a0cc5072e55f9a0598bef32b46c57afb889d96102b884df9bae32d1a2124fef05ca2dd2834c36e3df47c2548770924f5cb4d5edf6fb3340ea5cca03a6b0a492d27beba4f65074ec8ad38031a72c5124bb31905b4f2d1a13b9dbb3ee810300c1415902c42ad45ea848a97037660d083e0a6c07463b0caf6dd9fb491c27b94768d5b74076a25e4e3f34210ecfc7f98fc964dfc151fd52304400ed8b8d41fee1e4f726382c0940d7b93144cac98", 0xae}, {&(0x7f0000000680)="1098c0dfda4bdfee5433d0a73f0f6c89660a93", 0x13}, {&(0x7f00000006c0)="204683249378cd0d14a730f48cac95d74c34a180bb2ed14d9e6b56d3ab870b75edb1ef4f789a7b08531662816da9b87ee31fd71440d54dc4887d96794898c787fba90b304e3995a60abd47f5eddd9e730fb232dbf1c1d12e21653cec374009bb248259fa5d7910f192aca4da73c6055b07", 0x71}], 0xa, &(0x7f0000000800)=[{0x48, 0x107, 0x7fff, "912fdfeb184e4cf3b191d47c28e39a6dcfd1a73ad12210b67e633ed3741f8c749ac25bed80563be8c2ab670e907002f3cb2a1ec3f58294"}, {0xd8, 0x113, 0x1, "f86742e016f485bab13fcfb4877a6e396bc5681ee318ebd0ba1368accf015a0b43934692dc5b1af400e53f02cad135499d504111e56ef0ccba575172e4818937b1d4251e56d1740db7b14903973166b7344adbdf2c2606d4fe414b4d224235e417c2e1b1c98244eaa0b72a61bda5255d4d63d2f1bdefb3e87322e9b4b7ef062aad6b9e58df85a659d9ed02bbcb2f0156b205489eb1a8a6bf2939fc31a925b0cb63674c69c567003e680e8a45f22b427d4b660fb893852d4337821ade7709ab02c9"}, {0xd8, 0x10d, 0x100, "c9dd89ef92809947ffecbf0104b9dcc2e9322bc2fdee004b1d985415746a5bc1184657c7dd7c127f46988a9fd49cd1ffadf770f07296cd1a7760aecc3616816b190ebc6132d24d2a431b437500a5d6025027a73d86382e312ecc05d56f053a4e0b9f164a2ba3769ff170ab21439285ed4e5bcd4c14b11194c514b1401d081c68c2203dc8744fb995e42de91422d62de68b7377a430c974dcc27403e91e166f5263510d9debe1d0cf19f5a76c614c38dd51b9710ae6cead04ce8873c84e6dc9a20b23d6d1ed7a0ae2"}, {0x68, 0x104, 0x1, "94ce80135c45e29d326bbf1049664ba66cf935b4ebd41c3bacc5748378f7e27bba17c76e62cef6079aedef00fdfe4e1eebd8174833a2470c3907acb3a5c7d4fa2bc285398a578ef5da9ca077c88ef5c424ed93"}, {0xa0, 0x0, 0x8, "dd1a13a3d0d8cf0ebf23210c51a52fa38032b93d0a76e5a150f335116ca9b25d7da3ab3e9b4d4b21991df5ad17f1298870701ff94f77575a3ee8ad2f44a8e324c6c2a6627138acfab287b31c132fd40287e11986ec0f0933a6f4336b580e531285588419a40a5466ae1b9ede28e4d65ea754c5df3c0d4fac8cc8932e1752cbe671ad6f94a1e47dbe2bea0df68cac63"}], 0x300}, 0x0, 0x0, 0x1, {0x0, r10}}, 0x4) 02:25:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) 02:25:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xfeffffff, 0x1f012, r0, 0x0) 02:25:51 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:25:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 31) 02:25:51 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000003) 02:25:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x2020000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1216.016067] FAULT_INJECTION: forcing a failure. [ 1216.016067] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.017469] CPU: 1 PID: 7663 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1216.018250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1216.019224] Call Trace: [ 1216.019537] dump_stack+0x107/0x167 [ 1216.019956] should_fail.cold+0x5/0xa [ 1216.020400] ? __alloc_file+0x21/0x320 [ 1216.020848] should_failslab+0x5/0x20 [ 1216.021283] kmem_cache_alloc+0x5b/0x310 [ 1216.021751] __alloc_file+0x21/0x320 [ 1216.022177] alloc_empty_file+0x6d/0x170 [ 1216.022637] alloc_file+0x5e/0x5a0 [ 1216.023044] alloc_file_pseudo+0x16a/0x250 [ 1216.023536] ? alloc_file+0x5a0/0x5a0 [ 1216.023986] anon_inode_getfile+0xc8/0x1f0 [ 1216.024477] io_uring_setup+0x138b/0x2980 [ 1216.024957] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1216.025540] ? wait_for_completion_io+0x270/0x270 [ 1216.026112] do_syscall_64+0x33/0x40 [ 1216.026543] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1216.027141] RIP: 0033:0x7fbd4ba01b19 [ 1216.027569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1216.029689] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1216.030568] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1216.031397] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1216.032222] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1216.033047] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1216.033868] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1216.073877] FAULT_INJECTION: forcing a failure. [ 1216.073877] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.077174] CPU: 0 PID: 7673 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1216.079011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1216.080796] Call Trace: [ 1216.081237] dump_stack+0x107/0x167 [ 1216.081833] should_fail.cold+0x5/0xa [ 1216.082475] ? copy_process+0x1c65/0x78b0 [ 1216.083162] should_failslab+0x5/0x20 [ 1216.083792] kmem_cache_alloc+0x5b/0x310 [ 1216.084457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1216.085316] copy_process+0x1c65/0x78b0 [ 1216.085961] ? SOFTIRQ_verbose+0x10/0x10 02:25:51 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:25:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xffffff7f, 0x1f012, r0, 0x0) [ 1216.086630] ? mark_lock+0xf5/0x2df0 [ 1216.087422] ? __cleanup_sighand+0xb0/0xb0 [ 1216.088155] ? _copy_from_user+0xfb/0x1b0 [ 1216.088861] kernel_clone+0xe7/0x980 [ 1216.089488] ? lock_acquire+0x197/0x470 [ 1216.090154] ? create_io_thread+0xf0/0xf0 [ 1216.090860] ? ksys_write+0x21a/0x260 [ 1216.091510] ? lock_downgrade+0x6d0/0x6d0 [ 1216.092207] __do_sys_clone3+0x1e5/0x320 [ 1216.092891] ? __do_sys_clone+0x110/0x110 [ 1216.093600] ? rcu_read_lock_any_held+0x75/0xa0 [ 1216.094375] ? vfs_write+0x354/0xb10 [ 1216.095003] ? fput_many+0x2f/0x1a0 [ 1216.095619] ? ksys_write+0x1a9/0x260 [ 1216.096260] ? __ia32_sys_read+0xb0/0xb0 [ 1216.096961] do_syscall_64+0x33/0x40 [ 1216.097584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1216.098443] RIP: 0033:0x7fd89e327b19 [ 1216.099079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1216.102170] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1216.103453] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1216.104643] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1216.105839] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1216.107035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1216.108235] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:25:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 24) [ 1216.111556] FAULT_INJECTION: forcing a failure. [ 1216.111556] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.112928] CPU: 1 PID: 7677 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1216.113743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1216.114730] Call Trace: [ 1216.115049] dump_stack+0x107/0x167 [ 1216.115491] should_fail.cold+0x5/0xa [ 1216.115945] ? create_object.isra.0+0x3a/0xa30 [ 1216.116486] should_failslab+0x5/0x20 [ 1216.116942] kmem_cache_alloc+0x5b/0x310 [ 1216.117427] create_object.isra.0+0x3a/0xa30 [ 1216.117952] kmemleak_alloc_percpu+0xa0/0x100 [ 1216.118482] pcpu_alloc+0x4e2/0x1240 [ 1216.118941] __percpu_counter_init+0x10d/0x2d0 [ 1216.119494] io_uring_alloc_task_context+0xcc/0x6a0 [ 1216.120080] ? io_import_iovec+0x1120/0x1120 [ 1216.120608] ? lock_downgrade+0x6d0/0x6d0 [ 1216.121101] ? do_raw_spin_lock+0x121/0x260 [ 1216.121610] ? rwlock_bug.part.0+0x90/0x90 [ 1216.122122] __io_uring_add_tctx_node+0x2c6/0x520 [ 1216.122695] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1216.123323] ? alloc_fd+0x2e7/0x670 [ 1216.123758] io_uring_setup+0x1fbb/0x2980 [ 1216.124234] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1216.124838] ? wait_for_completion_io+0x270/0x270 [ 1216.125432] do_syscall_64+0x33/0x40 [ 1216.125873] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1216.126480] RIP: 0033:0x7f2e49e79b19 [ 1216.126922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1216.129105] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1216.130006] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1216.130850] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1216.131685] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1216.132509] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1216.133322] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:25:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x8000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1216.168673] FAULT_INJECTION: forcing a failure. [ 1216.168673] name failslab, interval 1, probability 0, space 0, times 0 02:25:51 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000004) 02:25:51 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1216.170989] CPU: 0 PID: 7686 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1216.172437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1216.173848] Call Trace: [ 1216.174305] dump_stack+0x107/0x167 [ 1216.174906] should_fail.cold+0x5/0xa [ 1216.175592] ? create_object.isra.0+0x3a/0xa30 [ 1216.176438] should_failslab+0x5/0x20 [ 1216.177081] kmem_cache_alloc+0x5b/0x310 [ 1216.177764] create_object.isra.0+0x3a/0xa30 [ 1216.178486] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1216.179360] kmem_cache_alloc+0x159/0x310 [ 1216.180047] __alloc_file+0x21/0x320 [ 1216.180658] alloc_empty_file+0x6d/0x170 [ 1216.181333] alloc_file+0x5e/0x5a0 [ 1216.181926] alloc_file_pseudo+0x16a/0x250 [ 1216.182642] ? alloc_file+0x5a0/0x5a0 [ 1216.183289] anon_inode_getfile+0xc8/0x1f0 [ 1216.184006] io_uring_setup+0x138b/0x2980 [ 1216.184702] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1216.185547] ? wait_for_completion_io+0x270/0x270 [ 1216.186374] do_syscall_64+0x33/0x40 [ 1216.186992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1216.187845] RIP: 0033:0x7fbd4ba01b19 [ 1216.188461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1216.191548] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1216.192818] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1216.193999] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1216.195185] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1216.196377] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1216.197543] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:25:51 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000005) 02:25:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x8000001000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:25:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) 02:25:51 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x50, r0, 0x0) 02:25:51 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) 02:25:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xfffffffb, 0x1f012, r0, 0x0) [ 1216.294656] FAULT_INJECTION: forcing a failure. [ 1216.294656] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.296051] CPU: 1 PID: 7701 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1216.296841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1216.297789] Call Trace: [ 1216.298098] dump_stack+0x107/0x167 [ 1216.298517] should_fail.cold+0x5/0xa [ 1216.298957] ? create_object.isra.0+0x3a/0xa30 [ 1216.299494] should_failslab+0x5/0x20 [ 1216.299936] kmem_cache_alloc+0x5b/0x310 [ 1216.300402] create_object.isra.0+0x3a/0xa30 [ 1216.300899] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1216.301482] kmem_cache_alloc+0x159/0x310 [ 1216.301964] copy_process+0x1c65/0x78b0 [ 1216.302422] ? SOFTIRQ_verbose+0x10/0x10 [ 1216.302895] ? mark_lock+0xf5/0x2df0 [ 1216.303341] ? __cleanup_sighand+0xb0/0xb0 [ 1216.303838] ? _copy_from_user+0xfb/0x1b0 [ 1216.304316] kernel_clone+0xe7/0x980 [ 1216.304745] ? lock_acquire+0x197/0x470 [ 1216.305200] ? create_io_thread+0xf0/0xf0 [ 1216.305691] ? ksys_write+0x21a/0x260 [ 1216.306125] ? lock_downgrade+0x6d0/0x6d0 [ 1216.306602] __do_sys_clone3+0x1e5/0x320 [ 1216.307070] ? __do_sys_clone+0x110/0x110 [ 1216.307564] ? rcu_read_lock_any_held+0x75/0xa0 [ 1216.308090] ? vfs_write+0x354/0xb10 [ 1216.308518] ? fput_many+0x2f/0x1a0 [ 1216.308946] ? ksys_write+0x1a9/0x260 [ 1216.309378] ? __ia32_sys_read+0xb0/0xb0 [ 1216.309849] do_syscall_64+0x33/0x40 [ 1216.310276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1216.310867] RIP: 0033:0x7fd89e327b19 [ 1216.311297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1216.313404] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1216.314270] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1216.315086] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1216.315906] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1216.316722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1216.317535] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:26:06 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 32) 02:26:06 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 25) 02:26:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xfffffffe, 0x1f012, r0, 0x0) 02:26:06 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x50}, 0x0, 0x4008000}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x3f81, &(0x7f0000000300)={0x0, 0x7301, 0x20, 0x2, 0x15}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000400)=0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000440), 0x4, 0x40a000) syz_io_uring_submit(r6, r7, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@tipc=@id, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/112, 0x70}, {&(0x7f0000000680)=""/15, 0xf}], 0x3, &(0x7f0000000700)=""/117, 0x75}, 0x0, 0x80002000, 0x1, {0x2}}, 0x9) syz_io_uring_submit(r5, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000d, 0x4000010, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0xf1d8) 02:26:06 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) 02:26:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x10100000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) 02:26:06 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000006) 02:26:06 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x6d5a, 0xb040, 0x2, &(0x7f0000000000)={[0xffff]}, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x0) syz_io_uring_setup(0x2f42, &(0x7f0000000080)={0x0, 0x6170, 0x8, 0x0, 0x1f5, 0x0, r1}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [ 1231.373121] FAULT_INJECTION: forcing a failure. [ 1231.373121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1231.376391] CPU: 0 PID: 7719 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1231.378178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.378679] FAULT_INJECTION: forcing a failure. [ 1231.378679] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.380349] Call Trace: [ 1231.380380] dump_stack+0x107/0x167 [ 1231.380409] should_fail.cold+0x5/0xa [ 1231.380441] __alloc_pages_nodemask+0x182/0x600 [ 1231.385734] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1231.387099] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1231.388702] alloc_pages_current+0x187/0x280 [ 1231.389852] __get_free_pages+0xc/0xa0 [ 1231.390862] pgd_alloc+0x84/0x4e0 [ 1231.391780] ? pgd_page_get_mm+0x40/0x40 [ 1231.392839] ? lockdep_init_map_type+0x2c7/0x780 [ 1231.394074] ? lockdep_init_map_type+0x2c7/0x780 [ 1231.395351] mm_init+0x670/0xab0 [ 1231.396238] copy_process+0x257b/0x78b0 [ 1231.397269] ? SOFTIRQ_verbose+0x10/0x10 [ 1231.398338] ? mark_lock+0xf5/0x2df0 [ 1231.399341] ? __cleanup_sighand+0xb0/0xb0 [ 1231.400464] ? _copy_from_user+0xfb/0x1b0 [ 1231.401553] kernel_clone+0xe7/0x980 [ 1231.402542] ? lock_acquire+0x197/0x470 [ 1231.403604] ? create_io_thread+0xf0/0xf0 [ 1231.404693] ? ksys_write+0x21a/0x260 [ 1231.405695] ? lock_downgrade+0x6d0/0x6d0 [ 1231.406775] __do_sys_clone3+0x1e5/0x320 [ 1231.407840] ? __do_sys_clone+0x110/0x110 [ 1231.408939] ? rcu_read_lock_any_held+0x75/0xa0 [ 1231.410144] ? vfs_write+0x354/0xb10 [ 1231.411110] ? fput_many+0x2f/0x1a0 [ 1231.412060] ? ksys_write+0x1a9/0x260 [ 1231.413053] ? __ia32_sys_read+0xb0/0xb0 [ 1231.414128] do_syscall_64+0x33/0x40 [ 1231.415096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.416413] RIP: 0033:0x7fd89e327b19 [ 1231.417385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.421744] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1231.423398] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1231.424881] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1231.426392] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.428239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1231.430105] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1231.431878] CPU: 1 PID: 7724 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1231.432741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.433759] Call Trace: [ 1231.434098] dump_stack+0x107/0x167 [ 1231.434555] should_fail.cold+0x5/0xa [ 1231.435042] ? create_object.isra.0+0x3a/0xa30 [ 1231.435624] should_failslab+0x5/0x20 [ 1231.436094] kmem_cache_alloc+0x5b/0x310 [ 1231.436599] create_object.isra.0+0x3a/0xa30 [ 1231.437138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1231.437775] kmem_cache_alloc_trace+0x151/0x320 [ 1231.438355] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1231.438984] ? io_import_iovec+0x1120/0x1120 [ 1231.439538] ? lock_downgrade+0x6d0/0x6d0 [ 1231.440050] ? do_raw_spin_lock+0x121/0x260 [ 1231.440584] ? rwlock_bug.part.0+0x90/0x90 [ 1231.441106] __io_uring_add_tctx_node+0x2c6/0x520 [ 1231.441697] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1231.442339] ? alloc_fd+0x2e7/0x670 [ 1231.442793] io_uring_setup+0x1fbb/0x2980 [ 1231.443319] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1231.443944] ? wait_for_completion_io+0x270/0x270 [ 1231.444561] do_syscall_64+0x33/0x40 [ 1231.445022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.445653] RIP: 0033:0x7f2e49e79b19 [ 1231.446113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.448399] RSP: 002b:00007f2e473ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1231.449337] RAX: ffffffffffffffda RBX: 00007f2e49f8d020 RCX: 00007f2e49e79b19 [ 1231.450212] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1231.451082] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1231.451966] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1231.452843] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1231.460113] FAULT_INJECTION: forcing a failure. [ 1231.460113] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.462646] CPU: 0 PID: 7728 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1231.464166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.465954] Call Trace: [ 1231.465981] dump_stack+0x107/0x167 [ 1231.466003] should_fail.cold+0x5/0xa [ 1231.466024] ? security_file_alloc+0x34/0x170 [ 1231.466043] should_failslab+0x5/0x20 [ 1231.466062] kmem_cache_alloc+0x5b/0x310 [ 1231.466093] security_file_alloc+0x34/0x170 [ 1231.471427] __alloc_file+0xb7/0x320 [ 1231.472227] alloc_empty_file+0x6d/0x170 [ 1231.473330] alloc_file+0x5e/0x5a0 [ 1231.474086] alloc_file_pseudo+0x16a/0x250 [ 1231.474998] ? alloc_file+0x5a0/0x5a0 [ 1231.475839] anon_inode_getfile+0xc8/0x1f0 [ 1231.476767] io_uring_setup+0x138b/0x2980 [ 1231.477659] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1231.478732] ? wait_for_completion_io+0x270/0x270 [ 1231.479798] do_syscall_64+0x33/0x40 [ 1231.480599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.481698] RIP: 0033:0x7fbd4ba01b19 [ 1231.482497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.486399] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 02:26:07 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) io_uring_enter(r1, 0x4aad, 0x5d33, 0x2, &(0x7f0000000000)={[0x4]}, 0x8) [ 1231.488126] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1231.489651] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1231.491138] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1231.492654] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1231.494153] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:26:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000000000, 0x1f012, r0, 0x0) 02:26:07 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000007) 02:26:07 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) 02:26:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) 02:26:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x80454e3a550000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1231.610969] FAULT_INJECTION: forcing a failure. [ 1231.610969] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.612391] CPU: 1 PID: 7746 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1231.613173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.614139] Call Trace: [ 1231.614467] dump_stack+0x107/0x167 [ 1231.614888] should_fail.cold+0x5/0xa [ 1231.615343] ? create_object.isra.0+0x3a/0xa30 [ 1231.615872] should_failslab+0x5/0x20 [ 1231.616313] kmem_cache_alloc+0x5b/0x310 [ 1231.616791] create_object.isra.0+0x3a/0xa30 [ 1231.617298] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1231.617888] kmem_cache_alloc+0x159/0x310 [ 1231.618374] copy_process+0x2514/0x78b0 [ 1231.618837] ? SOFTIRQ_verbose+0x10/0x10 [ 1231.619310] ? mark_lock+0xf5/0x2df0 [ 1231.619746] ? __cleanup_sighand+0xb0/0xb0 [ 1231.620240] ? _copy_from_user+0xfb/0x1b0 [ 1231.620721] kernel_clone+0xe7/0x980 [ 1231.621151] ? lock_acquire+0x197/0x470 [ 1231.621607] ? create_io_thread+0xf0/0xf0 [ 1231.622084] ? ksys_write+0x21a/0x260 [ 1231.622524] ? lock_downgrade+0x6d0/0x6d0 [ 1231.623004] __do_sys_clone3+0x1e5/0x320 [ 1231.623483] ? __do_sys_clone+0x110/0x110 [ 1231.623974] ? rcu_read_lock_any_held+0x75/0xa0 [ 1231.624506] ? vfs_write+0x354/0xb10 [ 1231.624936] ? fput_many+0x2f/0x1a0 [ 1231.625355] ? ksys_write+0x1a9/0x260 [ 1231.625789] ? __ia32_sys_read+0xb0/0xb0 [ 1231.626259] do_syscall_64+0x33/0x40 [ 1231.626699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.627295] RIP: 0033:0x7fd89e327b19 [ 1231.627726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.629841] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1231.630706] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1231.631535] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1231.632355] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.633170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1231.633985] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:26:23 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 33) 02:26:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29) 02:26:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 26) 02:26:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0xd01910f0290000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x7fffffffff3ff, 0x1f012, r0, 0x0) 02:26:23 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000007, 0x2010, r0, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = syz_io_uring_setup(0x32cb, &(0x7f0000000480)={0x0, 0x94e1, 0x10, 0x1, 0x288, 0x0, r0}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r2, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000580)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd, 0x784, 0x0, 0x2, 0x0, 0x1}, 0x1) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x40010, r0, 0x8000000) syz_io_uring_setup(0x31c2, &(0x7f0000000300)={0x0, 0xc2d1, 0x8, 0x1, 0x3da, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000400)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd_index=0x1, 0x2, 0xb7, 0xfff, 0xd, 0x0, {0x0, r11}}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r13, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f00000005c0)) syz_io_uring_submit(r12, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r14}}, 0x7) 02:26:23 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 02:26:23 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000060) [ 1248.039604] FAULT_INJECTION: forcing a failure. [ 1248.039604] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.042118] CPU: 1 PID: 7766 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1248.043634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.045422] Call Trace: [ 1248.045991] dump_stack+0x107/0x167 [ 1248.046780] should_fail.cold+0x5/0xa [ 1248.047645] ? create_object.isra.0+0x3a/0xa30 [ 1248.048637] should_failslab+0x5/0x20 [ 1248.049460] kmem_cache_alloc+0x5b/0x310 [ 1248.050337] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1248.051554] create_object.isra.0+0x3a/0xa30 [ 1248.052500] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1248.053602] kmem_cache_alloc+0x159/0x310 [ 1248.054514] security_file_alloc+0x34/0x170 [ 1248.055457] __alloc_file+0xb7/0x320 [ 1248.056276] alloc_empty_file+0x6d/0x170 [ 1248.057154] alloc_file+0x5e/0x5a0 [ 1248.057925] alloc_file_pseudo+0x16a/0x250 [ 1248.058840] ? alloc_file+0x5a0/0x5a0 [ 1248.059708] anon_inode_getfile+0xc8/0x1f0 [ 1248.060630] io_uring_setup+0x138b/0x2980 [ 1248.061544] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1248.062641] ? wait_for_completion_io+0x270/0x270 [ 1248.063744] do_syscall_64+0x33/0x40 [ 1248.064554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1248.065670] RIP: 0033:0x7fbd4ba01b19 [ 1248.066478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.070435] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1248.072047] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1248.073588] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1248.075124] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1248.076672] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1248.078173] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1248.089906] FAULT_INJECTION: forcing a failure. [ 1248.089906] name failslab, interval 1, probability 0, space 0, times 0 02:26:23 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000300) [ 1248.092275] CPU: 1 PID: 7765 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1248.093961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.095704] Call Trace: [ 1248.096247] dump_stack+0x107/0x167 [ 1248.096997] should_fail.cold+0x5/0xa [ 1248.097785] ? io_wq_create+0xeb/0xc00 [ 1248.098586] should_failslab+0x5/0x20 [ 1248.099367] __kmalloc+0x72/0x390 [ 1248.100117] io_wq_create+0xeb/0xc00 [ 1248.100898] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1248.101942] ? io_import_iovec+0x1120/0x1120 [ 1248.102848] ? io_apoll_task_func+0x2d0/0x2d0 [ 1248.103787] ? __io_req_find_next+0x300/0x300 [ 1248.104695] ? do_raw_spin_lock+0x121/0x260 [ 1248.105572] ? rwlock_bug.part.0+0x90/0x90 [ 1248.106438] __io_uring_add_tctx_node+0x2c6/0x520 [ 1248.107419] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1248.108511] ? alloc_fd+0x2e7/0x670 [ 1248.109263] io_uring_setup+0x1fbb/0x2980 [ 1248.110123] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1248.111189] ? wait_for_completion_io+0x270/0x270 [ 1248.112267] do_syscall_64+0x33/0x40 [ 1248.113055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1248.114132] RIP: 0033:0x7f2e49e79b19 [ 1248.114906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.118788] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1248.120410] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1248.121941] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1248.123468] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1248.124998] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1248.126511] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:26:23 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 02:26:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0xf0310c1b000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1248.155035] FAULT_INJECTION: forcing a failure. [ 1248.155035] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.157877] CPU: 0 PID: 7764 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1248.159355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.161152] Call Trace: [ 1248.161725] dump_stack+0x107/0x167 [ 1248.162518] should_fail.cold+0x5/0xa [ 1248.163348] ? create_object.isra.0+0x3a/0xa30 [ 1248.164350] should_failslab+0x5/0x20 [ 1248.165171] kmem_cache_alloc+0x5b/0x310 [ 1248.166059] create_object.isra.0+0x3a/0xa30 [ 1248.167007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1248.168118] kmem_cache_alloc+0x159/0x310 [ 1248.169027] vm_area_dup+0x78/0x290 [ 1248.169825] ? __lock_acquire+0xbb1/0x5b00 [ 1248.170761] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1248.171901] ? SOFTIRQ_verbose+0x10/0x10 [ 1248.172773] ? lock_acquire+0x197/0x470 [ 1248.173624] ? copy_process+0x260c/0x78b0 [ 1248.174530] ? vm_area_alloc+0x110/0x110 [ 1248.175414] ? find_held_lock+0x2c/0x110 [ 1248.176304] ? get_mm_exe_file+0x139/0x310 [ 1248.177218] ? lock_downgrade+0x6d0/0x6d0 [ 1248.178110] ? down_write_nested+0xe4/0x160 [ 1248.179047] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1248.180163] ? get_mm_exe_file+0x162/0x310 [ 1248.181078] copy_process+0x298b/0x78b0 [ 1248.181937] ? SOFTIRQ_verbose+0x10/0x10 [ 1248.182853] ? __cleanup_sighand+0xb0/0xb0 [ 1248.183803] ? _copy_from_user+0xfb/0x1b0 [ 1248.184707] kernel_clone+0xe7/0x980 [ 1248.185514] ? lock_acquire+0x197/0x470 [ 1248.186372] ? create_io_thread+0xf0/0xf0 [ 1248.187285] ? ksys_write+0x21a/0x260 [ 1248.188114] ? lock_downgrade+0x6d0/0x6d0 [ 1248.189013] __do_sys_clone3+0x1e5/0x320 [ 1248.189889] ? __do_sys_clone+0x110/0x110 [ 1248.190809] ? rcu_read_lock_any_held+0x75/0xa0 [ 1248.191814] ? vfs_write+0x354/0xb10 [ 1248.192618] ? fput_many+0x2f/0x1a0 [ 1248.193403] ? ksys_write+0x1a9/0x260 [ 1248.194223] ? __ia32_sys_read+0xb0/0xb0 [ 1248.195124] do_syscall_64+0x33/0x40 [ 1248.195945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1248.197048] RIP: 0033:0x7fd89e327b19 [ 1248.197851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.201810] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1248.203459] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1248.205013] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1248.206553] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1248.208108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1248.209637] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:26:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0xf0ff1f00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:23 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 02:26:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000000000000, 0x1f012, r0, 0x0) 02:26:23 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r8 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r6, r1, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x3, 0x0, 0x8000, 0x0, 0x0, {0x0, r11}}, 0x8) 02:26:23 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000500) 02:26:23 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 34) [ 1248.376055] FAULT_INJECTION: forcing a failure. [ 1248.376055] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.378091] CPU: 1 PID: 7787 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1248.379262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.380737] Call Trace: [ 1248.381205] dump_stack+0x107/0x167 [ 1248.381847] should_fail.cold+0x5/0xa [ 1248.382522] ? create_object.isra.0+0x3a/0xa30 [ 1248.383323] should_failslab+0x5/0x20 [ 1248.384026] kmem_cache_alloc+0x5b/0x310 [ 1248.384749] create_object.isra.0+0x3a/0xa30 [ 1248.385531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1248.386421] __kmalloc+0x16e/0x390 [ 1248.387053] io_wq_create+0xeb/0xc00 [ 1248.387741] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1248.388627] ? io_import_iovec+0x1120/0x1120 [ 1248.389394] ? io_apoll_task_func+0x2d0/0x2d0 [ 1248.390190] ? __io_req_find_next+0x300/0x300 [ 1248.390975] ? do_raw_spin_lock+0x121/0x260 [ 1248.391749] ? rwlock_bug.part.0+0x90/0x90 [ 1248.392504] __io_uring_add_tctx_node+0x2c6/0x520 [ 1248.393344] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1248.394249] ? alloc_fd+0x2e7/0x670 [ 1248.394893] io_uring_setup+0x1fbb/0x2980 [ 1248.395655] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1248.396544] ? wait_for_completion_io+0x270/0x270 [ 1248.397402] do_syscall_64+0x33/0x40 [ 1248.398047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1248.398939] RIP: 0033:0x7f2e49e79b19 [ 1248.399616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.402819] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1248.404155] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1248.405393] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1248.406642] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1248.407906] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1248.409135] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:26:38 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 27) 02:26:38 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 35) 02:26:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30) 02:26:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc000000000000, 0x1f012, r0, 0x0) [ 1262.987899] FAULT_INJECTION: forcing a failure. [ 1262.987899] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.989516] CPU: 1 PID: 7800 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1262.990446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1262.991589] Call Trace: [ 1262.991964] dump_stack+0x107/0x167 [ 1262.992461] should_fail.cold+0x5/0xa 02:26:38 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 02:26:38 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000600) 02:26:38 executing program 4: ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'hsr0\x00', {}, 0x3}) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) [ 1262.992983] ? io_wq_create+0x6ef/0xc00 [ 1262.993734] should_failslab+0x5/0x20 [ 1262.994254] kmem_cache_alloc_node_trace+0x59/0x340 [ 1262.994940] io_wq_create+0x6ef/0xc00 [ 1262.995470] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1262.996191] ? io_import_iovec+0x1120/0x1120 [ 1262.996797] ? io_apoll_task_func+0x2d0/0x2d0 [ 1262.997421] ? __io_req_find_next+0x300/0x300 [ 1262.998049] ? do_raw_spin_lock+0x121/0x260 [ 1262.998656] ? rwlock_bug.part.0+0x90/0x90 [ 1262.999239] __io_uring_add_tctx_node+0x2c6/0x520 [ 1262.999919] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1263.000642] ? alloc_fd+0x2e7/0x670 [ 1263.001145] io_uring_setup+0x1fbb/0x2980 [ 1263.001723] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1263.002419] ? wait_for_completion_io+0x270/0x270 [ 1263.003101] do_syscall_64+0x33/0x40 [ 1263.003613] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1263.004218] FAULT_INJECTION: forcing a failure. [ 1263.004218] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.005819] RIP: 0033:0x7f2e49e79b19 [ 1263.005833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1263.005840] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1263.005854] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1263.005861] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1263.005880] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1263.013344] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1263.014330] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1263.015339] CPU: 0 PID: 7803 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1263.017087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1263.019182] Call Trace: [ 1263.019860] dump_stack+0x107/0x167 [ 1263.020793] should_fail.cold+0x5/0xa [ 1263.021759] ? vm_area_dup+0x78/0x290 [ 1263.022725] should_failslab+0x5/0x20 [ 1263.023703] kmem_cache_alloc+0x5b/0x310 [ 1263.024748] vm_area_dup+0x78/0x290 [ 1263.025075] Zero length message leads to an empty skb [ 1263.025683] ? __lock_acquire+0xbb1/0x5b00 [ 1263.025733] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1263.028768] ? SOFTIRQ_verbose+0x10/0x10 [ 1263.029805] ? lock_acquire+0x197/0x470 [ 1263.030807] ? copy_process+0x260c/0x78b0 [ 1263.031889] ? vm_area_alloc+0x110/0x110 [ 1263.032920] ? find_held_lock+0x2c/0x110 [ 1263.033962] ? get_mm_exe_file+0x139/0x310 [ 1263.035031] ? lock_downgrade+0x6d0/0x6d0 [ 1263.036100] ? down_write_nested+0xe4/0x160 [ 1263.037180] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1263.038465] ? get_mm_exe_file+0x162/0x310 [ 1263.039516] copy_process+0x298b/0x78b0 [ 1263.040518] ? SOFTIRQ_verbose+0x10/0x10 [ 1263.041580] ? __cleanup_sighand+0xb0/0xb0 [ 1263.042658] ? _copy_from_user+0xfb/0x1b0 [ 1263.043703] kernel_clone+0xe7/0x980 [ 1263.044635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1263.045932] ? create_io_thread+0xf0/0xf0 [ 1263.046997] __do_sys_clone3+0x1e5/0x320 [ 1263.048019] ? __do_sys_clone+0x110/0x110 [ 1263.049074] ? rcu_read_lock_any_held+0x75/0xa0 [ 1263.050218] ? vfs_write+0x354/0xb10 [ 1263.051153] ? fput_many+0x2f/0x1a0 [ 1263.052067] ? ksys_write+0x1a9/0x260 [ 1263.053010] ? __ia32_sys_read+0xb0/0xb0 [ 1263.054038] do_syscall_64+0x33/0x40 [ 1263.054968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1263.056254] RIP: 0033:0x7fd89e327b19 [ 1263.057182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1263.061773] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1263.063681] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1263.065459] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1263.067211] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1263.068984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1263.070750] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1263.071445] FAULT_INJECTION: forcing a failure. [ 1263.071445] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.074090] CPU: 1 PID: 7814 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1263.075022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1263.076166] Call Trace: [ 1263.076528] dump_stack+0x107/0x167 [ 1263.077026] should_fail.cold+0x5/0xa [ 1263.077550] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1263.078244] should_failslab+0x5/0x20 [ 1263.078775] kmem_cache_alloc_trace+0x55/0x320 [ 1263.079410] io_uring_alloc_task_context+0x99/0x6a0 [ 1263.080108] ? io_import_iovec+0x1120/0x1120 [ 1263.080714] ? lock_downgrade+0x6d0/0x6d0 [ 1263.081274] ? do_raw_spin_lock+0x121/0x260 [ 1263.081846] ? rwlock_bug.part.0+0x90/0x90 [ 1263.082415] __io_uring_add_tctx_node+0x2c6/0x520 [ 1263.083074] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1263.083787] ? alloc_fd+0x2e7/0x670 [ 1263.084288] io_uring_setup+0x1fbb/0x2980 [ 1263.084860] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1263.085545] ? wait_for_completion_io+0x270/0x270 [ 1263.086211] do_syscall_64+0x33/0x40 02:26:38 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x2fdb, &(0x7f0000000080)={0x0, 0xef93, 0x2, 0x3, 0x22, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10010, r4, 0x8000000) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x64, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r2, 0x0) [ 1263.086709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1263.087633] RIP: 0033:0x7fbd4ba01b19 [ 1263.088124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1263.090576] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1263.091589] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1263.092547] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1263.093534] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1263.094482] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1263.095424] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:26:38 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 02:26:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x800000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000000000000, 0x1f012, r0, 0x0) 02:26:38 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000700) 02:26:38 executing program 4: r0 = syz_io_uring_setup(0x4000386f, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, 0xfffffffc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:26:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x1100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:38 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 28) [ 1263.262798] FAULT_INJECTION: forcing a failure. [ 1263.262798] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.264278] CPU: 1 PID: 7834 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1263.265119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1263.266137] Call Trace: [ 1263.266464] dump_stack+0x107/0x167 [ 1263.266910] should_fail.cold+0x5/0xa [ 1263.267382] ? create_object.isra.0+0x3a/0xa30 [ 1263.267952] should_failslab+0x5/0x20 [ 1263.268431] kmem_cache_alloc+0x5b/0x310 [ 1263.268931] create_object.isra.0+0x3a/0xa30 [ 1263.269470] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1263.270094] kmem_cache_alloc_trace+0x151/0x320 [ 1263.270674] io_uring_alloc_task_context+0x99/0x6a0 [ 1263.271290] ? io_import_iovec+0x1120/0x1120 [ 1263.271846] ? lock_downgrade+0x6d0/0x6d0 [ 1263.272356] ? do_raw_spin_lock+0x121/0x260 [ 1263.272884] ? rwlock_bug.part.0+0x90/0x90 [ 1263.273408] __io_uring_add_tctx_node+0x2c6/0x520 [ 1263.274000] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1263.274643] ? alloc_fd+0x2e7/0x670 [ 1263.275098] io_uring_setup+0x1fbb/0x2980 [ 1263.275625] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1263.276253] ? wait_for_completion_io+0x270/0x270 [ 1263.276863] do_syscall_64+0x33/0x40 [ 1263.277321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1263.277944] RIP: 0033:0x7fbd4ba01b19 [ 1263.278399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1263.280650] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1263.281580] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1263.282451] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1263.283322] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1263.284199] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1263.285070] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:26:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31) 02:26:54 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8002000) 02:26:54 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 36) 02:26:54 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 29) [ 1279.210281] FAULT_INJECTION: forcing a failure. [ 1279.210281] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.212853] CPU: 1 PID: 7848 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1279.214329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1279.216137] Call Trace: [ 1279.216727] dump_stack+0x107/0x167 [ 1279.217520] should_fail.cold+0x5/0xa [ 1279.218351] ? create_object.isra.0+0x3a/0xa30 02:26:54 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 02:26:54 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r1, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)="8afb0727b9e0f3152e4eb91add62a259e3f252688738ee15", 0x18}, {&(0x7f0000000240)="e57d05d06562aadfda5af36926752451ec6c3931ae13e337ac28dc0881d572bbff28a25c1bd6fb6e85a466d0db9821a8b98a2488704c1c71e03ec6a1603eeb11333face3431a042ab5a8522f387a9dcedfcb51972441a98bf478c66bb63bbc97bffb5a111d7131de79de5003efd34209615f2f1c20a18824ba37cdc593f2a17e87105224b33950f65761ebbb820be319b751fa76bf047518eda5bd2ccec24ba972f9d7", 0xa3}], 0x2}, 0x0, 0x40, 0x1}, 0xffff) 02:26:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x2000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:26:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000000000000, 0x1f012, r0, 0x0) [ 1279.219344] should_failslab+0x5/0x20 [ 1279.220329] kmem_cache_alloc+0x5b/0x310 [ 1279.221228] ? io_wq_create+0x114/0xc00 [ 1279.222110] create_object.isra.0+0x3a/0xa30 [ 1279.223106] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1279.224272] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1279.225444] io_wq_create+0x6ef/0xc00 [ 1279.226319] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1279.227476] ? io_import_iovec+0x1120/0x1120 [ 1279.228486] ? io_apoll_task_func+0x2d0/0x2d0 [ 1279.229498] ? __io_req_find_next+0x300/0x300 [ 1279.230511] ? do_raw_spin_lock+0x121/0x260 [ 1279.231489] ? rwlock_bug.part.0+0x90/0x90 [ 1279.232466] __io_uring_add_tctx_node+0x2c6/0x520 [ 1279.233556] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1279.234738] ? alloc_fd+0x2e7/0x670 [ 1279.235576] io_uring_setup+0x1fbb/0x2980 [ 1279.236534] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1279.237675] ? wait_for_completion_io+0x270/0x270 [ 1279.238797] do_syscall_64+0x33/0x40 [ 1279.239648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1279.240816] RIP: 0033:0x7f2e49e79b19 [ 1279.241656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1279.245822] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1279.247522] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 02:26:54 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x0, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1279.249124] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1279.250882] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 02:26:54 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8004000) [ 1279.252486] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1279.254177] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1279.262087] FAULT_INJECTION: forcing a failure. [ 1279.262087] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.264654] CPU: 1 PID: 7850 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1279.266187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1279.268020] Call Trace: [ 1279.268606] dump_stack+0x107/0x167 [ 1279.269411] should_fail.cold+0x5/0xa [ 1279.270251] ? create_object.isra.0+0x3a/0xa30 [ 1279.271256] should_failslab+0x5/0x20 [ 1279.272107] kmem_cache_alloc+0x5b/0x310 [ 1279.273026] create_object.isra.0+0x3a/0xa30 [ 1279.274006] kmemleak_alloc_percpu+0xa0/0x100 [ 1279.275008] pcpu_alloc+0x4e2/0x1240 [ 1279.275867] __percpu_counter_init+0x10d/0x2d0 [ 1279.276888] io_uring_alloc_task_context+0xcc/0x6a0 [ 1279.277991] ? io_import_iovec+0x1120/0x1120 [ 1279.278971] ? lock_downgrade+0x6d0/0x6d0 [ 1279.279897] ? do_raw_spin_lock+0x121/0x260 [ 1279.280559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7858 comm=syz-executor.2 [ 1279.280853] ? rwlock_bug.part.0+0x90/0x90 [ 1279.283210] __io_uring_add_tctx_node+0x2c6/0x520 [ 1279.284296] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1279.285456] ? alloc_fd+0x2e7/0x670 [ 1279.286277] io_uring_setup+0x1fbb/0x2980 [ 1279.287202] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1279.288317] ? wait_for_completion_io+0x270/0x270 [ 1279.289406] do_syscall_64+0x33/0x40 [ 1279.290224] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1279.291340] RIP: 0033:0x7fbd4ba01b19 [ 1279.292175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1279.296250] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1279.297933] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1279.299501] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1279.301086] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1279.302660] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1279.304258] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1279.307689] FAULT_INJECTION: forcing a failure. [ 1279.307689] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.310228] CPU: 1 PID: 7852 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1279.311758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 02:26:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000000000000, 0x1f012, r0, 0x0) 02:26:54 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8006000) [ 1279.313618] Call Trace: [ 1279.314445] dump_stack+0x107/0x167 [ 1279.315264] should_fail.cold+0x5/0xa [ 1279.316131] ? create_object.isra.0+0x3a/0xa30 [ 1279.317152] should_failslab+0x5/0x20 [ 1279.318001] kmem_cache_alloc+0x5b/0x310 [ 1279.318916] create_object.isra.0+0x3a/0xa30 [ 1279.319901] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1279.321044] kmem_cache_alloc+0x159/0x310 [ 1279.321979] vm_area_dup+0x78/0x290 [ 1279.322812] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1279.323880] ? lock_downgrade+0x6d0/0x6d0 [ 1279.324818] ? copy_page_range+0x24e9/0x3800 [ 1279.325832] ? avc_has_perm_noaudit+0x1f7/0x3e0 02:26:54 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x0, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1279.326890] ? avc_has_extended_perms+0xf40/0xf40 [ 1279.328106] ? vm_area_alloc+0x110/0x110 [ 1279.329019] ? find_held_lock+0x2c/0x110 [ 1279.329947] ? selinux_vm_enough_memory+0x114/0x180 [ 1279.331075] ? selinux_sb_statfs+0x250/0x250 [ 1279.332085] ? percpu_counter_add_batch+0x8b/0x140 [ 1279.333194] ? __vm_enough_memory+0x184/0x360 [ 1279.334188] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1279.335336] copy_process+0x298b/0x78b0 [ 1279.336216] ? SOFTIRQ_verbose+0x10/0x10 [ 1279.337152] ? __cleanup_sighand+0xb0/0xb0 [ 1279.338107] ? _copy_from_user+0xfb/0x1b0 [ 1279.339036] kernel_clone+0xe7/0x980 [ 1279.339868] ? lock_acquire+0x197/0x470 [ 1279.340743] ? create_io_thread+0xf0/0xf0 [ 1279.341675] ? ksys_write+0x21a/0x260 [ 1279.342517] ? lock_downgrade+0x6d0/0x6d0 [ 1279.343442] __do_sys_clone3+0x1e5/0x320 [ 1279.344269] ? __do_sys_clone+0x110/0x110 [ 1279.345126] ? rcu_read_lock_any_held+0x75/0xa0 [ 1279.346063] ? vfs_write+0x354/0xb10 [ 1279.346819] ? fput_many+0x2f/0x1a0 [ 1279.347549] ? ksys_write+0x1a9/0x260 [ 1279.348325] ? __ia32_sys_read+0xb0/0xb0 [ 1279.349149] do_syscall_64+0x33/0x40 [ 1279.349890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1279.350894] RIP: 0033:0x7fd89e327b19 [ 1279.351617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1279.355206] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1279.356690] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1279.358084] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1279.359487] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.360899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1279.362283] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1279.383623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7865 comm=syz-executor.2 02:26:54 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0xa000000) 02:26:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa00000000000000, 0x1f012, r0, 0x0) 02:26:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x3f00000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:09 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x10000000) 02:27:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32) 02:27:09 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 37) 02:27:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 30) 02:27:09 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x0, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:27:09 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r9, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r8, r6, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r7, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000520029cd000140000000000000a1a8009b60dad84fe30b3c01b4df9a0da2624fa4ac145883606a215d4d24004c2d6c776bd103f4e6b0a6d11494c18f369d86c76250c4a06f37f282b231ef54c5898db74b5bc83e44ada86bc1680768278646aa951ff192704e98c2d3fb9c2bf1af78116f7707ad4a12557c65c23d64547a7db3e94cb95524fa72834325c920d26301ff2ae8091c959d3bfdbf6b0891670ee8b23b5627ab12a0945a26c85f98ee269daa66da33b0e3315afa7339ce8b6a59db906c57f19e3e7560f86bf603ff24ea41b6528d17799e43f6f525479b96d989d370e60c053f93eb535fab77"], 0x14}}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, &(0x7f0000000280)="d027e32d60854dc7f2a4ae522f43b86ec0deff8ef51acec66c9077c6e09a269844d3c8f5694dc70f3868e7ba56678bf72c3ef969448f894f3d3dafa35fb3091efbbe48db83efaa137cd6f6e83aa2bbc0203c537b84e65a28de45e979e5b85f82e4f1002bc9e2d878087377fb2e012733b5a847d6e1b80cf7020f3b97ef392520c55321ff1f6da7145a995a6c751a1e8b46d8269920197a9aba1c0a042d1bb364418d47bc61d81cc6ecaa33814ab86e28539863173324a1097f68b0de5b094d", 0xbf, 0x0, 0x0, {0x0, r11}}, 0x7) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r15) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r14, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd_index, 0x2f, &(0x7f0000000080)=""/82, 0x52, 0xe}, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x3) 02:27:09 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x4000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:09 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000000000000000, 0x1f012, r0, 0x0) [ 1294.374395] FAULT_INJECTION: forcing a failure. [ 1294.374395] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.376863] CPU: 1 PID: 7883 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1294.378307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1294.380117] Call Trace: [ 1294.380688] dump_stack+0x107/0x167 [ 1294.381488] should_fail.cold+0x5/0xa [ 1294.382313] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1294.383395] should_failslab+0x5/0x20 [ 1294.384241] kmem_cache_alloc_trace+0x55/0x320 [ 1294.385242] __io_uring_add_tctx_node+0x15c/0x520 [ 1294.386291] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1294.387435] ? alloc_fd+0x2e7/0x670 [ 1294.388254] io_uring_setup+0x1fbb/0x2980 [ 1294.389164] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1294.390269] ? wait_for_completion_io+0x270/0x270 [ 1294.391350] do_syscall_64+0x33/0x40 [ 1294.392175] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1294.393294] RIP: 0033:0x7f2e49e79b19 [ 1294.394109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1294.398126] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1294.399778] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1294.401352] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1294.402902] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1294.404474] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1294.406029] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1294.423760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7892 comm=syz-executor.2 [ 1294.425263] FAULT_INJECTION: forcing a failure. [ 1294.425263] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.428985] CPU: 1 PID: 7895 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1294.430469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1294.432282] Call Trace: [ 1294.432855] dump_stack+0x107/0x167 [ 1294.433651] should_fail.cold+0x5/0xa [ 1294.434486] ? create_object.isra.0+0x3a/0xa30 [ 1294.435478] should_failslab+0x5/0x20 [ 1294.436318] kmem_cache_alloc+0x5b/0x310 [ 1294.437206] create_object.isra.0+0x3a/0xa30 [ 1294.438166] kmemleak_alloc_percpu+0xa0/0x100 [ 1294.439144] pcpu_alloc+0x4e2/0x1240 [ 1294.439981] __percpu_counter_init+0x10d/0x2d0 [ 1294.440985] io_uring_alloc_task_context+0xcc/0x6a0 [ 1294.442073] ? io_import_iovec+0x1120/0x1120 [ 1294.443029] ? lock_downgrade+0x6d0/0x6d0 [ 1294.443929] ? do_raw_spin_lock+0x121/0x260 [ 1294.444878] ? rwlock_bug.part.0+0x90/0x90 [ 1294.445802] __io_uring_add_tctx_node+0x2c6/0x520 [ 1294.446851] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1294.447996] ? alloc_fd+0x2e7/0x670 [ 1294.448799] io_uring_setup+0x1fbb/0x2980 [ 1294.449712] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1294.450810] ? wait_for_completion_io+0x270/0x270 [ 1294.451891] do_syscall_64+0x33/0x40 [ 1294.452716] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1294.453837] RIP: 0033:0x7fbd4ba01b19 [ 1294.454650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1294.458690] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1294.460374] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1294.461934] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1294.463497] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1294.465076] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1294.466640] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:27:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0xffffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2103000000000000, 0x1f012, r0, 0x0) [ 1294.511004] FAULT_INJECTION: forcing a failure. [ 1294.511004] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.513570] CPU: 0 PID: 7897 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1294.515085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1294.516939] Call Trace: [ 1294.517529] dump_stack+0x107/0x167 [ 1294.518339] should_fail.cold+0x5/0xa [ 1294.519187] ? anon_vma_clone+0xdc/0x590 [ 1294.520094] should_failslab+0x5/0x20 [ 1294.520943] kmem_cache_alloc+0x5b/0x310 [ 1294.521853] anon_vma_clone+0xdc/0x590 [ 1294.522729] anon_vma_fork+0x82/0x640 [ 1294.523572] ? __vm_enough_memory+0x184/0x360 [ 1294.524584] copy_process+0x72cd/0x78b0 [ 1294.525463] ? SOFTIRQ_verbose+0x10/0x10 [ 1294.526401] ? __cleanup_sighand+0xb0/0xb0 [ 1294.527364] ? _copy_from_user+0xfb/0x1b0 [ 1294.528305] kernel_clone+0xe7/0x980 [ 1294.529131] ? lock_acquire+0x197/0x470 [ 1294.530009] ? create_io_thread+0xf0/0xf0 [ 1294.530939] ? ksys_write+0x21a/0x260 [ 1294.531786] ? lock_downgrade+0x6d0/0x6d0 [ 1294.532727] __do_sys_clone3+0x1e5/0x320 [ 1294.533622] ? __do_sys_clone+0x110/0x110 [ 1294.534562] ? rcu_read_lock_any_held+0x75/0xa0 [ 1294.535593] ? vfs_write+0x354/0xb10 [ 1294.536432] ? fput_many+0x2f/0x1a0 [ 1294.537237] ? ksys_write+0x1a9/0x260 [ 1294.538081] ? __ia32_sys_read+0xb0/0xb0 [ 1294.539004] do_syscall_64+0x33/0x40 [ 1294.539833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1294.540965] RIP: 0033:0x7fd89e327b19 [ 1294.541787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1294.545795] RSP: 002b:00007fd89b87c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1294.547466] RAX: ffffffffffffffda RBX: 00007fd89e43b020 RCX: 00007fd89e327b19 [ 1294.549041] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1294.550597] RBP: 00007fd89b87c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1294.552158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1294.553718] R13: 00007ffdf34b7aef R14: 00007fd89b87c300 R15: 0000000000022000 02:27:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33) 02:27:22 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000240)="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", 0x1000, 0x20, 0x1}, 0x1) 02:27:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 31) 02:27:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 38) 02:27:22 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a}, 0x14}}, 0x0) 02:27:22 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) io_uring_enter(r1, 0xd84, 0xd669, 0x3, &(0x7f0000000000)={[0x5d5]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000003, 0x80010, r1, 0x0) 02:27:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000000000000000, 0x1f012, r0, 0x0) [ 1306.855603] FAULT_INJECTION: forcing a failure. [ 1306.855603] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.857437] CPU: 0 PID: 7922 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1306.858445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.859613] Call Trace: 02:27:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1306.860007] dump_stack+0x107/0x167 [ 1306.860024] should_fail.cold+0x5/0xa [ 1306.860041] ? create_object.isra.0+0x3a/0xa30 [ 1306.860060] should_failslab+0x5/0x20 [ 1306.860084] kmem_cache_alloc+0x5b/0x310 [ 1306.860105] create_object.isra.0+0x3a/0xa30 [ 1306.860119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1306.860139] kmem_cache_alloc_trace+0x151/0x320 [ 1306.860162] __io_uring_add_tctx_node+0x15c/0x520 [ 1306.860177] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1306.860192] ? alloc_fd+0x2e7/0x670 [ 1306.860218] io_uring_setup+0x1fbb/0x2980 [ 1306.860241] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1306.860256] ? wait_for_completion_io+0x270/0x270 [ 1306.860300] do_syscall_64+0x33/0x40 [ 1306.860316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1306.860326] RIP: 0033:0x7f2e49e79b19 [ 1306.860342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:27:22 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a}, 0x14}}, 0x0) [ 1306.860351] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1306.860369] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1306.860378] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1306.860387] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1306.860397] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1306.860406] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1306.866576] FAULT_INJECTION: forcing a failure. [ 1306.866576] name failslab, interval 1, probability 0, space 0, times 0 02:27:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 32) [ 1306.866592] CPU: 0 PID: 7920 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1306.866600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.866605] Call Trace: [ 1306.866622] dump_stack+0x107/0x167 [ 1306.866640] should_fail.cold+0x5/0xa 02:27:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 39) [ 1306.866657] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1306.866670] should_failslab+0x5/0x20 [ 1306.866685] kmem_cache_alloc_trace+0x55/0x320 [ 1306.866707] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1306.866724] ? io_import_iovec+0x1120/0x1120 [ 1306.866741] ? lock_downgrade+0x6d0/0x6d0 [ 1306.866755] ? do_raw_spin_lock+0x121/0x260 [ 1306.866769] ? rwlock_bug.part.0+0x90/0x90 [ 1306.866790] __io_uring_add_tctx_node+0x2c6/0x520 [ 1306.866807] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1306.866820] ? alloc_fd+0x2e7/0x670 [ 1306.866848] io_uring_setup+0x1fbb/0x2980 [ 1306.866872] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1306.866885] ? wait_for_completion_io+0x270/0x270 [ 1306.866932] do_syscall_64+0x33/0x40 [ 1306.866948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1306.866957] RIP: 0033:0x7fbd4ba01b19 [ 1306.866972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1306.866981] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1306.866996] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1306.867005] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1306.867014] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1306.867024] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1306.867033] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1306.869820] FAULT_INJECTION: forcing a failure. [ 1306.869820] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.869836] CPU: 1 PID: 7919 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1306.869844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.869849] Call Trace: [ 1306.869865] dump_stack+0x107/0x167 [ 1306.869884] should_fail.cold+0x5/0xa [ 1306.869900] ? create_object.isra.0+0x3a/0xa30 [ 1306.869914] should_failslab+0x5/0x20 [ 1306.869929] kmem_cache_alloc+0x5b/0x310 [ 1306.869952] create_object.isra.0+0x3a/0xa30 [ 1306.869964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1306.869985] kmem_cache_alloc+0x159/0x310 [ 1306.870009] anon_vma_clone+0xdc/0x590 [ 1306.870034] anon_vma_fork+0x82/0x640 [ 1306.870049] ? __vm_enough_memory+0x184/0x360 [ 1306.870070] copy_process+0x72cd/0x78b0 [ 1306.870088] ? SOFTIRQ_verbose+0x10/0x10 [ 1306.870105] ? lock_downgrade+0x6d0/0x6d0 [ 1306.870149] ? __cleanup_sighand+0xb0/0xb0 [ 1306.870184] ? _copy_from_user+0xfb/0x1b0 [ 1306.870209] kernel_clone+0xe7/0x980 [ 1306.870234] ? create_io_thread+0xf0/0xf0 [ 1306.870262] ? perf_event_sched_in.isra.0+0x80/0x80 [ 1306.870288] __do_sys_clone3+0x1e5/0x320 [ 1306.870304] ? __do_sys_clone+0x110/0x110 [ 1306.870318] ? finish_task_switch+0x126/0x5d0 [ 1306.870330] ? finish_task_switch+0xef/0x5d0 [ 1306.870368] ? io_schedule_timeout+0x140/0x140 [ 1306.870384] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1306.870406] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1306.870420] ? ksys_write+0x1a9/0x260 [ 1306.870452] do_syscall_64+0x33/0x40 [ 1306.870469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1306.870479] RIP: 0033:0x7fd89e327b19 [ 1306.870493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1306.870502] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1306.870518] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1306.870527] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1306.870536] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1306.870545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1306.870555] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1306.975578] FAULT_INJECTION: forcing a failure. [ 1306.975578] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.975592] CPU: 1 PID: 7934 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1306.975598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.975601] Call Trace: [ 1306.975618] dump_stack+0x107/0x167 [ 1306.975630] should_fail.cold+0x5/0xa [ 1306.975643] ? create_object.isra.0+0x3a/0xa30 [ 1306.975654] should_failslab+0x5/0x20 [ 1306.975664] kmem_cache_alloc+0x5b/0x310 [ 1306.975679] create_object.isra.0+0x3a/0xa30 [ 1306.975688] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1306.975702] kmem_cache_alloc_trace+0x151/0x320 [ 1306.975718] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1306.975730] ? io_import_iovec+0x1120/0x1120 [ 1306.975742] ? lock_downgrade+0x6d0/0x6d0 [ 1306.975752] ? do_raw_spin_lock+0x121/0x260 [ 1306.975761] ? rwlock_bug.part.0+0x90/0x90 [ 1306.975775] __io_uring_add_tctx_node+0x2c6/0x520 [ 1306.975786] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1306.975796] ? alloc_fd+0x2e7/0x670 [ 1306.975813] io_uring_setup+0x1fbb/0x2980 [ 1306.975829] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1306.975838] ? wait_for_completion_io+0x270/0x270 [ 1306.975872] do_syscall_64+0x33/0x40 [ 1306.975883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1306.975891] RIP: 0033:0x7fbd4ba01b19 [ 1306.975900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1306.975906] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1306.975917] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1306.975923] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1306.975929] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1306.975935] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1306.975940] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1306.983331] FAULT_INJECTION: forcing a failure. [ 1306.983331] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.983492] CPU: 0 PID: 7935 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1306.983503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.983509] Call Trace: [ 1306.983532] dump_stack+0x107/0x167 [ 1306.983556] should_fail.cold+0x5/0xa [ 1306.983578] ? xas_alloc+0x336/0x440 [ 1306.983596] should_failslab+0x5/0x20 [ 1306.983616] kmem_cache_alloc+0x5b/0x310 [ 1306.983638] ? stack_trace_consume_entry+0x160/0x160 [ 1306.983662] xas_alloc+0x336/0x440 [ 1306.983686] xas_create+0x34a/0x10d0 [ 1306.983722] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1307.098748] xas_store+0x8c/0x1c40 [ 1307.098788] __xa_store+0x164/0x2d0 [ 1307.099998] ? xa_delete_node+0x280/0x280 [ 1307.100960] ? trace_hardirqs_on+0x5b/0x180 [ 1307.101937] xa_store+0x31/0x50 [ 1307.102681] __io_uring_add_tctx_node+0x1cf/0x520 [ 1307.103767] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1307.104957] ? alloc_fd+0x2e7/0x670 [ 1307.105789] io_uring_setup+0x1fbb/0x2980 [ 1307.106731] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1307.107869] ? wait_for_completion_io+0x270/0x270 [ 1307.109002] do_syscall_64+0x33/0x40 [ 1307.109842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1307.111002] RIP: 0033:0x7f2e49e79b19 [ 1307.111844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1307.116062] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1307.117829] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1307.119470] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1307.121126] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1307.122766] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1307.124412] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:27:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 40) 02:27:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:27:44 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) r9 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r12, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r8, &(0x7f0000000000)={0x2, 0x30, 0x1}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r13}}, 0x100) 02:27:44 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)={0x6, 0x2, 0x1, 0x7, 0x6, [{0x7, 0xe2, 0x3ff, '\x00', 0x482}, {0xa040000000000000, 0x1, 0x5}, {0x7, 0x5, 0xffff, '\x00', 0x200d}, {0x6, 0xe91, 0x1f, '\x00', 0x6}, {0x20, 0x1, 0x0, '\x00', 0x100}, {0x8000, 0x7ff, 0x6, '\x00', 0x104}]}) syz_io_uring_setup(0x7dec, &(0x7f0000000280)={0x0, 0xe0bd, 0x2, 0x3, 0x2c6, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41002005}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24044004}, 0x40991) r2 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x810, r2, 0x8000000) 02:27:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34) 02:27:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 33) 02:27:44 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a}, 0x14}}, 0x0) 02:27:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xfbffffff00000000, 0x1f012, r0, 0x0) [ 1328.750716] FAULT_INJECTION: forcing a failure. [ 1328.750716] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.752362] CPU: 0 PID: 7951 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1328.753294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1328.753949] FAULT_INJECTION: forcing a failure. [ 1328.753949] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.754426] Call Trace: [ 1328.754449] dump_stack+0x107/0x167 [ 1328.754470] should_fail.cold+0x5/0xa [ 1328.758301] ? anon_vma_fork+0xf1/0x640 [ 1328.758838] should_failslab+0x5/0x20 [ 1328.759350] kmem_cache_alloc+0x5b/0x310 [ 1328.759919] anon_vma_fork+0xf1/0x640 [ 1328.760441] ? __vm_enough_memory+0x184/0x360 [ 1328.761058] copy_process+0x72cd/0x78b0 [ 1328.761598] ? SOFTIRQ_verbose+0x10/0x10 [ 1328.762174] ? __cleanup_sighand+0xb0/0xb0 [ 1328.762761] ? _copy_from_user+0xfb/0x1b0 [ 1328.763340] kernel_clone+0xe7/0x980 [ 1328.763835] ? lock_acquire+0x197/0x470 [ 1328.764382] ? create_io_thread+0xf0/0xf0 [ 1328.764951] ? ksys_write+0x21a/0x260 [ 1328.765474] ? lock_downgrade+0x6d0/0x6d0 [ 1328.766036] __do_sys_clone3+0x1e5/0x320 [ 1328.766586] ? __do_sys_clone+0x110/0x110 [ 1328.767172] ? rcu_read_lock_any_held+0x75/0xa0 [ 1328.767793] ? vfs_write+0x354/0xb10 [ 1328.768318] ? fput_many+0x2f/0x1a0 [ 1328.768807] ? ksys_write+0x1a9/0x260 [ 1328.769323] ? __ia32_sys_read+0xb0/0xb0 [ 1328.769877] do_syscall_64+0x33/0x40 [ 1328.770378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1328.771067] RIP: 0033:0x7fd89e327b19 [ 1328.771566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.774052] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1328.775078] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1328.776031] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1328.777003] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.777985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.778954] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1328.779974] CPU: 1 PID: 7953 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1328.781465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1328.783250] Call Trace: [ 1328.783829] dump_stack+0x107/0x167 [ 1328.784628] should_fail.cold+0x5/0xa [ 1328.785456] ? create_object.isra.0+0x3a/0xa30 [ 1328.786440] should_failslab+0x5/0x20 [ 1328.787266] kmem_cache_alloc+0x5b/0x310 [ 1328.788147] create_object.isra.0+0x3a/0xa30 [ 1328.789105] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1328.790214] kmem_cache_alloc+0x159/0x310 [ 1328.791121] xas_alloc+0x336/0x440 [ 1328.791893] xas_create+0x34a/0x10d0 [ 1328.792721] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1328.793852] xas_store+0x8c/0x1c40 [ 1328.794087] FAULT_INJECTION: forcing a failure. [ 1328.794087] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.794635] __xa_store+0x164/0x2d0 [ 1328.794659] ? xa_delete_node+0x280/0x280 [ 1328.797793] ? trace_hardirqs_on+0x5b/0x180 [ 1328.798723] xa_store+0x31/0x50 [ 1328.799431] __io_uring_add_tctx_node+0x1cf/0x520 [ 1328.800475] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1328.801593] ? alloc_fd+0x2e7/0x670 [ 1328.802383] io_uring_setup+0x1fbb/0x2980 [ 1328.803282] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1328.804377] ? wait_for_completion_io+0x270/0x270 [ 1328.805441] do_syscall_64+0x33/0x40 [ 1328.806241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1328.807333] RIP: 0033:0x7f2e49e79b19 [ 1328.808126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.812061] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1328.813688] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1328.815193] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1328.816703] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1328.818217] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1328.819721] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1328.821270] CPU: 0 PID: 7954 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1328.822196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1328.823305] Call Trace: [ 1328.823673] dump_stack+0x107/0x167 [ 1328.824157] should_fail.cold+0x5/0xa [ 1328.824671] ? io_wq_create+0xeb/0xc00 [ 1328.825189] should_failslab+0x5/0x20 [ 1328.825693] __kmalloc+0x72/0x390 [ 1328.826159] io_wq_create+0xeb/0xc00 [ 1328.826667] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1328.827349] ? io_import_iovec+0x1120/0x1120 [ 1328.827935] ? io_apoll_task_func+0x2d0/0x2d0 [ 1328.828523] ? __io_req_find_next+0x300/0x300 [ 1328.829112] ? do_raw_spin_lock+0x121/0x260 [ 1328.829688] ? rwlock_bug.part.0+0x90/0x90 [ 1328.830248] __io_uring_add_tctx_node+0x2c6/0x520 [ 1328.830888] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1328.831584] ? alloc_fd+0x2e7/0x670 [ 1328.832064] io_uring_setup+0x1fbb/0x2980 [ 1328.832616] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1328.833280] ? wait_for_completion_io+0x270/0x270 [ 1328.833952] do_syscall_64+0x33/0x40 [ 1328.834447] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1328.835128] RIP: 0033:0x7fbd4ba01b19 [ 1328.835140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.835147] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1328.835160] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1328.835168] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e 02:27:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35) 02:27:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 34) [ 1328.835175] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1328.835182] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1328.835190] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1328.885452] FAULT_INJECTION: forcing a failure. [ 1328.885452] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.885468] CPU: 0 PID: 7960 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1328.885475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1328.885479] Call Trace: [ 1328.885497] dump_stack+0x107/0x167 [ 1328.885515] should_fail.cold+0x5/0xa [ 1328.885530] ? create_object.isra.0+0x3a/0xa30 02:27:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 35) [ 1328.885542] should_failslab+0x5/0x20 [ 1328.885554] kmem_cache_alloc+0x5b/0x310 [ 1328.885569] create_object.isra.0+0x3a/0xa30 02:27:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 41) 02:27:44 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) [ 1328.885579] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 02:27:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1328.885594] __kmalloc+0x16e/0x390 [ 1328.885612] io_wq_create+0xeb/0xc00 [ 1328.885630] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1328.885642] ? io_import_iovec+0x1120/0x1120 02:27:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xfeffffff00000000, 0x1f012, r0, 0x0) [ 1328.885655] ? io_apoll_task_func+0x2d0/0x2d0 [ 1328.885665] ? __io_req_find_next+0x300/0x300 [ 1328.885675] ? do_raw_spin_lock+0x121/0x260 02:27:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 36) [ 1328.885685] ? rwlock_bug.part.0+0x90/0x90 [ 1328.885701] __io_uring_add_tctx_node+0x2c6/0x520 [ 1328.885713] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1328.885724] ? alloc_fd+0x2e7/0x670 [ 1328.885742] io_uring_setup+0x1fbb/0x2980 [ 1328.885759] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1328.885770] ? wait_for_completion_io+0x270/0x270 [ 1328.885801] do_syscall_64+0x33/0x40 [ 1328.885813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1328.885821] RIP: 0033:0x7fbd4ba01b19 [ 1328.885831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.885837] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1328.885850] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1328.885857] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1328.885864] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1328.885870] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1328.885876] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1328.955984] FAULT_INJECTION: forcing a failure. [ 1328.955984] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.956008] CPU: 1 PID: 7968 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1328.956020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1328.956027] Call Trace: [ 1328.956055] dump_stack+0x107/0x167 [ 1328.956081] should_fail.cold+0x5/0xa [ 1328.956106] ? create_object.isra.0+0x3a/0xa30 [ 1328.956126] should_failslab+0x5/0x20 [ 1328.956148] kmem_cache_alloc+0x5b/0x310 [ 1328.956177] create_object.isra.0+0x3a/0xa30 [ 1328.956195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1328.956224] kmem_cache_alloc+0x159/0x310 [ 1328.956254] anon_vma_fork+0xf1/0x640 [ 1328.956274] ? __vm_enough_memory+0x184/0x360 [ 1328.956324] copy_process+0x72cd/0x78b0 [ 1328.956344] ? SOFTIRQ_verbose+0x10/0x10 [ 1328.956405] ? __cleanup_sighand+0xb0/0xb0 [ 1328.956452] ? _copy_from_user+0xfb/0x1b0 [ 1328.956484] kernel_clone+0xe7/0x980 [ 1328.956507] ? lock_acquire+0x197/0x470 [ 1328.956527] ? create_io_thread+0xf0/0xf0 [ 1328.956563] ? ksys_write+0x21a/0x260 [ 1328.956584] ? lock_downgrade+0x6d0/0x6d0 [ 1328.956611] __do_sys_clone3+0x1e5/0x320 [ 1328.956632] ? __do_sys_clone+0x110/0x110 [ 1328.956677] ? rcu_read_lock_any_held+0x75/0xa0 [ 1328.956692] ? vfs_write+0x354/0xb10 [ 1328.956715] ? fput_many+0x2f/0x1a0 [ 1328.956734] ? ksys_write+0x1a9/0x260 [ 1328.956755] ? __ia32_sys_read+0xb0/0xb0 [ 1328.956793] do_syscall_64+0x33/0x40 [ 1328.956815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1328.956829] RIP: 0033:0x7fd89e327b19 [ 1328.956848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.956859] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1328.956882] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1328.956894] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1328.956906] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.956917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.956929] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1328.976661] FAULT_INJECTION: forcing a failure. [ 1328.976661] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.976677] CPU: 0 PID: 7970 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1328.976684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1328.976688] Call Trace: [ 1328.976705] dump_stack+0x107/0x167 [ 1328.976718] should_fail.cold+0x5/0xa [ 1328.976733] ? io_wq_create+0x6ef/0xc00 [ 1328.976745] should_failslab+0x5/0x20 [ 1328.976762] kmem_cache_alloc_node_trace+0x59/0x340 [ 1328.976779] io_wq_create+0x6ef/0xc00 [ 1328.976796] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1328.976808] ? io_import_iovec+0x1120/0x1120 [ 1328.976820] ? io_apoll_task_func+0x2d0/0x2d0 [ 1328.976830] ? __io_req_find_next+0x300/0x300 [ 1328.976840] ? do_raw_spin_lock+0x121/0x260 [ 1328.976850] ? rwlock_bug.part.0+0x90/0x90 [ 1328.976865] __io_uring_add_tctx_node+0x2c6/0x520 [ 1328.976877] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1328.976887] ? alloc_fd+0x2e7/0x670 [ 1328.976905] io_uring_setup+0x1fbb/0x2980 [ 1328.976922] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1328.976933] ? wait_for_completion_io+0x270/0x270 [ 1328.976963] do_syscall_64+0x33/0x40 [ 1328.976975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1328.976983] RIP: 0033:0x7fbd4ba01b19 [ 1328.976994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.977000] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1328.977013] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1328.977019] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1328.977025] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1328.977031] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1328.977037] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1329.039813] FAULT_INJECTION: forcing a failure. [ 1329.039813] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.039829] CPU: 0 PID: 7977 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1329.039835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1329.039840] Call Trace: [ 1329.039859] dump_stack+0x107/0x167 [ 1329.039873] should_fail.cold+0x5/0xa [ 1329.039887] ? create_object.isra.0+0x3a/0xa30 [ 1329.039905] should_failslab+0x5/0x20 [ 1329.099505] FAULT_INJECTION: forcing a failure. [ 1329.099505] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.099934] kmem_cache_alloc+0x5b/0x310 [ 1329.099956] ? io_wq_create+0x114/0xc00 [ 1329.107317] create_object.isra.0+0x3a/0xa30 [ 1329.107326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1329.107341] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1329.107357] io_wq_create+0x6ef/0xc00 [ 1329.107373] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1329.107385] ? io_import_iovec+0x1120/0x1120 [ 1329.107396] ? io_apoll_task_func+0x2d0/0x2d0 [ 1329.107405] ? __io_req_find_next+0x300/0x300 [ 1329.107415] ? do_raw_spin_lock+0x121/0x260 [ 1329.107425] ? rwlock_bug.part.0+0x90/0x90 [ 1329.107439] __io_uring_add_tctx_node+0x2c6/0x520 [ 1329.107450] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1329.107460] ? alloc_fd+0x2e7/0x670 [ 1329.107477] io_uring_setup+0x1fbb/0x2980 [ 1329.107493] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1329.107503] ? wait_for_completion_io+0x270/0x270 [ 1329.107531] do_syscall_64+0x33/0x40 [ 1329.107543] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1329.107550] RIP: 0033:0x7fbd4ba01b19 [ 1329.107561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1329.107568] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1329.107579] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1329.107586] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1329.107592] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1329.107598] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1329.107604] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1329.107638] CPU: 1 PID: 7979 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1329.107650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1329.107657] Call Trace: [ 1329.107686] dump_stack+0x107/0x167 [ 1329.107712] should_fail.cold+0x5/0xa [ 1329.107736] ? xas_alloc+0x336/0x440 [ 1329.107758] should_failslab+0x5/0x20 [ 1329.107779] kmem_cache_alloc+0x5b/0x310 [ 1329.107808] xas_alloc+0x336/0x440 [ 1329.107834] xas_create+0x34a/0x10d0 [ 1329.107872] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1329.107898] xas_store+0x8c/0x1c40 [ 1329.107938] __xa_store+0x164/0x2d0 [ 1329.107964] ? xa_delete_node+0x280/0x280 [ 1329.107995] ? trace_hardirqs_on+0x5b/0x180 [ 1329.108027] xa_store+0x31/0x50 [ 1329.108052] __io_uring_add_tctx_node+0x1cf/0x520 [ 1329.108076] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1329.108095] ? alloc_fd+0x2e7/0x670 [ 1329.108132] io_uring_setup+0x1fbb/0x2980 [ 1329.108166] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1329.108185] ? wait_for_completion_io+0x270/0x270 [ 1329.108246] do_syscall_64+0x33/0x40 [ 1329.108269] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1329.108290] RIP: 0033:0x7f2e49e79b19 [ 1329.108322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1329.108334] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1329.108362] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1329.108374] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1329.108386] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1329.108398] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1329.108410] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:28:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 37) 02:28:01 executing program 2: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000003) 02:28:01 executing program 7: r0 = syz_io_uring_setup(0x65f8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x10010, 0xffffffffffffffff, 0x10000000) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x65, 0x0, 0x23456, {0x0, r6}}, 0x1f) syz_io_uring_setup(0x295b, &(0x7f0000000400)={0x0, 0x42bf, 0x8, 0x3, 0x345, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r7, r2, &(0x7f0000000480)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0, 0x401, 0x8, 0x0, {0x0, r6, r3}}, 0x7f) r8 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) syz_io_uring_submit(r13, r10, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r12, r10, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r11, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_submit(r12, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x401}, 0x48f) 02:28:01 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) flistxattr(r5, &(0x7f0000000740)=""/145, 0x91) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r0, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000240)="462a6a439700d5885e0836d101441f4d8f08d006dc73cbeddcd9a95a3824e8948b26d45883edd22881a9e265732d30c2a646fb9a4cf0e1d44921da5101cd4fab95c9b30f8397424c374cfe24edcdc5f29d587ea3c58b601c358d2bd62235aa2914d246515fd8bda7387dfbc5dc25164069d9fdb6fa05b7016ceb3aa89c34de70729f6bd05d4f175d288d", 0x8a}, {&(0x7f0000000300)="dfab0b3e810e21024620bc5f01a90ab8029eb906cdeba8615b4215bf2a5ab2439a24027375d8d51372796f155e53ded7366737074c3033e8c5caa96b3b53667a00b585bf8276730bdbfeb65fc1e1a528b1a4d7e7aa0e4c4e3745e4f57806b59253de40beb7510abb2030365f99d473b47c1f461bf1dd7be0b658fbc1158b79cf5fa2d3b3b4cb50c7942275d02b8d3f45b364a47011ad5f29289434e2effd8ae5e26225d87b38387e24e7035221ccb89d15b6a0cd382b3aa8eb5e30d7f9c8c080ec1b60cc5c9383e24967bb491ee3dca3770e000849862b8713babf51f167bcb5f6a1cc247f50c5ca211f2e3e99656e0fb7", 0xf1}, {&(0x7f0000000400)="d5412dd2a5c6e3644b5cbcb600fa0bacadea3cb8f7445b6bb701e44f0fa5ee2265d614caee274ba83a1d6897070b97ca5ac57b665476c341429d3bebed88f64707a732f905daa622fab9fc5ff1073b342d90d3bcbfa70042963986cbff83c50c9ff4fa86f0e7f7c8b2b145457200fdf537ff210a74a0c2d83dbf96675f78047b8a44beff70f7cb10b14259ded78ba2002180e83594830ce80fcb7e1d8aeaf12555674b3ffa4e299c2384c15be78bd7aded525acc7e7156598a8eae74880a5f8ec5", 0xc1}, {&(0x7f0000000080)="d68e193d109d51ed8cb286d68775d1be6da6a2ac0de22c39bb76618b379f2b83b8d2c5c37ff0e421c3c59d08d850629e53019799fb4c9fe09d8a2cf3f9d8d4b29c49a1d721fed99c4079baa2bd6f8e1db47a10053e9c5d8a05ab90d45f", 0x5d}, {&(0x7f0000000500)="fb447ba869dcefb214014246a0089ba02a0a5dd8d411409e42301f6910ab245324fcae403d077960012df1d045bea138b10747925ca255303d6179dba0feed23d31cd08e135a2b66770ac2461bc0f741a7ad46f972bc6948e42c07cbe0e0607c4c8a60ed33ef02318b61ec79535f583179e00d2a64901a8f450f93ef315568ad003dee473c76467fd30faa749cc872263eb1aeea7ec8ad7300bf7281bb39a192116366ce6040200252c9c817e0d0349f8e0ceeb3118352cd0cd2ce77b4025588166967b83887b28cdc8e2a16568766bfa52da3", 0xd3}, {&(0x7f0000000600)="3597856735aeb538798b3388e3879785328142c262a82b3156f99a9f9cc3a4da9cef52e047f3cef817797be4510aceff1d4aa56678ec68e29fb73ab68d9a8b467f66c015098ccccb90af5aea5c4f3f90c637400f559fbad5764573533b48a5ab1630755defc611729047ff956c92ee1958552a480d27c6dcb6e4672f87888ff7aa3a0b652d271d308ae669f2568116da5470537bf661905b46b5f30fcca28b6edbf0b982a9f42086595d0c1f0207e360ef0b978044c17f04112855017f8581", 0xbf}, {&(0x7f0000000140)="02981b4969974e630d3579609cc40e2073feb4aa81dd441633d43ba48df7a77f7a5744525c9fcfa5965a1da0f66a612a59afd3eff89c38ea0b23527684b6a53c76cdb37f7da1", 0x46}], 0x7, 0x16, 0x0, {0x1}}, 0x9) 02:28:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36) 02:28:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xfff3ffffffff0700, 0x1f012, r0, 0x0) 02:28:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 42) [ 1345.640820] FAULT_INJECTION: forcing a failure. [ 1345.640820] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.643298] CPU: 1 PID: 7999 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1345.644800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.646614] Call Trace: [ 1345.647191] dump_stack+0x107/0x167 [ 1345.647998] should_fail.cold+0x5/0xa [ 1345.648844] ? anon_vma_fork+0x1ff/0x640 [ 1345.649733] should_failslab+0x5/0x20 [ 1345.650093] FAULT_INJECTION: forcing a failure. [ 1345.650093] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.650564] kmem_cache_alloc+0x5b/0x310 [ 1345.650593] anon_vma_fork+0x1ff/0x640 [ 1345.650622] copy_process+0x72cd/0x78b0 [ 1345.655607] ? SOFTIRQ_verbose+0x10/0x10 [ 1345.656547] ? __cleanup_sighand+0xb0/0xb0 [ 1345.657500] ? _copy_from_user+0xfb/0x1b0 [ 1345.658418] kernel_clone+0xe7/0x980 [ 1345.659235] ? lock_acquire+0x197/0x470 [ 1345.660109] ? create_io_thread+0xf0/0xf0 [ 1345.661042] ? ksys_write+0x21a/0x260 [ 1345.661878] ? lock_downgrade+0x6d0/0x6d0 [ 1345.662797] __do_sys_clone3+0x1e5/0x320 [ 1345.663685] ? __do_sys_clone+0x110/0x110 [ 1345.664622] ? rcu_read_lock_any_held+0x75/0xa0 [ 1345.665634] ? vfs_write+0x354/0xb10 [ 1345.666456] ? fput_many+0x2f/0x1a0 [ 1345.667252] ? ksys_write+0x1a9/0x260 [ 1345.668082] ? __ia32_sys_read+0xb0/0xb0 [ 1345.668993] do_syscall_64+0x33/0x40 [ 1345.669818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1345.670941] RIP: 0033:0x7fd89e327b19 [ 1345.671756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.675794] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1345.677471] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1345.679033] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1345.680610] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.682169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1345.683727] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1345.685330] CPU: 0 PID: 8002 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1345.686862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.688723] Call Trace: [ 1345.689307] dump_stack+0x107/0x167 [ 1345.690122] should_fail.cold+0x5/0xa [ 1345.690968] ? create_object.isra.0+0x3a/0xa30 [ 1345.691963] FAULT_INJECTION: forcing a failure. [ 1345.691963] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.691997] should_failslab+0x5/0x20 [ 1345.695145] kmem_cache_alloc+0x5b/0x310 [ 1345.696051] ? mark_held_locks+0x9e/0xe0 [ 1345.696968] create_object.isra.0+0x3a/0xa30 [ 1345.697938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1345.699076] kmem_cache_alloc+0x159/0x310 [ 1345.700010] xas_alloc+0x336/0x440 [ 1345.700820] xas_create+0x34a/0x10d0 [ 1345.701665] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1345.702834] xas_store+0x8c/0x1c40 [ 1345.703639] __xa_store+0x164/0x2d0 [ 1345.704456] ? xa_delete_node+0x280/0x280 [ 1345.705392] ? trace_hardirqs_on+0x5b/0x180 [ 1345.706357] xa_store+0x31/0x50 [ 1345.707091] __io_uring_add_tctx_node+0x1cf/0x520 [ 1345.708168] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1345.709334] ? alloc_fd+0x2e7/0x670 [ 1345.710163] io_uring_setup+0x1fbb/0x2980 [ 1345.711097] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1345.712224] ? wait_for_completion_io+0x270/0x270 [ 1345.713332] do_syscall_64+0x33/0x40 [ 1345.714158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1345.715294] RIP: 0033:0x7f2e49e79b19 [ 1345.716116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.720207] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1345.721885] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1345.723447] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1345.725023] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1345.726586] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1345.728147] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1345.729755] CPU: 1 PID: 8000 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1345.731503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.733629] Call Trace: [ 1345.734296] dump_stack+0x107/0x167 [ 1345.735236] should_fail.cold+0x5/0xa [ 1345.736215] ? create_object.isra.0+0x3a/0xa30 [ 1345.737387] should_failslab+0x5/0x20 [ 1345.738357] kmem_cache_alloc+0x5b/0x310 [ 1345.739400] ? io_wq_create+0x114/0xc00 [ 1345.740430] create_object.isra.0+0x3a/0xa30 [ 1345.741557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1345.742870] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1345.744172] io_wq_create+0x6ef/0xc00 [ 1345.745164] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1345.746461] ? io_import_iovec+0x1120/0x1120 [ 1345.747591] ? io_apoll_task_func+0x2d0/0x2d0 [ 1345.748748] ? __io_req_find_next+0x300/0x300 [ 1345.749892] ? do_raw_spin_lock+0x121/0x260 [ 1345.750995] ? rwlock_bug.part.0+0x90/0x90 [ 1345.752087] __io_uring_add_tctx_node+0x2c6/0x520 [ 1345.753326] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1345.754655] ? alloc_fd+0x2e7/0x670 [ 1345.755604] io_uring_setup+0x1fbb/0x2980 [ 1345.756684] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1345.757971] ? wait_for_completion_io+0x270/0x270 [ 1345.759243] do_syscall_64+0x33/0x40 [ 1345.760200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1345.761499] RIP: 0033:0x7fbd4ba01b19 [ 1345.762420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.766978] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1345.768853] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1345.770604] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1345.772354] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1345.774116] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1345.775868] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:28:01 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 1) 02:28:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xffffff7f00000000, 0x1f012, r0, 0x0) [ 1345.855528] FAULT_INJECTION: forcing a failure. [ 1345.855528] name fail_usercopy, interval 1, probability 0, space 0, times 0 02:28:01 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x6ee9, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, 0x359}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) [ 1345.858641] CPU: 1 PID: 8009 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1345.860327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.862294] Call Trace: [ 1345.862925] dump_stack+0x107/0x167 [ 1345.863796] should_fail.cold+0x5/0xa [ 1345.864718] _copy_from_user+0x2e/0x1b0 [ 1345.865669] __copy_msghdr_from_user+0x91/0x4b0 [ 1345.866769] ? __ia32_sys_shutdown+0x80/0x80 [ 1345.867826] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1345.869079] ? SOFTIRQ_verbose+0x10/0x10 [ 1345.870062] ? __lock_acquire+0xbb1/0x5b00 [ 1345.871078] sendmsg_copy_msghdr+0xa1/0x160 [ 1345.872099] ? do_recvmmsg+0x6d0/0x6d0 [ 1345.873035] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1345.874281] ? SOFTIRQ_verbose+0x10/0x10 [ 1345.875242] ? lock_downgrade+0x6d0/0x6d0 [ 1345.876228] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1345.877477] ? SOFTIRQ_verbose+0x10/0x10 [ 1345.878450] ___sys_sendmsg+0xc6/0x170 [ 1345.879375] ? sendmsg_copy_msghdr+0x160/0x160 [ 1345.880469] ? __fget_files+0x2cf/0x520 [ 1345.881432] ? lock_downgrade+0x6d0/0x6d0 [ 1345.882414] ? find_held_lock+0x2c/0x110 [ 1345.883382] ? __fget_files+0x2f8/0x520 [ 1345.884329] ? __fget_light+0xea/0x290 [ 1345.885259] __sys_sendmsg+0xe5/0x1b0 [ 1345.886155] ? __sys_sendmsg_sock+0x40/0x40 [ 1345.887166] ? rcu_read_lock_any_held+0x75/0xa0 [ 1345.888259] ? fput_many+0x2f/0x1a0 [ 1345.889119] ? ksys_write+0x1a9/0x260 [ 1345.890008] ? __ia32_sys_read+0xb0/0xb0 [ 1345.890974] do_syscall_64+0x33/0x40 [ 1345.891850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1345.893062] RIP: 0033:0x7feef8d49b19 [ 1345.893944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.898257] RSP: 002b:00007feef62bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1345.900044] RAX: ffffffffffffffda RBX: 00007feef8e5cf60 RCX: 00007feef8d49b19 [ 1345.901727] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1345.903399] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.905168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.906823] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 02:28:01 executing program 4: r0 = syz_io_uring_setup(0x2a8c, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0x8, 0x0, 0x1ff, 0x5, 0x1}, 0x37ba) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x50, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:28:01 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000300)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x100010, r0, 0x8000000) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) fchmodat(r3, &(0x7f00000002c0)='./file0\x00', 0x142) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000240)={0x0, 0x80000000, 0x5, 0xe0000000, 0x7f}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x70000011}, r4, 0x3, 0x0, 0x1}, 0x4f1) lsetxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x3) io_uring_enter(r4, 0x60ee, 0x7917, 0x1, &(0x7f0000000280)={[0x8001]}, 0x8) 02:28:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) 02:28:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1346.004023] FAULT_INJECTION: forcing a failure. [ 1346.004023] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.006703] CPU: 1 PID: 8023 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1346.008290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.010221] Call Trace: [ 1346.010840] dump_stack+0x107/0x167 [ 1346.011692] should_fail.cold+0x5/0xa [ 1346.012587] ? create_object.isra.0+0x3a/0xa30 [ 1346.013647] should_failslab+0x5/0x20 [ 1346.014527] kmem_cache_alloc+0x5b/0x310 [ 1346.015480] create_object.isra.0+0x3a/0xa30 [ 1346.016504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1346.017686] kmem_cache_alloc+0x159/0x310 [ 1346.018654] anon_vma_fork+0x1ff/0x640 [ 1346.019573] copy_process+0x72cd/0x78b0 [ 1346.020507] ? SOFTIRQ_verbose+0x10/0x10 [ 1346.021483] ? __cleanup_sighand+0xb0/0xb0 [ 1346.022499] ? _copy_from_user+0xfb/0x1b0 [ 1346.023470] kernel_clone+0xe7/0x980 [ 1346.024335] ? lock_acquire+0x197/0x470 [ 1346.025261] ? create_io_thread+0xf0/0xf0 [ 1346.026234] ? ksys_write+0x21a/0x260 [ 1346.027124] ? lock_downgrade+0x6d0/0x6d0 [ 1346.028099] __do_sys_clone3+0x1e5/0x320 [ 1346.029049] ? __do_sys_clone+0x110/0x110 [ 1346.030026] ? rcu_read_lock_any_held+0x75/0xa0 [ 1346.031081] ? vfs_write+0x354/0xb10 [ 1346.031939] ? fput_many+0x2f/0x1a0 [ 1346.032781] ? ksys_write+0x1a9/0x260 [ 1346.033646] ? __ia32_sys_read+0xb0/0xb0 [ 1346.034605] do_syscall_64+0x33/0x40 [ 1346.035463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1346.036650] RIP: 0033:0x7fd89e327b19 [ 1346.037508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.041730] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1346.043480] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1346.045133] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1346.046759] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.048389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.050010] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:28:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) 02:28:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 43) [ 1361.193767] FAULT_INJECTION: forcing a failure. [ 1361.193767] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.195107] CPU: 1 PID: 8045 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1361.196129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.197139] Call Trace: [ 1361.197260] FAULT_INJECTION: forcing a failure. [ 1361.197260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1361.197446] dump_stack+0x107/0x167 [ 1361.197460] should_fail.cold+0x5/0xa [ 1361.197473] ? xas_alloc+0x336/0x440 [ 1361.197492] should_failslab+0x5/0x20 [ 1361.202141] kmem_cache_alloc+0x5b/0x310 [ 1361.202611] xas_alloc+0x336/0x440 [ 1361.203021] xas_create+0x34a/0x10d0 [ 1361.203458] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1361.204059] xas_store+0x8c/0x1c40 [ 1361.204477] __xa_store+0x164/0x2d0 [ 1361.204903] ? xa_delete_node+0x280/0x280 [ 1361.205382] ? trace_hardirqs_on+0x5b/0x180 [ 1361.205881] xa_store+0x31/0x50 [ 1361.206262] __io_uring_add_tctx_node+0x1cf/0x520 [ 1361.206816] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1361.207415] ? alloc_fd+0x2e7/0x670 [ 1361.207841] io_uring_setup+0x1fbb/0x2980 [ 1361.208319] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1361.208904] ? wait_for_completion_io+0x270/0x270 [ 1361.209473] do_syscall_64+0x33/0x40 [ 1361.209900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.210488] RIP: 0033:0x7f2e49e79b19 [ 1361.210915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.213026] RSP: 002b:00007f2e473ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1361.213895] RAX: ffffffffffffffda RBX: 00007f2e49f8d020 RCX: 00007f2e49e79b19 [ 1361.214713] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1361.215527] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1361.216343] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1361.217165] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1361.218015] CPU: 0 PID: 8037 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1361.219510] FAULT_INJECTION: forcing a failure. [ 1361.219510] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.219828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.223280] Call Trace: [ 1361.223981] dump_stack+0x107/0x167 [ 1361.224967] should_fail.cold+0x5/0xa [ 1361.225981] __alloc_pages_nodemask+0x182/0x600 [ 1361.227217] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1361.228830] ? copy_page_range+0x28d9/0x3800 [ 1361.230001] alloc_pages_current+0x187/0x280 [ 1361.231166] get_zeroed_page+0x14/0xb0 [ 1361.232191] __pud_alloc+0x33/0x270 [ 1361.233170] copy_page_range+0x2c99/0x3800 [ 1361.234295] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1361.235680] ? SOFTIRQ_verbose+0x10/0x10 [ 1361.236767] ? lock_chain_count+0x20/0x20 [ 1361.237853] ? find_held_lock+0x2c/0x110 [ 1361.238805] ? anon_vma_fork+0x462/0x640 [ 1361.239752] ? lock_downgrade+0x6d0/0x6d0 [ 1361.240767] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1361.242062] ? up_write+0x191/0x550 [ 1361.242922] ? vm_iomap_memory+0x190/0x190 [ 1361.243910] ? downgrade_write+0x3a0/0x3a0 [ 1361.244907] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1361.246170] ? __vma_link_rb+0x540/0x700 [ 1361.247126] copy_process+0x7658/0x78b0 [ 1361.248065] ? SOFTIRQ_verbose+0x10/0x10 [ 1361.249059] ? __cleanup_sighand+0xb0/0xb0 [ 1361.250067] ? _copy_from_user+0xfb/0x1b0 [ 1361.251038] kernel_clone+0xe7/0x980 [ 1361.251911] ? lock_acquire+0x197/0x470 [ 1361.252848] ? create_io_thread+0xf0/0xf0 [ 1361.253833] ? ksys_write+0x21a/0x260 [ 1361.254719] ? lock_downgrade+0x6d0/0x6d0 [ 1361.255696] __do_sys_clone3+0x1e5/0x320 [ 1361.256657] ? __do_sys_clone+0x110/0x110 [ 1361.257651] ? rcu_read_lock_any_held+0x75/0xa0 [ 1361.258731] ? vfs_write+0x354/0xb10 [ 1361.259606] ? fput_many+0x2f/0x1a0 [ 1361.260456] ? ksys_write+0x1a9/0x260 [ 1361.261349] ? __ia32_sys_read+0xb0/0xb0 [ 1361.262316] do_syscall_64+0x33/0x40 [ 1361.263185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.264380] RIP: 0033:0x7fd89e327b19 [ 1361.265251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.269545] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1361.271315] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1361.272989] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1361.274652] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.276310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.277981] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1361.279676] CPU: 1 PID: 8042 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1361.280465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.281423] Call Trace: [ 1361.281729] dump_stack+0x107/0x167 [ 1361.281741] should_fail.cold+0x5/0xa [ 1361.281753] ? create_object.isra.0+0x3a/0xa30 [ 1361.281762] should_failslab+0x5/0x20 [ 1361.281772] kmem_cache_alloc+0x5b/0x310 [ 1361.281786] create_object.isra.0+0x3a/0xa30 [ 1361.281794] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1361.281808] kmem_cache_alloc_trace+0x151/0x320 [ 1361.281823] __io_uring_add_tctx_node+0x15c/0x520 02:28:16 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 38) 02:28:16 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_setup(0x6afd, &(0x7f0000000080)={0x0, 0xdffc, 0x4, 0x1, 0x32b, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12, 0x0, {0x0, r3}}, 0x1) 02:28:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xffffffff00000000, 0x1f012, r0, 0x0) 02:28:16 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 2) 02:28:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x3f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:16 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x70, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r8, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r7, r5, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r0, 0x8, &(0x7f0000000080)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, 0x4, 0x0, {0x1, r9}}, 0x9) [ 1361.281834] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1361.281843] ? alloc_fd+0x2e7/0x670 [ 1361.281861] io_uring_setup+0x1fbb/0x2980 02:28:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x2) 02:28:16 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f0000000080)={0x0, 0x6b0b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_setup(0x3e7e, &(0x7f0000000140)={0x0, 0x179, 0x1, 0x3, 0x18, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd=r0, 0x4, &(0x7f0000000200)=""/56, 0x38, 0x2}, 0x7ff) 02:28:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:16 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) r9 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r8, 0x0, &(0x7f0000000000)='./file0\x00', 0x20, 0x10000, 0x12345, {0x0, r12}}, 0x1f) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) [ 1361.281876] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1361.281884] ? wait_for_completion_io+0x270/0x270 02:28:16 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 3) [ 1361.281911] do_syscall_64+0x33/0x40 [ 1361.281922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.281929] RIP: 0033:0x7fbd4ba01b19 02:28:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 44) [ 1361.281939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:28:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x4) [ 1361.281945] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1361.281956] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1361.281962] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1361.281968] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1361.281974] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1361.281980] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1361.292811] FAULT_INJECTION: forcing a failure. [ 1361.292811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.292833] CPU: 0 PID: 8036 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1361.292843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.292850] Call Trace: [ 1361.292877] dump_stack+0x107/0x167 [ 1361.292903] should_fail.cold+0x5/0xa [ 1361.292932] _copy_from_user+0x2e/0x1b0 [ 1361.292958] iovec_from_user+0x141/0x400 [ 1361.292990] __import_iovec+0x67/0x590 [ 1361.293009] ? __ia32_sys_shutdown+0x80/0x80 [ 1361.293031] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1361.293063] import_iovec+0x83/0xb0 [ 1361.293089] sendmsg_copy_msghdr+0x131/0x160 [ 1361.293107] ? do_recvmmsg+0x6d0/0x6d0 [ 1361.293132] ? SOFTIRQ_verbose+0x10/0x10 [ 1361.293152] ? lock_downgrade+0x6d0/0x6d0 [ 1361.293178] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1361.293197] ? SOFTIRQ_verbose+0x10/0x10 [ 1361.293221] ___sys_sendmsg+0xc6/0x170 [ 1361.293242] ? sendmsg_copy_msghdr+0x160/0x160 [ 1361.293274] ? __fget_files+0x2cf/0x520 [ 1361.293302] ? lock_downgrade+0x6d0/0x6d0 [ 1361.293325] ? find_held_lock+0x2c/0x110 [ 1361.293359] ? __fget_files+0x2f8/0x520 [ 1361.293391] ? __fget_light+0xea/0x290 [ 1361.293419] __sys_sendmsg+0xe5/0x1b0 [ 1361.293439] ? __sys_sendmsg_sock+0x40/0x40 [ 1361.293459] ? rcu_read_lock_any_held+0x75/0xa0 [ 1361.293482] ? fput_many+0x2f/0x1a0 [ 1361.293501] ? ksys_write+0x1a9/0x260 [ 1361.293540] do_syscall_64+0x33/0x40 [ 1361.293562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.293576] RIP: 0033:0x7feef8d49b19 [ 1361.293596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.293607] RSP: 002b:00007feef62bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.293629] RAX: ffffffffffffffda RBX: 00007feef8e5cf60 RCX: 00007feef8d49b19 [ 1361.293641] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1361.293653] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.293665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.293677] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 [ 1361.422101] FAULT_INJECTION: forcing a failure. [ 1361.422101] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.453458] CPU: 1 PID: 8059 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1361.453464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.453468] Call Trace: [ 1361.453485] dump_stack+0x107/0x167 [ 1361.453498] should_fail.cold+0x5/0xa [ 1361.453511] ? xas_alloc+0x336/0x440 [ 1361.453522] should_failslab+0x5/0x20 [ 1361.453533] kmem_cache_alloc+0x5b/0x310 [ 1361.453547] xas_alloc+0x336/0x440 [ 1361.453559] xas_create+0x34a/0x10d0 [ 1361.453579] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1361.453591] xas_store+0x8c/0x1c40 [ 1361.453610] __xa_store+0x164/0x2d0 [ 1361.453622] ? xa_delete_node+0x280/0x280 [ 1361.453638] ? trace_hardirqs_on+0x5b/0x180 [ 1361.453653] xa_store+0x31/0x50 [ 1361.453666] __io_uring_add_tctx_node+0x1cf/0x520 [ 1361.453677] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1361.453687] ? alloc_fd+0x2e7/0x670 [ 1361.453705] io_uring_setup+0x1fbb/0x2980 [ 1361.453720] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1361.453731] ? wait_for_completion_io+0x270/0x270 [ 1361.453760] do_syscall_64+0x33/0x40 [ 1361.453771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.453778] RIP: 0033:0x7f2e49e79b19 [ 1361.453788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.453794] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1361.453805] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1361.453811] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1361.453817] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 02:28:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1361.453823] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1361.453829] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1361.472965] FAULT_INJECTION: forcing a failure. [ 1361.472965] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.472987] CPU: 0 PID: 8063 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1361.472998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.473004] Call Trace: [ 1361.473030] dump_stack+0x107/0x167 [ 1361.473054] should_fail.cold+0x5/0xa [ 1361.473078] ? __alloc_skb+0x6d/0x5b0 [ 1361.473098] should_failslab+0x5/0x20 [ 1361.473118] kmem_cache_alloc_node+0x55/0x330 [ 1361.473146] __alloc_skb+0x6d/0x5b0 [ 1361.473174] netlink_sendmsg+0x998/0xe00 [ 1361.473203] ? netlink_unicast+0xa00/0xa00 [ 1361.473236] ? netlink_unicast+0xa00/0xa00 [ 1361.473259] __sock_sendmsg+0x154/0x190 [ 1361.473291] ____sys_sendmsg+0x70d/0x870 [ 1361.473320] ? sock_write_iter+0x3d0/0x3d0 [ 1361.473335] ? do_recvmmsg+0x6d0/0x6d0 [ 1361.473361] ? SOFTIRQ_verbose+0x10/0x10 [ 1361.473379] ? lock_downgrade+0x6d0/0x6d0 [ 1361.473403] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1361.473422] ? SOFTIRQ_verbose+0x10/0x10 [ 1361.473445] ___sys_sendmsg+0xf3/0x170 [ 1361.473466] ? sendmsg_copy_msghdr+0x160/0x160 [ 1361.473492] ? __fget_files+0x2cf/0x520 [ 1361.473512] ? lock_downgrade+0x6d0/0x6d0 [ 1361.473534] ? find_held_lock+0x2c/0x110 02:28:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) 02:28:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 39) 02:28:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x8) [ 1361.473567] ? __fget_files+0x2f8/0x520 [ 1361.473597] ? __fget_light+0xea/0x290 [ 1361.473623] __sys_sendmsg+0xe5/0x1b0 [ 1361.473641] ? __sys_sendmsg_sock+0x40/0x40 [ 1361.473663] ? rcu_read_lock_any_held+0x75/0xa0 02:28:17 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 4) [ 1361.473711] do_syscall_64+0x33/0x40 [ 1361.473732] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.473746] RIP: 0033:0x7feef8d49b19 [ 1361.473764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.473775] RSP: 002b:00007feef62bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.473796] RAX: ffffffffffffffda RBX: 00007feef8e5cf60 RCX: 00007feef8d49b19 [ 1361.473808] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1361.473819] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.473830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.473842] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 [ 1361.572973] FAULT_INJECTION: forcing a failure. [ 1361.572973] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.572987] CPU: 1 PID: 8071 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1361.572993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.572998] Call Trace: [ 1361.573014] dump_stack+0x107/0x167 [ 1361.573027] should_fail.cold+0x5/0xa [ 1361.573041] ? anon_vma_fork+0x1ff/0x640 [ 1361.573051] should_failslab+0x5/0x20 [ 1361.573063] kmem_cache_alloc+0x5b/0x310 [ 1361.573078] anon_vma_fork+0x1ff/0x640 [ 1361.573094] copy_process+0x72cd/0x78b0 [ 1361.573106] ? SOFTIRQ_verbose+0x10/0x10 [ 1361.573137] ? __cleanup_sighand+0xb0/0xb0 [ 1361.573162] ? _copy_from_user+0xfb/0x1b0 [ 1361.573178] kernel_clone+0xe7/0x980 [ 1361.573189] ? lock_acquire+0x197/0x470 [ 1361.573200] ? create_io_thread+0xf0/0xf0 [ 1361.573218] ? ksys_write+0x21a/0x260 [ 1361.573229] ? lock_downgrade+0x6d0/0x6d0 [ 1361.573243] __do_sys_clone3+0x1e5/0x320 [ 1361.573253] ? __do_sys_clone+0x110/0x110 [ 1361.573282] ? rcu_read_lock_any_held+0x75/0xa0 [ 1361.573289] ? vfs_write+0x354/0xb10 [ 1361.573301] ? fput_many+0x2f/0x1a0 [ 1361.573311] ? ksys_write+0x1a9/0x260 [ 1361.573320] ? __ia32_sys_read+0xb0/0xb0 [ 1361.573340] do_syscall_64+0x33/0x40 [ 1361.573352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.573359] RIP: 0033:0x7fd89e327b19 [ 1361.573370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.573375] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1361.573388] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1361.573394] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1361.573400] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.573406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.573413] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1361.595603] FAULT_INJECTION: forcing a failure. [ 1361.595603] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.637121] CPU: 0 PID: 8075 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1361.637133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.637140] Call Trace: [ 1361.637168] dump_stack+0x107/0x167 [ 1361.637192] should_fail.cold+0x5/0xa [ 1361.637214] ? xas_alloc+0x336/0x440 [ 1361.637234] should_failslab+0x5/0x20 [ 1361.637255] kmem_cache_alloc+0x5b/0x310 [ 1361.637284] ? stack_trace_consume_entry+0x160/0x160 [ 1361.637309] xas_alloc+0x336/0x440 [ 1361.637334] xas_create+0x34a/0x10d0 [ 1361.637369] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1361.637392] xas_store+0x8c/0x1c40 [ 1361.637430] __xa_store+0x164/0x2d0 [ 1361.637454] ? xa_delete_node+0x280/0x280 [ 1361.637482] ? trace_hardirqs_on+0x5b/0x180 [ 1361.637511] xa_store+0x31/0x50 [ 1361.637535] __io_uring_add_tctx_node+0x1cf/0x520 [ 1361.637556] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1361.637573] ? alloc_fd+0x2e7/0x670 [ 1361.637607] io_uring_setup+0x1fbb/0x2980 [ 1361.637638] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1361.637655] ? wait_for_completion_io+0x270/0x270 [ 1361.637710] do_syscall_64+0x33/0x40 [ 1361.637731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.637744] RIP: 0033:0x7fbd4ba01b19 [ 1361.637762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.637773] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1361.637795] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1361.637806] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1361.637818] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1361.637830] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1361.637841] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1361.682640] FAULT_INJECTION: forcing a failure. [ 1361.682640] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.682662] CPU: 0 PID: 8082 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1361.682673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.682679] Call Trace: [ 1361.682702] dump_stack+0x107/0x167 [ 1361.682726] should_fail.cold+0x5/0xa [ 1361.682749] ? create_object.isra.0+0x3a/0xa30 [ 1361.682767] should_failslab+0x5/0x20 [ 1361.682787] kmem_cache_alloc+0x5b/0x310 [ 1361.682814] create_object.isra.0+0x3a/0xa30 [ 1361.682831] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1361.682857] kmem_cache_alloc_node+0x169/0x330 [ 1361.682886] __alloc_skb+0x6d/0x5b0 [ 1361.682912] netlink_sendmsg+0x998/0xe00 [ 1361.682948] ? netlink_unicast+0xa00/0xa00 [ 1361.682981] ? netlink_unicast+0xa00/0xa00 [ 1361.683003] __sock_sendmsg+0x154/0x190 [ 1361.683025] ____sys_sendmsg+0x70d/0x870 [ 1361.683050] ? sock_write_iter+0x3d0/0x3d0 [ 1361.683064] ? do_recvmmsg+0x6d0/0x6d0 [ 1361.683088] ? SOFTIRQ_verbose+0x10/0x10 [ 1361.683106] ? lock_downgrade+0x6d0/0x6d0 [ 1361.683130] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1361.683148] ? SOFTIRQ_verbose+0x10/0x10 [ 1361.683170] ___sys_sendmsg+0xf3/0x170 [ 1361.683189] ? sendmsg_copy_msghdr+0x160/0x160 [ 1361.683214] ? __fget_files+0x2cf/0x520 [ 1361.683234] ? lock_downgrade+0x6d0/0x6d0 [ 1361.683255] ? find_held_lock+0x2c/0x110 [ 1361.683286] ? __fget_files+0x2f8/0x520 [ 1361.683321] ? __fget_light+0xea/0x290 [ 1361.683346] __sys_sendmsg+0xe5/0x1b0 [ 1361.683364] ? __sys_sendmsg_sock+0x40/0x40 [ 1361.683383] ? rcu_read_lock_any_held+0x75/0xa0 [ 1361.683430] do_syscall_64+0x33/0x40 [ 1361.683451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1361.683463] RIP: 0033:0x7feef8d49b19 [ 1361.683482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.683493] RSP: 002b:00007feef62bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1361.683514] RAX: ffffffffffffffda RBX: 00007feef8e5cf60 RCX: 00007feef8d49b19 [ 1361.683525] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1361.683536] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.683547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.683558] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 02:28:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 45) 02:28:31 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0200006e6af691090f38c2f1a3433e95b7353c9d259b2bf77ef82e239e5fa5cfc906ea63aa5e4ffb105f0068d7418f98a05e0cb9ba83c8f285b4526156999ae456d550933ba27a0d233e5f4031fbeb70794ee236506bbe28933a8734808e5537d8518eea8dfaf813f700fd64754248827dbb50bfe6d13f5ef17c6d15ae9036ae2218f75db0cf6caac926820d23c0c41f4c55557a7e7d85e6666ea279630d049b867ced4a7f686f0baf40b511d231a8cff462fd0a1151ad431863547e9295780ddb2a0dbe5ac022932e8abd57b6d025b93e9994a867ebaf86edee4815ec7dd07b35597cb464cd601d0d218ed96bdaaad27ff3dbe970de14152cab2ede66895f2531606fb0a3cb72dee16739856f9a935414eb2c5d5fcfa49fe53b1640dfe60b2ca01ed68b94f9992ad4ccfd4cbb", @ANYRES16=r0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x24080000}, 0x0) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0xffffffff}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) 02:28:31 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000080)=0xfffffffa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) 02:28:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xa) 02:28:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40) 02:28:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x20200}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:31 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 5) 02:28:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 40) [ 1376.157217] FAULT_INJECTION: forcing a failure. [ 1376.157217] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.159567] CPU: 1 PID: 8094 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1376.160905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.162508] Call Trace: [ 1376.163024] dump_stack+0x107/0x167 [ 1376.163734] should_fail.cold+0x5/0xa [ 1376.164486] ? create_object.isra.0+0x3a/0xa30 [ 1376.165387] should_failslab+0x5/0x20 [ 1376.166124] kmem_cache_alloc+0x5b/0x310 [ 1376.166915] create_object.isra.0+0x3a/0xa30 [ 1376.167775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.168766] kmem_cache_alloc+0x159/0x310 [ 1376.169582] xas_alloc+0x336/0x440 [ 1376.170279] xas_create+0x34a/0x10d0 [ 1376.171017] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1376.172030] xas_store+0x8c/0x1c40 [ 1376.172738] __xa_store+0x164/0x2d0 [ 1376.173460] ? xa_delete_node+0x280/0x280 [ 1376.174272] ? trace_hardirqs_on+0x5b/0x180 [ 1376.175121] xa_store+0x31/0x50 [ 1376.175766] __io_uring_add_tctx_node+0x1cf/0x520 [ 1376.176709] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1376.177731] ? alloc_fd+0x2e7/0x670 [ 1376.178450] io_uring_setup+0x1fbb/0x2980 [ 1376.179267] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1376.180250] ? wait_for_completion_io+0x270/0x270 [ 1376.181215] do_syscall_64+0x33/0x40 [ 1376.181932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.182923] RIP: 0033:0x7fbd4ba01b19 [ 1376.183632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.187179] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1376.188637] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1376.190021] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1376.191405] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1376.192649] FAULT_INJECTION: forcing a failure. [ 1376.192649] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.192804] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1376.192815] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1376.200166] CPU: 0 PID: 8100 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1376.201793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.203601] Call Trace: [ 1376.204178] dump_stack+0x107/0x167 [ 1376.204989] should_fail.cold+0x5/0xa [ 1376.205821] should_failslab+0x5/0x20 [ 1376.206649] __kmalloc_node_track_caller+0x74/0x3b0 [ 1376.207735] ? netlink_sendmsg+0x998/0xe00 [ 1376.208659] __alloc_skb+0xb1/0x5b0 [ 1376.209464] netlink_sendmsg+0x998/0xe00 [ 1376.210350] ? netlink_unicast+0xa00/0xa00 [ 1376.211284] ? netlink_unicast+0xa00/0xa00 [ 1376.212203] __sock_sendmsg+0x154/0x190 [ 1376.213074] ____sys_sendmsg+0x70d/0x870 [ 1376.213960] ? sock_write_iter+0x3d0/0x3d0 [ 1376.214882] ? do_recvmmsg+0x6d0/0x6d0 [ 1376.215730] ? SOFTIRQ_verbose+0x10/0x10 [ 1376.216615] ? lock_downgrade+0x6d0/0x6d0 [ 1376.217528] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1376.218662] ? SOFTIRQ_verbose+0x10/0x10 [ 1376.219545] ___sys_sendmsg+0xf3/0x170 [ 1376.220387] ? sendmsg_copy_msghdr+0x160/0x160 [ 1376.221173] FAULT_INJECTION: forcing a failure. [ 1376.221173] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.221385] ? __fget_files+0x2cf/0x520 [ 1376.221411] ? lock_downgrade+0x6d0/0x6d0 [ 1376.225208] ? find_held_lock+0x2c/0x110 [ 1376.226099] ? __fget_files+0x2f8/0x520 [ 1376.226968] ? __fget_light+0xea/0x290 [ 1376.227820] __sys_sendmsg+0xe5/0x1b0 [ 1376.228642] ? __sys_sendmsg_sock+0x40/0x40 [ 1376.229581] ? rcu_read_lock_any_held+0x75/0xa0 [ 1376.230618] do_syscall_64+0x33/0x40 [ 1376.231424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.232530] RIP: 0033:0x7feef8d49b19 [ 1376.233339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.237326] RSP: 002b:00007feef62bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1376.238970] RAX: ffffffffffffffda RBX: 00007feef8e5cf60 RCX: 00007feef8d49b19 [ 1376.240517] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1376.242069] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.243609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.245161] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 [ 1376.246730] CPU: 1 PID: 8103 Comm: syz-executor.0 Not tainted 5.10.260 #1 02:28:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x80000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1376.248015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.249818] Call Trace: [ 1376.250316] dump_stack+0x107/0x167 [ 1376.250995] should_fail.cold+0x5/0xa [ 1376.251705] ? create_object.isra.0+0x3a/0xa30 [ 1376.252558] should_failslab+0x5/0x20 [ 1376.253281] kmem_cache_alloc+0x5b/0x310 [ 1376.254046] create_object.isra.0+0x3a/0xa30 [ 1376.254854] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.255806] kmem_cache_alloc+0x159/0x310 [ 1376.256581] anon_vma_fork+0x1ff/0x640 [ 1376.257318] copy_process+0x72cd/0x78b0 [ 1376.258058] ? SOFTIRQ_verbose+0x10/0x10 [ 1376.258840] ? __cleanup_sighand+0xb0/0xb0 [ 1376.259645] ? _copy_from_user+0xfb/0x1b0 [ 1376.260422] kernel_clone+0xe7/0x980 [ 1376.261123] ? lock_acquire+0x197/0x470 [ 1376.261864] ? create_io_thread+0xf0/0xf0 [ 1376.262644] ? ksys_write+0x21a/0x260 [ 1376.263360] ? lock_downgrade+0x6d0/0x6d0 [ 1376.264133] __do_sys_clone3+0x1e5/0x320 [ 1376.264892] ? __do_sys_clone+0x110/0x110 [ 1376.265686] ? rcu_read_lock_any_held+0x75/0xa0 [ 1376.266544] ? vfs_write+0x354/0xb10 [ 1376.267232] ? fput_many+0x2f/0x1a0 [ 1376.267900] ? ksys_write+0x1a9/0x260 [ 1376.268601] ? __ia32_sys_read+0xb0/0xb0 [ 1376.269367] do_syscall_64+0x33/0x40 [ 1376.270055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.271004] RIP: 0033:0x7fd89e327b19 02:28:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xc) [ 1376.271684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.275246] RSP: 002b:00007fd89b87c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1376.276640] RAX: ffffffffffffffda RBX: 00007fd89e43b020 RCX: 00007fd89e327b19 [ 1376.277966] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1376.278430] FAULT_INJECTION: forcing a failure. [ 1376.278430] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.279277] RBP: 00007fd89b87c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.279288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.279307] R13: 00007ffdf34b7aef R14: 00007fd89b87c300 R15: 0000000000022000 [ 1376.285689] CPU: 0 PID: 8104 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1376.287182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.288990] Call Trace: [ 1376.289572] dump_stack+0x107/0x167 [ 1376.290377] should_fail.cold+0x5/0xa [ 1376.291211] ? xas_alloc+0x336/0x440 [ 1376.292020] should_failslab+0x5/0x20 [ 1376.292852] kmem_cache_alloc+0x5b/0x310 [ 1376.293744] xas_alloc+0x336/0x440 [ 1376.294524] xas_create+0x34a/0x10d0 [ 1376.295346] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1376.296492] xas_store+0x8c/0x1c40 [ 1376.297296] __xa_store+0x164/0x2d0 [ 1376.298090] ? xa_delete_node+0x280/0x280 [ 1376.299001] ? trace_hardirqs_on+0x5b/0x180 [ 1376.299944] xa_store+0x31/0x50 [ 1376.300664] __io_uring_add_tctx_node+0x1cf/0x520 [ 1376.301720] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1376.302855] ? alloc_fd+0x2e7/0x670 [ 1376.303658] io_uring_setup+0x1fbb/0x2980 [ 1376.304568] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1376.305674] ? wait_for_completion_io+0x270/0x270 [ 1376.306753] do_syscall_64+0x33/0x40 [ 1376.307562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.308675] RIP: 0033:0x7f2e49e79b19 [ 1376.309489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.313483] RSP: 002b:00007f2e473ce108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1376.315139] RAX: ffffffffffffffda RBX: 00007f2e49f8d020 RCX: 00007f2e49e79b19 [ 1376.316683] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1376.318242] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1376.319787] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1376.321339] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:28:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000240)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) chroot(&(0x7f0000000000)='./file0\x00') r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 02:28:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x101000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:31 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:28:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 41) [ 1376.454509] FAULT_INJECTION: forcing a failure. [ 1376.454509] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.456522] CPU: 1 PID: 8119 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1376.457673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.459058] Call Trace: [ 1376.459502] dump_stack+0x107/0x167 [ 1376.460108] should_fail.cold+0x5/0xa [ 1376.460734] ? xas_alloc+0x336/0x440 [ 1376.461356] should_failslab+0x5/0x20 [ 1376.461991] kmem_cache_alloc+0x5b/0x310 [ 1376.462670] xas_alloc+0x336/0x440 [ 1376.463259] xas_create+0x34a/0x10d0 [ 1376.463890] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1376.464752] xas_store+0x8c/0x1c40 [ 1376.465362] __xa_store+0x164/0x2d0 [ 1376.465965] ? xa_delete_node+0x280/0x280 [ 1376.466665] ? trace_hardirqs_on+0x5b/0x180 [ 1376.467388] xa_store+0x31/0x50 [ 1376.467944] __io_uring_add_tctx_node+0x1cf/0x520 [ 1376.468741] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1376.469615] ? alloc_fd+0x2e7/0x670 [ 1376.470239] io_uring_setup+0x1fbb/0x2980 [ 1376.470947] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1376.471780] ? wait_for_completion_io+0x270/0x270 [ 1376.472616] do_syscall_64+0x33/0x40 [ 1376.473244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.474099] RIP: 0033:0x7fbd4ba01b19 [ 1376.474708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.477749] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1376.478999] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1376.480179] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1376.481350] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1376.482535] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1376.483702] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:28:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 42) 02:28:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41) 02:28:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x10) 02:28:45 executing program 4: syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) 02:28:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0xf0ff1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 46) 02:28:45 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 6) 02:28:45 executing program 7: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000280)=""/107) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000240)=""/153) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xadd9}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0x0) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000300)=""/246) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0x14, 0x52, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) pipe2(&(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000004a00)={@in6={{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x29, 0x0, "9bb07cea9a55b45ba5f3da0eca2c79adb1a9f5f54eca0f67263f25cf8f04a77ca36202294bf0068e1a0d599ca78ebea5925647ae707b8547ac6f72f3d57b116a80fc7c8e65cbba7437828daf6ccc3fc1"}, 0xd8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000004b00)) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x890c, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@private0, 0x0, r8}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002c80)={'team0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="3df12b455f2d6e7cde016a033445fe137709e003560560afceae98782e41c26be7acc963bee78c0f9a0f98c0d390dab99c1db18fefca3126a19464b0d124c13a416a075a28e316530a6cb3d3ecb638d846e377824544313ab417890081ed6853e3b2a36e4b978b60d7fb59e65c680dec697a1b3b2ae5dc0d2172ea39e4e6da7cf68603e28b2c71c292d234de402263e4e5897c307983cb1bcb089f81e6f2deb84a3e3c162cbbd6f9c6e2b113989013e2a000944baf61f8960e05be6ccce4b6e13eb85636bb578ea0b384d586b0a0e3a1674d886021339b0036776995ed50bcc2492b7d9d", 0xe4}, {&(0x7f00000000c0)="5dda8c45e22504cb8584f70ef109b18a904e7fe495cdd770465fcbffb95f62f5423c4adabd6826682ce3341ea030b634", 0x30}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xa0}}, {{0xffffffffffffffff, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)="fc8e8940766484e7fbef7850e0e02f7256b7a85eadd31141a8239a5fe3ecc9055ab8cff15bb63a04170d22bfc0aa780da88823f4d3bc5306ab795738bcdb624e89b642a9e3730db7599d52dca6214019", 0x50}, {&(0x7f0000000640)="284e8c987721f73d0e0e43bdad3834b0f337e5acd5d582dd2b436162e5fe0d8dc48400ad76eff14c87163b9360918f9930ce3990767020b433e19c500aff78018c154993113f8c3de9588d7296af2584b120fd985c66cb84b51a6c2006cf58af2e6edf0f9b99d469efa3d7dd3c2bc7d34f7a995773d543e64a461d179c93e6e6aa985a2321ab66123a913c8a4b23d77cf6e4c1da3a0d729a9a01e7de85360660530bbc09ec682783be1e1d0263ae4041604c42c2c5005f25e9d47368a1e41fc71f28ea9c8ae46c216e9a288cfa98dfc9a199ef3a547ee88815621e65b6108ad71716c822955c87b5320d60b0a61d0a06f763c3", 0xf3}, {&(0x7f0000000740)="030e7ae466f68fb0279b294cb65dac27cb01c580c025b88fd6189cc16801066da9694bbf48e1b95e83b08c9a13b4c81cb00c3b50fcb56aaf7b3d9b99935a770c8a2d1c44e7923d7a8030c341189e8cec060a4223ba0a7e730747325aab4c0ca10e2072862d022154ae70c74f9a7f8a06", 0x70}, {&(0x7f0000000180)="b13a7415b4d628e634af762fda1a79ea5efd4144435893d0694681f15ae70995f26951a07a8d877d38e6603f5a1f919a477e0b42cbb688f54259284d130f29", 0x3f}, {&(0x7f00000007c0)="bd6dad8abf109c8916ec43c49a08000bcf06d0b05cfdfd0022829b403bf5e1e78422f4f48e0351a81c24be14432dd66f597908b36e74dff9c1b2aee07827b160d30cb7bcbb10694a787a467e10d1d915c652a97edc25b2e486568a5e5efbdbf1b6f21d3a67118ed19d599c9f1be2a5b0327c703834c570d3a9aa2908084c38884e3b712d740c42d518cbd53e6fcde5c90a5df3d26f1057ec9a05f063c3e9f7a6351cf3bc2914364fcff82a3ee2b164", 0xaf}], 0x5, &(0x7f0000000900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x5, [@broadcast]}, @noop, @lsrr={0x83, 0xb, 0x8d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x70, 0x0, 0x3, [0x4, 0xfffff800, 0x81f]}]}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="8d63dfb963b0920944e4ed9cf3722312e535c4b634185d823feac41726097b4658790fa5a41fbb85423e19e1b5e44517c5eee16cb3b31b148e7674f0d93e3dd9449ef64326db3063c9da006401b828f547eb89a63231f29d5d42e36c7851546118042fec226e3569881bdc75616bfa18642ff5e8782798f9441bebe1534fcc0240d34bcbb6a56b7396083646b1be3d247e9404071a23ff5e5e8713dc3f82f6cb752e8c95357bd4732209e34c03bccba0c2a8aed2d1940549087c3078b4c0653a1e63f1d5e1c088e0c1871c7f78413691144d221251fc2c52972dd3ac966481310e06a8275cd60c8790c7f8c54f0f27b4221a2ddec83b0311dbbb71", 0xfb}, {&(0x7f0000002a80)="a308ea93aad5cdaf81977ba65517cb635e4c517a3355fb1e6bd95b60dddb32675829cc03a4bc4d82a0ce0fe1d36369bf85895cc73845c99faf5f385ea17eda0c12dffac3c81a9978a14c245d121f969bf52c8ad784341c675b2a9674573774eef92466b596881aea9ce55e8f326a23aa28895c8793ba3e070c946ad0bdbb94eda1128820ae0c82bf4c06bec0f6cfda7087846b8c7560f4a71bcb74db1d7d52fb214cc26ae213534284cafdc7dd2ae2e70a36fdff39a112809819afebef49166b9a65caec", 0xc4}, {&(0x7f0000002b80)="f145a7e09ddd481caef0c6e4093cf177ba71f15254c79078bb73f29b0c59a2a7661e177a7ec4275c8cdcbaad2ed18787a683fe3f6c7c5f08af02a3e9179a5b98852bf0a0ba638fdbbce8ab6cffd99ba51d184d7de04e08f304d446758a7dbdda2711933d99368accedd2f17b80aa51", 0x6f}], 0x5, &(0x7f0000002cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @remote}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xf4, 0x1, 0x6, [{@multicast2}, {@broadcast}, {@multicast2, 0x2}]}, @lsrr={0x83, 0x23, 0x52, [@empty, @private=0xa010102, @empty, @remote, @private=0xa010101, @private=0xa010102, @multicast1, @loopback]}, @rr={0x7, 0x7, 0x8e, [@empty]}, @cipso={0x86, 0x3b, 0x2, [{0x1, 0x9, "9b3b250be4a674"}, {0x6, 0x6, "4c111444"}, {0x0, 0xa, "7c3648233b2deb5b"}, {0x4, 0x8, "1507ea8ac3cc"}, {0x5, 0x3, '0'}, {0x6, 0x11, "899b784fb5e0f2879f1374c6a7c57d"}]}, @lsrr={0x83, 0xb, 0x59, [@dev={0xac, 0x14, 0x14, 0x1d}, @empty]}, @timestamp={0x44, 0x18, 0x60, 0x0, 0x0, [0x10001, 0x6ba, 0x81, 0xf33, 0x2]}, @timestamp_prespec={0x44, 0x14, 0xd9, 0x3, 0x8, [{@remote, 0x40}, {@private=0xa010100, 0x8}]}, @end, @timestamp={0x44, 0x14, 0xf6, 0x0, 0xe, [0x8680, 0x80000001, 0x4, 0x3]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x54, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @generic={0x82, 0xc, "53476b0445d4a3a796ec"}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x1, 0xd, "cdd42bfee12b3d713f4b58"}]}, @timestamp={0x44, 0x20, 0xe6, 0x0, 0x7, [0x9, 0xfffffffb, 0x73, 0x2, 0x9, 0xff, 0x4]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x61, 0x3, 0x4}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@end, @cipso={0x86, 0x24, 0x1, [{0x6, 0x12, "25fa16da61b9261cdfd04d5a9dd4d273"}, {0x0, 0x3, 'e'}, {0x6, 0x9, "4f8d4f36164614"}]}, @lsrr={0x83, 0x7, 0x9b, [@private=0xa010102]}, @end, @generic={0x89, 0xd, "1a636e389a4c5d3ac2f583"}]}}}], 0x1f8}}, {{&(0x7f0000002f00)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000044c0)=[{&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="9f580e98fef755d55912d7e73482cf1017cfb18d7774f497ba7db5e7ff2d12a45eff2d7109a90f1e716f25a33c8bc76b01374b147d93fb631e0e7b09bc1237fd1e0eaaa37cd3ff036b08dc848bc250bda70aaea9d91fc929f23c2293b4535f81390bc954a97a6694cd", 0x69}, {&(0x7f0000003fc0)="64b28e88a21c1fccfa551951987c16491159062a8889d1d149acc1d620f777cb52722ccd8fadd43b0d4f9352c8e9e8e407af625fe4b9c32cd2548157df543acd8f4e66ecc24bb7ae384977d5e4effd8448df9f43dad46ac20ed3def906bc003eebd24cecbf09ca09d04c87697005e3ace9751ad3f406b7bcef775a41f62e228282ae85918bf32850ab21e3ac0cb6cde7ad714c099b8f87ce26c9c697d336533df146d5f50e3eb2c3266d7ef2a0a9ec7f12769060e8d74b7b1591540e0e72fa208500103fcde0fac436d9311634822b323c406d7760031107", 0xd8}, {&(0x7f00000040c0)="090474b8b5a1cc667726ad3fc9b71fae40ec1b4284aab4ba5a9debda906c642ba5c88316ce53531e8ddccc945f97e2f44474ab75fd357e96a19ff1f499403078f47d7e27a1a3fcc4321bc2e4541d55b86b224c9c4079c3b5a0c94e78a162157baf34f9029c1bc5d75580c6f3f593b2d395494b5bbe62f551eeffff8a80f4659746c4555d5b36cf0a5bb700eb70725958fdd564552b1f920654697ddb8d9f10f38fa4cbefeae2a64ea82cf0710192451f40a5", 0xb2}, {&(0x7f0000004180)="41d021c2295ff1c6789fa945ffa460bdd0b1f172660016c2ad667813a11c40a6e90e274a8408d008386a27c671f2c6b86b5ecb1136194031c33577b3d624d2524ead0b833fe1a613318c3f44ccbe7cef61d22113d662b7", 0x57}, {&(0x7f0000004200)="b64abdc0963baa233606cf35463ec10cf40753c40376077ac4d12a4f79520561fbe6237d6a16fb66f87d8c0a3e9e08a60165b39a4eb289fde998d8eb05712c3c949602f887e3b4dafae340c66560281c592474ffd12703ca805caa77f752c12b3f6dec568cb6f07b4610604a1b9c70fa47a0d7bd24c070f17df30a1fcc84d60eb630c2da", 0x84}, {&(0x7f00000042c0)="3cf992e489d2351c343079f54d30a89d4c6095013db9e9dc3263bc788daff79944063262ef1d4355149cff95e03264a5a7bde40de10d2a0ff0758d35fc28a89c6ff4cc47d1c224958b607ed0a15a2c7936fae6544f11a054bfd498cc549eaf2e8531c018eed62fa91e776de2f8a65400d33f96766732523415384cfa9aa62a60addcbca25e30dd35c01b898110fe88828018454482f86cab40ff95b0404315ec97daada975cb8fe45a700a591d9eef160ca6c65d86", 0xb5}, {&(0x7f0000004380)="3abc35e8decc8bf2f6744a9be9f330c9df46990bbbae29b01a5121917f901d7fd75d453fb7837bdcbd251e48850864b6edd107f00225e00a0f0823dcf4a9b27e643ebb4c4cbb5a3e07921de4ffb80db54e0234aee97b426b7a6e1555c8deef8bd59f53c5918da96b52ec29e47adf1bfe57e297b57a2acb", 0x77}, {&(0x7f0000004400)="87f955e5b1f628a9e64bf09e9559f696bce49762028fa73639e392585f77a6caaccc3241357eee8935e225cd79bf808a64642fddb1b1474f7963bc3e81567c2e5db189f06874c95f1dd2b74fe825229669f5682eabf1dd5a38f05b5776db512042bdb820dd44add4bca5c1b7e796a9cb9d4d158a30d7d306718776f9ae73b8a911c7e9a78fc55b0d462f2b6fec9d2190e5a7049aff00b77e89", 0x99}], 0x9}}, {{&(0x7f0000004580)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000004780)=[{&(0x7f00000045c0)="2156d7be512a74deb009422d8af5a18f4f6ec1d70dc5b2d3f4855b192046028c", 0x20}, {&(0x7f0000004600)="92b25880caf1569aff4457279f6b09ea71e54949e5052d36cd30", 0x1a}, {&(0x7f0000004640)="afdbba29060ce4f9145297b99073ecaf97a1dccda0473dc5ceee41311a460381fad114f255ab3dc980a36fb10e86d7eaa1dcb11c381046d7f91483000e9b7139af359e685e69ae687e8212ce6bc51f168ca11e18b9e31403c70613b3d8", 0x5d}, {&(0x7f00000046c0)="904dcecd467d11c8f4fd051cf58fe207a34b02933d9b666b8f351904f4e5d01d67137fddb669a42ba45effee311e91901fed5eb5dff0ab6cd3c526262734a578c1009d1951ae3cc9f03ed68070c0ddb8074dda56ce15390379239b8f2edb3ad1acaadd308aaed009aa14572a79d9652b65a44e446991290a8ff14d581a21d04e38c53950bb6735bc2d11234b2f2decc9e91bfb8f0aed15b5b3d02326f13bcc723b55fc1b3ac58fe2f0c1db5f7d4a6f", 0xaf}], 0x4, &(0x7f00000047c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x620}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x64c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}], 0xa8}}], 0x5, 0x20000c1) [ 1389.925601] FAULT_INJECTION: forcing a failure. [ 1389.925601] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.928147] CPU: 0 PID: 8136 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1389.929629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.931678] Call Trace: [ 1389.932253] dump_stack+0x107/0x167 [ 1389.933062] should_fail.cold+0x5/0xa [ 1389.933878] ? create_object.isra.0+0x3a/0xa30 [ 1389.934858] should_failslab+0x5/0x20 [ 1389.935675] kmem_cache_alloc+0x5b/0x310 [ 1389.936553] ? mark_held_locks+0x9e/0xe0 [ 1389.937436] create_object.isra.0+0x3a/0xa30 [ 1389.938362] FAULT_INJECTION: forcing a failure. [ 1389.938362] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.938415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1389.938457] kmem_cache_alloc+0x159/0x310 [ 1389.943355] xas_alloc+0x336/0x440 [ 1389.944349] xas_create+0x34a/0x10d0 [ 1389.945426] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1389.946720] xas_store+0x8c/0x1c40 [ 1389.947557] __xa_store+0x164/0x2d0 [ 1389.948507] ? xa_delete_node+0x280/0x280 [ 1389.949668] ? trace_hardirqs_on+0x5b/0x180 [ 1389.950849] xa_store+0x31/0x50 [ 1389.951748] __io_uring_add_tctx_node+0x1cf/0x520 [ 1389.953038] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1389.954266] ? alloc_fd+0x2e7/0x670 [ 1389.955181] io_uring_setup+0x1fbb/0x2980 [ 1389.956268] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1389.957415] ? wait_for_completion_io+0x270/0x270 [ 1389.958520] do_syscall_64+0x33/0x40 [ 1389.959347] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1389.960488] RIP: 0033:0x7f2e49e79b19 [ 1389.961325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.965413] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1389.967107] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1389.968691] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1389.970278] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1389.971858] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1389.973450] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1389.975073] CPU: 1 PID: 8139 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1389.976662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.978620] Call Trace: [ 1389.979204] dump_stack+0x107/0x167 [ 1389.979985] should_fail.cold+0x5/0xa [ 1389.980801] ? create_object.isra.0+0x3a/0xa30 [ 1389.981776] should_failslab+0x5/0x20 [ 1389.982584] kmem_cache_alloc+0x5b/0x310 [ 1389.983454] ? mark_held_locks+0x9e/0xe0 [ 1389.984324] create_object.isra.0+0x3a/0xa30 [ 1389.985264] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1389.986341] kmem_cache_alloc+0x159/0x310 [ 1389.987234] xas_alloc+0x336/0x440 [ 1389.987997] xas_create+0x34a/0x10d0 [ 1389.988797] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1389.989925] xas_store+0x8c/0x1c40 [ 1389.990696] __xa_store+0x164/0x2d0 [ 1389.991474] ? xa_delete_node+0x280/0x280 [ 1389.992367] ? trace_hardirqs_on+0x5b/0x180 [ 1389.993291] xa_store+0x31/0x50 [ 1389.993991] __io_uring_add_tctx_node+0x1cf/0x520 [ 1389.995025] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1389.996132] ? alloc_fd+0x2e7/0x670 [ 1389.996150] FAULT_INJECTION: forcing a failure. [ 1389.996150] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.999258] io_uring_setup+0x1fbb/0x2980 [ 1390.000147] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1390.001230] ? wait_for_completion_io+0x270/0x270 [ 1390.002284] do_syscall_64+0x33/0x40 [ 1390.003073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.004154] RIP: 0033:0x7fbd4ba01b19 [ 1390.004956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.008854] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1390.010467] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1390.011971] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1390.013492] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1390.015000] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1390.016509] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1390.018058] CPU: 0 PID: 8138 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1390.019576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1390.021387] Call Trace: [ 1390.021967] dump_stack+0x107/0x167 [ 1390.022756] should_fail.cold+0x5/0xa [ 1390.023579] ? create_object.isra.0+0x3a/0xa30 [ 1390.024566] should_failslab+0x5/0x20 02:28:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1390.025393] kmem_cache_alloc+0x5b/0x310 [ 1390.026416] create_object.isra.0+0x3a/0xa30 [ 1390.027367] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1390.028464] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1390.029568] ? netlink_sendmsg+0x998/0xe00 [ 1390.030496] __alloc_skb+0xb1/0x5b0 [ 1390.031292] netlink_sendmsg+0x998/0xe00 [ 1390.032173] ? netlink_unicast+0xa00/0xa00 [ 1390.033111] ? netlink_unicast+0xa00/0xa00 [ 1390.034034] __sock_sendmsg+0x154/0x190 [ 1390.034893] ____sys_sendmsg+0x70d/0x870 [ 1390.035771] ? sock_write_iter+0x3d0/0x3d0 [ 1390.036679] ? do_recvmmsg+0x6d0/0x6d0 [ 1390.037527] ? SOFTIRQ_verbose+0x10/0x10 [ 1390.038401] ? lock_downgrade+0x6d0/0x6d0 [ 1390.039298] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1390.040426] ? SOFTIRQ_verbose+0x10/0x10 [ 1390.041512] ___sys_sendmsg+0xf3/0x170 [ 1390.042596] ? sendmsg_copy_msghdr+0x160/0x160 [ 1390.043869] ? __fget_files+0x2cf/0x520 [ 1390.044969] ? lock_downgrade+0x6d0/0x6d0 [ 1390.046099] ? find_held_lock+0x2c/0x110 [ 1390.047224] ? __fget_files+0x2f8/0x520 [ 1390.048334] ? __fget_light+0xea/0x290 [ 1390.049331] __sys_sendmsg+0xe5/0x1b0 [ 1390.050184] ? __sys_sendmsg_sock+0x40/0x40 [ 1390.051203] ? rcu_read_lock_any_held+0x75/0xa0 [ 1390.052380] do_syscall_64+0x33/0x40 [ 1390.053225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.054341] RIP: 0033:0x7feef8d49b19 [ 1390.055140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.059092] RSP: 002b:00007feef62bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1390.060715] RAX: ffffffffffffffda RBX: 00007feef8e5cf60 RCX: 00007feef8d49b19 [ 1390.062254] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1390.063775] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.065453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.067004] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 [ 1390.073362] FAULT_INJECTION: forcing a failure. [ 1390.073362] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.075817] CPU: 1 PID: 8140 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1390.077281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1390.079029] Call Trace: [ 1390.079594] dump_stack+0x107/0x167 [ 1390.080366] should_fail.cold+0x5/0xa [ 1390.081189] ? create_object.isra.0+0x3a/0xa30 [ 1390.082156] should_failslab+0x5/0x20 [ 1390.082964] kmem_cache_alloc+0x5b/0x310 [ 1390.083831] create_object.isra.0+0x3a/0xa30 [ 1390.084759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1390.085847] kmem_cache_alloc+0x159/0x310 [ 1390.086730] __pmd_alloc+0x94/0x630 [ 1390.087514] copy_page_range+0x2bd0/0x3800 [ 1390.088412] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1390.089520] ? SOFTIRQ_verbose+0x10/0x10 [ 1390.090378] ? lock_chain_count+0x20/0x20 [ 1390.091258] ? find_held_lock+0x2c/0x110 [ 1390.092131] ? anon_vma_fork+0x462/0x640 [ 1390.093030] ? up_write+0x191/0x550 [ 1390.093804] ? vm_iomap_memory+0x190/0x190 [ 1390.094701] ? downgrade_write+0x3a0/0x3a0 [ 1390.095597] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1390.096747] ? __vma_link_rb+0x540/0x700 [ 1390.097628] copy_process+0x7658/0x78b0 [ 1390.098468] ? SOFTIRQ_verbose+0x10/0x10 [ 1390.099359] ? __cleanup_sighand+0xb0/0xb0 [ 1390.100281] ? _copy_from_user+0xfb/0x1b0 [ 1390.101170] kernel_clone+0xe7/0x980 [ 1390.101957] ? lock_acquire+0x197/0x470 [ 1390.102794] ? create_io_thread+0xf0/0xf0 [ 1390.103692] ? ksys_write+0x21a/0x260 [ 1390.104495] ? lock_downgrade+0x6d0/0x6d0 [ 1390.105385] __do_sys_clone3+0x1e5/0x320 [ 1390.106240] ? __do_sys_clone+0x110/0x110 [ 1390.107143] ? rcu_read_lock_any_held+0x75/0xa0 [ 1390.108115] ? vfs_write+0x354/0xb10 [ 1390.108900] ? fput_many+0x2f/0x1a0 [ 1390.109685] ? ksys_write+0x1a9/0x260 [ 1390.110485] ? __ia32_sys_read+0xb0/0xb0 [ 1390.111363] do_syscall_64+0x33/0x40 [ 1390.112165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.113263] RIP: 0033:0x7fd89e327b19 [ 1390.114054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.117950] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1390.119570] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1390.121075] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1390.122575] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.124079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1390.125601] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:28:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:45 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_setup(0x7360, &(0x7f0000000080)={0x0, 0xb64e, 0x2, 0x1, 0xf1, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[r3, r0, r0, r4], 0x4) 02:28:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 47) 02:28:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 43) 02:28:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x321) 02:28:45 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 7) 02:28:45 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x10, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003, 0x100010, r0, 0x8000000) [ 1390.289170] FAULT_INJECTION: forcing a failure. [ 1390.289170] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.291717] CPU: 0 PID: 8159 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1390.293193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1390.294968] Call Trace: [ 1390.295534] dump_stack+0x107/0x167 [ 1390.296319] should_fail.cold+0x5/0xa [ 1390.297145] ? xas_alloc+0x336/0x440 [ 1390.297943] should_failslab+0x5/0x20 [ 1390.298757] kmem_cache_alloc+0x5b/0x310 [ 1390.299630] xas_alloc+0x336/0x440 [ 1390.300391] xas_create+0x34a/0x10d0 [ 1390.301231] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1390.302356] xas_store+0x8c/0x1c40 [ 1390.303134] __xa_store+0x164/0x2d0 [ 1390.303925] ? xa_delete_node+0x280/0x280 [ 1390.304825] ? trace_hardirqs_on+0x5b/0x180 [ 1390.305766] xa_store+0x31/0x50 [ 1390.306479] __io_uring_add_tctx_node+0x1cf/0x520 [ 1390.307509] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1390.308626] ? alloc_fd+0x2e7/0x670 [ 1390.309430] io_uring_setup+0x1fbb/0x2980 [ 1390.310332] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1390.311412] ? wait_for_completion_io+0x270/0x270 [ 1390.312477] do_syscall_64+0x33/0x40 [ 1390.313277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.314371] RIP: 0033:0x7f2e49e79b19 [ 1390.315161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.319125] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1390.320766] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1390.322307] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1390.323850] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1390.325390] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1390.326929] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1390.340475] FAULT_INJECTION: forcing a failure. [ 1390.340475] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.343028] CPU: 0 PID: 8160 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1390.344512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1390.346317] Call Trace: [ 1390.346894] dump_stack+0x107/0x167 [ 1390.347687] should_fail.cold+0x5/0xa [ 1390.348719] ? xas_alloc+0x336/0x440 [ 1390.349773] should_failslab+0x5/0x20 [ 1390.350833] kmem_cache_alloc+0x5b/0x310 [ 1390.351961] xas_alloc+0x336/0x440 [ 1390.352969] xas_create+0x34a/0x10d0 [ 1390.354020] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1390.355462] xas_store+0x8c/0x1c40 [ 1390.356438] __xa_store+0x164/0x2d0 [ 1390.357263] ? xa_delete_node+0x280/0x280 [ 1390.358203] ? trace_hardirqs_on+0x5b/0x180 [ 1390.359262] xa_store+0x31/0x50 [ 1390.360112] __io_uring_add_tctx_node+0x1cf/0x520 [ 1390.361225] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1390.362369] ? alloc_fd+0x2e7/0x670 [ 1390.363167] io_uring_setup+0x1fbb/0x2980 [ 1390.364069] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1390.365167] ? wait_for_completion_io+0x270/0x270 [ 1390.366235] do_syscall_64+0x33/0x40 [ 1390.367052] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.368157] RIP: 0033:0x7fbd4ba01b19 [ 1390.368972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.372918] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1390.374566] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1390.376102] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1390.377639] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1390.379176] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1390.380726] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1390.399582] FAULT_INJECTION: forcing a failure. [ 1390.399582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.402592] CPU: 0 PID: 8166 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1390.404080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1390.405887] Call Trace: [ 1390.406460] dump_stack+0x107/0x167 [ 1390.407249] should_fail.cold+0x5/0xa [ 1390.408080] _copy_from_iter_full+0x201/0xa60 [ 1390.409060] ? __virt_addr_valid+0x170/0x5d0 [ 1390.410018] ? __check_object_size+0x319/0x440 [ 1390.411012] netlink_sendmsg+0x879/0xe00 [ 1390.411899] ? netlink_unicast+0xa00/0xa00 [ 1390.412828] ? netlink_unicast+0xa00/0xa00 [ 1390.413756] __sock_sendmsg+0x154/0x190 [ 1390.414617] ____sys_sendmsg+0x70d/0x870 [ 1390.415499] ? sock_write_iter+0x3d0/0x3d0 [ 1390.416406] ? do_recvmmsg+0x6d0/0x6d0 [ 1390.417255] ? SOFTIRQ_verbose+0x10/0x10 [ 1390.418130] ? lock_downgrade+0x6d0/0x6d0 [ 1390.419033] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1390.420165] ? SOFTIRQ_verbose+0x10/0x10 [ 1390.421062] ___sys_sendmsg+0xf3/0x170 [ 1390.421932] ? sendmsg_copy_msghdr+0x160/0x160 [ 1390.422928] ? __fget_files+0x2cf/0x520 [ 1390.423792] ? lock_downgrade+0x6d0/0x6d0 [ 1390.424692] ? find_held_lock+0x2c/0x110 [ 1390.425590] ? __fget_files+0x2f8/0x520 [ 1390.426457] ? __fget_light+0xea/0x290 [ 1390.427310] __sys_sendmsg+0xe5/0x1b0 [ 1390.428133] ? __sys_sendmsg_sock+0x40/0x40 [ 1390.429090] ? rcu_read_lock_any_held+0x75/0xa0 [ 1390.430137] do_syscall_64+0x33/0x40 [ 1390.430953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.432074] RIP: 0033:0x7feef8d49b19 [ 1390.432892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.436885] RSP: 002b:00007feef62bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1390.438535] RAX: ffffffffffffffda RBX: 00007feef8e5cf60 RCX: 00007feef8d49b19 [ 1390.440081] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1390.441630] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.443187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.444807] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 02:28:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42) 02:28:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:28:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xa00) 02:28:46 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r9, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r8, r6, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r7, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r10 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r13, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0) r14 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r10, 0x8000000) syz_io_uring_submit(r14, r12, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r12, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x8, 0x0, 0x40}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x11, r0, 0x0) [ 1390.539578] FAULT_INJECTION: forcing a failure. [ 1390.539578] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.542089] CPU: 0 PID: 8179 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1390.543568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1390.545364] Call Trace: [ 1390.545945] dump_stack+0x107/0x167 [ 1390.546735] should_fail.cold+0x5/0xa [ 1390.547565] ? __pmd_alloc+0x94/0x630 [ 1390.548389] should_failslab+0x5/0x20 [ 1390.549229] kmem_cache_alloc+0x5b/0x310 [ 1390.550115] __pmd_alloc+0x94/0x630 [ 1390.550908] copy_page_range+0x2bd0/0x3800 [ 1390.551823] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1390.553058] ? SOFTIRQ_verbose+0x10/0x10 [ 1390.554188] ? lock_chain_count+0x20/0x20 [ 1390.555355] ? find_held_lock+0x2c/0x110 [ 1390.556489] ? anon_vma_fork+0x462/0x640 [ 1390.557671] ? up_write+0x191/0x550 [ 1390.558689] ? vm_iomap_memory+0x190/0x190 [ 1390.559867] ? downgrade_write+0x3a0/0x3a0 [ 1390.560808] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1390.562110] ? __vma_link_rb+0x540/0x700 [ 1390.563170] copy_process+0x7658/0x78b0 [ 1390.564070] ? SOFTIRQ_verbose+0x10/0x10 [ 1390.565009] ? __cleanup_sighand+0xb0/0xb0 [ 1390.565947] ? _copy_from_user+0xfb/0x1b0 [ 1390.566857] kernel_clone+0xe7/0x980 [ 1390.567666] ? lock_acquire+0x197/0x470 [ 1390.568527] ? create_io_thread+0xf0/0xf0 [ 1390.569442] ? ksys_write+0x21a/0x260 [ 1390.570261] ? lock_downgrade+0x6d0/0x6d0 [ 1390.571164] __do_sys_clone3+0x1e5/0x320 [ 1390.572038] ? __do_sys_clone+0x110/0x110 [ 1390.572967] ? rcu_read_lock_any_held+0x75/0xa0 [ 1390.573962] ? vfs_write+0x354/0xb10 [ 1390.574768] ? fput_many+0x2f/0x1a0 [ 1390.575554] ? ksys_write+0x1a9/0x260 [ 1390.576372] ? __ia32_sys_read+0xb0/0xb0 [ 1390.577269] do_syscall_64+0x33/0x40 [ 1390.578077] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.579179] RIP: 0033:0x7fd89e327b19 [ 1390.579983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.583950] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1390.585602] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1390.587157] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1390.588691] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.590232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1390.591780] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:29:00 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 48) 02:29:00 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 8) 02:29:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 44) 02:29:00 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = io_uring_setup(0x36f4, &(0x7f0000000080)={0x0, 0x4a50, 0x1, 0x0, 0x2df, 0x0, r0}) r2 = syz_io_uring_setup(0x5d9e, &(0x7f0000000300)={0x0, 0x4995, 0x1, 0x0, 0x30a, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) syz_io_uring_setup(0xe1f, &(0x7f00000004c0)={0x0, 0xbaba, 0x2, 0x3, 0x3, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r9, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r8, r6, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r7, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r10 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000480)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd_index=0x9, 0x100, 0x7, 0x3ff, 0x6, 0x0, {0x1, r13}}, 0xffffff77) io_uring_enter(r1, 0x710e, 0x179, 0x3, &(0x7f0000000000)={[0x4]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000d49a08a00a64fa2f6257dd8cce2b6d08d86c2bf6522961ddea6cc2ff9eeee5882bb4b2d65ba46041b4614aeb67e6888229b9ba8f13364178da7be8793096a14ad866cfd34c5f9d21326b88355bca8cdc5706b4b44e576919e77efa21e5ebff32208a6d9ba1aa79bb6732378336e6b379fe2b4e5f9a53b0850a2649bafe7402d4", @ANYRES32=r0, @ANYBLOB="09000000000000002e2f66696c6530007a5fea229436a27064ea75541ae501acc625fdee58add9849876fc"]) syz_io_uring_setup(0x3f76, &(0x7f0000000240)={0x0, 0x8b59, 0x23, 0x1, 0x5f, 0x0, r14}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)) 02:29:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x1ffff000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:00 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xc00) 02:29:00 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_io_uring_setup(0x5942, &(0x7f0000000080)={0x0, 0x56fb, 0x4, 0x0, 0x140, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) [ 1404.789201] FAULT_INJECTION: forcing a failure. [ 1404.789201] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.791736] CPU: 0 PID: 8186 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1404.793188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1404.794941] Call Trace: [ 1404.795516] dump_stack+0x107/0x167 [ 1404.796308] should_fail.cold+0x5/0xa [ 1404.796607] FAULT_INJECTION: forcing a failure. [ 1404.796607] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.797160] ? __alloc_skb+0x6d/0x5b0 [ 1404.799521] should_failslab+0x5/0x20 [ 1404.800340] kmem_cache_alloc_node+0x55/0x330 [ 1404.801339] __alloc_skb+0x6d/0x5b0 [ 1404.802127] netlink_dump+0x195/0x11f0 [ 1404.802972] ? netlink_deliver_tap+0xcc0/0xcc0 [ 1404.803966] ? lock_downgrade+0x6d0/0x6d0 [ 1404.804863] __netlink_dump_start+0x62e/0x8e0 [ 1404.805848] rtnetlink_rcv_msg+0x769/0xd70 [ 1404.806754] ? do_set_master+0x230/0x230 [ 1404.807633] ? rtnl_getlink+0xaa0/0xaa0 [ 1404.808488] ? do_set_master+0x230/0x230 [ 1404.809373] ? lock_acquire+0x197/0x470 [ 1404.810227] ? netlink_deliver_tap+0xf4/0xcc0 [ 1404.811198] netlink_rcv_skb+0x14b/0x430 [ 1404.812076] ? rtnl_getlink+0xaa0/0xaa0 [ 1404.812933] ? netlink_ack+0xab0/0xab0 [ 1404.813779] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1404.814767] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1404.815753] ? is_vmalloc_addr+0x7b/0xb0 [ 1404.816631] netlink_unicast+0x6ce/0xa00 [ 1404.817526] ? netlink_attachskb+0xab0/0xab0 [ 1404.818484] netlink_sendmsg+0x90f/0xe00 [ 1404.819365] ? netlink_unicast+0xa00/0xa00 [ 1404.820287] ? netlink_unicast+0xa00/0xa00 [ 1404.821208] __sock_sendmsg+0x154/0x190 [ 1404.822066] ____sys_sendmsg+0x70d/0x870 [ 1404.822943] ? sock_write_iter+0x3d0/0x3d0 [ 1404.823846] ? do_recvmmsg+0x6d0/0x6d0 [ 1404.824691] ? SOFTIRQ_verbose+0x10/0x10 [ 1404.825571] ? lock_downgrade+0x6d0/0x6d0 [ 1404.826466] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1404.827587] ? SOFTIRQ_verbose+0x10/0x10 [ 1404.828468] ___sys_sendmsg+0xf3/0x170 [ 1404.829314] ? sendmsg_copy_msghdr+0x160/0x160 [ 1404.830299] ? __fget_files+0x2cf/0x520 [ 1404.831158] ? lock_downgrade+0x6d0/0x6d0 [ 1404.832050] ? find_held_lock+0x2c/0x110 [ 1404.832935] ? __fget_files+0x2f8/0x520 [ 1404.833812] ? __fget_light+0xea/0x290 [ 1404.834660] __sys_sendmsg+0xe5/0x1b0 [ 1404.835477] ? __sys_sendmsg_sock+0x40/0x40 [ 1404.836401] ? rcu_read_lock_any_held+0x75/0xa0 [ 1404.837437] do_syscall_64+0x33/0x40 [ 1404.838237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1404.839335] RIP: 0033:0x7feef8d49b19 [ 1404.840132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1404.844081] RSP: 002b:00007feef62bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1404.845722] RAX: ffffffffffffffda RBX: 00007feef8e5cf60 RCX: 00007feef8d49b19 [ 1404.847248] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1404.848772] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1404.850307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.851839] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 [ 1404.853450] CPU: 1 PID: 8188 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1404.854395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1404.855508] Call Trace: [ 1404.855876] dump_stack+0x107/0x167 [ 1404.856374] should_fail.cold+0x5/0xa [ 1404.856899] ? create_object.isra.0+0x3a/0xa30 [ 1404.857541] should_failslab+0x5/0x20 [ 1404.858081] kmem_cache_alloc+0x5b/0x310 [ 1404.858643] ? mark_held_locks+0x9e/0xe0 [ 1404.859200] create_object.isra.0+0x3a/0xa30 [ 1404.859800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1404.860511] kmem_cache_alloc+0x159/0x310 [ 1404.861096] xas_alloc+0x336/0x440 [ 1404.861583] xas_create+0x34a/0x10d0 [ 1404.862109] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1404.862821] xas_store+0x8c/0x1c40 [ 1404.863313] __xa_store+0x164/0x2d0 [ 1404.863808] ? xa_delete_node+0x280/0x280 02:29:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 43) [ 1404.864374] ? trace_hardirqs_on+0x5b/0x180 [ 1404.865164] xa_store+0x31/0x50 [ 1404.865671] __io_uring_add_tctx_node+0x1cf/0x520 [ 1404.866329] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1404.867048] ? alloc_fd+0x2e7/0x670 [ 1404.867548] io_uring_setup+0x1fbb/0x2980 [ 1404.868122] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1404.868814] ? wait_for_completion_io+0x270/0x270 [ 1404.869503] do_syscall_64+0x33/0x40 [ 1404.870017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1404.870712] RIP: 0033:0x7fbd4ba01b19 [ 1404.871231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1404.873720] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1404.874745] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1404.875707] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1404.876676] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1404.877652] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1404.878620] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1404.899074] FAULT_INJECTION: forcing a failure. [ 1404.899074] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.900627] CPU: 1 PID: 8196 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1404.901560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1404.902674] Call Trace: [ 1404.903029] dump_stack+0x107/0x167 [ 1404.903521] should_fail.cold+0x5/0xa [ 1404.904033] ? ptlock_alloc+0x1d/0x70 [ 1404.904545] should_failslab+0x5/0x20 [ 1404.905068] kmem_cache_alloc+0x5b/0x310 [ 1404.905634] ptlock_alloc+0x1d/0x70 [ 1404.906125] pte_alloc_one+0x68/0x1a0 [ 1404.906639] __pte_alloc+0x1d/0x330 [ 1404.907141] copy_page_range+0x1b62/0x3800 [ 1404.907710] ? SOFTIRQ_verbose+0x10/0x10 [ 1404.908265] ? find_held_lock+0x2c/0x110 [ 1404.908821] ? anon_vma_fork+0x462/0x640 [ 1404.909399] ? up_write+0x191/0x550 [ 1404.909894] ? vm_iomap_memory+0x190/0x190 [ 1404.910467] ? downgrade_write+0x3a0/0x3a0 [ 1404.911033] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1404.911762] ? __vma_link_rb+0x540/0x700 [ 1404.912310] copy_process+0x7658/0x78b0 [ 1404.912839] ? SOFTIRQ_verbose+0x10/0x10 [ 1404.913419] ? __cleanup_sighand+0xb0/0xb0 [ 1404.913998] ? _copy_from_user+0xfb/0x1b0 [ 1404.914559] kernel_clone+0xe7/0x980 [ 1404.915059] ? lock_acquire+0x197/0x470 [ 1404.915601] ? create_io_thread+0xf0/0xf0 [ 1404.916167] ? ksys_write+0x21a/0x260 [ 1404.916678] ? lock_downgrade+0x6d0/0x6d0 [ 1404.917239] __do_sys_clone3+0x1e5/0x320 [ 1404.917797] ? __do_sys_clone+0x110/0x110 [ 1404.917825] ? rcu_read_lock_any_held+0x75/0xa0 [ 1404.917834] ? vfs_write+0x354/0xb10 [ 1404.917847] ? fput_many+0x2f/0x1a0 [ 1404.917859] ? ksys_write+0x1a9/0x260 [ 1404.917870] ? __ia32_sys_read+0xb0/0xb0 [ 1404.917893] do_syscall_64+0x33/0x40 [ 1404.917906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1404.917915] RIP: 0033:0x7fd89e327b19 [ 1404.917928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1404.917935] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1404.917949] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1404.917957] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1404.917964] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1404.917971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1404.917979] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1404.919371] FAULT_INJECTION: forcing a failure. [ 1404.919371] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.919394] CPU: 0 PID: 8185 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1404.919409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1404.919416] Call Trace: [ 1404.919443] dump_stack+0x107/0x167 [ 1404.919466] should_fail.cold+0x5/0xa [ 1404.919489] ? create_object.isra.0+0x3a/0xa30 [ 1404.919508] should_failslab+0x5/0x20 [ 1404.919527] kmem_cache_alloc+0x5b/0x310 [ 1404.919547] ? mark_held_locks+0x9e/0xe0 [ 1404.919570] create_object.isra.0+0x3a/0xa30 [ 1404.919586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1404.919611] kmem_cache_alloc+0x159/0x310 [ 1404.919639] xas_alloc+0x336/0x440 [ 1404.919662] xas_create+0x34a/0x10d0 [ 1404.919694] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1404.919716] xas_store+0x8c/0x1c40 [ 1404.919752] __xa_store+0x164/0x2d0 [ 1404.919781] ? xa_delete_node+0x280/0x280 [ 1404.919808] ? trace_hardirqs_on+0x5b/0x180 [ 1404.919836] xa_store+0x31/0x50 [ 1404.919859] __io_uring_add_tctx_node+0x1cf/0x520 [ 1404.919880] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1404.919896] ? alloc_fd+0x2e7/0x670 [ 1404.919928] io_uring_setup+0x1fbb/0x2980 [ 1404.919957] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1404.919974] ? wait_for_completion_io+0x270/0x270 [ 1404.920027] do_syscall_64+0x33/0x40 [ 1404.920047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1404.920060] RIP: 0033:0x7f2e49e79b19 [ 1404.920078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1404.920088] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1404.920109] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1404.920120] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1404.920131] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1404.920142] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1404.920152] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:29:15 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x2103) 02:29:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 49) 02:29:15 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 9) 02:29:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 44) [ 1420.144680] FAULT_INJECTION: forcing a failure. [ 1420.144680] name failslab, interval 1, probability 0, space 0, times 0 02:29:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 45) 02:29:15 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x32bb, 0xad2e, 0x0, &(0x7f0000000000)={[0x5]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) syz_io_uring_setup(0x4c33, &(0x7f0000000300)={0x0, 0x4cc1, 0x1, 0x1, 0x5, 0x0, r0}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x10000000) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4f21, @local}, 0x1}}}, 0x7) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000080)=0xfffffffa) syz_io_uring_submit(r6, r1, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) 02:29:15 executing program 7: sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="88020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x81}, 0x8c0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x3429, 0xa3e4, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0xfffffffa) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000540)={0x0, 0xff, [0x7, 0x2, 0x8, 0xfff, 0x9, 0x4]}) socketpair(0x1e, 0x3, 0x1ac, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x8cce}}, './file0\x00'}) [ 1420.146315] CPU: 1 PID: 8216 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1420.147389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1420.148880] Call Trace: [ 1420.149360] dump_stack+0x107/0x167 [ 1420.150000] should_fail.cold+0x5/0xa [ 1420.150675] ? xas_alloc+0x336/0x440 [ 1420.151336] should_failslab+0x5/0x20 [ 1420.151755] FAULT_INJECTION: forcing a failure. [ 1420.151755] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.152003] kmem_cache_alloc+0x5b/0x310 [ 1420.152027] xas_alloc+0x336/0x440 [ 1420.155873] xas_create+0x34a/0x10d0 [ 1420.156532] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1420.157454] xas_store+0x8c/0x1c40 [ 1420.158094] __xa_store+0x164/0x2d0 [ 1420.158735] ? xa_delete_node+0x280/0x280 [ 1420.159464] ? trace_hardirqs_on+0x5b/0x180 [ 1420.160220] xa_store+0x31/0x50 [ 1420.160808] __io_uring_add_tctx_node+0x1cf/0x520 [ 1420.161660] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1420.162570] ? alloc_fd+0x2e7/0x670 [ 1420.163215] io_uring_setup+0x1fbb/0x2980 [ 1420.163942] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1420.164808] ? wait_for_completion_io+0x270/0x270 [ 1420.165681] do_syscall_64+0x33/0x40 [ 1420.166331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1420.167226] RIP: 0033:0x7fbd4ba01b19 [ 1420.167870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1420.171035] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1420.172353] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1420.173927] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1420.175934] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1420.177838] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1420.178962] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1420.180118] CPU: 0 PID: 8221 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1420.181688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1420.183508] Call Trace: [ 1420.184088] dump_stack+0x107/0x167 [ 1420.184907] should_fail.cold+0x5/0xa [ 1420.185762] ? xas_alloc+0x336/0x440 [ 1420.186589] should_failslab+0x5/0x20 [ 1420.187431] kmem_cache_alloc+0x5b/0x310 [ 1420.188321] xas_alloc+0x336/0x440 [ 1420.189115] xas_create+0x34a/0x10d0 [ 1420.190044] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1420.191214] xas_store+0x8c/0x1c40 [ 1420.192070] __xa_store+0x164/0x2d0 [ 1420.192873] ? xa_delete_node+0x280/0x280 [ 1420.193803] ? trace_hardirqs_on+0x5b/0x180 [ 1420.194757] xa_store+0x31/0x50 [ 1420.195506] __io_uring_add_tctx_node+0x1cf/0x520 [ 1420.196565] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1420.197728] ? alloc_fd+0x2e7/0x670 [ 1420.198542] io_uring_setup+0x1fbb/0x2980 [ 1420.199472] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1420.200654] ? wait_for_completion_io+0x270/0x270 [ 1420.201758] do_syscall_64+0x33/0x40 [ 1420.202582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1420.203703] RIP: 0033:0x7f2e49e79b19 [ 1420.204540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1420.208543] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1420.210232] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1420.211783] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1420.213354] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1420.214932] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1420.216496] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1420.231151] FAULT_INJECTION: forcing a failure. [ 1420.231151] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.233853] CPU: 0 PID: 8225 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1420.235350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1420.237166] Call Trace: [ 1420.237788] dump_stack+0x107/0x167 [ 1420.238596] should_fail.cold+0x5/0xa [ 1420.239441] ? create_object.isra.0+0x3a/0xa30 [ 1420.240438] should_failslab+0x5/0x20 [ 1420.241278] kmem_cache_alloc+0x5b/0x310 [ 1420.242174] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1420.243522] create_object.isra.0+0x3a/0xa30 [ 1420.244483] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1420.245614] kmem_cache_alloc+0x159/0x310 [ 1420.246543] ptlock_alloc+0x1d/0x70 [ 1420.247334] pte_alloc_one+0x68/0x1a0 [ 1420.248173] __pte_alloc+0x1d/0x330 [ 1420.248978] copy_page_range+0x1b62/0x3800 [ 1420.249924] ? SOFTIRQ_verbose+0x10/0x10 [ 1420.250828] ? find_held_lock+0x2c/0x110 [ 1420.251750] ? anon_vma_fork+0x462/0x640 [ 1420.252669] ? up_write+0x191/0x550 [ 1420.253484] ? vm_iomap_memory+0x190/0x190 [ 1420.254402] ? downgrade_write+0x3a0/0x3a0 [ 1420.255328] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1420.256534] ? __vma_link_rb+0x540/0x700 [ 1420.257457] copy_process+0x7658/0x78b0 [ 1420.258310] ? SOFTIRQ_verbose+0x10/0x10 [ 1420.259251] ? __cleanup_sighand+0xb0/0xb0 [ 1420.260206] ? _copy_from_user+0xfb/0x1b0 [ 1420.261145] kernel_clone+0xe7/0x980 [ 1420.261980] ? lock_acquire+0x197/0x470 [ 1420.262859] ? create_io_thread+0xf0/0xf0 [ 1420.263785] ? ksys_write+0x21a/0x260 [ 1420.264621] ? lock_downgrade+0x6d0/0x6d0 [ 1420.265574] __do_sys_clone3+0x1e5/0x320 [ 1420.266465] ? __do_sys_clone+0x110/0x110 [ 1420.267390] ? rcu_read_lock_any_held+0x75/0xa0 [ 1420.268413] ? vfs_write+0x354/0xb10 [ 1420.269401] ? fput_many+0x2f/0x1a0 [ 1420.270406] ? ksys_write+0x1a9/0x260 [ 1420.271457] ? __ia32_sys_read+0xb0/0xb0 [ 1420.272607] do_syscall_64+0x33/0x40 [ 1420.273651] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1420.275045] RIP: 0033:0x7fd89e327b19 [ 1420.276057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1420.281005] RSP: 002b:00007fd89b87c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1420.282470] FAULT_INJECTION: forcing a failure. [ 1420.282470] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.283086] RAX: ffffffffffffffda RBX: 00007fd89e43b020 RCX: 00007fd89e327b19 [ 1420.283115] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1420.288766] RBP: 00007fd89b87c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1420.290722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1420.292674] R13: 00007ffdf34b7aef R14: 00007fd89b87c300 R15: 0000000000022000 02:29:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1420.294691] CPU: 1 PID: 8228 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1420.296102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1420.297416] Call Trace: [ 1420.297838] dump_stack+0x107/0x167 [ 1420.298415] should_fail.cold+0x5/0xa [ 1420.299019] ? create_object.isra.0+0x3a/0xa30 [ 1420.299737] should_failslab+0x5/0x20 [ 1420.300335] kmem_cache_alloc+0x5b/0x310 [ 1420.300970] ? SOFTIRQ_verbose+0x10/0x10 [ 1420.301645] create_object.isra.0+0x3a/0xa30 [ 1420.302342] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1420.303145] kmem_cache_alloc_node+0x169/0x330 [ 1420.303918] __alloc_skb+0x6d/0x5b0 [ 1420.304501] netlink_dump+0x195/0x11f0 [ 1420.305121] ? netlink_deliver_tap+0xcc0/0xcc0 [ 1420.305859] ? lock_downgrade+0x6d0/0x6d0 [ 1420.306523] __netlink_dump_start+0x62e/0x8e0 [ 1420.307237] rtnetlink_rcv_msg+0x769/0xd70 [ 1420.307904] ? do_set_master+0x230/0x230 [ 1420.308550] ? rtnl_getlink+0xaa0/0xaa0 [ 1420.309174] ? do_set_master+0x230/0x230 [ 1420.309885] ? lock_acquire+0x197/0x470 [ 1420.310522] ? netlink_deliver_tap+0xf4/0xcc0 [ 1420.311238] netlink_rcv_skb+0x14b/0x430 [ 1420.311879] ? rtnl_getlink+0xaa0/0xaa0 [ 1420.312513] ? netlink_ack+0xab0/0xab0 [ 1420.313138] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1420.313881] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1420.314604] ? is_vmalloc_addr+0x7b/0xb0 [ 1420.315250] netlink_unicast+0x6ce/0xa00 [ 1420.315892] ? netlink_attachskb+0xab0/0xab0 [ 1420.316599] netlink_sendmsg+0x90f/0xe00 [ 1420.317312] ? netlink_unicast+0xa00/0xa00 [ 1420.317997] ? netlink_unicast+0xa00/0xa00 [ 1420.318663] __sock_sendmsg+0x154/0x190 [ 1420.319293] ____sys_sendmsg+0x70d/0x870 [ 1420.319945] ? sock_write_iter+0x3d0/0x3d0 [ 1420.320605] ? do_recvmmsg+0x6d0/0x6d0 [ 1420.321234] ? SOFTIRQ_verbose+0x10/0x10 [ 1420.321869] ? lock_downgrade+0x6d0/0x6d0 [ 1420.322528] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1420.323345] ? SOFTIRQ_verbose+0x10/0x10 [ 1420.323988] ___sys_sendmsg+0xf3/0x170 [ 1420.324606] ? sendmsg_copy_msghdr+0x160/0x160 [ 1420.325341] ? __fget_files+0x2cf/0x520 [ 1420.325962] ? lock_downgrade+0x6d0/0x6d0 [ 1420.326616] ? find_held_lock+0x2c/0x110 [ 1420.327266] ? __fget_files+0x2f8/0x520 [ 1420.327895] ? __fget_light+0xea/0x290 [ 1420.328518] __sys_sendmsg+0xe5/0x1b0 [ 1420.329123] ? __sys_sendmsg_sock+0x40/0x40 [ 1420.329808] ? rcu_read_lock_any_held+0x75/0xa0 [ 1420.330565] do_syscall_64+0x33/0x40 [ 1420.331149] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1420.331960] RIP: 0033:0x7feef8d49b19 [ 1420.332545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1420.335418] RSP: 002b:00007feef629e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1420.336621] RAX: ffffffffffffffda RBX: 00007feef8e5d020 RCX: 00007feef8d49b19 [ 1420.337766] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1420.338887] RBP: 00007feef629e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1420.340014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1420.341219] R13: 00007ffd93b86bef R14: 00007feef629e300 R15: 0000000000022000 02:29:15 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x4000010, r0, 0x8000000) 02:29:15 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_enter(r0, 0x3c24, 0x20ce, 0x1, &(0x7f0000000000)={[0x9]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:29:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:29:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 50) 02:29:16 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 46) 02:29:16 executing program 7: r0 = syz_io_uring_setup(0x1c1c, &(0x7f0000000080)={0x0, 0x6f2b, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x852, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) [ 1420.514722] FAULT_INJECTION: forcing a failure. [ 1420.514722] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.516594] CPU: 1 PID: 8247 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1420.517679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1420.518967] Call Trace: [ 1420.519390] dump_stack+0x107/0x167 [ 1420.519962] should_fail.cold+0x5/0xa [ 1420.520570] ? create_object.isra.0+0x3a/0xa30 [ 1420.521296] should_failslab+0x5/0x20 [ 1420.521900] kmem_cache_alloc+0x5b/0x310 [ 1420.522546] ? mark_held_locks+0x9e/0xe0 [ 1420.522896] FAULT_INJECTION: forcing a failure. [ 1420.522896] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.523199] create_object.isra.0+0x3a/0xa30 [ 1420.526319] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1420.527118] kmem_cache_alloc+0x159/0x310 [ 1420.527780] xas_alloc+0x336/0x440 [ 1420.528354] xas_create+0x34a/0x10d0 [ 1420.528955] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1420.529793] xas_store+0x8c/0x1c40 [ 1420.530383] __xa_store+0x164/0x2d0 [ 1420.530970] ? xa_delete_node+0x280/0x280 [ 1420.531633] ? trace_hardirqs_on+0x5b/0x180 [ 1420.532328] xa_store+0x31/0x50 [ 1420.532862] __io_uring_add_tctx_node+0x1cf/0x520 [ 1420.533649] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1420.534480] ? alloc_fd+0x2e7/0x670 [ 1420.535153] io_uring_setup+0x1fbb/0x2980 [ 1420.535827] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1420.536627] ? wait_for_completion_io+0x270/0x270 [ 1420.537433] do_syscall_64+0x33/0x40 [ 1420.538028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1420.538842] RIP: 0033:0x7fbd4ba01b19 [ 1420.539435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1420.542307] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1420.543496] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1420.544608] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1420.545734] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1420.546849] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1420.547963] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1420.549108] CPU: 0 PID: 8244 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1420.550590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1420.552370] Call Trace: [ 1420.552960] dump_stack+0x107/0x167 [ 1420.553766] should_fail.cold+0x5/0xa [ 1420.554596] ? create_object.isra.0+0x3a/0xa30 [ 1420.555575] should_failslab+0x5/0x20 [ 1420.556391] kmem_cache_alloc+0x5b/0x310 [ 1420.557283] ? mark_held_locks+0x9e/0xe0 [ 1420.558162] create_object.isra.0+0x3a/0xa30 [ 1420.559118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1420.560216] kmem_cache_alloc+0x159/0x310 [ 1420.561120] xas_alloc+0x336/0x440 [ 1420.561895] xas_create+0x34a/0x10d0 [ 1420.562705] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1420.563831] xas_store+0x8c/0x1c40 [ 1420.564611] __xa_store+0x164/0x2d0 [ 1420.565405] ? xa_delete_node+0x280/0x280 [ 1420.566312] ? trace_hardirqs_on+0x5b/0x180 [ 1420.567257] xa_store+0x31/0x50 [ 1420.567968] __io_uring_add_tctx_node+0x1cf/0x520 [ 1420.568997] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1420.570123] ? alloc_fd+0x2e7/0x670 [ 1420.570914] io_uring_setup+0x1fbb/0x2980 [ 1420.571807] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1420.572894] ? wait_for_completion_io+0x270/0x270 [ 1420.573970] do_syscall_64+0x33/0x40 [ 1420.574778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1420.575873] RIP: 0033:0x7f2e49e79b19 [ 1420.576671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1420.580610] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1420.582244] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1420.583774] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1420.585300] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1420.586836] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1420.588380] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:29:16 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x8010, r0, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r9, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r8, r6, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r7, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x6) 02:29:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x4000) 02:29:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) 02:29:29 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x80000) 02:29:29 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) io_uring_enter(r1, 0x4fa4, 0xe7d4, 0x3, &(0x7f0000000000)={[0x8]}, 0x8) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x208602, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xa412, 0x4, 0xffffff00, 0x40, 0x1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:29:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 45) 02:29:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 47) 02:29:29 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 10) 02:29:29 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 51) 02:29:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58) 02:29:29 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r10, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r9, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x3490}, 0x1, {0x0, r11}}, 0xf0) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x10000000) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r6, r12, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x3, 0x4000, @fd=r13, 0x474, &(0x7f0000000180)=[{&(0x7f0000000000)="68f89ea15bd5e7dcefd184fbab1c1fdd3f25044f48352c", 0x17}, {&(0x7f0000000080)="9511ad8f08a3379658356889291dc296fdf6bc3f7c2df19c3b1f37323a436cbc9436555b448b180df7b47aed3c411238a1ba93ec8c0330eba99c7eaffa4867c8fa3088645a4a0b8ad1f9c3054e26bb21c08073e1054d28dc50a4f7406c41044571edcc58fa41cc698565aead37b950bbe646aacb", 0x74}, {&(0x7f0000000140)="7414add3b3324a833ef9bb6c1818226fb0cc2d291f80df54b48c57c585292930e5a2356017f51880b1ce3ce7234bbc163456d1e9be9df69a23", 0x39}], 0x3, 0x1a, 0x0, {0x2}}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) [ 1434.294098] FAULT_INJECTION: forcing a failure. [ 1434.294098] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.296615] CPU: 1 PID: 8274 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1434.298079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1434.299839] Call Trace: [ 1434.300407] dump_stack+0x107/0x167 [ 1434.301186] should_fail.cold+0x5/0xa [ 1434.302012] ? ___slab_alloc+0x470/0x700 [ 1434.302879] ? create_object.isra.0+0x3a/0xa30 [ 1434.303859] should_failslab+0x5/0x20 [ 1434.304677] kmem_cache_alloc+0x5b/0x310 [ 1434.304845] FAULT_INJECTION: forcing a failure. [ 1434.304845] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.305558] create_object.isra.0+0x3a/0xa30 [ 1434.305576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1434.305603] kmem_cache_alloc+0x159/0x310 [ 1434.305634] xas_alloc+0x336/0x440 [ 1434.311644] xas_create+0x34a/0x10d0 [ 1434.312455] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1434.313589] xas_store+0x8c/0x1c40 [ 1434.314362] __xa_store+0x164/0x2d0 [ 1434.315143] ? xa_delete_node+0x280/0x280 [ 1434.316040] ? trace_hardirqs_on+0x5b/0x180 [ 1434.316975] xa_store+0x31/0x50 [ 1434.317703] __io_uring_add_tctx_node+0x1cf/0x520 [ 1434.318735] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1434.319857] ? alloc_fd+0x2e7/0x670 [ 1434.320658] io_uring_setup+0x1fbb/0x2980 [ 1434.321559] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1434.322633] ? wait_for_completion_io+0x270/0x270 [ 1434.323692] do_syscall_64+0x33/0x40 [ 1434.324485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1434.325590] RIP: 0033:0x7fbd4ba01b19 [ 1434.326383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1434.330292] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1434.331905] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1434.333422] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1434.334954] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1434.336470] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1434.337994] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1434.339551] CPU: 0 PID: 8273 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1434.341048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1434.341730] FAULT_INJECTION: forcing a failure. [ 1434.341730] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.342856] Call Trace: [ 1434.342885] dump_stack+0x107/0x167 [ 1434.342910] should_fail.cold+0x5/0xa [ 1434.342937] should_failslab+0x5/0x20 [ 1434.348196] __kmalloc_node_track_caller+0x74/0x3b0 [ 1434.349275] ? netlink_dump+0x195/0x11f0 [ 1434.350179] __alloc_skb+0xb1/0x5b0 [ 1434.350980] netlink_dump+0x195/0x11f0 [ 1434.351834] ? netlink_deliver_tap+0xcc0/0xcc0 [ 1434.352839] ? lock_downgrade+0x6d0/0x6d0 [ 1434.353756] __netlink_dump_start+0x62e/0x8e0 [ 1434.354740] rtnetlink_rcv_msg+0x769/0xd70 [ 1434.355658] ? do_set_master+0x230/0x230 [ 1434.356542] ? rtnl_getlink+0xaa0/0xaa0 [ 1434.357420] ? do_set_master+0x230/0x230 [ 1434.358321] ? lock_acquire+0x197/0x470 [ 1434.359182] ? netlink_deliver_tap+0xf4/0xcc0 [ 1434.360162] netlink_rcv_skb+0x14b/0x430 [ 1434.361042] ? rtnl_getlink+0xaa0/0xaa0 [ 1434.361924] ? netlink_ack+0xab0/0xab0 [ 1434.362774] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1434.363776] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1434.364769] ? is_vmalloc_addr+0x7b/0xb0 [ 1434.365668] netlink_unicast+0x6ce/0xa00 [ 1434.366556] ? netlink_attachskb+0xab0/0xab0 [ 1434.367530] netlink_sendmsg+0x90f/0xe00 [ 1434.368419] ? netlink_unicast+0xa00/0xa00 [ 1434.369359] ? netlink_unicast+0xa00/0xa00 [ 1434.370285] __sock_sendmsg+0x154/0x190 [ 1434.371151] ____sys_sendmsg+0x70d/0x870 [ 1434.372033] ? sock_write_iter+0x3d0/0x3d0 [ 1434.372943] ? do_recvmmsg+0x6d0/0x6d0 [ 1434.373801] ? SOFTIRQ_verbose+0x10/0x10 [ 1434.374677] ? lock_downgrade+0x6d0/0x6d0 [ 1434.375585] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1434.376721] ? SOFTIRQ_verbose+0x10/0x10 [ 1434.377619] ___sys_sendmsg+0xf3/0x170 [ 1434.378473] ? sendmsg_copy_msghdr+0x160/0x160 [ 1434.379463] ? __fget_files+0x2cf/0x520 [ 1434.380327] ? lock_downgrade+0x6d0/0x6d0 [ 1434.381224] ? find_held_lock+0x2c/0x110 [ 1434.382125] ? __fget_files+0x2f8/0x520 [ 1434.383003] ? __fget_light+0xea/0x290 [ 1434.384004] __sys_sendmsg+0xe5/0x1b0 [ 1434.385068] ? __sys_sendmsg_sock+0x40/0x40 [ 1434.386287] ? rcu_read_lock_any_held+0x75/0xa0 [ 1434.387637] do_syscall_64+0x33/0x40 [ 1434.388642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1434.389791] RIP: 0033:0x7feef8d49b19 [ 1434.390613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1434.394842] RSP: 002b:00007feef62bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1434.396915] RAX: ffffffffffffffda RBX: 00007feef8e5cf60 RCX: 00007feef8d49b19 [ 1434.398513] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1434.400087] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1434.401838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1434.403426] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 [ 1434.404994] CPU: 1 PID: 8271 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1434.406504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1434.408270] Call Trace: [ 1434.408842] dump_stack+0x107/0x167 [ 1434.409632] should_fail.cold+0x5/0xa [ 1434.410499] ? vm_area_dup+0x78/0x290 [ 1434.410958] FAULT_INJECTION: forcing a failure. [ 1434.410958] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.411324] should_failslab+0x5/0x20 [ 1434.411344] kmem_cache_alloc+0x5b/0x310 [ 1434.411371] ? lock_downgrade+0x6d0/0x6d0 [ 1434.416261] vm_area_dup+0x78/0x290 [ 1434.417047] ? _cond_resched+0x10/0x30 [ 1434.417877] ? copy_page_range+0x24e9/0x3800 [ 1434.418847] ? vm_area_alloc+0x110/0x110 [ 1434.419709] ? up_write+0x191/0x550 [ 1434.420483] ? vm_iomap_memory+0x190/0x190 [ 1434.421384] ? downgrade_write+0x3a0/0x3a0 [ 1434.422283] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1434.423431] ? __vma_link_rb+0x540/0x700 [ 1434.424299] copy_process+0x298b/0x78b0 [ 1434.425139] ? SOFTIRQ_verbose+0x10/0x10 [ 1434.426040] ? __cleanup_sighand+0xb0/0xb0 [ 1434.426959] ? _copy_from_user+0xfb/0x1b0 [ 1434.427854] kernel_clone+0xe7/0x980 [ 1434.428643] ? lock_acquire+0x197/0x470 [ 1434.429493] ? create_io_thread+0xf0/0xf0 [ 1434.430392] ? ksys_write+0x21a/0x260 [ 1434.431170] ? lock_downgrade+0x6d0/0x6d0 [ 1434.432052] __do_sys_clone3+0x1e5/0x320 [ 1434.432910] ? __do_sys_clone+0x110/0x110 [ 1434.433819] ? rcu_read_lock_any_held+0x75/0xa0 [ 1434.434795] ? vfs_write+0x354/0xb10 [ 1434.435592] ? fput_many+0x2f/0x1a0 [ 1434.436359] ? ksys_write+0x1a9/0x260 [ 1434.437158] ? __ia32_sys_read+0xb0/0xb0 [ 1434.438033] do_syscall_64+0x33/0x40 [ 1434.438827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1434.439908] RIP: 0033:0x7fd89e327b19 [ 1434.440693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1434.444581] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1434.446190] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1434.447695] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1434.449195] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1434.450705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1434.452212] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1434.453752] CPU: 0 PID: 8270 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1434.455249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1434.457059] Call Trace: [ 1434.457661] dump_stack+0x107/0x167 [ 1434.458562] should_fail.cold+0x5/0xa [ 1434.459602] ? create_object.isra.0+0x3a/0xa30 [ 1434.460854] should_failslab+0x5/0x20 [ 1434.461916] kmem_cache_alloc+0x5b/0x310 [ 1434.463035] ? mark_held_locks+0x9e/0xe0 [ 1434.464163] create_object.isra.0+0x3a/0xa30 [ 1434.465376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1434.466778] kmem_cache_alloc+0x159/0x310 [ 1434.467957] xas_alloc+0x336/0x440 [ 1434.468958] xas_create+0x34a/0x10d0 [ 1434.470045] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1434.471516] xas_store+0x8c/0x1c40 [ 1434.472560] __xa_store+0x164/0x2d0 [ 1434.473612] ? xa_delete_node+0x280/0x280 [ 1434.474786] ? trace_hardirqs_on+0x5b/0x180 [ 1434.476011] xa_store+0x31/0x50 [ 1434.476947] __io_uring_add_tctx_node+0x1cf/0x520 [ 1434.478319] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1434.479778] ? alloc_fd+0x2e7/0x670 [ 1434.480815] io_uring_setup+0x1fbb/0x2980 [ 1434.482003] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1434.483406] ? wait_for_completion_io+0x270/0x270 [ 1434.484806] do_syscall_64+0x33/0x40 [ 1434.485867] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1434.487272] RIP: 0033:0x7f2e49e79b19 [ 1434.488312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1434.493239] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1434.494994] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1434.496527] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1434.498075] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1434.499618] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1434.501154] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:29:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xc0000) 02:29:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 46) 02:29:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58) 02:29:30 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000003, 0x8010, r0, 0x0) syz_io_uring_setup(0x35c8, &(0x7f0000000080)={0x0, 0x7f4a, 0x0, 0x3, 0x1c1, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x4000, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x9, 0x3, &(0x7f0000000240)="a9023b4435fd2874224dbfde5769a09a83285c6a94e3c15699276c546e9a4f327666f8a0cb421b089223c840250249551c6d894e498a7797b874d921e59379cef762ab9436ea46cda76106105f878cbdb5a8712a33388609aaaf50cff0c5c912c6d27ec24f26da2366b313ba9fcce1edf34504a3bc96c3a1236d4518d3942bad77bfea", 0x800, 0x0, 0x1}, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd=r0, 0x5, 0xdf, 0x7ff, 0xc, 0x0, {0x1}}, 0x5) removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@random={'security.', '\x00'}) [ 1434.609044] FAULT_INJECTION: forcing a failure. [ 1434.609044] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.611674] CPU: 1 PID: 8286 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1434.613128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1434.614888] Call Trace: [ 1434.615453] dump_stack+0x107/0x167 02:29:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 48) [ 1434.616245] should_fail.cold+0x5/0xa [ 1434.617241] ? create_object.isra.0+0x3a/0xa30 [ 1434.618197] should_failslab+0x5/0x20 [ 1434.619004] kmem_cache_alloc+0x5b/0x310 [ 1434.619878] create_object.isra.0+0x3a/0xa30 [ 1434.620810] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1434.621904] kmem_cache_alloc+0x159/0x310 [ 1434.622782] ? lock_downgrade+0x6d0/0x6d0 [ 1434.623669] vm_area_dup+0x78/0x290 [ 1434.624456] ? _cond_resched+0x10/0x30 [ 1434.625297] ? copy_page_range+0x24e9/0x3800 [ 1434.626247] ? vm_area_alloc+0x110/0x110 [ 1434.627115] ? up_write+0x191/0x550 [ 1434.627892] ? vm_iomap_memory+0x190/0x190 [ 1434.628803] ? downgrade_write+0x3a0/0x3a0 [ 1434.629723] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1434.630871] ? __vma_link_rb+0x540/0x700 [ 1434.631739] copy_process+0x298b/0x78b0 [ 1434.632592] ? SOFTIRQ_verbose+0x10/0x10 [ 1434.633496] ? __cleanup_sighand+0xb0/0xb0 [ 1434.634416] ? _copy_from_user+0xfb/0x1b0 [ 1434.635302] kernel_clone+0xe7/0x980 [ 1434.636104] ? lock_acquire+0x197/0x470 [ 1434.636946] ? create_io_thread+0xf0/0xf0 [ 1434.637851] ? ksys_write+0x21a/0x260 [ 1434.638640] ? lock_downgrade+0x6d0/0x6d0 [ 1434.639527] __do_sys_clone3+0x1e5/0x320 [ 1434.640388] ? __do_sys_clone+0x110/0x110 [ 1434.641296] ? rcu_read_lock_any_held+0x75/0xa0 [ 1434.642275] ? vfs_write+0x354/0xb10 [ 1434.643071] ? fput_many+0x2f/0x1a0 [ 1434.643838] ? ksys_write+0x1a9/0x260 [ 1434.644652] ? __ia32_sys_read+0xb0/0xb0 [ 1434.645543] do_syscall_64+0x33/0x40 [ 1434.646336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1434.647417] RIP: 0033:0x7fd89e327b19 [ 1434.648212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1434.652137] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1434.653773] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1434.655294] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1434.656843] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1434.658384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1434.659904] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1434.666220] FAULT_INJECTION: forcing a failure. [ 1434.666220] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.668795] CPU: 0 PID: 8291 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1434.670305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1434.672106] Call Trace: [ 1434.672683] dump_stack+0x107/0x167 [ 1434.673484] should_fail.cold+0x5/0xa [ 1434.674308] ? create_object.isra.0+0x3a/0xa30 [ 1434.675296] should_failslab+0x5/0x20 [ 1434.676124] kmem_cache_alloc+0x5b/0x310 [ 1434.676999] ? mark_held_locks+0x9e/0xe0 [ 1434.677895] create_object.isra.0+0x3a/0xa30 [ 1434.678847] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1434.679949] kmem_cache_alloc+0x159/0x310 [ 1434.680863] xas_alloc+0x336/0x440 [ 1434.681655] xas_create+0x34a/0x10d0 [ 1434.682469] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1434.683604] xas_store+0x8c/0x1c40 [ 1434.684395] __xa_store+0x164/0x2d0 [ 1434.685189] ? xa_delete_node+0x280/0x280 [ 1434.686105] ? trace_hardirqs_on+0x5b/0x180 [ 1434.687048] xa_store+0x31/0x50 [ 1434.687766] __io_uring_add_tctx_node+0x1cf/0x520 [ 1434.688804] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1434.689943] ? alloc_fd+0x2e7/0x670 [ 1434.690746] io_uring_setup+0x1fbb/0x2980 [ 1434.691652] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1434.692745] ? wait_for_completion_io+0x270/0x270 [ 1434.693833] do_syscall_64+0x33/0x40 [ 1434.694645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1434.695760] RIP: 0033:0x7fbd4ba01b19 [ 1434.696565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1434.700556] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1434.702211] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1434.703748] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1434.705289] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1434.706834] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1434.708389] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:29:30 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 11) 02:29:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58) 02:29:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x1000000) 02:29:30 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xdbdcce757a3e6f3e, 0x50, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x40, 0x400}, 0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r8, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r7, r5, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x3, 0x7ff, 0x0, 0x2f, 0x4, 0x1}, 0x7) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x20000009}, r0, 0x1, 0x0, 0x1}, 0xffff640f) syz_io_uring_submit(0x0, r5, &(0x7f00000006c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x7, 0x62, 0x0, 0x6, 0x4, 0x1}, 0x6) r9 = syz_io_uring_setup(0x6212, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r10, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r11, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000b40)="8726", 0xffffffc0}, {&(0x7f0000000440)="f0f9fad20d05bdf0db1358923218d6b04c06d21643427aaa6870446b488868d6d684b62d895714376b9ab94bf4bcca7162ca7ded5142c8003c68d83ad0fa1bd7bd8637450cd9260578270b78430e5820239b2b53318e19875e7851ee"}, {&(0x7f00000004c0)="a7607028368b4707b758b43a1662b02102e6bd06149084f5e2fa87616882b4d2259c90412b18a2377a14621755babaab5ec73f9dfdb141576130ea83d9e75c89b3beff8e252aed3812bcaae8c9f1e2393ca4c4411d0fc20a3c563cdda066d7e4ceb70f34eaee4572c6d3af740903508cfebb7cc38ae4ed50573c0e9a768c40e1b4080d4fb64af19b0193cdbc78b3ff6141b7"}, {&(0x7f0000000580)="4040c6dcac3e11eb55e6581e41595a3f7f6d2329a9718982e8ea4d9c891d0710635b5dafa8ca72a53ed92a37e99e79abc16a9e405e4d6344940653cb064ed3c19415b3486dff31b027c187660898e89803ff0d1d4e8f3c02d56ebc6ff09ff1021cf51b5717d3037fd43789cbe1544c8c34432f980f308d1b93d0278d329ea51e12723b4ed0fdef2d4ef2fdf3a2a5a192947dcf4c48006f130bf4e8d865"}], 0x2}, 0x0, 0x4008000}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r9, 0x8000000) syz_io_uring_submit(r13, r10, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r12, r10, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r11, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) 02:29:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 47) 02:29:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3f00, 0x0, 0x0}, 0x58) [ 1434.843863] FAULT_INJECTION: forcing a failure. 02:29:30 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0xfcff, 0x1, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000000), 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) [ 1434.843863] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.846802] CPU: 1 PID: 8304 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1434.848267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1434.850049] Call Trace: [ 1434.850620] dump_stack+0x107/0x167 [ 1434.851405] should_fail.cold+0x5/0xa [ 1434.852223] ? create_object.isra.0+0x3a/0xa30 [ 1434.853201] should_failslab+0x5/0x20 [ 1434.854028] kmem_cache_alloc+0x5b/0x310 [ 1434.854908] create_object.isra.0+0x3a/0xa30 [ 1434.855844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1434.856941] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1434.858030] ? netlink_dump+0x195/0x11f0 [ 1434.858916] __alloc_skb+0xb1/0x5b0 [ 1434.859702] netlink_dump+0x195/0x11f0 [ 1434.860547] ? netlink_deliver_tap+0xcc0/0xcc0 [ 1434.861548] ? lock_downgrade+0x6d0/0x6d0 [ 1434.862441] __netlink_dump_start+0x62e/0x8e0 [ 1434.863415] rtnetlink_rcv_msg+0x769/0xd70 [ 1434.864313] ? do_set_master+0x230/0x230 [ 1434.865188] ? rtnl_getlink+0xaa0/0xaa0 [ 1434.866047] ? do_set_master+0x230/0x230 [ 1434.866918] ? lock_acquire+0x197/0x470 [ 1434.867771] ? netlink_deliver_tap+0xf4/0xcc0 [ 1434.868745] netlink_rcv_skb+0x14b/0x430 [ 1434.869621] ? rtnl_getlink+0xaa0/0xaa0 [ 1434.870476] ? netlink_ack+0xab0/0xab0 [ 1434.871303] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1434.872287] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1434.873263] ? is_vmalloc_addr+0x7b/0xb0 [ 1434.874141] netlink_unicast+0x6ce/0xa00 [ 1434.875014] ? netlink_attachskb+0xab0/0xab0 [ 1434.875974] netlink_sendmsg+0x90f/0xe00 [ 1434.876850] ? netlink_unicast+0xa00/0xa00 [ 1434.877773] ? netlink_unicast+0xa00/0xa00 [ 1434.878682] __sock_sendmsg+0x154/0x190 [ 1434.879533] ____sys_sendmsg+0x70d/0x870 [ 1434.880412] ? sock_write_iter+0x3d0/0x3d0 [ 1434.881323] ? do_recvmmsg+0x6d0/0x6d0 [ 1434.882157] ? SOFTIRQ_verbose+0x10/0x10 [ 1434.883035] ? lock_downgrade+0x6d0/0x6d0 [ 1434.883927] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1434.885048] ? SOFTIRQ_verbose+0x10/0x10 [ 1434.885925] ___sys_sendmsg+0xf3/0x170 [ 1434.886761] ? sendmsg_copy_msghdr+0x160/0x160 [ 1434.887746] ? __fget_files+0x2cf/0x520 [ 1434.888603] ? lock_downgrade+0x6d0/0x6d0 [ 1434.889496] ? find_held_lock+0x2c/0x110 [ 1434.890385] ? __fget_files+0x2f8/0x520 [ 1434.891245] ? __fget_light+0xea/0x290 [ 1434.892093] __sys_sendmsg+0xe5/0x1b0 [ 1434.892907] ? __sys_sendmsg_sock+0x40/0x40 [ 1434.893839] ? rcu_read_lock_any_held+0x75/0xa0 [ 1434.894870] do_syscall_64+0x33/0x40 [ 1434.895676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1434.896772] RIP: 0033:0x7feef8d49b19 [ 1434.897579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1434.901534] RSP: 002b:00007feef629e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1434.903162] RAX: ffffffffffffffda RBX: 00007feef8e5d020 RCX: 00007feef8d49b19 [ 1434.904689] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000008 [ 1434.906217] RBP: 00007feef629e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1434.907751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1434.909280] R13: 00007ffd93b86bef R14: 00007feef629e300 R15: 0000000000022000 02:29:30 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) [ 1434.942611] FAULT_INJECTION: forcing a failure. [ 1434.942611] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.945127] CPU: 0 PID: 8312 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1434.946616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1434.948377] Call Trace: [ 1434.948945] dump_stack+0x107/0x167 [ 1434.949734] should_fail.cold+0x5/0xa [ 1434.950545] ? vm_area_dup+0x78/0x290 [ 1434.951356] should_failslab+0x5/0x20 [ 1434.952172] kmem_cache_alloc+0x5b/0x310 [ 1434.953039] ? lock_downgrade+0x6d0/0x6d0 [ 1434.953942] vm_area_dup+0x78/0x290 [ 1434.954730] ? _cond_resched+0x10/0x30 [ 1434.955557] ? copy_page_range+0x24e9/0x3800 [ 1434.956531] ? vm_area_alloc+0x110/0x110 [ 1434.957416] ? up_write+0x191/0x550 [ 1434.958200] ? vm_iomap_memory+0x190/0x190 [ 1434.959112] ? downgrade_write+0x3a0/0x3a0 [ 1434.960017] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1434.961171] ? __vma_link_rb+0x540/0x700 [ 1434.962058] copy_process+0x298b/0x78b0 [ 1434.962905] ? SOFTIRQ_verbose+0x10/0x10 [ 1434.963809] ? __cleanup_sighand+0xb0/0xb0 [ 1434.964735] ? _copy_from_user+0xfb/0x1b0 [ 1434.965636] kernel_clone+0xe7/0x980 [ 1434.966439] ? lock_acquire+0x197/0x470 [ 1434.967291] ? create_io_thread+0xf0/0xf0 [ 1434.968185] ? ksys_write+0x21a/0x260 [ 1434.969004] ? lock_downgrade+0x6d0/0x6d0 [ 1434.969910] __do_sys_clone3+0x1e5/0x320 [ 1434.970770] ? __do_sys_clone+0x110/0x110 [ 1434.971673] ? rcu_read_lock_any_held+0x75/0xa0 [ 1434.972655] ? vfs_write+0x354/0xb10 [ 1434.973472] ? fput_many+0x2f/0x1a0 [ 1434.974247] ? ksys_write+0x1a9/0x260 [ 1434.975055] ? __ia32_sys_read+0xb0/0xb0 [ 1434.975931] do_syscall_64+0x33/0x40 [ 1434.976723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1434.977839] RIP: 0033:0x7fd89e327b19 [ 1434.978639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1434.982613] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1434.984281] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1434.985860] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1434.987425] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1434.988988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1434.990556] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1448.670103] FAULT_INJECTION: forcing a failure. [ 1448.670103] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.673239] CPU: 0 PID: 8328 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1448.675084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1448.675260] FAULT_INJECTION: forcing a failure. [ 1448.675260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.677319] Call Trace: [ 1448.677350] dump_stack+0x107/0x167 [ 1448.677390] should_fail.cold+0x5/0xa [ 1448.677416] ? create_object.isra.0+0x3a/0xa30 [ 1448.677439] should_failslab+0x5/0x20 [ 1448.677461] kmem_cache_alloc+0x5b/0x310 [ 1448.677493] create_object.isra.0+0x3a/0xa30 [ 1448.677513] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1448.677545] kmem_cache_alloc+0x159/0x310 [ 1448.677567] ? lock_downgrade+0x6d0/0x6d0 [ 1448.677601] vm_area_dup+0x78/0x290 [ 1448.677641] ? copy_page_range+0x24e9/0x3800 [ 1448.692721] ? vm_area_alloc+0x110/0x110 [ 1448.693817] ? vm_iomap_memory+0x190/0x190 [ 1448.694951] ? __vma_link_rb+0x540/0x700 [ 1448.696033] copy_process+0x298b/0x78b0 [ 1448.697082] ? SOFTIRQ_verbose+0x10/0x10 [ 1448.698211] ? __cleanup_sighand+0xb0/0xb0 [ 1448.699362] ? _copy_from_user+0xfb/0x1b0 [ 1448.700473] kernel_clone+0xe7/0x980 [ 1448.701472] ? lock_acquire+0x197/0x470 [ 1448.702520] ? create_io_thread+0xf0/0xf0 [ 1448.703636] ? ksys_write+0x21a/0x260 [ 1448.704639] ? lock_downgrade+0x6d0/0x6d0 [ 1448.705760] __do_sys_clone3+0x1e5/0x320 [ 1448.706825] ? __do_sys_clone+0x110/0x110 [ 1448.707942] ? rcu_read_lock_any_held+0x75/0xa0 [ 1448.709167] ? vfs_write+0x354/0xb10 [ 1448.710160] ? fput_many+0x2f/0x1a0 [ 1448.711116] ? ksys_write+0x1a9/0x260 [ 1448.712121] ? __ia32_sys_read+0xb0/0xb0 [ 1448.713211] do_syscall_64+0x33/0x40 [ 1448.714203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1448.715557] RIP: 0033:0x7fd89e327b19 [ 1448.716545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1448.721424] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1448.723423] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1448.725298] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1448.726940] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1448.728504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1448.730066] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1448.731667] CPU: 1 PID: 8323 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1448.733123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 02:29:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 49) 02:29:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 48) 02:29:44 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) (fail_nth: 12) 02:29:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58) 02:29:44 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0xfff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:29:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x2000000) [ 1448.734872] Call Trace: [ 1448.735728] dump_stack+0x107/0x167 [ 1448.736497] should_fail.cold+0x5/0xa [ 1448.737308] _copy_to_user+0x2e/0x180 [ 1448.738129] simple_read_from_buffer+0xcc/0x160 [ 1448.739108] proc_fail_nth_read+0x198/0x230 [ 1448.740017] ? proc_sessionid_read+0x230/0x230 [ 1448.740975] ? security_file_permission+0xb1/0xe0 [ 1448.742001] ? proc_sessionid_read+0x230/0x230 02:29:44 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7b1edfaa}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000b, 0x10, r1, 0x8000000) 02:29:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 52) [ 1448.742959] vfs_read+0x228/0x620 [ 1448.743877] ksys_read+0x12d/0x260 [ 1448.744618] ? vfs_write+0xb10/0xb10 [ 1448.745422] do_syscall_64+0x33/0x40 [ 1448.746208] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1448.747280] RIP: 0033:0x7feef8cfc69c [ 1448.748059] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1448.751912] RSP: 002b:00007feef62bf170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1448.753510] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007feef8cfc69c [ 1448.755002] RDX: 000000000000000f RSI: 00007feef62bf1e0 RDI: 0000000000000009 [ 1448.756485] RBP: 00007feef62bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1448.757967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1448.759465] R13: 00007ffd93b86bef R14: 00007feef62bf300 R15: 0000000000022000 [ 1448.787983] FAULT_INJECTION: forcing a failure. [ 1448.787983] name failslab, interval 1, probability 0, space 0, times 0 02:29:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58) [ 1448.790422] CPU: 1 PID: 8336 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1448.792123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1448.793884] Call Trace: [ 1448.794443] dump_stack+0x107/0x167 [ 1448.795209] should_fail.cold+0x5/0xa [ 1448.796023] ? create_object.isra.0+0x3a/0xa30 [ 1448.796987] should_failslab+0x5/0x20 [ 1448.797795] kmem_cache_alloc+0x5b/0x310 [ 1448.798647] ? mark_held_locks+0x9e/0xe0 [ 1448.799504] create_object.isra.0+0x3a/0xa30 [ 1448.799724] FAULT_INJECTION: forcing a failure. [ 1448.799724] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.800435] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1448.800469] kmem_cache_alloc+0x159/0x310 [ 1448.804741] xas_alloc+0x336/0x440 [ 1448.805499] xas_create+0x34a/0x10d0 [ 1448.806292] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1448.807397] xas_store+0x8c/0x1c40 [ 1448.808165] __xa_store+0x164/0x2d0 [ 1448.808932] ? xa_delete_node+0x280/0x280 [ 1448.809814] ? trace_hardirqs_on+0x5b/0x180 [ 1448.810718] xa_store+0x31/0x50 [ 1448.811405] __io_uring_add_tctx_node+0x1cf/0x520 [ 1448.812401] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1448.813496] ? alloc_fd+0x2e7/0x670 [ 1448.814261] io_uring_setup+0x1fbb/0x2980 [ 1448.815143] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1448.816192] ? wait_for_completion_io+0x270/0x270 [ 1448.817229] do_syscall_64+0x33/0x40 [ 1448.818012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1448.819069] RIP: 0033:0x7f2e49e79b19 [ 1448.819839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1448.823667] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1448.825246] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1448.826761] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1448.828277] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1448.829803] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1448.831299] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1448.832828] CPU: 0 PID: 8337 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1448.834544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1448.836522] Call Trace: [ 1448.837167] dump_stack+0x107/0x167 [ 1448.838058] should_fail.cold+0x5/0xa [ 1448.838973] ? xas_alloc+0x336/0x440 [ 1448.839863] should_failslab+0x5/0x20 [ 1448.840773] kmem_cache_alloc+0x5b/0x310 [ 1448.841762] xas_alloc+0x336/0x440 [ 1448.842622] xas_create+0x34a/0x10d0 [ 1448.843530] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1448.844780] xas_store+0x8c/0x1c40 [ 1448.845659] __xa_store+0x164/0x2d0 [ 1448.846544] ? xa_delete_node+0x280/0x280 [ 1448.847542] ? trace_hardirqs_on+0x5b/0x180 [ 1448.848579] xa_store+0x31/0x50 [ 1448.849368] __io_uring_add_tctx_node+0x1cf/0x520 [ 1448.850567] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1448.851907] ? alloc_fd+0x2e7/0x670 [ 1448.852834] io_uring_setup+0x1fbb/0x2980 [ 1448.853920] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1448.855209] ? wait_for_completion_io+0x270/0x270 [ 1448.856416] do_syscall_64+0x33/0x40 [ 1448.857336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1448.858579] RIP: 0033:0x7fbd4ba01b19 [ 1448.859492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1448.863933] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1448.865806] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1448.867615] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1448.869405] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1448.871202] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1448.873014] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:29:44 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r0, 0x3, &(0x7f0000000240)=""/211, 0xd3, 0x1b, 0x1}, 0x2) 02:29:44 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x5268}, 0x0, {0x0, r5}}, 0x5) 02:29:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x4000000) 02:29:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 49) 02:29:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20200, 0x0, 0x0}, 0x58) 02:29:44 executing program 7: syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) [ 1449.024482] FAULT_INJECTION: forcing a failure. [ 1449.024482] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.026832] CPU: 1 PID: 8352 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1449.028169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1449.029799] Call Trace: [ 1449.030321] dump_stack+0x107/0x167 [ 1449.031046] should_fail.cold+0x5/0xa [ 1449.031796] ? create_object.isra.0+0x3a/0xa30 [ 1449.032678] should_failslab+0x5/0x20 [ 1449.033423] kmem_cache_alloc+0x5b/0x310 [ 1449.034218] create_object.isra.0+0x3a/0xa30 [ 1449.035055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1449.036039] kmem_cache_alloc+0x159/0x310 [ 1449.036846] ? lock_downgrade+0x6d0/0x6d0 [ 1449.037662] vm_area_dup+0x78/0x290 [ 1449.038376] ? copy_page_range+0x24e9/0x3800 [ 1449.039259] ? vm_area_alloc+0x110/0x110 [ 1449.040048] ? vm_iomap_memory+0x190/0x190 [ 1449.040880] ? __vma_link_rb+0x540/0x700 [ 1449.041678] copy_process+0x298b/0x78b0 [ 1449.042450] ? SOFTIRQ_verbose+0x10/0x10 [ 1449.043265] ? __cleanup_sighand+0xb0/0xb0 [ 1449.044101] ? _copy_from_user+0xfb/0x1b0 [ 1449.044910] kernel_clone+0xe7/0x980 [ 1449.045637] ? lock_acquire+0x197/0x470 [ 1449.046399] ? create_io_thread+0xf0/0xf0 [ 1449.047205] ? ksys_write+0x21a/0x260 [ 1449.047936] ? lock_downgrade+0x6d0/0x6d0 [ 1449.048738] __do_sys_clone3+0x1e5/0x320 [ 1449.049534] ? __do_sys_clone+0x110/0x110 [ 1449.050350] ? rcu_read_lock_any_held+0x75/0xa0 [ 1449.051247] ? vfs_write+0x354/0xb10 [ 1449.051976] ? fput_many+0x2f/0x1a0 [ 1449.052669] ? ksys_write+0x1a9/0x260 [ 1449.053401] ? __ia32_sys_read+0xb0/0xb0 [ 1449.054198] do_syscall_64+0x33/0x40 [ 1449.054921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1449.055903] RIP: 0033:0x7fd89e327b19 [ 1449.056613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1449.060113] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1449.061583] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1449.062947] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1449.064316] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1449.065678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1449.067022] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:29:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xa000000) 02:29:58 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 53) 02:29:58 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 50) 02:29:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x10000000) 02:29:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x78, r2, 0x6a1a77d2eea882ce, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x78}}, 0x800) r3 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x40010, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x13, r3, 0x8000000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) 02:29:58 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:29:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x80000, 0x0, 0x0}, 0x58) 02:29:58 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:29:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 50) [ 1462.822349] FAULT_INJECTION: forcing a failure. [ 1462.822349] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.823774] CPU: 1 PID: 8373 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1462.824564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1462.825522] Call Trace: [ 1462.825834] dump_stack+0x107/0x167 [ 1462.826254] should_fail.cold+0x5/0xa [ 1462.826703] ? create_object.isra.0+0x3a/0xa30 [ 1462.827226] should_failslab+0x5/0x20 [ 1462.827665] kmem_cache_alloc+0x5b/0x310 [ 1462.828136] create_object.isra.0+0x3a/0xa30 [ 1462.828640] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1462.829225] kmem_cache_alloc+0x159/0x310 [ 1462.829718] vm_area_dup+0x78/0x290 [ 1462.830147] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1462.830686] ? lock_downgrade+0x6d0/0x6d0 [ 1462.831163] ? copy_page_range+0x24e9/0x3800 [ 1462.831673] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1462.832268] ? SOFTIRQ_verbose+0x10/0x10 [ 1462.832742] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1462.833275] ? avc_has_extended_perms+0xf40/0xf40 [ 1462.833843] ? lock_downgrade+0x6d0/0x6d0 [ 1462.834321] ? vm_area_alloc+0x110/0x110 [ 1462.834794] ? selinux_vm_enough_memory+0x114/0x180 [ 1462.835365] ? selinux_sb_statfs+0x250/0x250 [ 1462.835865] ? up_write+0x191/0x550 [ 1462.836286] ? percpu_counter_add_batch+0x8b/0x140 [ 1462.836851] ? __vm_enough_memory+0x184/0x360 [ 1462.837361] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1462.837958] copy_process+0x298b/0x78b0 [ 1462.838438] ? __cleanup_sighand+0xb0/0xb0 [ 1462.838937] ? _copy_from_user+0xfb/0x1b0 [ 1462.839416] kernel_clone+0xe7/0x980 [ 1462.839842] ? lock_acquire+0x197/0x470 [ 1462.840299] ? create_io_thread+0xf0/0xf0 [ 1462.840780] ? ksys_write+0x21a/0x260 [ 1462.841216] ? lock_downgrade+0x6d0/0x6d0 [ 1462.841702] __do_sys_clone3+0x1e5/0x320 [ 1462.842170] ? __do_sys_clone+0x110/0x110 [ 1462.842664] ? rcu_read_lock_any_held+0x75/0xa0 [ 1462.843189] ? vfs_write+0x354/0xb10 [ 1462.843617] ? fput_many+0x2f/0x1a0 [ 1462.844032] ? ksys_write+0x1a9/0x260 [ 1462.844468] ? __ia32_sys_read+0xb0/0xb0 [ 1462.844942] do_syscall_64+0x33/0x40 [ 1462.845369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1462.845962] RIP: 0033:0x7fd89e327b19 [ 1462.846388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1462.848489] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1462.849350] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1462.850163] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1462.850972] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1462.851088] FAULT_INJECTION: forcing a failure. [ 1462.851088] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.851779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1462.851787] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1462.855716] FAULT_INJECTION: forcing a failure. [ 1462.855716] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.857154] CPU: 0 PID: 8379 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1462.862915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1462.865245] Call Trace: [ 1462.866014] dump_stack+0x107/0x167 [ 1462.867049] should_fail.cold+0x5/0xa [ 1462.868133] ? xas_alloc+0x336/0x440 [ 1462.869193] should_failslab+0x5/0x20 [ 1462.870285] kmem_cache_alloc+0x5b/0x310 [ 1462.871455] xas_alloc+0x336/0x440 [ 1462.872464] xas_create+0x34a/0x10d0 [ 1462.873549] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1462.874772] xas_store+0x8c/0x1c40 [ 1462.875406] __xa_store+0x164/0x2d0 [ 1462.876050] ? xa_delete_node+0x280/0x280 [ 1462.876781] ? trace_hardirqs_on+0x5b/0x180 [ 1462.877558] xa_store+0x31/0x50 [ 1462.878149] __io_uring_add_tctx_node+0x1cf/0x520 [ 1462.879006] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1462.879918] ? alloc_fd+0x2e7/0x670 [ 1462.880563] io_uring_setup+0x1fbb/0x2980 [ 1462.881303] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1462.882206] ? wait_for_completion_io+0x270/0x270 [ 1462.883068] do_syscall_64+0x33/0x40 [ 1462.883713] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1462.884601] RIP: 0033:0x7f2e49e79b19 [ 1462.885259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1462.888482] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1462.889837] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1462.891070] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1462.892321] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1462.893587] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1462.894820] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1462.896090] CPU: 1 PID: 8381 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1462.896884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1462.897842] Call Trace: [ 1462.898145] dump_stack+0x107/0x167 [ 1462.898561] should_fail.cold+0x5/0xa [ 1462.898993] ? ___slab_alloc+0x155/0x700 [ 1462.899455] ? create_object.isra.0+0x3a/0xa30 [ 1462.899970] should_failslab+0x5/0x20 [ 1462.900398] kmem_cache_alloc+0x5b/0x310 [ 1462.900862] create_object.isra.0+0x3a/0xa30 [ 1462.901357] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1462.901944] kmem_cache_alloc+0x159/0x310 [ 1462.902417] xas_alloc+0x336/0x440 [ 1462.902823] xas_create+0x34a/0x10d0 [ 1462.902844] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1462.904086] xas_store+0x8c/0x1c40 [ 1462.904496] __xa_store+0x164/0x2d0 [ 1462.904909] ? xa_delete_node+0x280/0x280 [ 1462.905383] ? trace_hardirqs_on+0x5b/0x180 [ 1462.905886] xa_store+0x31/0x50 [ 1462.906266] __io_uring_add_tctx_node+0x1cf/0x520 [ 1462.906811] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1462.907401] ? alloc_fd+0x2e7/0x670 [ 1462.907820] io_uring_setup+0x1fbb/0x2980 [ 1462.908293] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1462.908867] ? wait_for_completion_io+0x270/0x270 [ 1462.909430] do_syscall_64+0x33/0x40 [ 1462.909856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1462.910435] RIP: 0033:0x7fbd4ba01b19 [ 1462.910856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1462.912933] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1462.913798] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1462.914604] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1462.915403] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1462.916201] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1462.917006] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:29:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x101000, 0x0, 0x0}, 0x58) 02:29:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x20000000) 02:29:58 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x3000) r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = syz_io_uring_setup(0x3872, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r2 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, r1, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) 02:30:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 51) [ 1478.549693] FAULT_INJECTION: forcing a failure. [ 1478.549693] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.551464] CPU: 0 PID: 8412 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1478.552551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.553884] Call Trace: [ 1478.554311] dump_stack+0x107/0x167 [ 1478.554893] should_fail.cold+0x5/0xa [ 1478.555502] ? xas_alloc+0x336/0x440 [ 1478.556095] should_failslab+0x5/0x20 [ 1478.556697] kmem_cache_alloc+0x5b/0x310 [ 1478.557346] xas_alloc+0x336/0x440 [ 1478.557768] FAULT_INJECTION: forcing a failure. [ 1478.557768] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.557932] xas_create+0x34a/0x10d0 [ 1478.561070] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1478.561976] xas_store+0x8c/0x1c40 [ 1478.562563] __xa_store+0x164/0x2d0 [ 1478.563153] ? xa_delete_node+0x280/0x280 [ 1478.563826] ? trace_hardirqs_on+0x5b/0x180 [ 1478.564671] xa_store+0x31/0x50 [ 1478.565210] __io_uring_add_tctx_node+0x1cf/0x520 [ 1478.566002] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1478.566838] ? alloc_fd+0x2e7/0x670 [ 1478.567546] io_uring_setup+0x1fbb/0x2980 [ 1478.568264] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1478.569255] ? wait_for_completion_io+0x270/0x270 [ 1478.570100] do_syscall_64+0x33/0x40 [ 1478.570702] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.571522] RIP: 0033:0x7fbd4ba01b19 [ 1478.572238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.575232] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1478.576461] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1478.577615] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1478.578755] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1478.579906] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1478.581054] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1478.582244] CPU: 1 PID: 8414 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1478.583730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.584827] FAULT_INJECTION: forcing a failure. [ 1478.584827] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.585508] Call Trace: [ 1478.585538] dump_stack+0x107/0x167 [ 1478.585565] should_fail.cold+0x5/0xa [ 1478.589436] ? anon_vma_clone+0xdc/0x590 [ 1478.590325] should_failslab+0x5/0x20 [ 1478.591141] kmem_cache_alloc+0x5b/0x310 [ 1478.592036] anon_vma_clone+0xdc/0x590 [ 1478.592879] anon_vma_fork+0x82/0x640 [ 1478.593721] ? __vm_enough_memory+0x184/0x360 [ 1478.594712] copy_process+0x72cd/0x78b0 [ 1478.595623] ? __cleanup_sighand+0xb0/0xb0 [ 1478.596584] ? _copy_from_user+0xfb/0x1b0 [ 1478.597500] kernel_clone+0xe7/0x980 [ 1478.598336] ? lock_acquire+0x197/0x470 [ 1478.599207] ? create_io_thread+0xf0/0xf0 [ 1478.600130] ? ksys_write+0x21a/0x260 [ 1478.600966] ? lock_downgrade+0x6d0/0x6d0 [ 1478.601888] __do_sys_clone3+0x1e5/0x320 [ 1478.602755] ? __do_sys_clone+0x110/0x110 [ 1478.603685] ? rcu_read_lock_any_held+0x75/0xa0 [ 1478.604690] ? vfs_write+0x354/0xb10 [ 1478.605508] ? fput_many+0x2f/0x1a0 [ 1478.606310] ? ksys_write+0x1a9/0x260 [ 1478.607136] ? __ia32_sys_read+0xb0/0xb0 [ 1478.608041] do_syscall_64+0x33/0x40 [ 1478.608857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.609985] RIP: 0033:0x7fd89e327b19 [ 1478.610796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.614744] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1478.616371] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1478.617912] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1478.619433] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1478.620956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1478.622491] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1478.624057] CPU: 0 PID: 8415 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1478.625152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.626473] Call Trace: [ 1478.626897] dump_stack+0x107/0x167 [ 1478.627475] should_fail.cold+0x5/0xa [ 1478.628079] ? create_object.isra.0+0x3a/0xa30 [ 1478.628794] should_failslab+0x5/0x20 [ 1478.629512] kmem_cache_alloc+0x5b/0x310 [ 1478.630205] ? mark_held_locks+0x9e/0xe0 [ 1478.630854] create_object.isra.0+0x3a/0xa30 [ 1478.631683] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1478.632546] kmem_cache_alloc+0x159/0x310 [ 1478.633333] xas_alloc+0x336/0x440 [ 1478.633959] xas_create+0x34a/0x10d0 [ 1478.634670] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1478.635505] xas_store+0x8c/0x1c40 [ 1478.636191] __xa_store+0x164/0x2d0 [ 1478.636821] ? xa_delete_node+0x280/0x280 [ 1478.637615] ? trace_hardirqs_on+0x5b/0x180 [ 1478.638307] xa_store+0x31/0x50 [ 1478.638837] __io_uring_add_tctx_node+0x1cf/0x520 [ 1478.639605] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1478.640427] ? alloc_fd+0x2e7/0x670 [ 1478.641132] io_uring_setup+0x1fbb/0x2980 [ 1478.641827] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1478.642779] ? wait_for_completion_io+0x270/0x270 [ 1478.643630] do_syscall_64+0x33/0x40 [ 1478.644349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.645167] RIP: 0033:0x7f2e49e79b19 [ 1478.645769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.648673] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1478.649882] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1478.651015] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1478.652137] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1478.653259] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1478.654394] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:30:14 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 54) 02:30:14 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_setup(0x731c, &(0x7f0000000080)={0x0, 0x2cf6, 0x10, 0x3, 0x1d4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:30:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 51) 02:30:14 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:30:14 executing program 4: r0 = syz_io_uring_setup(0xe96, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000009, 0x2010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa}, 0x200) 02:30:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0ff1f, 0x0, 0x0}, 0x58) 02:30:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x21030000) 02:30:14 executing program 4: r0 = syz_io_uring_setup(0x386f, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x81) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd, 0x40010, r0, 0x0) syz_io_uring_setup(0x13d8, &(0x7f0000000080)={0x0, 0xcc0b, 0x0, 0x0, 0x14a, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000280)={0x111000, 0x40, 0x7}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3) 02:30:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58) 02:30:14 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x2, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:30:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 52) 02:30:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58) 02:30:14 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 55) 02:30:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x40000000) 02:30:14 executing program 7: ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x484880, 0xe, 0x2}, 0x18) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r8, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r7, r5, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_submit(r2, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x6003, @fd_index=0x8, 0x1b3, &(0x7f0000000180)="04f145c729a8bb7cc112c4b79f8cf36ca02f3375b2db199277607b67a80c386d75362d2e47afa7064bcc60f324ef978fc408e76a9010699ef3", 0x39, 0x7, 0x1}, 0xffff) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) io_uring_enter(r10, 0x796e, 0xc6b9, 0x0, &(0x7f0000000000)={[0x2cb59]}, 0x8) [ 1478.820290] FAULT_INJECTION: forcing a failure. [ 1478.820290] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.822850] CPU: 1 PID: 8438 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1478.824326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.826126] Call Trace: [ 1478.826702] dump_stack+0x107/0x167 [ 1478.827492] should_fail.cold+0x5/0xa [ 1478.828313] ? create_object.isra.0+0x3a/0xa30 [ 1478.829302] should_failslab+0x5/0x20 [ 1478.830133] kmem_cache_alloc+0x5b/0x310 [ 1478.831012] ? mark_held_locks+0x9e/0xe0 [ 1478.831894] create_object.isra.0+0x3a/0xa30 [ 1478.832837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1478.833948] kmem_cache_alloc+0x159/0x310 [ 1478.834851] xas_alloc+0x336/0x440 [ 1478.835617] xas_create+0x34a/0x10d0 [ 1478.836420] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1478.837536] xas_store+0x8c/0x1c40 [ 1478.838317] __xa_store+0x164/0x2d0 [ 1478.839091] ? xa_delete_node+0x280/0x280 [ 1478.839982] ? trace_hardirqs_on+0x5b/0x180 [ 1478.840907] xa_store+0x31/0x50 [ 1478.841619] __io_uring_add_tctx_node+0x1cf/0x520 [ 1478.842646] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1478.843755] ? alloc_fd+0x2e7/0x670 [ 1478.844549] io_uring_setup+0x1fbb/0x2980 [ 1478.845437] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1478.846521] ? wait_for_completion_io+0x270/0x270 [ 1478.847584] do_syscall_64+0x33/0x40 [ 1478.848378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.849467] RIP: 0033:0x7fbd4ba01b19 [ 1478.850266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.854195] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1478.855817] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1478.857334] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1478.858854] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1478.860373] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1478.861891] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1478.875848] FAULT_INJECTION: forcing a failure. [ 1478.875848] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.877474] CPU: 0 PID: 8444 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1478.878388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.879488] Call Trace: [ 1478.879843] dump_stack+0x107/0x167 [ 1478.880329] should_fail.cold+0x5/0xa [ 1478.880836] ? xas_alloc+0x336/0x440 [ 1478.881329] should_failslab+0x5/0x20 [ 1478.881844] kmem_cache_alloc+0x5b/0x310 [ 1478.882392] xas_alloc+0x336/0x440 [ 1478.882868] xas_create+0x34a/0x10d0 [ 1478.883370] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 1478.884039] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1478.884734] xas_store+0x8c/0x1c40 [ 1478.885217] __xa_store+0x164/0x2d0 [ 1478.885712] ? xa_delete_node+0x280/0x280 [ 1478.886267] ? trace_hardirqs_on+0x5b/0x180 [ 1478.886849] xa_store+0x31/0x50 [ 1478.887291] __io_uring_add_tctx_node+0x1cf/0x520 [ 1478.887930] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1478.888621] ? alloc_fd+0x2e7/0x670 [ 1478.889113] io_uring_setup+0x1fbb/0x2980 [ 1478.889686] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1478.890355] ? wait_for_completion_io+0x270/0x270 [ 1478.891008] do_syscall_64+0x33/0x40 [ 1478.891503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.892181] RIP: 0033:0x7f2e49e79b19 [ 1478.892674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.895089] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1478.896092] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1478.897028] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1478.898056] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1478.898993] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1478.899932] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:30:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 56) 02:30:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58) 02:30:30 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x3, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:30:30 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = io_uring_setup(0x79a3, &(0x7f0000000080)={0x0, 0x43b7, 0x20, 0x3, 0x320, 0x0, r0}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) r2 = syz_io_uring_setup(0x7872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r2, 0x8000000) 02:30:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xfbffffff) 02:30:30 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_submit(r6, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x37a0, 0x6, &(0x7f0000000240)=""/167, 0xa7, 0x1}, 0x7f) 02:30:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 52) 02:30:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 53) [ 1495.077967] FAULT_INJECTION: forcing a failure. [ 1495.077967] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.080745] CPU: 0 PID: 8458 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1495.082413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1495.084428] Call Trace: [ 1495.085081] dump_stack+0x107/0x167 [ 1495.085983] should_fail.cold+0x5/0xa [ 1495.086918] ? xas_alloc+0x336/0x440 [ 1495.087815] should_failslab+0x5/0x20 [ 1495.088742] kmem_cache_alloc+0x5b/0x310 [ 1495.089773] xas_alloc+0x336/0x440 [ 1495.090636] xas_create+0x34a/0x10d0 [ 1495.091553] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1495.092832] xas_store+0x8c/0x1c40 [ 1495.093709] __xa_store+0x164/0x2d0 [ 1495.094599] ? xa_delete_node+0x280/0x280 [ 1495.095614] ? trace_hardirqs_on+0x5b/0x180 [ 1495.096670] xa_store+0x31/0x50 [ 1495.097478] __io_uring_add_tctx_node+0x1cf/0x520 [ 1495.098657] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1495.099931] ? alloc_fd+0x2e7/0x670 [ 1495.100824] io_uring_setup+0x1fbb/0x2980 [ 1495.101845] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1495.103079] ? wait_for_completion_io+0x270/0x270 [ 1495.103137] do_syscall_64+0x33/0x40 [ 1495.103161] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.103174] RIP: 0033:0x7fbd4ba01b19 [ 1495.103201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.108072] FAULT_INJECTION: forcing a failure. [ 1495.108072] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.111735] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1495.111758] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1495.111769] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1495.111780] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1495.111801] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1495.122409] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1495.123991] CPU: 1 PID: 8464 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1495.125458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1495.127239] Call Trace: [ 1495.127823] dump_stack+0x107/0x167 [ 1495.128602] should_fail.cold+0x5/0xa [ 1495.129413] ? create_object.isra.0+0x3a/0xa30 [ 1495.130391] should_failslab+0x5/0x20 [ 1495.131198] kmem_cache_alloc+0x5b/0x310 [ 1495.132062] ? mark_held_locks+0x9e/0xe0 [ 1495.132926] create_object.isra.0+0x3a/0xa30 [ 1495.133877] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1495.134963] kmem_cache_alloc+0x159/0x310 [ 1495.135853] xas_alloc+0x336/0x440 [ 1495.136615] xas_create+0x34a/0x10d0 [ 1495.137427] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1495.138549] xas_store+0x8c/0x1c40 [ 1495.139330] __xa_store+0x164/0x2d0 [ 1495.140116] ? xa_delete_node+0x280/0x280 [ 1495.141009] ? trace_hardirqs_on+0x5b/0x180 [ 1495.141940] xa_store+0x31/0x50 [ 1495.142656] __io_uring_add_tctx_node+0x1cf/0x520 [ 1495.143681] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1495.144790] ? alloc_fd+0x2e7/0x670 [ 1495.145578] io_uring_setup+0x1fbb/0x2980 [ 1495.146478] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1495.147553] ? wait_for_completion_io+0x270/0x270 [ 1495.148621] do_syscall_64+0x33/0x40 [ 1495.149410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.150510] RIP: 0033:0x7f2e49e79b19 [ 1495.151299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.155215] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1495.156832] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1495.158369] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1495.159884] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1495.161394] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1495.162919] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:30:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xfeffffff) [ 1495.180008] FAULT_INJECTION: forcing a failure. [ 1495.180008] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.182555] CPU: 0 PID: 8462 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1495.184047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1495.185859] Call Trace: [ 1495.186429] dump_stack+0x107/0x167 [ 1495.187219] should_fail.cold+0x5/0xa [ 1495.188048] ? create_object.isra.0+0x3a/0xa30 [ 1495.189041] should_failslab+0x5/0x20 [ 1495.189872] kmem_cache_alloc+0x5b/0x310 [ 1495.190758] create_object.isra.0+0x3a/0xa30 [ 1495.191705] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1495.192809] kmem_cache_alloc+0x159/0x310 [ 1495.193720] anon_vma_clone+0xdc/0x590 [ 1495.194575] anon_vma_fork+0x82/0x640 [ 1495.195395] ? __vm_enough_memory+0x184/0x360 [ 1495.196366] copy_process+0x72cd/0x78b0 [ 1495.197262] ? __cleanup_sighand+0xb0/0xb0 [ 1495.198209] ? _copy_from_user+0xfb/0x1b0 [ 1495.199113] kernel_clone+0xe7/0x980 [ 1495.199923] ? create_io_thread+0xf0/0xf0 [ 1495.200811] ? perf_event_sched_in.isra.0+0x80/0x80 [ 1495.201929] __do_sys_clone3+0x1e5/0x320 [ 1495.201949] ? __do_sys_clone+0x110/0x110 [ 1495.201966] ? finish_task_switch+0x126/0x5d0 [ 1495.201980] ? finish_task_switch+0xef/0x5d0 [ 1495.202023] ? io_schedule_timeout+0x140/0x140 [ 1495.206633] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1495.207626] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1495.208793] ? ksys_write+0x1a9/0x260 [ 1495.209621] do_syscall_64+0x33/0x40 [ 1495.210431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.211534] RIP: 0033:0x7fd89e327b19 [ 1495.212330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.216270] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1495.217899] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1495.219418] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1495.220915] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1495.222427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1495.223934] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:30:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58) 02:30:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 54) 02:30:30 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_setup(0x16f4, &(0x7f0000000080)={0x0, 0xffdb, 0x4, 0x2, 0x21f, 0x0, r0}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 02:30:30 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1495.316589] FAULT_INJECTION: forcing a failure. [ 1495.316589] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.319121] CPU: 0 PID: 8478 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1495.320605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1495.322412] Call Trace: [ 1495.322997] dump_stack+0x107/0x167 [ 1495.323804] should_fail.cold+0x5/0xa [ 1495.324638] ? create_object.isra.0+0x3a/0xa30 [ 1495.325638] should_failslab+0x5/0x20 [ 1495.326479] kmem_cache_alloc+0x5b/0x310 [ 1495.327370] ? mark_held_locks+0x9e/0xe0 [ 1495.328266] create_object.isra.0+0x3a/0xa30 [ 1495.329227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1495.330357] kmem_cache_alloc+0x159/0x310 [ 1495.331309] xas_alloc+0x336/0x440 [ 1495.332089] xas_create+0x34a/0x10d0 [ 1495.332916] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1495.334066] xas_store+0x8c/0x1c40 [ 1495.334852] __xa_store+0x164/0x2d0 [ 1495.335721] ? xa_delete_node+0x280/0x280 [ 1495.336698] ? trace_hardirqs_on+0x5b/0x180 [ 1495.337814] xa_store+0x31/0x50 [ 1495.338527] __io_uring_add_tctx_node+0x1cf/0x520 [ 1495.339566] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1495.340691] ? alloc_fd+0x2e7/0x670 [ 1495.341495] io_uring_setup+0x1fbb/0x2980 [ 1495.342400] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1495.343490] ? wait_for_completion_io+0x270/0x270 [ 1495.344565] do_syscall_64+0x33/0x40 [ 1495.345364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.346485] RIP: 0033:0x7fbd4ba01b19 [ 1495.347285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.351292] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1495.353036] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1495.354598] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1495.356189] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1495.357754] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1495.359296] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:30:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 57) 02:30:30 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) pread64(0xffffffffffffffff, &(0x7f0000000b80)=""/4096, 0x1000, 0xfff) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x3, @fd=r2, 0xe6, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/87, 0x47}, {&(0x7f0000000a00)=""/83, 0x53}, {&(0x7f0000000a80)=""/41, 0xfffffffffffffe38}], 0x3, 0x1}, 0x0) io_uring_enter(r0, 0x5c56, 0x4d28, 0x0, &(0x7f0000000940)={[0x3ff]}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)={0x14, 0x52, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/180, 0xb4}, {}, {&(0x7f00000005c0)=""/245, 0xf5}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/38, 0x26}], 0x9, &(0x7f0000000840)=""/122, 0x7a}, 0x0, 0x0, 0x0, {0x2}}, 0x7c8) 02:30:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xffffff7f) 02:30:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1ffff000, 0x0, 0x0}, 0x58) [ 1495.431149] FAULT_INJECTION: forcing a failure. [ 1495.431149] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.433559] CPU: 1 PID: 8490 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1495.435009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1495.436733] Call Trace: [ 1495.437309] dump_stack+0x107/0x167 [ 1495.438066] should_fail.cold+0x5/0xa [ 1495.438854] ? create_object.isra.0+0x3a/0xa30 [ 1495.439784] should_failslab+0x5/0x20 [ 1495.440555] kmem_cache_alloc+0x5b/0x310 [ 1495.441383] ? mark_held_locks+0x9e/0xe0 [ 1495.442264] create_object.isra.0+0x3a/0xa30 [ 1495.443161] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1495.444200] kmem_cache_alloc+0x159/0x310 [ 1495.445060] xas_alloc+0x336/0x440 [ 1495.445791] xas_create+0x34a/0x10d0 [ 1495.446566] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1495.447638] xas_store+0x8c/0x1c40 [ 1495.448390] __xa_store+0x164/0x2d0 [ 1495.449136] ? xa_delete_node+0x280/0x280 [ 1495.449997] ? trace_hardirqs_on+0x5b/0x180 [ 1495.450882] xa_store+0x31/0x50 [ 1495.451555] __io_uring_add_tctx_node+0x1cf/0x520 [ 1495.452588] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1495.453638] ? alloc_fd+0x2e7/0x670 [ 1495.454429] io_uring_setup+0x1fbb/0x2980 [ 1495.455284] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1495.456354] ? wait_for_completion_io+0x270/0x270 [ 1495.457405] do_syscall_64+0x33/0x40 [ 1495.458201] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1495.459272] RIP: 0033:0x7f2e49e79b19 [ 1495.460060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1495.463934] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1495.465534] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1495.467029] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1495.468525] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1495.470037] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1495.471537] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:30:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 58) 02:30:46 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x5, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:30:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 53) 02:30:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58) 02:30:46 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000bc0), 0x24, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) openat(r0, &(0x7f0000000000)='./file0\x00', 0xa0000, 0x138) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) 02:30:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xfffffffb) 02:30:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 55) 02:30:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'btrfs.', '\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@remote, @private, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x81, 0x2, 0x2, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x700, 0x4, 0x800}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2a4, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffe0}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6b92}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x802, 0x1f, 0x5, 0x9}, {0x6, 0x0, 0x14, 0x6}, {0x3, 0x8, 0x3f, 0x1}, {0x2, 0x80, 0x0, 0xfffffff7}, {0x5, 0x9b, 0xb9, 0xed3}, {0x81d, 0x0, 0x7b, 0x7}, {0x6, 0x80, 0xff, 0x10000}, {0x800, 0x7, 0x0, 0xa13e}, {0xb63, 0x6, 0x37, 0xde}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r8, 0x8000000) [ 1511.397821] FAULT_INJECTION: forcing a failure. [ 1511.397821] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.399781] FAULT_INJECTION: forcing a failure. [ 1511.399781] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.400747] CPU: 0 PID: 8516 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1511.405014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1511.406816] Call Trace: [ 1511.407399] dump_stack+0x107/0x167 [ 1511.408193] should_fail.cold+0x5/0xa [ 1511.409019] ? down_write+0xe0/0x160 [ 1511.409840] ? anon_vma_clone+0xdc/0x590 [ 1511.410725] should_failslab+0x5/0x20 [ 1511.411552] kmem_cache_alloc+0x5b/0x310 [ 1511.412438] anon_vma_clone+0xdc/0x590 [ 1511.413292] anon_vma_fork+0x82/0x640 [ 1511.414121] ? __vm_enough_memory+0x184/0x360 [ 1511.415095] copy_process+0x72cd/0x78b0 [ 1511.415998] ? __cleanup_sighand+0xb0/0xb0 [ 1511.416939] ? _copy_from_user+0xfb/0x1b0 [ 1511.417854] kernel_clone+0xe7/0x980 [ 1511.418675] ? lock_acquire+0x197/0x470 [ 1511.419544] ? create_io_thread+0xf0/0xf0 [ 1511.420458] ? ksys_write+0x21a/0x260 [ 1511.421281] ? lock_downgrade+0x6d0/0x6d0 [ 1511.422193] __do_sys_clone3+0x1e5/0x320 [ 1511.423070] ? __do_sys_clone+0x110/0x110 [ 1511.423993] ? rcu_read_lock_any_held+0x75/0xa0 [ 1511.424991] ? vfs_write+0x354/0xb10 [ 1511.425800] ? fput_many+0x2f/0x1a0 [ 1511.426600] ? ksys_write+0x1a9/0x260 [ 1511.427426] ? __ia32_sys_read+0xb0/0xb0 [ 1511.428320] do_syscall_64+0x33/0x40 [ 1511.429132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1511.430247] RIP: 0033:0x7fd89e327b19 [ 1511.431052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.435030] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1511.436674] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1511.438225] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1511.439771] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1511.441310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1511.442867] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1511.444450] CPU: 1 PID: 8512 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1511.446135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1511.448310] Call Trace: [ 1511.449146] dump_stack+0x107/0x167 [ 1511.450302] should_fail.cold+0x5/0xa [ 1511.451493] ? create_object.isra.0+0x3a/0xa30 [ 1511.452911] should_failslab+0x5/0x20 [ 1511.454116] kmem_cache_alloc+0x5b/0x310 [ 1511.455391] ? mark_held_locks+0x9e/0xe0 [ 1511.456442] create_object.isra.0+0x3a/0xa30 [ 1511.457537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1511.458829] kmem_cache_alloc+0x159/0x310 [ 1511.459868] xas_alloc+0x336/0x440 [ 1511.460882] xas_create+0x34a/0x10d0 [ 1511.462081] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1511.463483] xas_store+0x8c/0x1c40 [ 1511.464252] __xa_store+0x164/0x2d0 [ 1511.465050] ? xa_delete_node+0x280/0x280 [ 1511.465967] ? trace_hardirqs_on+0x5b/0x180 [ 1511.466900] xa_store+0x31/0x50 [ 1511.467630] __io_uring_add_tctx_node+0x1cf/0x520 [ 1511.468762] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1511.470000] ? alloc_fd+0x2e7/0x670 [ 1511.470784] io_uring_setup+0x1fbb/0x2980 [ 1511.471674] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1511.472746] ? wait_for_completion_io+0x270/0x270 [ 1511.473800] do_syscall_64+0x33/0x40 [ 1511.474598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1511.475685] RIP: 0033:0x7f2e49e79b19 [ 1511.476482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.480402] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1511.482034] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1511.483567] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1511.485098] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1511.486643] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1511.488181] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:30:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3f000000, 0x0, 0x0}, 0x58) 02:30:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xfffffffe) [ 1511.523810] FAULT_INJECTION: forcing a failure. [ 1511.523810] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.526425] CPU: 0 PID: 8524 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1511.527953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1511.529821] Call Trace: [ 1511.530414] dump_stack+0x107/0x167 [ 1511.531241] should_fail.cold+0x5/0xa [ 1511.532102] ? xas_alloc+0x336/0x440 [ 1511.532938] should_failslab+0x5/0x20 [ 1511.533793] kmem_cache_alloc+0x5b/0x310 [ 1511.534711] xas_alloc+0x336/0x440 [ 1511.535503] xas_create+0x34a/0x10d0 [ 1511.536352] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1511.537521] xas_store+0x8c/0x1c40 [ 1511.538319] __xa_store+0x164/0x2d0 [ 1511.539143] ? xa_delete_node+0x280/0x280 [ 1511.540086] ? trace_hardirqs_on+0x5b/0x180 [ 1511.541068] xa_store+0x31/0x50 [ 1511.541825] __io_uring_add_tctx_node+0x1cf/0x520 [ 1511.542900] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1511.544080] ? alloc_fd+0x2e7/0x670 [ 1511.544913] io_uring_setup+0x1fbb/0x2980 [ 1511.545866] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1511.547012] ? wait_for_completion_io+0x270/0x270 [ 1511.548134] do_syscall_64+0x33/0x40 [ 1511.548973] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1511.550134] RIP: 0033:0x7fbd4ba01b19 [ 1511.550971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.555127] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1511.556822] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1511.558410] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1511.559997] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1511.561582] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1511.563181] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:30:47 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x8, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:30:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x2000000000) 02:30:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x1f, 0x101000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000005c0)={0x30000010}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r1, 0x8, 0x41e, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r2, 0x80, &(0x7f0000000080)=@ax25={{0x3, @default, 0x2}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x0, 0x0, 0x1}, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r3, 0x8000000) 02:30:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58) 02:30:47 executing program 7: inotify_init() r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x2, 0x80000000, 0x6, 0x5}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1c46c356f29fda22, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) r4 = syz_io_uring_setup(0xbac, &(0x7f0000000240)={0x0, 0x8a48, 0x0, 0x2, 0x4250, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) 02:30:47 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0xa, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1526.582283] FAULT_INJECTION: forcing a failure. [ 1526.582283] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.584359] CPU: 0 PID: 8563 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1526.585314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.586473] Call Trace: [ 1526.586847] dump_stack+0x107/0x167 [ 1526.587353] should_fail.cold+0x5/0xa [ 1526.587884] ? xas_alloc+0x336/0x440 [ 1526.588399] should_failslab+0x5/0x20 [ 1526.588925] kmem_cache_alloc+0x5b/0x310 [ 1526.589499] xas_alloc+0x336/0x440 [ 1526.590005] xas_create+0x34a/0x10d0 [ 1526.590533] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1526.591258] xas_store+0x8c/0x1c40 [ 1526.591764] __xa_store+0x164/0x2d0 [ 1526.592270] ? xa_delete_node+0x280/0x280 [ 1526.592849] ? trace_hardirqs_on+0x5b/0x180 [ 1526.593453] xa_store+0x31/0x50 [ 1526.593923] __io_uring_add_tctx_node+0x1cf/0x520 [ 1526.594593] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1526.595324] ? alloc_fd+0x2e7/0x670 [ 1526.595836] io_uring_setup+0x1fbb/0x2980 [ 1526.596414] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1526.597119] ? wait_for_completion_io+0x270/0x270 [ 1526.597807] do_syscall_64+0x33/0x40 [ 1526.598340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.599047] RIP: 0033:0x7f2e49e79b19 [ 1526.599561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.602103] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1526.603163] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1526.604140] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1526.605119] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1526.606104] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1526.607092] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:31:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x7fffffffff3ff) 02:31:02 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20, 0x1}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x6, 0x932, 0x3, 0x4288, 0x9}) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0xc57e, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b00), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005680)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000440)=""/246, 0xf6}], 0x4, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000880)=""/99, 0x63}, {&(0x7f0000000900)=""/36, 0x24}], 0x6, &(0x7f00000009c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000bc0), 0x6e, &(0x7f00000059c0)=[{&(0x7f0000000c40)=""/59, 0x3b}, {&(0x7f0000000c80)=""/67, 0x43}, {&(0x7f0000000d00)=""/142, 0x8e}, {&(0x7f0000000dc0)=""/13, 0xd}, {&(0x7f0000000e00)=""/112, 0x70}, {&(0x7f0000000e80)=""/211, 0xd3}], 0x6, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000003600)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/183, 0xb7}, {&(0x7f0000002200)=""/231, 0xe7}, {&(0x7f0000002300)=""/17, 0x11}, {&(0x7f0000002340)=""/126, 0x7e}, {&(0x7f00000023c0)=""/51, 0x33}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/145, 0x91}, {&(0x7f00000034c0)=""/84, 0x54}, {&(0x7f0000003540)=""/129, 0x81}], 0xa, &(0x7f00000036c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x60}}, {{&(0x7f0000003740)=@abs, 0x6e, &(0x7f0000004b00)=[{&(0x7f00000037c0)=""/78, 0x4e}, {&(0x7f0000003840)=""/3, 0x3}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/125, 0x7d}, {&(0x7f0000004900)=""/248, 0xf8}, {&(0x7f0000004a00)=""/150, 0x96}, {&(0x7f0000004ac0)=""/5, 0x5}], 0x7, &(0x7f0000004b80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x168}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/246, 0xf6}, {&(0x7f0000004e80)=""/45, 0x2d}], 0x2, &(0x7f0000004f00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000005080)=@abs, 0x6e, &(0x7f0000005300)=[{&(0x7f0000005100)=""/94, 0x5e}, {&(0x7f0000005180)=""/164, 0xa4}, {&(0x7f0000005240)=""/131, 0x83}], 0x3, &(0x7f0000005340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000005400), 0x6e, &(0x7f0000005600)=[{&(0x7f0000005480)=""/33, 0x21}, {&(0x7f00000054c0)=""/252, 0xfc}, {&(0x7f00000055c0)=""/6, 0x6}], 0x3, &(0x7f0000000040)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x40000020, 0x0) syz_io_uring_setup(0x10e7, &(0x7f00000058c0)={0x0, 0x7846, 0x1, 0x1, 0x52, 0x0, r2}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000c4c000/0x3000)=nil, &(0x7f0000005940), &(0x7f0000005980)) 02:31:02 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:31:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 59) 02:31:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000800, 0x0, 0x0}, 0x58) 02:31:02 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_enter(r0, 0x31d0, 0x1799, 0x2, &(0x7f0000000000), 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:31:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 56) 02:31:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 54) [ 1526.614261] FAULT_INJECTION: forcing a failure. [ 1526.614261] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.616812] FAULT_INJECTION: forcing a failure. [ 1526.616812] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.617621] CPU: 1 PID: 8570 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1526.620706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.623016] Call Trace: [ 1526.623750] dump_stack+0x107/0x167 [ 1526.624764] should_fail.cold+0x5/0xa [ 1526.625821] ? create_object.isra.0+0x3a/0xa30 [ 1526.627092] should_failslab+0x5/0x20 [ 1526.628145] kmem_cache_alloc+0x5b/0x310 [ 1526.629278] create_object.isra.0+0x3a/0xa30 [ 1526.630506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1526.631913] kmem_cache_alloc+0x159/0x310 [ 1526.633063] anon_vma_clone+0xdc/0x590 [ 1526.634152] anon_vma_fork+0x82/0x640 [ 1526.635190] ? __vm_enough_memory+0x184/0x360 [ 1526.636421] copy_process+0x72cd/0x78b0 [ 1526.637559] ? __cleanup_sighand+0xb0/0xb0 [ 1526.638754] ? _copy_from_user+0xfb/0x1b0 [ 1526.639898] kernel_clone+0xe7/0x980 [ 1526.640919] ? lock_acquire+0x197/0x470 [ 1526.642032] ? create_io_thread+0xf0/0xf0 [ 1526.643100] ? ksys_write+0x21a/0x260 [ 1526.644009] ? lock_downgrade+0x6d0/0x6d0 [ 1526.645008] __do_sys_clone3+0x1e5/0x320 [ 1526.645978] ? __do_sys_clone+0x110/0x110 [ 1526.646984] ? rcu_read_lock_any_held+0x75/0xa0 [ 1526.648074] ? vfs_write+0x354/0xb10 [ 1526.648948] ? fput_many+0x2f/0x1a0 [ 1526.649799] ? ksys_write+0x1a9/0x260 [ 1526.650698] ? __ia32_sys_read+0xb0/0xb0 [ 1526.651665] do_syscall_64+0x33/0x40 [ 1526.652545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.653746] RIP: 0033:0x7fd89e327b19 [ 1526.654630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.658931] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1526.660702] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1526.662363] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1526.664023] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1526.665677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1526.667341] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1526.669029] CPU: 0 PID: 8573 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1526.669995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.671232] Call Trace: [ 1526.671658] dump_stack+0x107/0x167 [ 1526.672187] should_fail.cold+0x5/0xa [ 1526.672745] ? create_object.isra.0+0x3a/0xa30 [ 1526.673393] should_failslab+0x5/0x20 [ 1526.673961] kmem_cache_alloc+0x5b/0x310 [ 1526.674542] ? mark_held_locks+0x9e/0xe0 [ 1526.675126] create_object.isra.0+0x3a/0xa30 [ 1526.675745] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1526.676472] kmem_cache_alloc+0x159/0x310 [ 1526.677072] xas_alloc+0x336/0x440 [ 1526.677589] xas_create+0x34a/0x10d0 [ 1526.678142] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1526.678901] xas_store+0x8c/0x1c40 [ 1526.679419] __xa_store+0x164/0x2d0 [ 1526.679940] ? xa_delete_node+0x280/0x280 [ 1526.680535] ? trace_hardirqs_on+0x5b/0x180 [ 1526.681158] xa_store+0x31/0x50 [ 1526.681635] __io_uring_add_tctx_node+0x1cf/0x520 [ 1526.682328] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1526.683077] ? alloc_fd+0x2e7/0x670 [ 1526.683611] io_uring_setup+0x1fbb/0x2980 [ 1526.684212] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1526.684928] ? wait_for_completion_io+0x270/0x270 [ 1526.685638] do_syscall_64+0x33/0x40 [ 1526.686186] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.686905] RIP: 0033:0x7fbd4ba01b19 [ 1526.687429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.690025] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1526.691110] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1526.692106] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1526.693114] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1526.694135] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1526.695155] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:31:02 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 02:31:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1b0c31f000, 0x0, 0x0}, 0x58) 02:31:02 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0xf0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:31:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000000000, 0x0, 0x0}, 0x58) 02:31:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x8000000000000) 02:31:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 60) 02:31:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 55) 02:31:02 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0xcb9, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = syz_io_uring_setup(0x37d5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r2}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r8, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r7, r5, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r6, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r9 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x8000) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r13) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4080050, r13, 0x0) [ 1526.884025] FAULT_INJECTION: forcing a failure. [ 1526.884025] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.885490] CPU: 0 PID: 8596 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1526.886346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.887365] Call Trace: [ 1526.887697] dump_stack+0x107/0x167 [ 1526.888148] should_fail.cold+0x5/0xa [ 1526.888622] ? create_object.isra.0+0x3a/0xa30 [ 1526.889195] should_failslab+0x5/0x20 [ 1526.889676] kmem_cache_alloc+0x5b/0x310 [ 1526.890197] ? mark_held_locks+0x9e/0xe0 [ 1526.890702] create_object.isra.0+0x3a/0xa30 [ 1526.891246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1526.891873] kmem_cache_alloc+0x159/0x310 [ 1526.892390] xas_alloc+0x336/0x440 [ 1526.892832] xas_create+0x34a/0x10d0 [ 1526.893298] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1526.893952] xas_store+0x8c/0x1c40 [ 1526.894401] __xa_store+0x164/0x2d0 [ 1526.894855] ? xa_delete_node+0x280/0x280 [ 1526.895377] ? trace_hardirqs_on+0x5b/0x180 02:31:02 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x6ec3, 0xaf35, 0x0, &(0x7f0000000000)={[0x40]}, 0x8) [ 1526.895915] xa_store+0x31/0x50 [ 1526.896523] __io_uring_add_tctx_node+0x1cf/0x520 [ 1526.897148] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1526.897821] ? alloc_fd+0x2e7/0x670 [ 1526.898313] io_uring_setup+0x1fbb/0x2980 [ 1526.898853] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1526.899512] ? wait_for_completion_io+0x270/0x270 [ 1526.900161] do_syscall_64+0x33/0x40 [ 1526.900641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.901298] RIP: 0033:0x7f2e49e79b19 [ 1526.901777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.904142] RSP: 002b:00007f2e473ef108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1526.905112] RAX: ffffffffffffffda RBX: 00007f2e49f8cf60 RCX: 00007f2e49e79b19 [ 1526.906039] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1526.906951] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1526.907859] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1526.908770] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:31:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 57) [ 1526.926704] FAULT_INJECTION: forcing a failure. [ 1526.926704] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.928215] CPU: 0 PID: 8599 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1526.929050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1526.930076] Call Trace: [ 1526.930402] dump_stack+0x107/0x167 [ 1526.930847] should_fail.cold+0x5/0xa [ 1526.931315] ? anon_vma_clone+0xdc/0x590 [ 1526.931811] should_failslab+0x5/0x20 [ 1526.932276] kmem_cache_alloc+0x5b/0x310 [ 1526.932792] anon_vma_clone+0xdc/0x590 [ 1526.933273] anon_vma_fork+0x82/0x640 [ 1526.933733] ? __vm_enough_memory+0x184/0x360 [ 1526.934293] copy_process+0x72cd/0x78b0 [ 1526.934797] ? __cleanup_sighand+0xb0/0xb0 [ 1526.935327] ? _copy_from_user+0xfb/0x1b0 [ 1526.935832] kernel_clone+0xe7/0x980 [ 1526.936284] ? lock_acquire+0x197/0x470 [ 1526.936764] ? create_io_thread+0xf0/0xf0 [ 1526.937274] ? ksys_write+0x21a/0x260 [ 1526.937735] ? lock_downgrade+0x6d0/0x6d0 [ 1526.938252] __do_sys_clone3+0x1e5/0x320 [ 1526.938744] ? __do_sys_clone+0x110/0x110 [ 1526.939258] ? rcu_read_lock_any_held+0x75/0xa0 [ 1526.939817] ? vfs_write+0x354/0xb10 [ 1526.940272] ? fput_many+0x2f/0x1a0 [ 1526.940712] ? ksys_write+0x1a9/0x260 [ 1526.941172] ? __ia32_sys_read+0xb0/0xb0 [ 1526.941672] do_syscall_64+0x33/0x40 [ 1526.942131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1526.942752] RIP: 0033:0x7fd89e327b19 [ 1526.943204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1526.945435] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1526.946357] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1526.947220] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1526.948079] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1526.948938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1526.949798] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1527.002033] FAULT_INJECTION: forcing a failure. [ 1527.002033] name failslab, interval 1, probability 0, space 0, times 0 [ 1527.004482] CPU: 1 PID: 8604 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1527.005938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.007692] Call Trace: [ 1527.008252] dump_stack+0x107/0x167 [ 1527.009029] should_fail.cold+0x5/0xa [ 1527.009837] ? xas_alloc+0x336/0x440 [ 1527.010630] should_failslab+0x5/0x20 [ 1527.011432] kmem_cache_alloc+0x5b/0x310 [ 1527.012309] xas_alloc+0x336/0x440 [ 1527.013059] xas_create+0x34a/0x10d0 [ 1527.013863] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1527.014986] xas_store+0x8c/0x1c40 [ 1527.015762] __xa_store+0x164/0x2d0 [ 1527.016537] ? xa_delete_node+0x280/0x280 [ 1527.017416] ? trace_hardirqs_on+0x5b/0x180 [ 1527.018339] xa_store+0x31/0x50 [ 1527.019040] __io_uring_add_tctx_node+0x1cf/0x520 [ 1527.020058] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1527.021175] ? alloc_fd+0x2e7/0x670 [ 1527.021975] io_uring_setup+0x1fbb/0x2980 [ 1527.022867] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1527.023929] ? wait_for_completion_io+0x270/0x270 [ 1527.024976] do_syscall_64+0x33/0x40 [ 1527.025760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1527.026857] RIP: 0033:0x7fbd4ba01b19 [ 1527.027641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1527.031534] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1527.033148] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1527.034657] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1527.036160] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1527.037671] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1527.039179] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:31:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x29f01019d000, 0x0, 0x0}, 0x58) 02:31:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 58) 02:31:14 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x140, r4, 0x516, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x8c, 0x5c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x6f, 0xc5, "0e6ab75ce961d724a8d3bea21d24e041ca653aa666cc0d13e7ca058d3e3e4d0415b0bbc8c5ad79b6692b4c60c4014eb6e695ce5fdf0ab0f88cd45b3cd058425081c4732223dcccde4ba01e2e3b517abe35e36871d8a0fd6495bda064a23b8faf721c3a5773e7021c663f5e"}, @NL80211_ATTR_VENDOR_DATA={0x40, 0xc5, "0952fc5a913a75bb2fd728ad9b371c2eca1b9aeb1444a9821ac8bf9f9b42727d45e152d2ab7496aade4341d7addd5fadb954d2ff6ea8c0a6f9f6dcec"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_DATA={0x4e, 0xc5, "5e91d05810b12c349e0d796c9a766c62e49e5a46731dfc01572a30e456741ba2da39289bf196330b4adcebc40a31572715fa565c2c454616c855a5eebc7dc565234b2d45fef37d5e8fc9"}]}, 0x140}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0xd, 0xa, 0x303, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x4, 0x0, r3, &(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x2}, 0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:31:14 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x1d2, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:31:14 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r1, 0x6c46, 0x5fff, 0x2, &(0x7f0000000080), 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:31:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xc000000000000) 02:31:14 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 61) 02:31:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 56) [ 1539.033121] FAULT_INJECTION: forcing a failure. [ 1539.033121] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.034488] CPU: 0 PID: 8620 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1539.035273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1539.036266] Call Trace: [ 1539.036585] dump_stack+0x107/0x167 [ 1539.037016] should_fail.cold+0x5/0xa [ 1539.037466] ? down_write+0xe0/0x160 [ 1539.037907] ? anon_vma_clone+0xdc/0x590 [ 1539.038390] should_failslab+0x5/0x20 [ 1539.038841] kmem_cache_alloc+0x5b/0x310 [ 1539.039324] anon_vma_clone+0xdc/0x590 [ 1539.040076] anon_vma_fork+0x82/0x640 [ 1539.040087] ? __vm_enough_memory+0x184/0x360 [ 1539.040102] copy_process+0x72cd/0x78b0 [ 1539.040134] ? __cleanup_sighand+0xb0/0xb0 02:31:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 57) [ 1539.040158] ? _copy_from_user+0xfb/0x1b0 [ 1539.040174] kernel_clone+0xe7/0x980 [ 1539.040187] ? lock_acquire+0x197/0x470 [ 1539.040198] ? create_io_thread+0xf0/0xf0 [ 1539.040216] ? ksys_write+0x21a/0x260 [ 1539.040227] ? lock_downgrade+0x6d0/0x6d0 02:31:14 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 62) [ 1539.040241] __do_sys_clone3+0x1e5/0x320 [ 1539.040251] ? __do_sys_clone+0x110/0x110 02:31:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x100000000000000) [ 1539.040275] ? rcu_read_lock_any_held+0x75/0xa0 02:31:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x553a4e458000, 0x0, 0x0}, 0x58) 02:31:14 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) r7 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r0, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/129, 0x81}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000300)=""/230, 0xe6}], 0x4}, 0x0, 0x40002040, 0x1, {0x1}}, 0x0) [ 1539.040282] ? vfs_write+0x354/0xb10 [ 1539.040295] ? fput_many+0x2f/0x1a0 [ 1539.040305] ? ksys_write+0x1a9/0x260 [ 1539.040313] ? __ia32_sys_read+0xb0/0xb0 [ 1539.040334] do_syscall_64+0x33/0x40 [ 1539.040345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1539.040352] RIP: 0033:0x7fd89e327b19 02:31:14 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x300, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:31:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 59) [ 1539.040362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1539.040367] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1539.040379] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1539.040385] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1539.040391] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1539.040397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1539.040403] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1539.076809] FAULT_INJECTION: forcing a failure. [ 1539.076809] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.076822] CPU: 0 PID: 8627 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1539.076828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1539.076832] Call Trace: [ 1539.076846] dump_stack+0x107/0x167 [ 1539.076859] should_fail.cold+0x5/0xa [ 1539.076872] ? vm_area_dup+0x78/0x290 [ 1539.076882] should_failslab+0x5/0x20 [ 1539.076894] kmem_cache_alloc+0x5b/0x310 [ 1539.076908] vm_area_dup+0x78/0x290 [ 1539.076921] ? lock_release+0x680/0x680 [ 1539.076934] ? mark_lock+0xf5/0x2df0 [ 1539.076949] ? lock_chain_count+0x20/0x20 [ 1539.076961] ? mark_lock+0xf5/0x2df0 [ 1539.076975] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1539.076986] ? lock_chain_count+0x20/0x20 [ 1539.077001] ? mark_lock+0xf5/0x2df0 [ 1539.077013] ? vm_area_alloc+0x110/0x110 [ 1539.077026] ? __lock_acquire+0x1657/0x5b00 [ 1539.077048] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1539.077059] ? SOFTIRQ_verbose+0x10/0x10 [ 1539.077069] ? vmacache_find+0x55/0x2a0 [ 1539.077081] __split_vma+0xa8/0x4e0 [ 1539.077094] __do_munmap+0x365/0x1260 [ 1539.077107] ? arch_get_unmapped_area+0x450/0x450 [ 1539.077120] ? lock_release+0x680/0x680 [ 1539.077132] mmap_region+0x7cc/0x1500 [ 1539.077152] do_mmap+0x868/0x1370 [ 1539.077169] vm_mmap_pgoff+0x198/0x1f0 [ 1539.077183] ? randomize_page+0xb0/0xb0 [ 1539.077203] ksys_mmap_pgoff+0x41c/0x560 [ 1539.077215] ? find_mergeable_anon_vma+0x250/0x250 [ 1539.077234] do_syscall_64+0x33/0x40 [ 1539.077245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1539.077253] RIP: 0033:0x7f2e49e79b62 [ 1539.077263] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1539.077273] RSP: 002b:00007f2e473ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1539.077285] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e49e79b62 [ 1539.077291] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1539.077297] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1539.077303] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1539.077309] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1539.132071] FAULT_INJECTION: forcing a failure. [ 1539.132071] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.132083] CPU: 0 PID: 8631 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1539.132089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1539.132093] Call Trace: [ 1539.132107] dump_stack+0x107/0x167 [ 1539.132120] should_fail.cold+0x5/0xa [ 1539.132133] ? anon_vma_fork+0xf1/0x640 [ 1539.132143] should_failslab+0x5/0x20 [ 1539.132153] kmem_cache_alloc+0x5b/0x310 [ 1539.132168] anon_vma_fork+0xf1/0x640 [ 1539.132178] ? __vm_enough_memory+0x184/0x360 [ 1539.132191] copy_process+0x72cd/0x78b0 [ 1539.132226] ? __cleanup_sighand+0xb0/0xb0 [ 1539.132252] ? _copy_from_user+0xfb/0x1b0 [ 1539.132268] kernel_clone+0xe7/0x980 [ 1539.132280] ? lock_acquire+0x197/0x470 [ 1539.132290] ? create_io_thread+0xf0/0xf0 [ 1539.132313] ? ksys_write+0x21a/0x260 [ 1539.132325] ? lock_downgrade+0x6d0/0x6d0 [ 1539.132338] __do_sys_clone3+0x1e5/0x320 [ 1539.132349] ? __do_sys_clone+0x110/0x110 [ 1539.132373] ? rcu_read_lock_any_held+0x75/0xa0 [ 1539.132380] ? vfs_write+0x354/0xb10 [ 1539.132393] ? fput_many+0x2f/0x1a0 [ 1539.132403] ? ksys_write+0x1a9/0x260 [ 1539.132412] ? __ia32_sys_read+0xb0/0xb0 [ 1539.132430] do_syscall_64+0x33/0x40 [ 1539.132442] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1539.132448] RIP: 0033:0x7fd89e327b19 [ 1539.132458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1539.132464] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1539.132475] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1539.132482] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1539.132488] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1539.132494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1539.132500] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1539.138988] FAULT_INJECTION: forcing a failure. [ 1539.138988] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.139000] CPU: 0 PID: 8632 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1539.139006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1539.139009] Call Trace: [ 1539.139020] dump_stack+0x107/0x167 [ 1539.139032] should_fail.cold+0x5/0xa [ 1539.139044] ? create_object.isra.0+0x3a/0xa30 [ 1539.139053] should_failslab+0x5/0x20 [ 1539.139063] kmem_cache_alloc+0x5b/0x310 [ 1539.139073] ? mark_held_locks+0x9e/0xe0 [ 1539.139086] create_object.isra.0+0x3a/0xa30 [ 1539.139094] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1539.139108] kmem_cache_alloc+0x159/0x310 [ 1539.139124] xas_alloc+0x336/0x440 [ 1539.139136] xas_create+0x34a/0x10d0 [ 1539.139153] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1539.139165] xas_store+0x8c/0x1c40 [ 1539.139185] __xa_store+0x164/0x2d0 [ 1539.139197] ? xa_delete_node+0x280/0x280 [ 1539.139213] ? trace_hardirqs_on+0x5b/0x180 [ 1539.139228] xa_store+0x31/0x50 [ 1539.139241] __io_uring_add_tctx_node+0x1cf/0x520 [ 1539.139252] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1539.139262] ? alloc_fd+0x2e7/0x670 [ 1539.139284] io_uring_setup+0x1fbb/0x2980 [ 1539.139299] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1539.139311] ? wait_for_completion_io+0x270/0x270 [ 1539.139340] do_syscall_64+0x33/0x40 [ 1539.139350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1539.139357] RIP: 0033:0x7fbd4ba01b19 [ 1539.139366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1539.139372] RSP: 002b:00007fbd48f56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1539.139383] RAX: ffffffffffffffda RBX: 00007fbd4bb15020 RCX: 00007fbd4ba01b19 [ 1539.139388] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1539.139394] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1539.139400] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1539.139406] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1539.174106] FAULT_INJECTION: forcing a failure. [ 1539.174106] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.174119] CPU: 0 PID: 8634 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1539.174125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1539.174129] Call Trace: [ 1539.174143] dump_stack+0x107/0x167 [ 1539.174156] should_fail.cold+0x5/0xa [ 1539.174168] ? create_object.isra.0+0x3a/0xa30 [ 1539.174177] should_failslab+0x5/0x20 [ 1539.174188] kmem_cache_alloc+0x5b/0x310 [ 1539.174202] create_object.isra.0+0x3a/0xa30 [ 1539.174211] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1539.174225] kmem_cache_alloc+0x159/0x310 [ 1539.174240] vm_area_dup+0x78/0x290 [ 1539.174252] ? lock_release+0x680/0x680 [ 1539.174264] ? mark_lock+0xf5/0x2df0 [ 1539.174283] ? lock_chain_count+0x20/0x20 [ 1539.174293] ? mark_lock+0xf5/0x2df0 [ 1539.174307] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1539.174317] ? lock_chain_count+0x20/0x20 [ 1539.174331] ? mark_lock+0xf5/0x2df0 [ 1539.174342] ? vm_area_alloc+0x110/0x110 [ 1539.174355] ? __lock_acquire+0x1657/0x5b00 [ 1539.174376] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1539.174386] ? SOFTIRQ_verbose+0x10/0x10 [ 1539.174395] ? vmacache_find+0x55/0x2a0 [ 1539.174407] __split_vma+0xa8/0x4e0 [ 1539.174419] __do_munmap+0x365/0x1260 [ 1539.174431] ? arch_get_unmapped_area+0x450/0x450 [ 1539.174443] ? lock_release+0x680/0x680 [ 1539.174454] mmap_region+0x7cc/0x1500 [ 1539.174473] do_mmap+0x868/0x1370 [ 1539.174489] vm_mmap_pgoff+0x198/0x1f0 [ 1539.174503] ? randomize_page+0xb0/0xb0 [ 1539.174522] ksys_mmap_pgoff+0x41c/0x560 [ 1539.174533] ? find_mergeable_anon_vma+0x250/0x250 [ 1539.174551] do_syscall_64+0x33/0x40 [ 1539.174563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1539.174569] RIP: 0033:0x7f2e49e79b62 [ 1539.174580] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1539.174585] RSP: 002b:00007f2e473ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1539.174596] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e49e79b62 [ 1539.174602] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1539.174608] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1539.174614] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1539.174620] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1539.234826] FAULT_INJECTION: forcing a failure. [ 1539.234826] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.234841] CPU: 0 PID: 8646 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1539.234847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1539.234851] Call Trace: [ 1539.234866] dump_stack+0x107/0x167 [ 1539.234879] should_fail.cold+0x5/0xa [ 1539.234896] ? xas_alloc+0x336/0x440 [ 1539.234907] should_failslab+0x5/0x20 [ 1539.234918] kmem_cache_alloc+0x5b/0x310 [ 1539.234931] xas_alloc+0x336/0x440 [ 1539.234944] xas_create+0x34a/0x10d0 [ 1539.234963] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1539.234975] xas_store+0x8c/0x1c40 [ 1539.234994] __xa_store+0x164/0x2d0 [ 1539.235006] ? xa_delete_node+0x280/0x280 [ 1539.235021] ? trace_hardirqs_on+0x5b/0x180 [ 1539.235036] xa_store+0x31/0x50 [ 1539.235049] __io_uring_add_tctx_node+0x1cf/0x520 [ 1539.235060] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1539.235069] ? alloc_fd+0x2e7/0x670 [ 1539.235087] io_uring_setup+0x1fbb/0x2980 [ 1539.235103] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1539.235112] ? wait_for_completion_io+0x270/0x270 [ 1539.235142] do_syscall_64+0x33/0x40 [ 1539.235153] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1539.235160] RIP: 0033:0x7fbd4ba01b19 [ 1539.235170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1539.235176] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1539.235188] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1539.235195] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1539.235200] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1539.235206] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1539.235212] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:31:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 63) 02:31:31 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r3, &(0x7f0000000000)={0xa0000008}}, 0x3d) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:31:31 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x500, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:31:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000001300)={'netpci0\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000001300)={'netpci0\x00'}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r2, 0x8000000) 02:31:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 58) 02:31:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x200000000000000) 02:31:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 60) 02:31:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2001000000000, 0x0, 0x0}, 0x58) [ 1556.320901] FAULT_INJECTION: forcing a failure. [ 1556.320901] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.323419] CPU: 0 PID: 8661 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1556.324840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.326594] Call Trace: [ 1556.327146] dump_stack+0x107/0x167 [ 1556.327906] should_fail.cold+0x5/0xa [ 1556.328700] ? create_object.isra.0+0x3a/0xa30 [ 1556.329647] should_failslab+0x5/0x20 [ 1556.330445] kmem_cache_alloc+0x5b/0x310 [ 1556.331297] ? mark_held_locks+0x9e/0xe0 [ 1556.332143] create_object.isra.0+0x3a/0xa30 [ 1556.333048] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1556.334102] kmem_cache_alloc+0x159/0x310 [ 1556.334991] xas_alloc+0x336/0x440 [ 1556.335743] xas_create+0x34a/0x10d0 [ 1556.336531] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1556.337627] xas_store+0x8c/0x1c40 [ 1556.338402] __xa_store+0x164/0x2d0 [ 1556.339159] ? xa_delete_node+0x280/0x280 [ 1556.340033] ? trace_hardirqs_on+0x5b/0x180 [ 1556.340956] xa_store+0x31/0x50 [ 1556.341644] __io_uring_add_tctx_node+0x1cf/0x520 [ 1556.342678] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1556.343762] ? alloc_fd+0x2e7/0x670 [ 1556.344529] io_uring_setup+0x1fbb/0x2980 [ 1556.345400] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1556.346462] ? wait_for_completion_io+0x270/0x270 [ 1556.347497] do_syscall_64+0x33/0x40 [ 1556.348263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1556.349326] RIP: 0033:0x7fbd4ba01b19 [ 1556.350094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.351434] FAULT_INJECTION: forcing a failure. [ 1556.351434] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.353850] RSP: 002b:00007fbd48f77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1556.353875] RAX: ffffffffffffffda RBX: 00007fbd4bb14f60 RCX: 00007fbd4ba01b19 [ 1556.353887] RDX: 0000000020ffc000 RSI: 0000000020000180 RDI: 000000000000620e [ 1556.353898] RBP: 0000000020000180 R08: 0000000020000140 R09: 0000000020000140 [ 1556.353921] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000140 [ 1556.364151] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1556.365664] CPU: 1 PID: 8666 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1556.367429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.369559] Call Trace: [ 1556.370253] dump_stack+0x107/0x167 [ 1556.371192] should_fail.cold+0x5/0xa [ 1556.372176] ? create_object.isra.0+0x3a/0xa30 [ 1556.373354] should_failslab+0x5/0x20 [ 1556.374350] kmem_cache_alloc+0x5b/0x310 [ 1556.375263] create_object.isra.0+0x3a/0xa30 [ 1556.376199] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1556.377287] kmem_cache_alloc+0x159/0x310 [ 1556.378183] anon_vma_fork+0xf1/0x640 [ 1556.378996] ? __vm_enough_memory+0x184/0x360 [ 1556.379959] copy_process+0x72cd/0x78b0 [ 1556.380844] ? __cleanup_sighand+0xb0/0xb0 [ 1556.381766] ? _copy_from_user+0xfb/0x1b0 [ 1556.382661] kernel_clone+0xe7/0x980 [ 1556.383463] ? lock_acquire+0x197/0x470 [ 1556.384305] ? create_io_thread+0xf0/0xf0 [ 1556.385197] ? ksys_write+0x21a/0x260 [ 1556.386008] ? lock_downgrade+0x6d0/0x6d0 [ 1556.386903] __do_sys_clone3+0x1e5/0x320 [ 1556.387776] ? __do_sys_clone+0x110/0x110 [ 1556.388676] ? rcu_read_lock_any_held+0x75/0xa0 [ 1556.389655] ? vfs_write+0x354/0xb10 [ 1556.390453] ? fput_many+0x2f/0x1a0 [ 1556.391224] ? ksys_write+0x1a9/0x260 [ 1556.392035] ? __ia32_sys_read+0xb0/0xb0 [ 1556.392912] do_syscall_64+0x33/0x40 [ 1556.393707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1556.394808] RIP: 0033:0x7fd89e327b19 [ 1556.395595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.399504] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1556.401119] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1556.402644] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1556.404154] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1556.405671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1556.407194] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:31:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2020000000000, 0x0, 0x0}, 0x58) 02:31:32 executing program 7: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x81000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xffffffff) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r1, 0x8000000) 02:31:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x400000000000000) [ 1556.485687] FAULT_INJECTION: forcing a failure. [ 1556.485687] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.488179] CPU: 1 PID: 8678 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1556.489625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.491405] Call Trace: [ 1556.491966] dump_stack+0x107/0x167 [ 1556.492743] should_fail.cold+0x5/0xa [ 1556.493549] ? anon_vma_clone+0xdc/0x590 [ 1556.494426] should_failslab+0x5/0x20 [ 1556.495233] kmem_cache_alloc+0x5b/0x310 [ 1556.496098] anon_vma_clone+0xdc/0x590 [ 1556.496932] __split_vma+0x17c/0x4e0 [ 1556.497721] __do_munmap+0x365/0x1260 [ 1556.498547] ? arch_get_unmapped_area+0x450/0x450 [ 1556.499572] ? lock_release+0x680/0x680 [ 1556.500427] mmap_region+0x7cc/0x1500 [ 1556.501257] do_mmap+0x868/0x1370 [ 1556.502003] vm_mmap_pgoff+0x198/0x1f0 [ 1556.502841] ? randomize_page+0xb0/0xb0 [ 1556.503696] ksys_mmap_pgoff+0x41c/0x560 [ 1556.504559] ? find_mergeable_anon_vma+0x250/0x250 [ 1556.505613] do_syscall_64+0x33/0x40 [ 1556.506412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1556.507504] RIP: 0033:0x7f2e49e79b62 [ 1556.508290] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1556.512201] RSP: 002b:00007f2e473ce0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1556.513809] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e49e79b62 [ 1556.515332] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1556.516860] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1556.518380] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1556.519887] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:31:32 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0xa00, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:31:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000000000, 0x0, 0x0}, 0x58) 02:31:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 61) [ 1556.740140] FAULT_INJECTION: forcing a failure. [ 1556.740140] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.742798] CPU: 0 PID: 8698 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1556.744210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.745915] Call Trace: [ 1556.746483] dump_stack+0x107/0x167 [ 1556.747243] should_fail.cold+0x5/0xa [ 1556.748033] ? vm_area_dup+0x78/0x290 [ 1556.748823] should_failslab+0x5/0x20 [ 1556.749614] kmem_cache_alloc+0x5b/0x310 [ 1556.750471] vm_area_dup+0x78/0x290 [ 1556.751233] ? lock_release+0x680/0x680 [ 1556.752071] ? mark_lock+0xf5/0x2df0 [ 1556.752978] ? lock_chain_count+0x20/0x20 [ 1556.753841] ? mark_lock+0xf5/0x2df0 [ 1556.754790] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1556.755868] ? lock_chain_count+0x20/0x20 [ 1556.756893] ? mark_lock+0xf5/0x2df0 [ 1556.757811] ? vm_area_alloc+0x110/0x110 [ 1556.758827] ? __lock_acquire+0x1657/0x5b00 [ 1556.759936] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1556.761231] ? SOFTIRQ_verbose+0x10/0x10 [ 1556.762258] ? vmacache_find+0x55/0x2a0 [ 1556.763249] __split_vma+0xa8/0x4e0 [ 1556.764078] __do_munmap+0x365/0x1260 [ 1556.765004] ? arch_get_unmapped_area+0x450/0x450 [ 1556.766009] ? lock_release+0x680/0x680 [ 1556.766879] mmap_region+0x7cc/0x1500 [ 1556.767684] do_mmap+0x868/0x1370 [ 1556.768425] vm_mmap_pgoff+0x198/0x1f0 [ 1556.769248] ? randomize_page+0xb0/0xb0 [ 1556.770093] ksys_mmap_pgoff+0x41c/0x560 [ 1556.770956] ? find_mergeable_anon_vma+0x250/0x250 [ 1556.771983] do_syscall_64+0x33/0x40 [ 1556.772760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1556.773810] RIP: 0033:0x7fbd4ba01b62 [ 1556.774593] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1556.778358] RSP: 002b:00007fbd48f770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1556.779927] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbd4ba01b62 [ 1556.781391] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1556.782857] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1556.784331] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1556.785794] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:31:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 62) 02:31:46 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) creat(&(0x7f0000000000)='./file0\x00', 0x11) 02:31:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0xa00000000000000) 02:31:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 64) 02:31:46 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0xec0, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:31:46 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_enter(r0, 0x37cd, 0x4fae, 0x2, &(0x7f0000000000)={[0x4f]}, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) io_uring_enter(r1, 0x4981, 0x34d5, 0x1, &(0x7f0000000080)={[0x7]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0xfffffffa) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0), &(0x7f0000000140)={'L+', 0x1}, 0x16, 0x3) 02:31:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 59) 02:31:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000001000000, 0x0, 0x0}, 0x58) [ 1571.061464] FAULT_INJECTION: forcing a failure. [ 1571.061464] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.064392] CPU: 1 PID: 8703 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1571.065867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.067637] Call Trace: [ 1571.068184] dump_stack+0x107/0x167 [ 1571.068941] should_fail.cold+0x5/0xa [ 1571.069753] ? create_object.isra.0+0x3a/0xa30 [ 1571.070732] should_failslab+0x5/0x20 [ 1571.071541] kmem_cache_alloc+0x5b/0x310 [ 1571.072399] create_object.isra.0+0x3a/0xa30 [ 1571.073319] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1571.074408] kmem_cache_alloc+0x159/0x310 [ 1571.075264] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1571.076381] vm_area_dup+0x78/0x290 [ 1571.077146] ? mark_lock+0xf5/0x2df0 [ 1571.077944] ? lock_chain_count+0x20/0x20 [ 1571.078824] ? mark_lock+0xf5/0x2df0 [ 1571.079610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1571.080699] ? lock_chain_count+0x20/0x20 [ 1571.081454] FAULT_INJECTION: forcing a failure. [ 1571.081454] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.081556] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1571.081583] ? trace_hardirqs_on+0x5b/0x180 [ 1571.085812] ? mark_lock+0xf5/0x2df0 [ 1571.086603] ? vm_area_alloc+0x110/0x110 [ 1571.087455] ? __lock_acquire+0x1657/0x5b00 [ 1571.088388] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1571.089496] ? SOFTIRQ_verbose+0x10/0x10 [ 1571.090373] ? vmacache_find+0x55/0x2a0 [ 1571.091400] __split_vma+0xa8/0x4e0 [ 1571.092323] __do_munmap+0x365/0x1260 [ 1571.093308] ? arch_get_unmapped_area+0x450/0x450 [ 1571.094561] ? lock_release+0x680/0x680 [ 1571.095583] mmap_region+0x7cc/0x1500 [ 1571.096577] do_mmap+0x868/0x1370 [ 1571.097487] vm_mmap_pgoff+0x198/0x1f0 [ 1571.098499] ? randomize_page+0xb0/0xb0 [ 1571.099350] ksys_mmap_pgoff+0x41c/0x560 [ 1571.100195] ? find_mergeable_anon_vma+0x250/0x250 [ 1571.101213] do_syscall_64+0x33/0x40 [ 1571.101986] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.103059] RIP: 0033:0x7fbd4ba01b62 [ 1571.103845] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1571.107636] RSP: 002b:00007fbd48f770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1571.109219] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbd4ba01b62 [ 1571.110791] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1571.112259] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1571.113746] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1571.115246] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1571.116734] CPU: 0 PID: 8711 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1571.118238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.120106] Call Trace: [ 1571.120688] dump_stack+0x107/0x167 [ 1571.121489] should_fail.cold+0x5/0xa [ 1571.122348] ? create_object.isra.0+0x3a/0xa30 [ 1571.123347] should_failslab+0x5/0x20 [ 1571.124184] kmem_cache_alloc+0x5b/0x310 [ 1571.125074] create_object.isra.0+0x3a/0xa30 [ 1571.126030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1571.127166] kmem_cache_alloc+0x159/0x310 [ 1571.128079] anon_vma_clone+0xdc/0x590 [ 1571.128857] FAULT_INJECTION: forcing a failure. [ 1571.128857] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.128938] __split_vma+0x17c/0x4e0 [ 1571.132106] __do_munmap+0x365/0x1260 [ 1571.132942] ? arch_get_unmapped_area+0x450/0x450 [ 1571.133996] ? lock_release+0x680/0x680 [ 1571.134889] mmap_region+0x7cc/0x1500 [ 1571.135737] do_mmap+0x868/0x1370 [ 1571.136504] vm_mmap_pgoff+0x198/0x1f0 [ 1571.137357] ? randomize_page+0xb0/0xb0 [ 1571.138235] ksys_mmap_pgoff+0x41c/0x560 [ 1571.139152] ? find_mergeable_anon_vma+0x250/0x250 [ 1571.140231] do_syscall_64+0x33/0x40 [ 1571.141043] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.142152] RIP: 0033:0x7f2e49e79b62 [ 1571.142988] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1571.147002] RSP: 002b:00007f2e473ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1571.148648] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e49e79b62 [ 1571.150193] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1571.151767] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1571.153316] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1571.154888] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1571.156467] CPU: 1 PID: 8715 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1571.158065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.160216] Call Trace: [ 1571.160801] dump_stack+0x107/0x167 [ 1571.161579] should_fail.cold+0x5/0xa [ 1571.162416] ? anon_vma_fork+0x1ff/0x640 [ 1571.163441] should_failslab+0x5/0x20 [ 1571.164219] kmem_cache_alloc+0x5b/0x310 [ 1571.165051] anon_vma_fork+0x1ff/0x640 [ 1571.165853] copy_process+0x72cd/0x78b0 [ 1571.166727] ? __cleanup_sighand+0xb0/0xb0 [ 1571.167613] ? _copy_from_user+0xfb/0x1b0 [ 1571.168486] kernel_clone+0xe7/0x980 [ 1571.169241] ? lock_acquire+0x197/0x470 [ 1571.170063] ? create_io_thread+0xf0/0xf0 [ 1571.170928] ? ksys_write+0x21a/0x260 [ 1571.171701] ? lock_downgrade+0x6d0/0x6d0 [ 1571.172543] __do_sys_clone3+0x1e5/0x320 [ 1571.173369] ? __do_sys_clone+0x110/0x110 [ 1571.174232] ? rcu_read_lock_any_held+0x75/0xa0 [ 1571.175185] ? vfs_write+0x354/0xb10 [ 1571.175957] ? fput_many+0x2f/0x1a0 [ 1571.176697] ? ksys_write+0x1a9/0x260 [ 1571.177494] ? __ia32_sys_read+0xb0/0xb0 [ 1571.178341] do_syscall_64+0x33/0x40 [ 1571.179121] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.180179] RIP: 0033:0x7fd89e327b19 [ 1571.180937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.184676] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1571.186221] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1571.187669] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1571.189118] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1571.190581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.192034] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 02:31:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10100000000000, 0x0, 0x0}, 0x58) 02:31:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 60) 02:31:46 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0xf00, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:31:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 63) [ 1571.318936] FAULT_INJECTION: forcing a failure. [ 1571.318936] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.321510] CPU: 0 PID: 8727 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1571.323028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.324827] Call Trace: [ 1571.325408] dump_stack+0x107/0x167 [ 1571.326207] should_fail.cold+0x5/0xa [ 1571.327076] ? create_object.isra.0+0x3a/0xa30 [ 1571.328082] should_failslab+0x5/0x20 [ 1571.328918] kmem_cache_alloc+0x5b/0x310 [ 1571.329794] create_object.isra.0+0x3a/0xa30 [ 1571.330778] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1571.331884] kmem_cache_alloc+0x159/0x310 [ 1571.332793] anon_vma_fork+0x1ff/0x640 [ 1571.333651] copy_process+0x72cd/0x78b0 [ 1571.334577] ? __cleanup_sighand+0xb0/0xb0 [ 1571.335531] ? _copy_from_user+0xfb/0x1b0 [ 1571.336440] kernel_clone+0xe7/0x980 [ 1571.337254] ? lock_acquire+0x197/0x470 [ 1571.338129] ? create_io_thread+0xf0/0xf0 [ 1571.339072] ? ksys_write+0x21a/0x260 [ 1571.339901] ? lock_downgrade+0x6d0/0x6d0 [ 1571.340811] __do_sys_clone3+0x1e5/0x320 [ 1571.341693] ? __do_sys_clone+0x110/0x110 [ 1571.342651] ? rcu_read_lock_any_held+0x75/0xa0 [ 1571.343660] ? vfs_write+0x354/0xb10 [ 1571.344480] ? fput_many+0x2f/0x1a0 [ 1571.345274] ? ksys_write+0x1a9/0x260 [ 1571.346101] ? __ia32_sys_read+0xb0/0xb0 [ 1571.347022] do_syscall_64+0x33/0x40 [ 1571.347837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.348949] RIP: 0033:0x7fd89e327b19 [ 1571.349765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1571.353787] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1571.355452] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1571.357004] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1571.358573] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1571.360119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1571.360257] FAULT_INJECTION: forcing a failure. 02:31:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x1000000000000000) 02:31:46 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x3a23, 0x883b, 0x2, &(0x7f0000000140)={[0x8]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x110, r0, 0x8000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000280)={0x2}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_io_uring_setup(0x2b28, &(0x7f0000000180)={0x0, 0xffd5, 0x8, 0x2, 0x129, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000300)={0x3, 0x8, 0x99, 0xfff, 0x200}) io_uring_enter(r0, 0x5053, 0xcb60, 0x2, &(0x7f0000000040)={[0x9]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x8000000) 02:31:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 65) [ 1571.360257] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.361677] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1571.365925] CPU: 1 PID: 8730 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1571.367388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1571.369142] Call Trace: [ 1571.369712] dump_stack+0x107/0x167 [ 1571.370497] should_fail.cold+0x5/0xa [ 1571.371312] ? anon_vma_clone+0xdc/0x590 [ 1571.372175] should_failslab+0x5/0x20 [ 1571.372984] kmem_cache_alloc+0x5b/0x310 [ 1571.373856] anon_vma_clone+0xdc/0x590 [ 1571.374701] __split_vma+0x17c/0x4e0 [ 1571.375499] __do_munmap+0x365/0x1260 [ 1571.376312] ? arch_get_unmapped_area+0x450/0x450 [ 1571.377340] ? lock_release+0x680/0x680 [ 1571.378187] mmap_region+0x7cc/0x1500 [ 1571.379020] do_mmap+0x868/0x1370 [ 1571.379770] vm_mmap_pgoff+0x198/0x1f0 [ 1571.380606] ? randomize_page+0xb0/0xb0 [ 1571.381472] ksys_mmap_pgoff+0x41c/0x560 [ 1571.382352] ? find_mergeable_anon_vma+0x250/0x250 [ 1571.383410] do_syscall_64+0x33/0x40 [ 1571.384211] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.385305] RIP: 0033:0x7fbd4ba01b62 [ 1571.386094] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1571.389985] RSP: 002b:00007fbd48f770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1571.391608] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbd4ba01b62 [ 1571.393126] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1571.394648] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1571.396171] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1571.397696] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:31:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x8000}]}]}, 0x28}}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000180)=""/30, &(0x7f0000000380)=0x1e) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x128, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x87a, 0x45}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xdca962813bd15625}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x151}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80000000}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x12}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24b}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x8000000) [ 1571.444508] FAULT_INJECTION: forcing a failure. [ 1571.444508] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.447017] CPU: 1 PID: 8740 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1571.448477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 02:31:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x80454e3a550000, 0x0, 0x0}, 0x58) [ 1571.450259] Call Trace: 02:31:47 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x1f00, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) [ 1571.450287] dump_stack+0x107/0x167 [ 1571.450311] should_fail.cold+0x5/0xa [ 1571.450335] ? vm_area_alloc+0x1c/0x110 [ 1571.450354] should_failslab+0x5/0x20 [ 1571.450375] kmem_cache_alloc+0x5b/0x310 [ 1571.450401] vm_area_alloc+0x1c/0x110 [ 1571.450420] mmap_region+0x982/0x1500 [ 1571.450456] do_mmap+0x868/0x1370 [ 1571.450486] vm_mmap_pgoff+0x198/0x1f0 [ 1571.450512] ? randomize_page+0xb0/0xb0 [ 1571.450549] ksys_mmap_pgoff+0x41c/0x560 [ 1571.450571] ? find_mergeable_anon_vma+0x250/0x250 [ 1571.450606] do_syscall_64+0x33/0x40 [ 1571.450627] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1571.450640] RIP: 0033:0x7f2e49e79b62 [ 1571.450658] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1571.450668] RSP: 002b:00007f2e473ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1571.450689] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e49e79b62 [ 1571.450701] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1571.450712] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1571.450724] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1571.450735] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:32:03 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000080)=0xfffffffa) sendfile(r1, r0, &(0x7f0000000000)=0xfff, 0x1) 02:32:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x2103000000000000) 02:32:03 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x8100, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:32:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xd01910f0290000, 0x0, 0x0}, 0x58) 02:32:03 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 66) 02:32:03 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 64) 02:32:03 executing program 7: rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, &(0x7f0000000080), &(0x7f0000000140)={0x77359400}, 0x8) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = syz_io_uring_setup(0x4970, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1e6}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726", 0x2}], 0x2}, 0x0, 0x4008000}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x1}}}, 0x7) syz_io_uring_setup(0x730a, &(0x7f0000000240)={0x0, 0xcb8d, 0x4, 0x1, 0x300}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000002c0)=0x0) r8 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r11}}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000300)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0x0, 0x0, 0x1, {0x0, r11}}, 0xb5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) 02:32:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 61) [ 1587.749565] FAULT_INJECTION: forcing a failure. [ 1587.749565] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.752056] CPU: 1 PID: 8762 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1587.753487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1587.755266] Call Trace: [ 1587.755824] dump_stack+0x107/0x167 [ 1587.756591] should_fail.cold+0x5/0xa [ 1587.757392] ? create_object.isra.0+0x3a/0xa30 [ 1587.758353] should_failslab+0x5/0x20 [ 1587.759161] kmem_cache_alloc+0x5b/0x310 [ 1587.760023] create_object.isra.0+0x3a/0xa30 [ 1587.760942] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1587.762021] kmem_cache_alloc+0x159/0x310 [ 1587.762909] vm_area_alloc+0x1c/0x110 [ 1587.763710] mmap_region+0x982/0x1500 [ 1587.764533] do_mmap+0x868/0x1370 [ 1587.765288] vm_mmap_pgoff+0x198/0x1f0 [ 1587.766123] ? randomize_page+0xb0/0xb0 [ 1587.766337] FAULT_INJECTION: forcing a failure. [ 1587.766337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1587.766982] ksys_mmap_pgoff+0x41c/0x560 [ 1587.767007] ? find_mergeable_anon_vma+0x250/0x250 [ 1587.771364] do_syscall_64+0x33/0x40 [ 1587.772147] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1587.773216] RIP: 0033:0x7f2e49e79b62 [ 1587.773992] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1587.777872] RSP: 002b:00007f2e473ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1587.779483] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e49e79b62 [ 1587.780981] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1587.782490] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1587.783990] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1587.785496] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1587.787042] CPU: 0 PID: 8770 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1587.788525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1587.790296] Call Trace: [ 1587.790889] dump_stack+0x107/0x167 [ 1587.791669] should_fail.cold+0x5/0xa [ 1587.792491] __alloc_pages_nodemask+0x182/0x600 [ 1587.793504] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1587.794841] ? copy_page_range+0x28d9/0x3800 [ 1587.795788] alloc_pages_current+0x187/0x280 [ 1587.796726] get_zeroed_page+0x14/0xb0 [ 1587.797570] __pud_alloc+0x33/0x270 [ 1587.798349] copy_page_range+0x2c99/0x3800 [ 1587.799282] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1587.800408] ? SOFTIRQ_verbose+0x10/0x10 [ 1587.801277] ? lock_chain_count+0x20/0x20 [ 1587.802170] ? find_held_lock+0x2c/0x110 [ 1587.803054] ? anon_vma_fork+0x462/0x640 [ 1587.803921] ? lock_downgrade+0x6d0/0x6d0 [ 1587.804823] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1587.806006] ? up_write+0x191/0x550 [ 1587.806798] ? vm_iomap_memory+0x190/0x190 [ 1587.807704] ? downgrade_write+0x3a0/0x3a0 [ 1587.808619] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1587.809777] ? __vma_link_rb+0x540/0x700 [ 1587.810667] copy_process+0x7658/0x78b0 [ 1587.811562] ? __cleanup_sighand+0xb0/0xb0 [ 1587.812496] ? _copy_from_user+0xfb/0x1b0 [ 1587.813387] kernel_clone+0xe7/0x980 [ 1587.814183] ? lock_acquire+0x197/0x470 [ 1587.815057] ? create_io_thread+0xf0/0xf0 [ 1587.815960] ? ksys_write+0x21a/0x260 [ 1587.816017] FAULT_INJECTION: forcing a failure. [ 1587.816017] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.816772] ? lock_downgrade+0x6d0/0x6d0 [ 1587.816800] __do_sys_clone3+0x1e5/0x320 [ 1587.816828] ? __do_sys_clone+0x110/0x110 [ 1587.821850] ? rcu_read_lock_any_held+0x75/0xa0 [ 1587.822882] ? vfs_write+0x354/0xb10 [ 1587.823710] ? fput_many+0x2f/0x1a0 [ 1587.824512] ? ksys_write+0x1a9/0x260 [ 1587.825345] ? __ia32_sys_read+0xb0/0xb0 [ 1587.826256] do_syscall_64+0x33/0x40 [ 1587.827090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1587.828221] RIP: 0033:0x7fd89e327b19 [ 1587.829057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1587.833109] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1587.834780] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1587.836340] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1587.837903] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1587.839467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1587.841029] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1587.842647] CPU: 1 PID: 8775 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1587.844135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1587.845932] Call Trace: [ 1587.846540] dump_stack+0x107/0x167 [ 1587.847342] should_fail.cold+0x5/0xa [ 1587.848172] ? create_object.isra.0+0x3a/0xa30 [ 1587.849165] should_failslab+0x5/0x20 [ 1587.849993] kmem_cache_alloc+0x5b/0x310 [ 1587.850891] create_object.isra.0+0x3a/0xa30 [ 1587.851846] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1587.852955] kmem_cache_alloc+0x159/0x310 [ 1587.853864] anon_vma_clone+0xdc/0x590 [ 1587.854732] __split_vma+0x17c/0x4e0 [ 1587.855555] __do_munmap+0x365/0x1260 [ 1587.856393] ? arch_get_unmapped_area+0x450/0x450 02:32:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0310c1b000000, 0x0, 0x0}, 0x58) [ 1587.857458] ? lock_release+0x680/0x680 [ 1587.858539] mmap_region+0x7cc/0x1500 [ 1587.859384] do_mmap+0x868/0x1370 [ 1587.860158] vm_mmap_pgoff+0x198/0x1f0 [ 1587.861015] ? randomize_page+0xb0/0xb0 [ 1587.861902] ksys_mmap_pgoff+0x41c/0x560 [ 1587.862799] ? find_mergeable_anon_vma+0x250/0x250 [ 1587.863890] do_syscall_64+0x33/0x40 [ 1587.864705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1587.865817] RIP: 0033:0x7fbd4ba01b62 [ 1587.866638] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1587.870680] RSP: 002b:00007fbd48f560f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1587.872344] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbd4ba01b62 [ 1587.873906] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1587.875475] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1587.877038] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1587.878614] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 02:32:03 executing program 3: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 67) 02:32:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x4000000000000000) 02:32:03 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 65) 02:32:03 executing program 2: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x480c3, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) lseek(r2, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0xc00e, &(0x7f0000000800)={&(0x7f0000000000)={0x14, 0x1a, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) 02:32:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 62) 02:32:03 executing program 4: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_setup(0x6309, &(0x7f0000000080)={0x0, 0x761b, 0x4, 0x0, 0x268}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="1cba8f6dd745a78f836240d581abd65bd4bfdede2d213ced5e26cbd5d768bd3b521538058b306103601bf975a642cf1ecdab75c9d7cb9977dd0dd08b15692c4a6259007fb12cf2ca6a15b4856a9bddb2a343f356b8ccf9dba02fbdec245124ff5b171b46ef44d49968db76f1ae6edbe8bd9b5d4514c10d685917f41d47bad86701d6ddfb5ee45667e7c49a028f1180db80b2c2", 0x93, 0x40002021}, 0x2) 02:32:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0ff1f00000000, 0x0, 0x0}, 0x58) [ 1588.020292] FAULT_INJECTION: forcing a failure. [ 1588.020292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1588.022921] CPU: 1 PID: 8785 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1588.024371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.026130] Call Trace: [ 1588.026703] dump_stack+0x107/0x167 [ 1588.027481] should_fail.cold+0x5/0xa [ 1588.028292] __alloc_pages_nodemask+0x182/0x600 [ 1588.029281] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1588.030569] ? walk_mem_res+0x170/0x170 [ 1588.031419] alloc_pages_current+0x187/0x280 [ 1588.032358] pte_alloc_one+0x16/0x1a0 [ 1588.033167] __pte_alloc+0x1d/0x330 [ 1588.033945] remap_pfn_range_internal+0x9a3/0xf60 [ 1588.034981] ? lookup_memtype+0x5b/0x200 [ 1588.035858] ? apply_to_existing_page_range+0x40/0x40 [ 1588.036965] remap_pfn_range+0xcd/0x160 [ 1588.037813] ? remap_pfn_range_notrack+0x70/0x70 [ 1588.038833] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1588.039935] io_uring_mmap+0x398/0x530 [ 1588.040765] mmap_file+0x5e/0xe0 [ 1588.041487] mmap_region+0xc4d/0x1500 [ 1588.042309] do_mmap+0x868/0x1370 [ 1588.043066] vm_mmap_pgoff+0x198/0x1f0 [ 1588.043904] ? randomize_page+0xb0/0xb0 [ 1588.044762] ksys_mmap_pgoff+0x41c/0x560 [ 1588.045625] ? find_mergeable_anon_vma+0x250/0x250 [ 1588.046685] do_syscall_64+0x33/0x40 [ 1588.047481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1588.048563] RIP: 0033:0x7f2e49e79b62 [ 1588.049352] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1588.053259] RSP: 002b:00007f2e473ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1588.054877] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e49e79b62 [ 1588.056380] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1588.057884] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1588.059394] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1588.060903] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1588.078880] FAULT_INJECTION: forcing a failure. [ 1588.078880] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.081372] CPU: 1 PID: 8794 Comm: syz-executor.6 Not tainted 5.10.260 #1 [ 1588.082834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.084596] Call Trace: [ 1588.085156] dump_stack+0x107/0x167 [ 1588.085934] should_fail.cold+0x5/0xa [ 1588.086761] ? create_object.isra.0+0x3a/0xa30 [ 1588.087729] should_failslab+0x5/0x20 [ 1588.088539] kmem_cache_alloc+0x5b/0x310 [ 1588.089408] create_object.isra.0+0x3a/0xa30 [ 1588.090339] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1588.091436] kmem_cache_alloc+0x159/0x310 [ 1588.092325] vm_area_dup+0x78/0x290 [ 1588.093100] ? lock_release+0x680/0x680 [ 1588.093953] ? mark_lock+0xf5/0x2df0 [ 1588.094764] ? lock_chain_count+0x20/0x20 [ 1588.095647] ? mark_lock+0xf5/0x2df0 [ 1588.096450] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1588.097563] ? lock_chain_count+0x20/0x20 [ 1588.098468] ? mark_lock+0xf5/0x2df0 [ 1588.099265] ? vm_area_alloc+0x110/0x110 [ 1588.100140] ? __lock_acquire+0x1657/0x5b00 [ 1588.101093] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1588.102209] ? SOFTIRQ_verbose+0x10/0x10 [ 1588.103081] ? vmacache_find+0x55/0x2a0 [ 1588.103927] __split_vma+0xa8/0x4e0 [ 1588.104702] __do_munmap+0x365/0x1260 [ 1588.105522] ? arch_get_unmapped_area+0x450/0x450 [ 1588.106557] ? lock_release+0x680/0x680 [ 1588.107407] mmap_region+0x7cc/0x1500 [ 1588.108229] do_mmap+0x868/0x1370 [ 1588.108979] vm_mmap_pgoff+0x198/0x1f0 [ 1588.109817] ? randomize_page+0xb0/0xb0 [ 1588.110686] ksys_mmap_pgoff+0x41c/0x560 [ 1588.111551] ? find_mergeable_anon_vma+0x250/0x250 [ 1588.112604] do_syscall_64+0x33/0x40 [ 1588.113401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1588.114496] RIP: 0033:0x7fbd4ba01b62 [ 1588.115288] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1588.119282] RSP: 002b:00007fbd48f770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1588.120905] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fbd4ba01b62 [ 1588.122428] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1588.123954] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1588.125468] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1588.126996] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1588.130225] FAULT_INJECTION: forcing a failure. [ 1588.130225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1588.132778] CPU: 1 PID: 8795 Comm: syz-executor.0 Not tainted 5.10.260 #1 [ 1588.133526] ------------[ cut here ]------------ [ 1588.134217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.134224] Call Trace: [ 1588.134245] dump_stack+0x107/0x167 [ 1588.134272] should_fail.cold+0x5/0xa [ 1588.135410] WARNING: CPU: 0 PID: 8785 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1588.137123] __alloc_pages_nodemask+0x182/0x600 [ 1588.137153] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1588.137722] Modules linked in: [ 1588.138505] alloc_pages_current+0x187/0x280 [ 1588.139330] [ 1588.141157] allocate_slab+0x26f/0x380 [ 1588.141184] ___slab_alloc+0x470/0x700 [ 1588.142200] CPU: 0 PID: 8785 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1588.143458] ? create_object.isra.0+0x3a/0xa30 [ 1588.143492] ? create_object.isra.0+0x3a/0xa30 [ 1588.144159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.145088] ? kmem_cache_alloc+0x301/0x310 [ 1588.145111] kmem_cache_alloc+0x301/0x310 [ 1588.145506] RIP: 0010:get_pat_info+0x216/0x270 [ 1588.146294] create_object.isra.0+0x3a/0xa30 [ 1588.146316] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1588.147158] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 e1 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 ca 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 85 ae 5a 00 e9 [ 1588.148607] kmem_cache_alloc+0x159/0x310 [ 1588.148636] anon_vma_fork+0x1ff/0x640 [ 1588.149881] RSP: 0018:ffff888047ab7890 EFLAGS: 00010216 [ 1588.150599] copy_process+0x72cd/0x78b0 [ 1588.150658] ? __cleanup_sighand+0xb0/0xb0 [ 1588.150702] ? _copy_from_user+0xfb/0x1b0 [ 1588.152526] [ 1588.159102] kernel_clone+0xe7/0x980 [ 1588.159128] ? lock_acquire+0x197/0x470 [ 1588.160025] RAX: 0000000000012b0d RBX: ffff88800e41f900 RCX: ffffc90005409000 [ 1588.160969] ? create_io_thread+0xf0/0xf0 [ 1588.161003] ? ksys_write+0x21a/0x260 [ 1588.161936] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 1588.162989] ? lock_downgrade+0x6d0/0x6d0 [ 1588.163018] __do_sys_clone3+0x1e5/0x320 [ 1588.166991] RBP: ffff888047ab7948 R08: 0000000000000000 R09: ffff888047ab7818 [ 1588.167843] ? __do_sys_clone+0x110/0x110 [ 1588.167887] ? rcu_read_lock_any_held+0x75/0xa0 [ 1588.168699] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1588.169797] ? vfs_write+0x354/0xb10 [ 1588.169825] ? fput_many+0x2f/0x1a0 [ 1588.170696] R13: 1ffff11008f56f12 R14: 0000000000000000 R15: ffff88800e41f950 [ 1588.171562] ? ksys_write+0x1a9/0x260 [ 1588.171580] ? __ia32_sys_read+0xb0/0xb0 [ 1588.171614] do_syscall_64+0x33/0x40 [ 1588.172498] FS: 00007f2e473ef700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1588.172829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1588.173635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1588.174444] RIP: 0033:0x7fd89e327b19 [ 1588.174463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1588.174480] RSP: 002b:00007fd89b89d188 EFLAGS: 00000246 [ 1588.176030] CR2: 00007ffd26392ff4 CR3: 0000000049a0c000 CR4: 0000000000350ef0 [ 1588.176858] ORIG_RAX: 00000000000001b3 [ 1588.176871] RAX: ffffffffffffffda RBX: 00007fd89e43af60 RCX: 00007fd89e327b19 [ 1588.176890] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 1588.177713] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1588.179203] RBP: 00007fd89b89d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.179215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1588.179233] R13: 00007ffdf34b7aef R14: 00007fd89b89d300 R15: 0000000000022000 [ 1588.180131] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1588.214973] Call Trace: [ 1588.215595] ? pgprot_writethrough+0xc0/0xc0 [ 1588.216589] ? finish_task_switch+0x126/0x5d0 [ 1588.217595] ? finish_task_switch+0xef/0x5d0 [ 1588.218607] untrack_pfn+0xdc/0x240 [ 1588.219434] ? track_pfn_insert+0x150/0x150 [ 1588.220410] ? lock_downgrade+0x6d0/0x6d0 [ 1588.221344] ? uprobe_munmap+0x1c/0x670 [ 1588.222215] unmap_single_vma+0x1bc/0x300 [ 1588.223169] zap_page_range_single+0x2ce/0x450 [ 1588.224199] ? unmap_single_vma+0x300/0x300 [ 1588.225170] ? remap_pfn_range_internal+0xc56/0xf60 [ 1588.226320] ? lookup_memtype+0x5b/0x200 [ 1588.227231] ? apply_to_existing_page_range+0x40/0x40 [ 1588.228403] remap_pfn_range+0x139/0x160 [ 1588.229342] ? remap_pfn_range_notrack+0x70/0x70 [ 1588.230423] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1588.231593] io_uring_mmap+0x398/0x530 [ 1588.232482] mmap_file+0x5e/0xe0 [ 1588.233215] mmap_region+0xc4d/0x1500 [ 1588.234093] do_mmap+0x868/0x1370 [ 1588.234893] vm_mmap_pgoff+0x198/0x1f0 [ 1588.235777] ? randomize_page+0xb0/0xb0 [ 1588.236694] ksys_mmap_pgoff+0x41c/0x560 [ 1588.237608] ? find_mergeable_anon_vma+0x250/0x250 [ 1588.238734] do_syscall_64+0x33/0x40 [ 1588.239575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1588.240719] RIP: 0033:0x7f2e49e79b62 [ 1588.241562] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1588.245587] RSP: 002b:00007f2e473ef0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1588.247274] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2e49e79b62 [ 1588.248857] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff7000 [ 1588.250450] RBP: 0000000020ff7000 R08: 0000000000000005 R09: 0000000000000000 [ 1588.252019] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1588.253586] R13: 0000000020ffc000 R14: 0000000020000040 R15: 0000000020ff7000 [ 1588.255179] irq event stamp: 2057 [ 1588.255963] hardirqs last enabled at (2067): [] console_unlock+0x92d/0xb40 [ 1588.257844] hardirqs last disabled at (2076): [] console_unlock+0x839/0xb40 [ 1588.259745] softirqs last enabled at (1468): [] asm_call_irq_on_stack+0x12/0x20 [ 1588.261713] softirqs last disabled at (1451): [] asm_call_irq_on_stack+0x12/0x20 [ 1588.263685] ---[ end trace 33c9d37950d78ac1 ]--- VM DIAGNOSIS: 02:32:03 Registers: info registers vcpu 0 RAX=000000000003e096 RBX=0000000000000001 RCX=ffffc90005409000 RDX=0000000000040000 RSI=ffffffff8129e571 RDI=0000000000000001 RBP=0000000000000200 RSP=ffff888047ab7590 R8 =0000000000000000 R9 =ffffffff868736a7 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000212 R14=ffff888049ec3480 R15=0000000000000000 RIP=ffffffff8129e573 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2e473ef700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd26392ff4 CR3=0000000049a0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007f2e49f607c800007f2e49f607c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822ea221 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff88804676f170 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000033 R13=0000000000000033 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822ea278 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd89b89d700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7d3ca74028 CR3=00000000487fc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007fd0ccadf7c800007fd0ccadf7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000